KR20200140024A - Entrance management system and method thereof - Google Patents

Abstract

The present specification relates to an access management system and a method thereof. The specification is an access management method, in which a user terminal acquires identification information from an access control device installed around a door, and access authentication of a user based on the previously stored access permission information is performed. The access management method includes the steps of: detecting the access control device and connecting communication with the access control device; obtaining the identification information from the access control device; and performing access authentication of the user based on the access permission information. Provided is a user terminal access control method, which the access permission information includes at least one of registered user identification information, registered terminal identification information, registered access control device identification information, access schedule information, and expiration date information of the access permission information.

Description

Access management system and method thereof {Entrance management system and method thereof}

The present invention relates to an access control system, an access control method, and a recording medium.

The access management system is a system that recognizes and manages a person who wants to enter a specific space through a door, and is currently widely used not only in access control facilities maintaining high security, but also in general offices and homes.

As conventional authentication methods used in such an access management system, an authentication method using a magnetic card, a smart card, a non-contact wireless card, and the like, and an authentication method using biometric information such as fingerprints and irises of a person entering are used.

In such a conventional authentication method, a person must perform authentication through an authentication device installed near the door to access the door. As described above, since authentication must be performed through a separate authentication device, there is a problem that it takes a long time to perform authentication when there are a large number of accessors. In addition, the user is inconvenient that a separate authentication means such as a magnetic card must always be provided, and when such separate authentication means are lost, there is a problem that an illegal accessor who has stolen the separate authentication means can enter the door.

In addition, in the conventional authentication method, since a control server that controls the authentication devices installed near the door is provided and authentication is performed only by performing authentication using the control server, communication between the control server and the authentication devices installed near the door is disconnected or the control server is disconnected. In the case of the disabled state, there is a problem that the door cannot be accessed.

In addition, in the conventional authentication method, information for access authentication is stored in an authentication device, which may cause a problem in personal information security.

In recent years, in order to solve this problem, efforts to improve user convenience and security of the access management system have been continued.

One task to be solved is to provide an access management system and an access management method using the same, which can increase the security of the access management system while increasing user convenience.

The problem to be solved is not limited to the above-described problem, and the problems that are not mentioned will be clearly understood by those of ordinary skill in the art to which the following embodiments belong from the present specification and the accompanying drawings.

According to an aspect of the present specification, there is provided an access management method in which a user terminal acquires identification information from an access control device installed around a door and performs access authentication of the user based on pre-stored access permission information, and detects the access control device. And connecting communication with the access control device; Obtaining the identification information from the access control device; And performing access authentication of the user based on the access permission information. Including, wherein the access permission information includes at least one of registered user identification information, registered terminal identification information, registered access control device identification information, access schedule information, and expiration date information of the access permission information. A method for managing access to a user terminal may be provided.

The solution means of the subject of the present specification is not limited to the above-described solution means, and solutions that are not mentioned will be clearly understood by those of ordinary skill in the art from the present specification and the accompanying drawings. I will be able to.

According to the exemplary embodiment of the present specification, since it is determined whether the user has access rights through the user's terminal, the user does not need to carry a separate authentication means, thereby increasing user convenience.

In addition, according to the embodiment of the present specification, information for performing access authentication does not need to be stored in the storage unit of the access control device, and is stored in the user's terminal or server, so that the security of the access management system can be increased.

In addition, according to the exemplary embodiment of the present specification, since information on whether to enter or exit the door is transmitted to the server by the user's terminal, a network connection between the access control device and the server for this is not required, and corresponding cost and effort can be saved.

In addition, according to the embodiment of the present specification, the user terminal directly changes the setting of the access control device without the need for a procedure of changing the setting of the access control device through a network connection between the access control device and the server according to wiring work. You can save money and effort.

In addition, according to an embodiment of the present specification, in the case of a door in which the door is opened by pressing an open switch or the like, when the user presses the switch to enter and exit, the user terminal can request access authentication to perform access authentication. Can receive a schedule message from the server, so it can effectively notify the user of advertisement or information.

The effects of the present invention are not limited to the above-described effects, and effects that are not mentioned will be clearly understood by those of ordinary skill in the art to which the following description belongs from the present specification and the accompanying drawings.

1 is an environment diagram of an access management system according to an embodiment of the present specification.
2 is a block diagram of according to an embodiment of the present specification.
3 is a block diagram of a terminal according to an embodiment of the present specification.
4 is a block diagram of an access control device according to an embodiment of the present specification.
5 is a flowchart of a method of controlling an access control device using a user terminal according to an embodiment of the present specification.
6 is a flowchart of a method of performing access authentication in a user terminal according to an embodiment of the present specification.
7 is an exemplary diagram of access permission information according to an embodiment of the present specification
8 is an exemplary diagram of access permission information according to an embodiment of the present specification
9 is an environment diagram of an access management method according to an embodiment of the present specification.
10 is a flowchart of an access authentication result management method according to an embodiment of the present specification.
11 is a flowchart of a door opening management method according to an embodiment of the present specification.
12 is a flowchart of a method for notifying information when entering or leaving a door according to an embodiment of the present specification.
13 is a flowchart of a method for managing access authentication results using biometric information according to an embodiment of the present specification.
14 is a flowchart of a door opening management method using biometric information according to an embodiment of the present specification.
15 is an environment diagram of a method of changing an access control device setting according to an embodiment of the present specification.
16 is a flowchart of a method of changing a setting of an access control device according to an embodiment of the present specification.
17 is a flowchart of a method of storing biometric information acquired from a user terminal in an access control device according to an embodiment of the present specification.

The above objects, features and advantages of the present invention will become more apparent through the following detailed description in conjunction with the accompanying drawings. However, in the present invention, various changes may be made and various embodiments may be provided. Hereinafter, specific embodiments will be illustrated in the drawings and described in detail.

In the drawings, the thicknesses of layers and regions are exaggerated for clarity, and in addition, an element or layer is "on" or "on" of another component or layer. What is referred to includes not only directly above another component or layer, but also a case where another layer or other component is interposed in the middle. Throughout the specification, the same reference numerals represent the same elements in principle. In addition, components having the same function within the scope of the same idea shown in the drawings of each embodiment will be described with the same reference numerals.

If it is determined that a detailed description of known functions or configurations related to the present invention may unnecessarily obscure the subject matter of the present invention, a detailed description thereof will be omitted. In addition, numbers (eg, first, second, etc.) used in the description of the present specification are merely identification symbols for distinguishing one component from another component.

In addition, the suffixes "module" and "unit" for constituent elements used in the following description are given or used interchangeably in consideration of only the ease of preparation of the specification, and do not themselves have distinct meanings or roles.

According to an aspect of the present specification, there is provided an access management method in which a user terminal acquires identification information from an access control device installed around a door and performs access authentication of the user based on pre-stored access permission information, and detects the access control device. And connecting communication with the access control device; Obtaining the identification information from the access control device; And performing access authentication of the user based on the access permission information. Including, wherein the access permission information includes at least one of registered user identification information, registered terminal identification information, registered access control device identification information, access schedule information, and expiration date information of the access permission information. A method for managing access to a user terminal may be provided.

In addition, the access permission information includes registered access control device identification information, and the registered access control device identification information is registered user identification information, registered terminal identification information, access schedule information, and expiration date information of access permission information. It may be mapped to at least one of information.

In addition, the access right information includes registered access control device identification information, and the step of performing the access authentication checks whether the obtained identification information is included in the access right information, and the obtained identification information When is included in the access permission information, it may be a step of determining that the access authentication is successful.

In addition, the access permission information further includes access schedule information, and the step of performing the access authentication checks whether the current time is included in the access schedule information mapped with the obtained identification information, and the current time is the If it is not included in the access schedule information mapped to the obtained identification information, it may be a step of determining that the access authentication has failed.

In addition, the access permission information further includes registered terminal identification information, and the step of performing the access authentication includes whether the identification information of the user terminal is included in the registered terminal identification information mapped to the obtained identification information. It may be a step of checking whether the identification information of the user terminal is included in the registered terminal identification information, and determining that the access authentication is successful.

In addition, the access right information further includes access schedule information, and the step of performing the access authentication checks whether the current time is included in the access schedule information mapped with the obtained identification information, and the current time is the user terminal. If it is not included in the access schedule information mapped to the identification information, it may be a step of determining that the access authentication has failed.

In addition, the step of acquiring the user's biometric information may be further included, and the access permission information may include registered biometric information.

In addition, the step of obtaining the user's biometric information may be a step of receiving the biometric information input from the user from the access control device.

In addition, the step of obtaining the user's biometric information may be a step of receiving biometric information from the user at the user terminal.

In addition, the access permission information is at least one of at least one of user identification information, registered terminal identification information, registered access control device identification information, access schedule information, and expiration date information of the registered biometric information. And may be mapped.

In addition, the step of performing the access authentication checks whether the obtained biometric information is included in the access right information, and if the obtained biometric information is included in the access right information, the access authentication is successful. It may be a step of judging.

In addition, the access permission information further includes access schedule information, and the step of performing the access authentication checks whether the current time is included in the access schedule information mapped with the obtained biometric information, and the current time is the If it is not included in the access schedule information mapped to the obtained biometric information, it may be a step of determining that the access authentication has failed.

In addition, the access right information further includes registered terminal identification information, and the step of performing the access authentication includes whether the identification information of the user terminal is included in the registered terminal identification information mapped to the obtained biometric information. It may be a step of checking whether the identification information of the user terminal is included in the registered terminal identification information, and determining that the access authentication is successful.

In addition, the access permission information further includes access schedule information, and the step of performing the access authentication checks whether the current time is included in the access schedule information mapped with the user terminal identification information, and the current time is the If it is not included in the access schedule information mapped to the obtained biometric information, it may be a step of determining that the access authentication has failed.

In addition, the access permission information includes information on the validity period of the access permission information, and the step of performing the access authorization checks whether the validity period of the access permission information has expired, and the validity period of the access permission information is If it has expired, it may be a step of determining that the access authentication has failed.

Further, the step of requesting the identification information from the access control device; It may further include

In addition, receiving the access authority information from the server; It may further include.

In addition, prior to the step of receiving the access permission information transmitted from the server, requesting the access permission information from the server; may further include.

In addition, after the step of performing the access authentication, generating the result information of the access authentication; It may further include.

In addition, transmitting the result information of the access authentication to the server; It may further include.

In addition, after the step of performing the access authentication, generating a door open signal when the access authentication is successful; Further comprising, the door opening signal may force the access control device to perform an operation of opening the door.

In addition, it may further include transmitting the door opening signal to the access control device.

In addition, the user terminal may communicate with the access control device through at least one of Bluetooth Low Energy (BLE), Bluetooth, Near Field Communication (NFC), and Wi-Fi.

In addition, the step of obtaining the identification information from the access control device may be performed simultaneously with the step of detecting the access control device and connecting communication with the access control device.

According to an aspect of the present specification, an access control device receives an input for opening a door from a user and transmits an access authentication request signal to a user terminal, and the user's terminal performs access authentication of the user based on pre-stored access permission information. An access management method of an access system, comprising: receiving an input for opening a door from the user in the access control device; Generating, by the access control device, an access authentication request signal according to an input signal generated by the input; Receiving, by the user terminal, the access authentication request signal from the access control device; And performing, by the user terminal, the user's access authentication based on the current time and access authority information. Including, the access right information may be provided with an access management method of the access system including access schedule information.

In addition, after the step of receiving, by the user terminal, the access authentication request signal, the user terminal communicates with a server and receives a designated message from the server; It may further include.

In addition, the designated message may include an advertisement message or a notification message.

In addition, the designated message may be a message designated according to a current time among a plurality of messages.

In addition, the step of performing the access authentication may be a step of checking whether the current time is included in the access schedule information, and determining that the access authentication is successful when the current time is included in the access schedule information.

Further, the step of obtaining, by the user terminal, identification information from the access control device; And, the access permission information further includes registered access control device identification information, the registered access control device identification information is mapped with the access schedule information, and the step of performing the access authentication is performed by the acquisition It is checked whether the registered identification information is included in the registered access control device identification information mapped to the access schedule information, and if the obtained identification information is not included in the registered access control device identification information, the It can be determined that access authentication has failed.

In addition, the step of obtaining the identification information of the access control device may be a step of receiving the access authentication request signal including the identification information of the access control device.

In addition, after the step of performing the access authentication by the user terminal,

Generating, by the user terminal, a door open signal when the access authentication is successful; Further comprising, the door opening signal may force the access control device to perform an operation of opening the door.

Further, the user terminal may further include transmitting the door open signal to the access control device.

In addition, it may further include; receiving the access permission information from the server.

In addition, prior to the step of receiving the access permission information transmitted from the server, requesting the access permission information from the server; may further include.

In addition, the user terminal may communicate with the access control device through at least one of Bluetooth Low Energy (BLE), Bluetooth, Near Field Communication (NFC), and Wi-Fi.

According to an aspect of the present specification, a recording medium on which a program for performing the above-described method is recorded may be provided.

According to an aspect of the present specification, there is provided an access control device for transmitting identification information for user access authentication from a user terminal performing user access authentication based on access permission information, comprising: a communication unit for performing communication with the user terminal; An access control device including a control unit for controlling to transmit identification information of the access control device to the user terminal through the communication unit when a signal for communication initiation is received from the user terminal through the communication unit may be provided. .

In addition, the access control device includes a biometric information input unit for receiving biometric information of the user; Further, the control unit may control to transmit the user's biometric information received from the biometric information input unit to the user terminal through the communication unit.

Also, the control unit may encrypt the biometric information input from the biometric information input unit.

In addition, the access control device includes a power unit for providing power required for the opening operation of the door; The control unit may further include, when receiving the door opening signal from the user terminal, control to perform an opening operation of the door through the power unit.

According to an aspect of the present specification, there is provided an access control device for receiving an input for opening a door from a user and transmitting an access authentication request signal to a user terminal, comprising: an input unit receiving an input for opening a door from the user; A communication unit for communicating with the user terminal; When receiving an input for opening a door through the input unit, a control unit that generates an access authentication request signal and controls to transmit the access authentication request signal to a user terminal through the communication unit.

In addition, the access control device includes a power unit for providing power required for the opening operation of the door; The control unit may further include, when receiving the door opening signal from the user terminal, control to perform an opening operation of the door through the power unit.

In addition, the control unit may transmit identification information of the access control device to the user terminal through the communication unit.

In addition, the access authentication request signal may be a signal including identification information of the access control device.

According to an aspect of the present specification, a setting change method of the user terminal in which a setting change signal is generated based on setting change information and administrator information input from a user and transmitted to an access control device so that the access control device performs setting change. And detecting the access control device and connecting communication with the access control device; Receiving setting change information for setting change performed by the access control device; Receiving administrator information to be transmitted to the access control device to be compared with the previously stored administrator information of the access control device; Generating the setting change signal based on the received setting change information; And transmitting the setting change signal and the manager information to the access control device through wireless communication. A method of changing the settings of a user terminal including a may be provided.

In addition, the setting change may include changing the communication interface setting of the access control device, changing the PIN setting of the access control device, changing at least one of the display unit of the access control device and the voice output unit of the access control device, and the access It may include at least one of changing the format of the card recognized by the control device, updating the firmware of the access control device, and storing biometric information in the access control device.

In addition, the setting change may further include storing biometric information in the access control device, and obtaining biometric information to be stored in the access control device.

In addition, the biometric information may include at least one of fingerprint, iris, vein, face, and voice information.

Further, the step of obtaining the biometric information may be a step of receiving the biometric information from the user.

Further, the step of obtaining the biometric information may be a step of receiving the biometric information from a server.

Further, transmitting the biometric information to the access control device; It may further include.

Also, transmitting the biometric information to the access control device may be transmitting the setting change signal including the biometric information.

In addition, encrypting the biometric information; It may further include.

Also, the administrator information may include an administrator password.

In addition, transmitting the manager information to the access control device may be transmitting the setting change signal including the manager information.

In addition, the wireless communication may include one of wireless communication among BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi.

In addition, receiving information as a result of the setting change from the access control device; It may further include.

According to an aspect of the present specification, there is provided a method for changing a setting of an access control device for performing a setting change by receiving a setting change signal from a user terminal, comprising: connecting communication with the user terminal; Receiving a setting change signal generated by the user terminal and manager information received by the user terminal from the user terminal; Determining whether the received manager information matches pre-stored manager information; And performing the setting change according to the setting change signal when the received manager information and pre-stored manager information match. A setting change method including a may be provided.

In addition, the setting change may include changing the communication interface setting of the access control device, changing the PIN setting of the access control device, changing at least one of the display unit of the access control device and the voice output unit of the access control device, and the access It may include at least one of changing the format of the card recognized by the control device, updating the firmware of the access control device, and storing biometric information in the access control device.

In addition, the setting change is storage of biometric information in the access control device, and receiving the biometric information from the user terminal; It may further include.

In addition, receiving the biometric information from the user terminal may be receiving the setting change signal including the biometric information.

In addition, when the biometric information is encrypted, the step of decrypting the biometric information may be further included.

Also, the administrator information may include an administrator password.

In addition, receiving the input manager information may be receiving the setting change signal including the input manager information.

In addition, the wireless communication may include one of wireless communication among BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi.

In addition, transmitting the result information of the setting change to the user terminal; It may further include.

According to an aspect of the present specification, a recording medium on which a program for performing the above-described method is recorded may be provided.

According to an aspect of the present specification, there is provided an access control device that receives a setting change signal and manager information generated by a user terminal from a user terminal, and performs setting change when the received manager information matches pre-stored manager information, the A communication unit for communicating with a user terminal; The setting change signal and the manager information input from the user terminal are received from the user terminal through a storage unit storing manager information and the communication unit, and check whether the received manager information matches the previously stored manager information. A control unit for controlling to perform a setting change according to the setting change signal when they match; An access control device including a may be provided.

In addition, the setting change may include changing the communication interface setting of the access control device, changing the PIN setting of the access control device, changing at least one of the display unit of the access control device and the voice output unit of the access control device, and the access It may include at least one of changing the format of the card recognized by the control device, updating the firmware of the access control device, and storing biometric information in the access control device.

In addition, the setting change is storage of biometric information in the access control device, and the control unit may control to receive biometric information from the user terminal through the communication unit and to store the biometric information in the storage unit.

In addition, receiving the biometric information from the user terminal may be receiving the setting change signal including the biometric information.

In addition, when the biometric information received through the communication unit is encrypted, the controller may decrypt the biometric information.

Also, the administrator information may include an administrator password.

In addition, receiving the input manager information may be receiving the setting change signal including the input manager information.

In addition, the communication unit may use one of a wireless communication method of BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi.

In addition, the control unit may transmit the result information of the setting change to the user terminal through the communication unit.

Hereinafter, an access management system 10000 according to an embodiment of the present specification will be described. The access management system may mean a system that manages access so that only a person who has successfully authenticated through the user terminal 2000 in an environment in which the access control device is installed can pass through an area where the access control device is installed. The access management system may be used in an indoor environment such as a gym, office, or research institute, or may be used in an external environment having a restricted access area outside a building such as a military base.

Doors may block or allow passage through an area. The door may include a doorframe and a door leaf. The door frame may be of a fixed configuration that defines an area to block or allow passage. The door may change a position to block or allow passage depending on the position, and may have a configuration in which the position is changed by an external force. The variable position of the door may be a comprehensive meaning that includes not only the positional movement of the entire door but also movement due to rotation. Of course, it should be noted that the door is not necessarily limited to the examples described above.

1. System configuration

1 is an environment diagram of an access management system 10000 according to an embodiment.

Referring to FIG. 1, an access management system 10000 may include a server 1000, a terminal 2000, and an access control device 3000.

The server 1000 may communicate with the user terminal 2000 and exchange various information.

According to an embodiment, the server 1000 may provide information necessary for user access authentication to the user terminal 2000. In addition, the server 1000 may obtain result information on access authentication from the user terminal 2000.

The user terminal 2000 may communicate with the access control device 3000 and exchange various information.

For example, the user terminal 2000 may receive information necessary for access authentication from the access control device 3000. In addition, the user terminal 2000 may transmit data necessary for a door opening request and/or a setting change request to the access control device 3000.

In addition, the user terminal 2000 may provide an application for performing some embodiments to be described later.

In addition, the user terminal 2000 may be implemented as a smart phone, a tablet, a PDA, a notebook, and a wearable device. Alternatively, the user terminal 2000 may be implemented with a smart card, an IC card, a magnetic card, and an RF chip capable of recording data.

The access control device 3000 may control opening or closing of a door.

For example, the access control device 3000 may be installed on a door to control locking or unlocking the door. The access control device 3000 is not necessarily installed on the door, and may be provided in various forms according to selection. For example, the access control device 3000 may be installed on a wall adjacent to the door to provide or release an obstacle to the door. In addition, when the door is an automatic door, the access control device 3000 may control the door to open or close by changing the position of the door.

However, the environment diagram illustrated in FIG. 1 is only an example for convenience of description and is not limited thereto. According to some embodiments, configurations may be added or excluded from the environment diagram of FIG. 1, and may be subdivided.

2 is a block diagram of a server 1000 according to an embodiment.

Referring to FIG. 2, the server 1000 may include a server communication unit 1100, a server input unit 1200, a server storage unit 1300, a server display unit 1400, and a server control unit 1500.

The server communication unit 1100 may communicate with the user terminal 2000. For example, the server communication unit 1100 may receive a request for access permission information from the user terminal 2000. In addition, the server communication unit 1100 may transmit access permission information to the user terminal 2000. In addition, the server communication unit 1100 may receive information on the user access authentication result from the user terminal 2000. In addition, when the user terminal 2000 receives an access authentication request signal, the server communication unit 1100 may communicate with the user terminal 2000 and transmit a predetermined message to the user terminal 2000.

For another example, the server communication unit 1100 may transmit biometric information to be stored in the access control device 3000 to the user terminal 2000.

In addition, the server communication unit 1100 is BLE (Bluetooth Low Energy), Bluetooth (Bluetooth), WLAN (Wireless LAN), WiFi (Wireless Fidelity), WiFi Direct, NFC (Near Field Communication), infrared communication (Infrared Data Association; IrDA) ), a mobile communication module including UWB (Ultra Wide Band), Zigbee, 3G, 4G, or 5G, and a wired/wireless module that transmits data through various communication standards.

The server input unit 1200 may obtain an electrical signal corresponding to a user input. The server input unit 1200 may include a keypad, a keyboard, a switch, a button, and a touch screen.

The server storage unit 1300 may store various types of data.

For example, the server storage unit 1300 may store access permission information. In addition, the server storage unit 1300 may store user access authentication result information obtained from the user terminal 2000. In addition, the server storage unit 1300 may store a designation message to be transmitted to the user terminal 2000 when the user terminal 2000 receives an access authentication request signal. Also, the server storage unit 1300 may store a program required for the operation of the server 1000. In addition, the server storage unit 1300 may store biometric information to be stored in the access control device 3000 through the user terminal 2000.

The server storage unit 1300 includes a flash memory type, a hard disk type, a multimedia card micro type, and a card type memory (eg, SD or XD memory). , RAM (Random Access Memory, RAM), SRAM (Static Random Access Memory), ROM (Read-Only Memory, ROM), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory) magnetic memory, It may include at least one type of storage medium among magnetic disks and optical disks. In addition, the memory may temporarily, permanently or semi-permanently store information, and may be provided as an internal or removable type.

The server display unit 1400 may output visual information.

For example, the server display unit 1400 may be an LCD, OLED, AMOLED display, or the like.

The server controller 1500 may control each component of the server 1000 or may process and calculate various types of information. For example, the server control unit 1500 may transmit access permission information to the user terminal 2000 through the server communication unit 1100. In addition, when the user terminal 2000 receives an access authentication request signal, the server control unit 1500 may communicate with the user terminal 2000 and transmit a designated message to the user terminal 2000 through the server communication unit 1100. . In addition, the server control unit 1500 may transmit biometric information to be stored in the access control device 3000 to the user terminal 2000 through the server communication unit 1100.

In addition, the server controller 1500 may control an operation for performing some steps performed by the server 1000 among steps described in methods to be described later, or may perform an operation required to perform the step.

The server control unit 1500 may be implemented with software, hardware, and a combination thereof. For example, in terms of hardware, the server control unit 1500 may be implemented as a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a semiconductor chip, and various types of electronic circuits. For example, in terms of software, the server control unit 1500 may be implemented as a logic program executed according to the above-described hardware or various computer languages.

The server 1000 does not necessarily have to include all of the above-described configurations, and may be provided in a form excluding some configurations depending on the selection. For example, when the server 1000 does not directly provide visual information, the server 1000 may be provided in a form excluding the server display unit 1400. In addition, the server 1000 may be provided in a form in which a configuration for performing additional functions and operations is added according to the selection.

3 is a block diagram of a terminal 2000 according to an embodiment.

Referring to FIG. 3, the terminal 2000 includes a terminal communication unit 2100, a terminal display unit 2200, a terminal input unit 2300, a terminal location information collection unit 2400, a terminal storage unit 2500, and a terminal control unit 2600. And a terminal biometric information input unit 2700.

The terminal communication unit 2100 may communicate with the server 1000.

For example, the terminal communication unit 2100 may request access permission information from the server 1000. In addition, the terminal communication unit 2100 may receive access permission information from the server 1000. In addition, the terminal communication unit 2100 may transmit information about the user access authentication result to the server 1000. In addition, when receiving an access authentication request signal, the terminal communication unit 1100 may communicate with the user terminal 2000 and receive a predetermined message from the server 1000.

For another example, the terminal communication unit 2100 may receive biometric information to be stored in the access control device 3000 from the server 1000.

In addition, the terminal communication unit 2100 may communicate with the access control device 3000.

For example, the terminal communication unit 2100 may receive biometric information from the access control device 3000. In addition, the terminal communication unit 2100 may receive identification information of the access control device 3000 from the access control device 3000. In addition, the terminal communication unit 2100 may receive an access authentication request signal from the access control device 3000. In addition, the terminal communication unit 2100 may transmit a door open signal to the access control device 3000.

For another example, the terminal communication unit 2100 may transmit a setting change signal to the access control device 3000. In addition, the terminal communication unit 2100 may receive information as a result of the setting change from the access control device 3000.

The terminal communication unit 2100 includes BLE (Bluetooth Low Energy), Bluetooth, WLAN (Wireless LAN), WiFi (Wireless Fidelity), WiFi Direct, NFC (Near Field Communication), Infrared Data Association (IrDA), Mobile communication modules including UWB (Ultra Wide Band), Zigbee, 3G, 4G, or 5G, and wired/wireless modules that transmit data through various other communication standards may be included.

The terminal display unit 2200 may output various visual information.

For example, the access control device 3000 may be sensed, and the information may be output when communication is connected. In addition, the terminal display unit 2200 may visually output the user access authentication result. In addition, the terminal display unit 2200 may visually output a message received from the server 1000. In addition, the terminal display unit 2200 may visually output a screen for inputting setting change information in order to change the setting of the access control device 3000.

The terminal display unit 2200 may be an LCD, OLED, AMOLED display, or the like. When the terminal display unit 2200 is provided as a touch screen, the terminal display unit 1200 may perform the function of the terminal input unit 2300. In this case, depending on the selection, a separate terminal input unit 2300 may not be provided, and a terminal input unit 2300 performing limited functions such as volume control, a power button, and a home button may be provided.

The terminal input unit 2300 may obtain a signal corresponding to a user's input.

For example, the terminal input unit 2300 may receive an input requesting access permission information from the server 1000. In addition, the terminal input unit 2300 may receive an input for requesting identification information or biometric information from the access control device 3000.

For another example, the terminal input unit 2300 may receive setting change information in order to change the setting of the access control device 3000. In addition, the terminal input unit 2300 may receive administrator information for checking whether or not it matches the administrator information previously stored in the access control device 3000.

The terminal input unit 2300 may be implemented as, for example, a keyboard, a keypad, a button, a jog shuttle, and a wheel. In addition, the user's input may be, for example, pressing of a button, touching, or dragging. When the terminal display unit 2200 is implemented as a touch screen, the terminal display unit 2200 may serve as the terminal input unit 2300.

The terminal location information collection unit 2400 may obtain location information for the terminal 2000 to determine its own location. For example, the location information collection unit may be a module that acquires coordinate information for determining a location, such as a GPS module.

The terminal storage unit 2500 may store various types of data.

For example, the terminal storage unit 2500 may store data necessary for the operation of the terminal 2000. In addition, the terminal storage unit 2500 may store access permission information.

The terminal storage unit 2500 is a flash memory type, a hard disk type, a multimedia card micro type, and a card type memory (for example, SD or XD memory). , RAM (Random Access Memory, RAM), SRAM (Static Random Access Memory), ROM (Read-Only Memory, ROM), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory) magnetic memory, It may include at least one type of storage medium among magnetic disks and optical disks. In addition, the memory may temporarily, permanently or semi-permanently store information, and may be provided as an internal or removable type.

The terminal controller 2600 may control each component of the terminal 2000 or process and calculate various types of information. In addition, the terminal control unit 2600 may obtain signals from several components included in the user terminal 2000. In addition, the terminal controller 2600 may control an operation for performing some steps performed in the user terminal 2000 among steps described in methods to be described later, or perform an operation necessary for performing the step.

The terminal control unit 2600 may be implemented with software, hardware, and combinations thereof. For example, in terms of hardware, the terminal control unit 2600 may be implemented as a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a semiconductor chip, and other various types of electronic circuits. For example, in software, the terminal control unit 2600 may be implemented as a logic program or various computer languages executed according to the above-described hardware.

The terminal biometric information input unit 2700 may receive a user's biometric information. The biometric information may mean at least one of a user's voice, fingerprint, iris, face, and vein information. The terminal biometric information input unit 2700 may be implemented with at least one of a microphone for inputting user's voice information, a screen scanner for inputting user's fingerprint information, and a camera for inputting user's iris, face, and vein information.

4 is a block diagram of an access control device 3000 according to an embodiment.

4, the access control device 3000 includes a communication unit 3100, a display unit 3200, an audio output unit 3300, a sensor unit 3400, a storage unit 3500, a power unit 3600, and a control unit ( 3700), a biometric information input unit 3800 and an input unit 3900 may be included.

The communication unit 3100 may communicate with the user terminal 2000.

For example, the communication unit 3100 may transmit identification information of the access control device 3000 to the user terminal 2000. In addition, the communication unit 3100 may transmit the biometric information input from the access control device 3000 to the user terminal 2000. In addition, the communication unit 3100 may transmit an access authentication request signal generated according to an input signal according to an input for opening a door of the user to the user terminal 2000.

For another example, the communication unit 3100 may receive a setting change signal from the user terminal 2000. Also, the communication unit 3100 may transmit information as a result of performing the setting change to the user terminal 2000.

The communication unit 3100 may perform communication mainly according to wireless communication standards, but BLE (Bluetooth Low Energy), Bluetooth, WLAN (Wireless LAN), WiFi (Wireless Fidelity), WiFi Direct, NFC (Near Field Communication) ), Infrared Data Association (IrDA), UWB (Ultra Wide Band), Zigbee, mobile communication modules including 3G, 4G or 5G, and wired/wireless modules that transmit data through various communication standards can do.

The display unit 3200 may output information for visually providing to a user.

For example, when a door open signal is received, the display unit 3200 may output the fact as visual information. In addition, the display unit 3200 may output the fact as visual information when the setting change signal is received.

The display unit 3200 may be an LCD, OLED, AMOLED display, or the like. When the display unit 3200 includes a touch panel, the display unit 3200 may operate as an input device based on a touch input.

The audio output unit 3300 may output information for audibly provided to a user.

For example, when a door open signal is received, the display unit 3200 may output the fact as audible information. Also, the display unit 3200 may output the fact as audible information when a setting change signal is received.

The audio output unit 3300 may be a speaker and a buzzer that output sound.

The sensor unit 3400 may acquire a signal for an external environment required for the access control device 3000. For example, the sensor unit 3400 may obtain a signal for a distance between a user and an object. For another example, the sensor unit 3400 may acquire a signal necessary for determining the position of a door.

The storage unit 3500 may store various types of information.

For example, a program for performing a control operation of the controller 3700 may be stored, and data received from the outside and data generated from the controller 3700 may be stored. In addition, the storage unit 3500 may store manager information for checking whether or not the manager information inputted from the user terminal 2000 matches. In addition, the storage unit 3500 may store biometric information received from the user terminal 2000.

The storage unit 3500 includes a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (eg, SD or XD memory, etc.), RAM (Random Access Memory, RAM), SRAM (Static Random Access Memory), ROM (Read-Only Memory, ROM), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory) magnetic memory, magnetic It may include at least one type of storage medium among a disk and an optical disk. In addition, the memory may temporarily, permanently or semi-permanently store information, and may be provided as an internal or removable type.

The power unit 3600 may provide power required for locking or unlocking the door. In addition, the power unit 3600 may provide power required for opening or closing the door when the door is implemented as an automatic door.

The power unit 3600 may be provided as a motor, a solenoid, an actuator, or the like.

When the power unit 3600 provides power required for locking or unlocking the door, the power unit 3600 may provide power to change and/or maintain the locking unit in a locked or unlocked state. The locking unit (not shown) may be provided by, for example, a deadbolt, a latch bolt, or a combination thereof. In addition, the locking unit is not limited to the dead bolt and the latch bolt described as an example, and commonly used locking units may be used.

The controller 3700 may control each component of the access control device 3000 or process and calculate various types of information. In addition, the control unit 3700 may obtain signals from several components included in the access control device 3000. In addition, the control unit 3700 may control an operation for performing some steps performed by the access control device 3000 among steps described in methods to be described later, or perform an operation required to perform the step.

The control unit 3700 may be implemented in software, hardware, and a combination thereof. For example, in hardware, the control unit 3700 may be implemented as a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a semiconductor chip, and other various types of electronic circuits. In terms of software, the controller 3700 may be implemented as a logic program or various computer languages performed according to the above-described hardware.

The biometric information input unit 3800 may receive a user's biometric information.

For example, the biometric information input unit 3800 may receive at least one of a user's voice, fingerprint, iris, face, and vein information.

The biometric information input unit 3800 may be implemented with at least one of a microphone for inputting user's voice information, a screen scanner for inputting user's fingerprint information, and a camera for inputting user's iris, face, and vein information.

The input unit 3900 may receive various inputs.

For example, the input unit 3900 may receive an input for opening a door from a user and drive the power unit 3600 to open the door. Also, the input unit 3900 may receive an input for opening a door from a user, and cause the access control device 3000 to transmit an access authentication request signal to the user terminal 2000.

For example, it may be implemented as a keyboard, a keypad, a button, a switch, a jog shuttle, and a wheel. In addition, the user's input may be, for example, pressing a switch, pressing a button, touching or dragging. When the display unit 3200 is implemented as a touch screen, the display unit 3200 may serve as the terminal input unit 3900.

The access control device 3000 according to the exemplary embodiment of the present application does not necessarily have to include all of the above-described configurations, and may be provided in a form excluding some configurations according to selection.

The application management system 10000 according to an embodiment of the present application may be implemented in a form including at least one access control device 3000. For example, the application management system 10000 may include one access control device 3000 including a communication unit 3100 and a control unit 3700. For a specific example, the access control device 3000 receives information obtained from the terminal 2000 through the communication unit 3100 performing the function of a reader, and obtains it through the control unit 3700 performing the function of the controller. By analyzing the generated information, a function of transmitting a signal for unlocking the door locking device may be performed. In addition, a function of controlling operations such as door access management, time and attendance management, and system mode change can be performed in addition to the function of transmitting a signal for unlocking the door locking device.

As another example, the application management system 10000 may include a first access control device 3000 including at least a communication unit 3100 and a second access control device 3000 including at least a control unit 3700. . For a specific example, the first access control device 3000 receives the information obtained from the terminal 2000 through the communication unit 3100 that performs the function of a reader, and receives the second information through wired communication and/or wireless communication. The information obtained through the communication unit 3100 connected to the access control device 3000 may be transmitted to the second access control device 3000. At this time, when the second access control device 3000 receives information from the first access control device 3000, the second access control device 3000 receives the information through the control unit 3700 that performs the function of the controller. Based on the obtained information, a function of transmitting a signal for unlocking the door locking device may be performed. In addition, a function of controlling operations such as door access management, time and attendance management, and system mode change can be performed in addition to the function of transmitting a signal for unlocking the door locking device.

In addition, the access control device 3000 may be provided in a form in which a configuration for performing additional functions and operations, etc. is added according to the selection.

In the above, the access management system 10000 and components, operations, terms, etc. included in the access management system 10000 according to various embodiments have been described. The above-described access management system 10000 and components, operations, terms, etc. included in the access management system 10000 will also be applied to various methods and embodiments described below. It is clear that the management system 10000 does not necessarily have to be configured to have the above-described configuration and function, and can be applied to an access management system configured differently from the above-described access management system 10000.

2. Control of access control device using user terminal

5 is a flowchart of a method of controlling an access control device using a user terminal according to an embodiment of the present specification.

Referring to FIG. 5, the method of controlling the access control device 3000 using the user terminal 2000 includes generating a control signal for controlling the access control device 3000 in the user terminal 2000 (S100) and It may include a step (S110) of transmitting a control signal from the user terminal 2000 to the access control device 3000.

According to some embodiments, a step S100 of generating a control signal for controlling the access control device 3000 in the user terminal 2000 may be performed.

The user terminal 2000 may perform various operations to control the access control device 3000 and generate a control signal to be transmitted to the access control device 3000. The control signal may be for opening the door or for changing the setting of the access control device 3000.

For example, in order to control the access control device 3000 to open the door, the user terminal 2000 performs the user's access authentication and generates a door open signal to be transmitted to the access control device 3000 when the access authentication is successful. I can. The access control device 3000 may receive a door open signal and open the door according to the door open signal.

For another example, in order to control the access control device 3000 to change the setting, the user terminal 2000 receives the setting change information of the access control device 3000 and changes the setting of the access control device 3000 based on this. The user terminal 2000 may generate a signal. The access control device 3000 may receive a setting change signal and perform a setting change according to the setting change signal.

According to some embodiments, an operation S110 of transmitting a control signal to the access control device 3000 from the user terminal 2000 may be performed.

In order to control the access control device 3000, the user terminal 2000 may transmit a control signal to the access control device 3000. For example, the user terminal 2000 may transmit a door opening signal to the access control device 3000 to open the door so that the access control device 3000 receiving the door opens the door. For another example, the user terminal 2000 may transmit a setting change signal to the access control device 3000 in order to change the setting of the access control device, so that the access control device 3000 receiving it can change the setting. have.

The control of the access control device 3000 using the user terminal 2000 described above is an example for convenience of description and is not limited thereto, and the access control device 3000 using the user terminal 2000 that is commonly used Control of can be used.

3. Access control method

In the conventional access management system, an authentication server for managing access and an access control device are provided, and when a user requests access, the authentication server for managing access and the access control device are organically linked to determine whether to allow access.

In such a conventional system, the authentication server that manages access and the access control device must maintain a state in which communication is possible, and the authentication server that manages access is in an impossible state because it is possible to determine whether or not this access is permitted only by performing their respective roles. When a problem occurs in communication between the authentication server that manages access or the access control device and the access control device, a problem occurs in which the user cannot access. In addition, there is also a problem that is vulnerable to security because information for access authentication is stored in the access control device.

Hereinafter, a method of performing access authentication in the user terminal 2000 will be described with reference to FIGS. 6, 7 and 8.

6 is a flowchart of a method of performing access authentication in the user terminal 2000 according to an embodiment of the present specification.

The method of performing access authentication by the user terminal 2000 may include acquiring information for access authentication (S200) and performing access authentication (S210).

The user terminal 2000 may obtain information for user access authentication (S210).

The user terminal 2000 may obtain information for performing the user's access authentication from the server 1000 and the access control device 3000. For example, the user terminal 2000 may obtain access permission information from the server 1000. In addition, the user terminal 2000 may obtain identification information of the access control device 3000 from the access control device 3000 and biometric information input from the user.

The user terminal 2000 may perform user access authentication (S200).

Performing access authentication may be determining whether the user has access authority. Accordingly, successful access authentication may indicate that the user has access authority, and failure of access authentication may indicate that the user does not have access authority.

The user terminal 2000 may perform user access authentication in various ways based on previously stored access permission information.

The identification information may be information for identifying a specific device among a plurality of devices. For example, identification information includes device ID, UUID (Universal Unique Identifier), UID (Unique Identifier), terminal's IP address, MAC address, CPU (MCU) serial number or HDD serial number, terminal It may include at least one of the communication numbers of.

The access right information is information used to perform the user's access authentication according to whether the user has access right, and the access right information is registered user identification information, registered biometric information, and registered terminal identification. At least one of information, registered access control device identification information, access schedule information, and expiration date information may be included, and each information may be mapped to each other. The access permission information may be registered and managed in the server 1000 by an administrator, and the user terminal 2000 may obtain and store access permission information from the server 1000 in advance before performing access authentication. In addition, the access permission information may be stored in the user terminal 2000, but the user terminal 2000 may receive the access permission information from the server 3000 when the expiration date has expired or is not stored.

Hereinafter, a method of performing access authentication of a user will be described with reference to FIGS. 7 and 8.

7 and 8 are exemplary views of access permission information according to an embodiment of the present specification. However, FIGS. 7 and 8 are only examples for convenience of description, and the access permission information is not limited thereto, and some information may be excluded or various additional information may be added according to selection.

The user terminal 2000 may perform user access authentication by comparing the access permission information and the identification information of the access control device 3000.

Specifically, the access permission information includes the registered access control device identification information,

It is checked whether the identification information obtained from the access control device 3000 is included in the access permission information, and if the identification information of the access control device 3000 is included in the access permission information, it can be determined that the access authentication was successful. have. In addition, it is checked whether the identification information obtained from the access control device 3000 is included in the access permission information, and if the identification information of the access control device 3000 is not included in the access permission information, the access authentication fails. I can judge.

In addition, the user terminal 2000 can determine that the user access authentication has been successful if the registered access control device identification information among the mapped information of the access permission information includes information corresponding to the access control device 3000 identification information. have. The user terminal 2000 may determine that user access authentication has failed if the information corresponding to the identification information of the access control device 3000 is not included in the registered access control device information among the mapped information of the access permission information.

For example, in FIG. 7, when the user terminal 2000 is'a' and the corresponding access control device 3000 is the'first door','a' is the registered access control device having the access right. Since the identification information includes identification information for the'first door', the user terminal 2000 may determine that the access authentication has been successful. For another example, in FIG. 7, when the user terminal 2000 is'a' and the corresponding access control device 3000 is'third door', the registered access control device in which'a' has access right in the access right information The user terminal 2000 may determine that access authentication has failed because the identification information of the'third door' is not included in the identification information of.

In addition, the user terminal 2000 may perform access authentication of the user by comparing the access permission information and the identification information of the user terminal 2000.

Specifically, when the access control device identification information registered with the access right information and the registered terminal identification information are mapped, the identification information of the user terminal 2000 is mapped to the identification information obtained from the access control device 3000. Whether or not included in the registered terminal identification information is checked, and when the identification information of the user terminal 2000 is included in the registered terminal identification information, it may be determined that access authentication has been successful. In addition, when the access control device identification information registered with the access permission information and the registered terminal identification information are mapped, the identification information of the user terminal 2000 is mapped to the identification information obtained from the access control device 3000. Whether or not it is included in the terminal identification information, and if the identification information of the user terminal 2000 is not included in the registered terminal identification information, it may be determined that access authentication has failed.

For example, in FIG. 8, when the user terminal 2000 is'b' and the corresponding access control device 3000 is the'first door', the registration in which the access right for the'first door' is granted in the access right information The user terminal 2000 may determine that the access authentication is successful because the identified terminal identification information includes identification information for'b'. For another example, in FIG. 8, when the user terminal 2000 is'b' and the corresponding access control device 3000 is the'second door', the access right is granted to the'second door' in the access right information. The user terminal 2000 may determine that the access authentication has failed because the identification information for'b' is not included in the registered terminal identification information.

In addition, the user terminal 2000 may perform user access authentication by comparing the access authority information and the acquired biometric information of the user.

Specifically, the access right information includes registered biometric information, and the user terminal 2000 checks whether or not the acquired user's biometric information is included in the access right information, and the obtained user's biometric information is included in the access right information. If included, it can be determined that the access authentication was successful. In addition, the access right information includes registered biometric information, and the user terminal 2000 checks whether the acquired user's biometric information is included in the access right information, and the obtained user's biometric information is included in the access right information. If not, it can be determined that access authentication has failed.

In addition, the user terminal 2000 may determine that the access authentication has succeeded if the registered biometric information among the mapped information of the access right information includes information corresponding to the biometric information input from the user. The user terminal 2000 may determine that the access authentication has failed if the registered biometric information does not include information corresponding to the biometric information input from the user among the mapped information of the access right information.

For example, in FIG. 7, when the user's biometric information is'a`' and the corresponding access control device 3000 is the'first door','a'' is the registered access control device having the access right. Since the identification information includes identification information for the'first door', the user terminal 2000 may determine that the access authentication has been successful. As another example, in FIG. 7, when the user's biometric information is'a' and the corresponding access control device 3000 is'third door','a' is the registered access control device having access right. The user terminal 2000 may determine that the access authentication has failed because the identification information for the'third door' is not included in the identification information.

In addition, the user terminal 2000 may perform access authentication of the user by comparing the access permission information with the current time.

Specifically, it may be checked whether the current time is included in the access schedule information, and if the current time is included in the access schedule information, it may be determined that access authentication has been successful. In addition, it is possible to check whether the current time is included in the access schedule information, and if the current time is not included in the access schedule information, it may be determined that access authentication has failed.

In addition, the user terminal 2000 checks whether the current time is included in the access schedule information mapped with the identification information of the access control device 3000 among the mapped information of the access permission information, and the current time is the access control device. If it is not included in the access schedule information mapped to the identification information of (3000), it may be determined that access authentication has failed.

In addition, the user terminal 2000 checks whether the current time is included in the access schedule information mapped with the identification information of the user terminal 2000 among the mapped information of the access permission information, and the current time is the user terminal 2000 If it is not included in the access schedule information mapped to, it may be determined that access authentication has failed.

In addition, the user terminal 2000 checks whether the current time is included in the access schedule information mapped with the acquired biometric information among the mapped information of the access permission information, and the current time is mapped to the acquired biometric information. If it is not included in the access schedule information, it may be determined that the access authentication has failed.

For example, in FIG. 7, when the user terminal 2000 is'a', the user's biometric information is'a', and the corresponding access control device 3000 is'first door', it is determined that access authentication is successful. Even in the case, if the current time is 8 am, it may be determined that access authentication has failed because it is not included in the accessable schedule information corresponding to the'first door'. For another example, in FIG. 7, when the user terminal 2000 is'a', the user's biometric information is'a', and the corresponding access control device 3000 is'first door', it is assumed that access authentication is successful. In the case of determination, if the current time is 8 am, it may be determined that access authentication has failed because it is not included in the accessable schedule information corresponding to'a' and/or'a'.

In addition, the user terminal 2000 may perform the user's access authentication according to whether the valid period of the access right information has expired.

Specifically, it is possible to check whether the validity period of the access right information has expired, and if the validity period of the access right information has expired, it may be determined that the access authentication has failed.

Even if it is determined that the access authentication is successful, the user terminal 2000 may determine that the access authentication has failed when the valid period of the access authority information has expired. Alternatively, the user terminal 2000 may immediately determine that the access authentication has failed when the valid period of the access permission information has expired.

For example, in FIG. 7, when the user terminal 2000 is'a', the user's biometric information is'a', and the corresponding access control device 3000 is'first door', it is determined that the access authentication is successful. Even if it did, if the validity period of the access right information expires after 5 hours, it can be judged that the access authentication has failed. In addition, in FIG. 7, if the validity period of the access right information expires after 5 hours, it may be determined that access authentication has failed.

The method of performing access authentication is not limited to the above-described method, and may be provided by a combination of the above-described methods.

9 is an environmental diagram of an access management method according to an embodiment of the present specification.

As exemplarily shown in FIG. 9, in the access management method according to an embodiment, the user terminal 2000 receives identification information and/or biometric information from the access control device 3000, and accesses the user terminal 2000. Access authentication of the user can be performed based on the authority information. If the user's access authentication is successful, the user can access the door.

Hereinafter, an access management method of the access management system 10000 in which the user terminal 2000 performs access authentication will be described with reference to FIGS. 10, 11 and 12.

10 is a flowchart of an access authentication result management method according to an embodiment of the present specification. The user terminal 2000 accesses the access control device 3000 to perform access authentication, and transmits the result to the server 1000 so that the access authentication result can be managed by the server 1000. The management system 10000 may be used for managing time and attendance of workers.

Referring to FIG. 10, the access authentication result management method includes a step in which the user terminal 2000 requests access permission information from the server 1000 (S300), and the server 1000 transmits the access permission information to the user terminal 2000. Step (S310), the step of connecting communication between the user terminal 2000 and the access control device 3000 (S320), the step of transmitting the identification information to the user terminal 2000 by the access control device 3000 (S330), The user terminal 2000 performs access authentication (S340), the user terminal 2000 generates access authentication result information (S350), and the user terminal 2000 sends the access authentication result information to the server 1000. It may include a transmitting step (S360).

According to some embodiments of the present specification, an operation S300 of requesting the access permission information from the user terminal 2000 to the server 1000 may be performed.

The user terminal 2000 may be in a state in which the access permission information is stored in advance, but may request the access permission information from the server 1000.

For example, the user terminal 2000 may automatically request the access permission information from the server 1000 when the access permission information is not stored. In addition, the user terminal 2000 may automatically request the access permission information from the server 1000 when the validity period of the access permission information has passed.

Alternatively, the user terminal 2000 may request access permission information from the server 1000 when a user's request is input. For example, if the user wants to update the access permission information even though the access permission information is stored in the user terminal 2000 or does not know whether the access permission information is stored, the user can enter a request into the user terminal 2000, and the user terminal (2000) may request access permission information from the server 1000.

Step S300 described above is not necessarily essential, and may be omitted according to some embodiments.

In addition, according to some embodiments of the present specification, an operation (S310) of transmitting the access permission information from the server 1000 to the user terminal 2000 may be performed.

The server 1000 may transmit the access permission information to the user terminal 2000 when there is a request for access permission information from the user terminal 2000. For example, if the access right information is not stored in the user terminal 2000 or when the user inputs a request for access right information to the server 1000 after the expiration date of the access right information has passed, the server 1000 Information can be transmitted to the user terminal 2000.

Alternatively, the server 1000 may transmit the access permission information to the user terminal 2000 even when there is no request for access permission information from the user terminal 2000. For example, the server 1000 checks whether or not the access right information is stored in the user terminal 2000 through periodic communication with the user terminal 2000, and if not, the access right information is automatically sent to the user terminal 2000. ).

When the server 1000 transmits the access permission information to the user terminal 2000, the user terminal 2000 may store the received access permission information in the terminal storage unit 2500.

Step S310 described above is not necessarily essential, and may be omitted according to some embodiments.

According to some embodiments of the present specification, a step S320 of connecting communication between the user terminal 2000 and the access control device 3000 may be performed.

When the user terminal 2000 approaches the access control device 3000, the user terminal 2000 may detect the access control device 3000 and connect communication. At this time, the user terminal 2000 or the access control device 3000 may output a notification to the outside when communication is connected to each other.

Communication between the user terminal 2000 and the access control device 3000 may be performed according to short-range communication standards such as BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi. .

According to some embodiments of the present specification, the step S330 of transmitting the identification information to the user terminal 2000 by the access control device 3000 may be performed.

The access control device 3000 may automatically transmit the identification information of the access control device 3000 to the user terminal 2000 when communication with the user terminal 2000 is connected. Alternatively, the access control device 3000 may transmit the identification information to the user terminal 2000 when there is a request for identification information from the user terminal 2000. In addition, the step of transmitting the identification information from the access control device 3000 to the user terminal 2000 may be performed simultaneously with the step of connecting communication between the user terminal 2000 and the access control device 3000.

According to some embodiments of the present specification, the step S340 of performing the access authentication by the user terminal 2000 may be performed.

The user terminal 2000 may perform access authentication of the user by at least one of the above-described access authentication methods (S210) based on the access permission information previously stored in the terminal storage unit 2500.

According to some embodiments of the present specification, the step S350 of generating the access authentication result information by the user terminal 2000 may be performed.

The user terminal 2000 may perform access authentication and, if the access authentication is successful, may generate result information indicating that the access authentication is successful. Alternatively, the user terminal 2000 may perform access authentication, and when the access authentication fails, the user terminal 2000 may generate result information indicating that the access authentication has failed. In this case, the user terminal 2000 may output a visual notification indicating the authentication result through the terminal display unit 2200, or may output a voice notification message indicating the authentication result through a separate output unit.

According to some embodiments of the present specification, an operation S360 of transmitting the access authentication result information to the server 1000 by the user terminal 2000 may be performed.

The user terminal 2000 may transmit the generated access authentication result information to the server 1000. The server 1000 may receive the access authentication result information and store it in the server storage unit 1300.

11 is a flowchart of a door opening management method according to an embodiment of the present specification. The user terminal 2000 accesses the access control device 3000 to perform access authentication, and transmits a door open signal to the access control device 3000 so that the user terminal 2000 can control the opening and closing operation of the door. Through this, the access management system 10000 may utilize the user terminal 2000 as a door access means.

Referring to FIG. 11, in the door opening management method, the user terminal 2000 requests access permission information from the server 1000 (S400), and the server 1000 transmits the access permission information to the user terminal 2000. (S410), the step of connecting communication between the user terminal 2000 and the access control device 3000 (S420), the step of transmitting the identification information from the access control device 3000 to the user terminal 2000 (S430), the user The terminal 2000 performs access authentication (S440), the user terminal 2000 generates a door open signal (S450), the user terminal 2000 transmits a door open signal to the access control device 3000 A step (S460) and the step (S470) of performing the door opening operation by the access control device 3000 may be included.

According to some embodiments of the present specification, an operation S400 of requesting the access permission information from the user terminal 2000 to the server 1000 may be performed.

Step S400 is performed similarly to step S300 described above, and a detailed description thereof will be omitted.

Step S400 described above is not necessarily essential, and may be omitted according to some embodiments.

In addition, according to some embodiments of the present specification, an operation (S410) of transmitting the access permission information from the server 1000 to the user terminal 2000 may be performed.

Step S410 is performed similarly to step S310 described above, and a detailed description thereof will be omitted.

Step S410 described above is not necessarily essential, and may be omitted according to some embodiments.

According to some embodiments of the present specification, a step S420 of connecting communication between the user terminal 2000 and the access control device 3000 may be performed.

Step S420 is performed similarly to step S320 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S430 of transmitting the identification information to the user terminal 2000 by the access control device 3000 may be performed.

Step S430 is performed similarly to step S330 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S440 of performing the access authentication by the user terminal 2000 may be performed.

Step S440 is performed similarly to step S340 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation S450 of generating a door open signal by the user terminal 2000 may be performed.

The user terminal 2000 may generate a door open signal to be transmitted to the access control device 3000 when the user succeeds in access authentication. The door opening signal may force the access control device 3000 to perform an operation of opening the door. In other words, when the door open signal is transmitted from the user terminal 2000 to the access control device 3000, the control unit 3700 may change the door open state through the power unit 3600. However, the user terminal 2000 may not generate a door open signal when the user's access authentication fails.

According to some embodiments of the present specification, an operation S460 of transmitting a door open signal from the user terminal 2000 to the access control device 3000 may be performed.

The user terminal 2000 may transmit a door open signal to the access control device 3000. For example, the user terminal 2000 is BLE (Bluetooth Low Energy), Bluetooth (Bluetooth), WLAN (Wireless LAN), WiFi (Wireless Fidelity), WiFi Direct, NFC (Near Field Communication), infrared communication (Infrared Data Association) ; The door opening signal may be transmitted to the access control device 3000 through wireless communication such as IrDA), UWB (Ultra Wide Band), and Zigbee.

In addition, in order to prevent unwanted doors from being opened, the user terminal 2000 transmits a door open signal to the access control device 3000 when the distance between the user terminal 2000 and the access control device 3000 is approached within a certain distance. You can also send it.

At this time, the user terminal 2000 transmits a door open signal to the access control device 3000, and the access control device 3000 receives a positive-acknowledgement signal (ACK) when the door open signal is well received. ) Can be transmitted to the user terminal 2000. In addition, the user terminal 2000 transmits a door open signal to the access control device 3000, and the access control device 3000 transmits a negative-acknowledgement signal (NACK: Negative-Acknowledgement) when the door open signal is not well received. ) Can be transmitted. At this time, when the user terminal 2000 receives a positive acknowledgment signal from the access control device 3000, information indicating that the door is open may be transmitted to the server 1000. Conversely, when the user terminal 2000 receives an illegal acknowledgment signal from the access control device 3000, information indicating that the door has not been opened may be transmitted to the server 1000.

In addition, according to some embodiments, the step S470 of the access control device 3000 performing a door opening operation may be performed.

When receiving a door open signal from the user terminal 2000, the access control device 3000 may provide power through the power unit 3600 so that the door is unlocked. In addition, when the door is an automatic door, the access control device 3000 may provide power through the power unit 3600 so that the door is changed to an open state.

The access control device 3000 may provide power through the power unit 3600 so that the door is locked based on a lock condition after the door is unlocked. The access control device 3000 may determine whether the door has returned to the closed state based on the signal obtained from the sensor unit 3400, and when the door returns to the closed state, the power unit ( 3600) can provide power. In addition, the access control device 3000 may provide power through the power unit 3600 so that the door is locked after the lock waiting time elapses even if the door returns to the closed state in consideration of the lock waiting time. In addition, by outputting at least one of auditory, visual information, and vibration through the display unit 3200, the audio output unit 3300, and/or a separate output unit, it is possible to notify the outside that the door has been opened.

The above-described door opening management method is not shown in the drawing, but after the step of performing the access authentication by the user terminal 2000 (S440), the step of generating the access authentication result information by the user terminal 2000 (S350). ) And the user terminal 2000 transmitting the access authentication result information to the server 1000 (S360 ).

12 is a flowchart of a method for notifying information when entering or leaving a door according to an embodiment of the present specification. When a door is implemented as an automatic door that requires a door opening input by pressing a switch to open, the user terminal accesses the access control device 3000 and inputs the door opening through the input unit 3900 to open the door. The 2000 may receive an access authentication request signal from the access control device 3000 and communicate with the server to obtain a designated message from the server 1000. Through this, the access management system 10000 may utilize the user terminal 2000 as a means for advertisement or information notification when entering and exiting the door.

Referring to FIG. 12, in the method of notifying information when entering a door, the user terminal 2000 requests access permission information from the server 1000 (S500), and the server 1000 transmits the access permission information to the user terminal 2000. Step (S505), the step of receiving the door open input by the access control device 3000 (S510), the step of generating the access authentication request signal by the access control device 3000 (S515), the access control device 3000 Transmitting an access authentication request signal to the terminal 2000 (S520), the user terminal 2000 communicating with the server 1000 (S525), the server 1000 transmitting a message to the user terminal 2000 (S530), the user terminal 2000 performing access authentication by the user terminal 2000 (S535), the user terminal 2000 generating a door open signal (S540), the user terminal 2000 to enter Transmitting a door open signal to the control device 3000 (S545) and the access control device 3000 performing a door opening operation (S550) may be included.

According to some embodiments of the present specification, the step S500 of requesting the access permission information from the user terminal 2000 to the server 1000 may be performed.

Step S500 is performed similarly to step S300 described above, and a detailed description thereof will be omitted.

Step S500 described above is not necessarily essential, and may be omitted according to some embodiments.

In addition, according to some embodiments of the present specification, the step S505 of transmitting the access permission information from the server 1000 to the user terminal 2000 may be performed.

Step S505 is performed similarly to step S310 described above, and a detailed description thereof will be omitted.

Step S505 described above is not necessarily essential, and may be omitted according to some embodiments.

According to some embodiments of the present specification, the step S510 of receiving the door opening input by the access control device 3000 may be performed.

For example, when a door is implemented as an automatic door that requires a door opening input by pressing a switch to open, the access control device 3000 may generate an input signal to open the door upon receiving the door opening input. .

According to some embodiments of the present specification, the step (S515) of generating an access authentication request signal to the user terminal 2000 by the access control device 3000 may be performed.

For example, the access control device 3000 may generate an access authentication request signal according to an input signal generated by an input for opening a door. In this case, the access authentication request signal may be a signal including identification information of the access control device 3000.

According to some embodiments of the present specification, the step S520 of transmitting an access authentication request signal to the user terminal 2000 by the access control device 3000 may be performed.

The access control device 3000 may transmit an access authentication request signal to the user terminal 2000. The user terminal 2000 may perform the user's access authentication upon receiving the received access authentication request signal. In addition, the access authentication request signal may be a signal including identification information of the access control device 3000. In addition, the access control device 3000 may transmit identification information of the access control device 3000 to the user terminal 2000 separately from transmitting the access authentication request signal.

For example, when communication between the access control device 3000 and the user terminal 2000 is performed in the BLE method, transmitting the access authentication request signal means that the access control device 3000 generates an advertising signal. It may be transmitted to the user terminal 2000.

According to some embodiments of the present specification, an operation (S525) of the user terminal 2000 communicating with the server 1000 may be performed.

The user terminal 2000 may communicate with the server 1000 when receiving an access authentication request signal from the access control device 3000. For example, when receiving an access authentication request signal from the access control device 3000, the user terminal 2000 may transmit a signal requesting an automatically designated message to the server 1000.

According to some embodiments of the present specification, an operation S530 of transmitting a message from the server 1000 to the user terminal 2000 may be performed.

The server 1000 may transmit a predetermined message to the user terminal 2000. For example, the server 1000 may transmit the advertisement message to the user terminal 2000 when an advertisement message is designated. In addition, the server 1000 may transmit a notification message to the user terminal 2000 when a notification message is designated. In this case, there may be a plurality of designated messages, and a different message may be designated according to a current time among a plurality of messages stored in the server 1000.

According to some embodiments of the present specification, the step (S535) of the user terminal 2000 performing access authentication may be performed.

Step S535 is performed similarly to step S340 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation S540 of generating a door open signal by the user terminal 2000 may be performed.

Step S540 is performed similarly to step S450 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation (S545) of transmitting a door open signal from the user terminal 2000 to the access control device 3000 may be performed.

Step S545 is performed similarly to step S460 described above, and a detailed description thereof will be omitted.

In addition, according to some embodiments, the step S550 of the access control device 3000 performing a door opening operation may be performed.

Step S550 is performed similarly to step S470 described above, and a detailed description thereof will be omitted.

The above-described method of notifying information upon door access is not shown in the drawing, but after the step of performing the access authentication by the user terminal 2000 (S535), the step of generating the access authentication result information by the user terminal 2000 (S350) and the step of transmitting the access authentication result information to the server 1000 by the user terminal 2000 (S360) may also be performed.

Hereinafter, an access management method using biometric information of a user of the access management system 10000 in which the user terminal 2000 performs access authentication will be described with reference to FIGS. 13 and 14.

13 is a flowchart of a method for managing access authentication results using biometric information according to an embodiment of the present specification. The user terminal 2000 accesses the access control device 3000 to perform access authentication, and transmits the result to the server 1000 so that the access authentication result can be managed by the server 1000. Access authentication with improved security may be performed by using the user's biometric information input from the control device 3000. Through this, the access management system 10000 may be used for management of time and attendance of workers.

Referring to FIG. 13, the method for managing the access authentication result using biometric information includes the step of requesting access permission information from the user terminal 2000 to the server 1000 (S600), and the server 1000 granting access to the user terminal 2000. Transmitting information (S610), connecting communication between the user terminal 2000 and the access control device 3000 (S620), receiving biometric information by the access control device 3000 (S630), access control The device 3000 transmits the biometric information to the user terminal 2000 (S640), the user terminal 2000 performs access authentication (S650), and the user terminal 2000 generates access authentication result information. The operation S660 and the user terminal 2000 may include transmitting the access authentication result information to the server 1000 (S670).

According to some embodiments of the present specification, an operation S600 of requesting the access permission information from the user terminal 2000 to the server 1000 may be performed.

Step S600 is performed similarly to step S300 described above, and a detailed description thereof will be omitted.

Step S600 described above is not necessarily essential, and may be omitted according to some embodiments.

In addition, according to some embodiments of the present specification, an operation (S610) of transmitting the access permission information from the server 1000 to the user terminal 2000 may be performed.

Step S610 is performed similarly to step S310 described above, and a detailed description thereof will be omitted.

Step S610 described above is not necessarily essential, and may be omitted according to some embodiments.

According to some embodiments of the present specification, a step (S620) of connecting communication between the user terminal 2000 and the access control device 3000 may be performed.

Step S620 is performed similarly to step S320 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S630 of receiving biometric information by the access control device 3000 may be performed.

The access control device 3000 may receive biometric information from a user through the biometric information input unit 3800 and obtain biometric information of the user.

The user's biometric information may be one of a user's fingerprint, iris, face, vein, and voice information. For example, when the biometric information input unit 3800 is a screen scanner for acquiring user's fingerprint information, the access control device 3000 may receive and acquire the user's fingerprint information. In addition, when the biometric information input unit 3800 is a microphone for acquiring the user's voice information, the access control device 3000 may receive and obtain the user's voice information. In addition, when the biometric information input unit 3800 is a camera for acquiring the user's iris information, the access control device 3000 may receive and acquire the user's iris information.

According to some embodiments of the present specification, the step S640 of transmitting the biometric information to the user terminal 2000 by the access control device 3000 may be performed.

The access control device 3000 may transmit the automatically acquired biometric information to the user terminal 2000 upon receiving biometric information from a user. Alternatively, the access control device 3000 may transmit the obtained biometric information to the user terminal 2000 when there is a request for biometric information from the user terminal 2000.

At this time, for security, the access control device 3000 may encrypt the obtained biometric information and transmit it to the user terminal 2000. For example, the access control device 3000 may encrypt the obtained biometric information with a public key of the access control device 3000.

In addition, the access control device 3000 may transmit not only biometric information, but also identification information of the access control device 3000 to the user terminal 2000. Alternatively, the access control device 3000 may transmit identification information of the access control device 3000 to the user terminal 2000 separately from the biometric information.

According to some embodiments of the present specification, the step S650 of performing the access authentication by the user terminal 2000 may be performed.

The user terminal 2000 may perform access authentication using the biometric information received from the access control device 3000. In this case, when the biometric information is encrypted by the access control device 3000, the user terminal 2000 may decrypt the encrypted biometric information and perform access authentication. For example, when the biometric information obtained from the access control device 3000 is encrypted with the public key of the access control device 3000, the user terminal 2000 may use the private key of the access control device 3000. Private Key), and access authentication can be performed.

Step S650 is performed similarly to step S340 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S660 of generating the access authentication result information by the user terminal 2000 may be performed.

Step S660 is performed similarly to step S350 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation (S670) of transmitting the access authentication result information to the server 1000 by the user terminal 2000 may be performed.

Step S670 is performed similarly to step S360 described above, and a detailed description thereof will be omitted.

Although not shown in the drawing in the above-described access authentication result management method using biometric information, when the user terminal 2000 obtains the user's biometric information to perform the user's access authentication, the access control device 3000 uses the biometric information. Instead of receiving the input (S630), the access control device 3000 transmitting the biometric information to the user terminal 2000 (S640), the user terminal 2000 receives and obtains the biometric information from the user. have. The user's biometric information may be one of a user's fingerprint, iris, face, vein, and voice information. For example, when the terminal biometric information input unit 2700 is a screen scanner for acquiring the user's fingerprint information, the user terminal 2000 may receive and acquire the user's fingerprint information. In addition, when the terminal biometric information input unit 2700 is a microphone for obtaining the user's voice information, the user terminal 2000 may receive and obtain the user's voice information. In addition, when the terminal biometric information input unit 2700 is a camera for acquiring the user's iris information, the user terminal 2000 may receive and acquire the user's iris information.

14 is a flowchart of a door opening management method using biometric information according to an embodiment of the present specification. The user terminal 2000 accesses the access control device 3000 to perform access authentication, and transmits a door open signal to the access control device 3000 so that the user terminal 2000 can control the opening and closing operation of the door. In this case, the user terminal 2000 may perform access authentication with improved security using the user's biometric information. Through this, the access management system 10000 may utilize the user terminal 2000 as a door access means.

Referring to FIG. 14, in the method for managing door opening using biometric information, the user terminal 2000 requests access permission information from the server 1000 (S700), and the server 1000 provides access permission information to the user terminal 2000. Transmitting (S710), connecting communication between the user terminal 2000 and the access control device 3000 (S720), the access control device 3000 receiving biometric information (S730), the access control device Step 3000 of transmitting the biometric information to the user terminal 2000 (S740), the user terminal 2000 performing access authentication (S750), the user terminal 2000 generating a door open signal ( S760, the user terminal 2000 may include transmitting a door open signal to the access control device 3000 (S770), and the access control device 3000 performing a door opening operation (S780).

According to some embodiments of the present specification, an operation S700 of requesting access permission information from the user terminal 2000 to the server 1000 may be performed.

Step S700 is performed similarly to step S300 described above, and a detailed description thereof will be omitted.

Step S700 described above is not necessarily essential, and may be omitted according to some embodiments.

In addition, according to some embodiments of the present specification, an operation S710 of transmitting, by the server 1000, access permission information to the user terminal 2000 may be performed.

Step S710 is performed similarly to step S310 described above, and a detailed description thereof will be omitted.

Step S710 described above is not necessarily essential, and may be omitted according to some embodiments.

According to some embodiments of the present specification, a step (S720) of connecting communication between the user terminal 2000 and the access control device 3000 may be performed.

Step S720 is performed similarly to step S320 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S730 of receiving the biometric information by the access control device 3000 may be performed.

Step S730 is performed similarly to step S630 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S740 of transmitting the biometric information to the user terminal 2000 by the access control device 3000 may be performed.

Step S740 is performed similarly to step S640 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step S750 of performing the access authentication by the user terminal 2000 may be performed.

Step S750 is performed similarly to step S650 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation S760 of generating a door open signal by the user terminal 2000 may be performed.

Step S760 is performed similarly to step S450 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation (S770) of transmitting a door open signal from the user terminal 2000 to the access control device 3000 may be performed.

Step S770 is performed similarly to step S460 described above, and a detailed description thereof will be omitted.

In addition, according to some embodiments, the step S780 of the access control device 3000 performing a door opening operation may be performed.

Step S780 is performed similarly to step S470 described above, and a detailed description thereof will be omitted.

Although not shown in the drawing in the above-described access authentication result management method using biometric information, when the user terminal 2000 obtains the user's biometric information to perform the user's access authentication, the access control device 3000 uses the biometric information. Instead of receiving the input (S730), the access control device 3000 transmitting the biometric information to the user terminal 2000 (S740), the user terminal 2000 receives and obtains the biometric information from the user. have. The user terminal 2000 may receive biometric information from a user through the terminal biometric information input unit 2700 and obtain biometric information of the user. The user's biometric information may be one of a user's fingerprint, iris, face, vein, and voice information. For example, when the terminal biometric information input unit 2700 is a screen scanner for acquiring the user's fingerprint information, the user terminal 2000 may receive and obtain the user's fingerprint information. In addition, when the terminal biometric information input unit 2700 is a microphone for obtaining the user's voice information, the user terminal 2000 may receive and obtain the user's voice information. In addition, when the terminal biometric information input unit 2700 is a camera for obtaining the user's iris information, the user terminal 2000 may receive and obtain the user's iris information.

The above-described door opening management method is not shown in the drawing, but after the step of performing the access authentication by the user terminal 2000 (S750), the step of generating the access authentication result information by the user terminal 2000 (S350). ) And the user terminal 2000 transmitting the access authentication result information to the server 1000 (S360 ).

4. How to change the access control device settings

In the conventional access control system, in order to change the setting of the access control device, a procedure of changing the setting of the access control device by connecting the access control device and the management server through a network was required. Accordingly, a problem arises that a lot of cost and effort are required for wiring work for connecting the network between the access control device and the management server.

15 is an environment diagram of a method for changing settings of the access control device 3000 according to an embodiment of the present specification.

As exemplarily shown in FIG. 15, the method for changing the setting of the access control device 3000 according to an embodiment generates a setting change signal by inputting setting change information in the user terminal 2000, and the access control device 3000 By wireless communication method, the user of the user terminal 2000 can change the settings of the access control device 3000.

In the method of changing the setting of the access control device 3000 according to an embodiment, an input for changing the setting of the access control device 3000 is performed in the user terminal 2000, and a setting change signal is generated and transmitted to the access control device 3000. The management server may not be involved in a series of processes.

Therefore, the method of changing the setting of the access control device 3000 according to an embodiment is, unlike a conventional access control system, the access control device without problem if the user has a terminal even if there is no management server connected to the access control device 3000 and the network. There is an effect that the setting of (3000) can be changed.

The basic concept of the method of changing the setting of the access control device 3000 according to this embodiment may be applied to various embodiments to be described below.

16 is a flowchart of a method of changing a setting of the access control device 3000 according to an embodiment of the present specification. The user terminal 2000 receives an input for changing the settings of the access control device 3000, accesses the access control device 3000, and transmits a setting change signal to the access control device 3000, thereby the access control device 3000. You can change the settings.

Referring to FIG. 16, the method of changing the setting of the access control device 3000 includes a step of connecting the user terminal 2000 to the access control device 3000 (S800), and the user terminal 2000 receives the setting change information. Step S810, the step of generating a setting change signal by the user terminal 2000 (S820), the step of receiving administrator information from the user terminal 2000 (S830), the user terminal 2000 is the access control device 3000 Transmitting a setting change signal to (S840), the step of checking the administrator information by the access control device 3000 (S850), and the step of changing the setting of the access control device 3000 (S860).

According to some embodiments of the present specification, an operation S800 of detecting the access control device 3000 by the user terminal 2000 and connecting communication may be performed.

The user terminal 2000 may detect the access control device 3000 nearby. For example, when communication between the user terminal 2000 and the access control device 3000 is performed by the BLE communication method, the user terminal 2000 receives an Advertising signal from the access control device 3000 to access the access control device 3000. Can be detected. After sensing the access control device 3000, the user terminal 2000 may connect communication with the access control device 3000. At this time, the user terminal 2000 or the access control device 3000 may output a notification to the outside when communication is connected to each other.

In this case, the user terminal 2000 may collect a distance from the access control device 3000 and a recent access record.

Communication between the user terminal 2000 and the access control device 3000 may be performed according to short-range communication standards such as BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi. .

According to some embodiments of the present specification, an operation S810 of receiving the setting change information by the user terminal 2000 may be performed.

The user terminal 2000 outputs a screen for receiving setting change information through the terminal display unit 2200, and receives information for setting change performed by the access control device 3000 (hereinafter, setting change information). I can. At this time, the user terminal 2000 may display a list of devices for which settings can be changed on the screen, and when a device for which settings are to be changed is selected from the device list, a screen displaying items for changing settings is displayed on the terminal display unit. It can be displayed at 2200.

The user terminal 2000 may receive information for changing a communication interface setting of the access control device 3000. For example, when the access control device 3000 uses the RS 485 method, information for changing the value of the baud rate may be input. As another example, when the access control device 3000 uses the Wiegand method, information for changing the format of the Wiegand, such as changing from 26 bits to 34 bits, may be input.

In addition, the user terminal 2000 may receive information for changing the PIN setting of the access control device 3000. For example, the user terminal 2000 may receive information for changing the number of digits of the PIN.

In addition, the user terminal 2000 may receive information for changing the setting of the display unit 3200 or the audio output unit 3300 of the access control device 3000. For example, the user terminal 2000 may receive information for changing a setting so that the LED of the access control device 3000 can output light of a different color in various situations. As another example, the user terminal 2000 may receive information for changing a setting so that the buzzer of the access control device 3000 may output different sounds in various situations.

In addition, the user terminal 2000 may receive an input of information for changing the format of a card recognized by the access control device 3000. For example, the user terminal 2000 may receive information for changing a card format recognized by the access control device 3000 from a Wiegand format to a Smart Card format.

In addition, the user terminal 2000 may receive information necessary for user access authentication into the access control device 3000. For example, the user terminal 2000 may receive information necessary for access authentication stored in the access control device 3000.

In addition, the user terminal 2000 may receive information for updating the firmware of the access control device 3000. For example, the user terminal 2000 may receive information for updating firmware built in the access control device 3000.

The input of the setting change information of the access control device 3000 described above is only an example for convenience of description and is not limited thereto, and an input type of the setting change information of the access control device 3000 that is commonly used may be used. have.

According to some embodiments of the present specification, an operation S820 of receiving administrator information in the user terminal 2000 may be performed.

The user terminal 2000 may receive administrator information so that only a user with the setting change authority can change the settings of the access control device 3000. For example, the administrator information may be an administrator password, and the user terminal 2000 may receive a password composed of 6 digits.

According to some embodiments of the present specification, an operation S830 of generating a setting change signal by the user terminal 2000 may be performed.

The user terminal 2000 may generate a setting change signal based on the received setting change information. When the setting change signal is transmitted to the access control device 3000, the access control device performs setting change. The setting change signal may include data necessary for setting change performed by the access control device 3000. In addition, the user terminal 2000 may generate a setting change signal including the received manager information.

According to some embodiments of the present specification, an operation (S840) of transmitting a setting change signal from the user terminal 2000 to the access control device 3000 may be performed.

The user terminal 2000 may transmit a setting change signal for changing the settings of the access control device 3000 and manager information to the access control device 3000 according to the setting change information.

For example, communication between the user terminal 2000 and the access control device 3000 is based on short-range communication standards such as BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi. Can be done.

In addition, the user terminal 2000 may not separately transmit the input manager information to the access control device 3000, but may transmit a setting change signal including the input manager information to the access control device 3000.

In addition, when the distance between the user terminal 2000 and the access control device 3000 approaches less than a certain distance, a setting change signal and/or administrator information may be transmitted to the access control device 3000.

In addition, the user terminal 2000 transmits a setting change signal to the access control device 3000, and the access control device 3000 receives a positive-acknowledgement signal (ACK) when the setting change signal is well received. May be transmitted to the user terminal 2000. In addition, the user terminal 2000 transmits a setting change signal to the access control device 3000, and the access control device 3000 transmits a negative acknowledgment signal (NACK: Negative-Acknowledgement) when the setting change signal is not well received. ) Can be transmitted.

According to some embodiments of the present specification, the step S850 of checking the administrator information by the access control device 3000 may be performed.

The access control device 3000 may receive the administrator information input from the user terminal 2000 and compare it with the administrator information previously stored in the storage unit 3500 to determine whether or not they match. For example, the access control device 3000 may receive an administrator password input from the user terminal 2000 and compare it with an administrator password previously stored in the storage unit 3500 to determine whether or not they match. When the administrator information input from the user terminal 2000 and the administrator information previously stored in the storage unit 3500 do not match, the access control device 3000 may not change the setting according to the setting change signal. In this case, the access control device 3000 may transmit a notification message indicating that the administrator information does not match to the user terminal 2000 or may output an alarm to the outside. When the administrator information input from the user terminal 2000 and the administrator information previously stored in the storage unit 3500 match, the access control device 3000 may change the setting according to the setting change signal. In this case, the access control device 3000 may transmit a notification message indicating that the administrator information does not match to the user terminal 2000 or may output an alarm to the outside.

According to some embodiments of the present specification, the step (S860) of performing the setting change by the access control device 3000 may be performed.

The access control device 3000 may perform a setting change according to a setting change signal when the manager information previously stored in the storage unit 3500 and the manager information input from the user terminal 2000 match. For example, the access control device 3000 may perform a setting change according to the setting change information through the control unit 3700. In addition, the access control device 3000 may store information included in the setting change signal in the storage unit 3500 through the control unit 3700.

17 is a flowchart of a method of storing biometric information acquired from the user terminal 2000 in the access control device 3000 according to an embodiment of the present specification. The user terminal 2000 may receive the user's biometric information, access the access control device 3000 and store the biometric information input to the access control device 3000.

Referring to FIG. 17, the method of storing the biometric information acquired by the user terminal 2000 in the access control device 3000 is a step of connecting the user terminal 2000 to the access control device 3000 (S900), The terminal 2000 obtaining biometric information (S910), the user terminal 2000 receiving setting change information (S920), the user terminal 2000 receiving administrator information (S930), the user terminal (2000) generating a setting change signal (S940), the user terminal 2000 transmitting a setting change signal to the access control device 3000 (S950), the access control device 3000 checks the administrator information Step S960 and storing the biometric information in the access control device 3000 (S970).

According to some embodiments of the present specification, an operation S900 of connecting communication with the access control device 3000 by the user terminal 2000 may be performed.

Step S900 is performed similarly to step S800 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation S910 of obtaining biometric information by the user terminal 2000 may be performed.

For example, the user terminal 2000 may receive biometric information from a user through the terminal biometric information input unit 2700 and obtain biometric information to be stored in the access control device 3000. When the terminal biometric information input unit 2700 is a screen scanner for acquiring the user's fingerprint information, the user terminal 2000 may receive and obtain the user's fingerprint information. In addition, when the terminal biometric information input unit 2700 is a microphone for obtaining the user's voice information, the user terminal 2000 may receive and obtain the user's voice information. In addition, when the terminal biometric information input unit 2700 is a camera for obtaining the user's iris information, the user terminal 2000 may receive and obtain the user's iris information.

For another example, the user terminal 2000 may receive and obtain biometric information to be stored in the access control device 3000 from the server 1000.

In addition, the user terminal 2000 may encrypt the obtained biometric information. For example, the user terminal 2000 may encrypt the obtained biometric information with a public key of the access control device 3000.

According to some embodiments of the present specification, an operation S920 of receiving, by the user terminal 2000, setting change information may be performed.

The user terminal 2000 may receive information for storing biometric information in the access control device 3000. For example, the user terminal 2000 may receive information for determining which biometric information is to be stored in the access control device 3000 among the obtained biometric information.

According to some embodiments of the present specification, an operation S930 of receiving administrator information in the user terminal 2000 may be performed.

Step S930 is performed similarly to step S820 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, an operation S940 of generating a setting change signal by the user terminal 2000 may be performed.

The user terminal 2000 may generate a setting change signal for storing the biometric information in the access control device 3000 based on the acquired biometric information. Also, the user terminal 2000 may generate a setting change signal including at least one of the received manager information and the acquired biometric information.

According to some embodiments of the present specification, an operation S950 of transmitting a setting change signal from the user terminal 2000 to the access control device 3000 may be performed.

The user terminal 2000 may transmit a setting change signal for changing the settings of the access control device 3000 and manager information to the access control device 3000 according to the setting change information. In addition, the user terminal 2000 may separately transmit the acquired biometric information to the access control device 3000. For example, communication between the user terminal 2000 and the access control device 3000 is based on short-range communication standards such as BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi. Can be done.

In addition, the user terminal 2000 does not transmit the input manager information and the acquired biometric information to the access control device 3000 separately from the setting change signal, but includes at least one of the input manager information and the acquired biometric information. The change signal may be transmitted to the access control device 3000.

In addition, when the distance between the user terminal 2000 and the access control device 3000 approaches a certain distance or less, a setting change signal, administrator information, and/or biometric information may be transmitted to the access control device 3000.

In addition, the user terminal 2000 transmits a setting change signal to the access control device 3000, and the access control device 3000 receives a positive-acknowledgement signal (ACK) when the setting change signal is well received. May be transmitted to the user terminal 2000. In addition, the user terminal 2000 transmits a setting change signal to the access control device 3000, and the access control device 3000 receives a negative acknowledgment signal (NACK: Negative-Acknowledgement) when the setting change signal is not well received. ) Can be transmitted.

According to some embodiments of the present specification, the step S960 of checking the administrator information by the access control device 3000 may be performed.

Step S960 is performed similarly to step S850 described above, and a detailed description thereof will be omitted.

According to some embodiments of the present specification, the step (S970) of storing biometric information in the access control device 3000 may be performed.

The access control device 3000 stores the biometric information received from the user terminal 2000 in the storage unit 3500 when the administrator information previously stored in the storage unit 3500 and the administrator information input from the user terminal 2000 match. I can.

In this case, if the received biometric information is encrypted, the access control device 3000 may decrypt the encrypted biometric information and store the biometric information in the storage unit 3500. For example, when the access control device 3000 receives a setting change signal containing biometric information encrypted with the public key of the access control device 3000 from the user terminal 2000, the access control device It may be decrypted with a private key of 3000, and the biometric information may be stored in the storage unit 3500.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operation of the embodiment, and vice versa.

As described above, although the embodiments have been described by the limited embodiments and drawings, various modifications and variations are possible from the above description by those of ordinary skill in the art. For example, the described techniques are performed in a different order from the described method, and/or components such as a system, structure, device, circuit, etc. described are combined or combined in a form different from the described method, or other components Alternatively, even if substituted or substituted by an equivalent, an appropriate result can be achieved.

Therefore, other implementations, other embodiments, and claims and equivalents fall within the scope of the claims to be described later.

Claims (32)

A setting change method of the user terminal in which a setting change signal is generated based on setting change information and administrator information input from a user and transmitted to an access control device to allow the access control device to change the setting,
Detecting the access control device and connecting communication with the access control device;
Receiving setting change information for setting change performed by the access control device;
Receiving administrator information to be transmitted to the access control device to be compared with the previously stored administrator information of the access control device;
Generating the setting change signal based on the received setting change information; And
Transmitting the setting change signal and the manager information to the access control device through wireless communication; Containing,
How to change user terminal settings.
The method of claim 1,
Changing the above settings
Change the communication interface setting of the access control device, change the PIN setting of the access control device, change the setting of at least one of the display unit of the access control device and the voice output unit of the access control device, and a card recognized by the access control device Including at least one of changing the format of, updating the firmware of the access control device, and storing biometric information in the access control device,
How to change user terminal settings.
The method of claim 2,
Changing the above settings
Storing biometric information in the access control device,
Further comprising the step of obtaining biometric information to be stored in the access control device,
How to change user terminal settings.
The method of claim 3,
The biometric information includes at least one of fingerprint, iris, vein, face, and voice information,
How to change user terminal settings.
The method of claim 3,
The step of obtaining the biometric information,
In the step of receiving the biometric information from the user,
How to change user terminal settings.
The method of claim 3,
The step of obtaining the biometric information,
Receiving the biometric information from a server,
How to change user terminal settings.
The method of claim 3,
Transmitting the biometric information to the access control device; Further comprising,
How to change user terminal settings.
The method of claim 7,
Transmitting the biometric information to the access control device,
Transmitting the setting change signal including the biometric information,
How to change user terminal settings.
The method of claim 3,
Encrypting the biometric information; Further comprising,
How to change user terminal settings.
The method of claim 1,
The administrator information includes an administrator password,
How to change user terminal settings.
The method of claim 1,
Transmitting the administrator information to the access control device,
To transmit the setting change signal including the manager information,
How to change user terminal settings.
The method of claim 1,
The wireless communication includes one of wireless communication among BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi,
How to change user terminal settings.
The method of claim 1,
Receiving information as a result of the setting change from the access control device; Further comprising,
How to change user terminal settings.
This is a method of changing the setting of an access control device that performs setting change by receiving a setting change signal from the user's terminal,
Connecting communication with the user terminal;
Receiving a setting change signal generated by the user terminal and manager information received by the user terminal from the user terminal;
Determining whether the received manager information matches pre-stored manager information; And
Performing the setting change according to the setting change signal when the received manager information and pre-stored manager information match; Containing,
How to change settings. The method of claim 14,
Changing the above settings
Change the communication interface setting of the access control device, change the PIN setting of the access control device, change the setting of at least one of the display unit of the access control device and the voice output unit of the access control device, and a card recognized by the access control device Including at least one of changing the format of, updating the firmware of the access control device, and storing biometric information in the access control device,
How to change settings.
The method of claim 15,
Changing the above settings
Storing biometric information in the access control device,
Receiving the biometric information from the user terminal; Further comprising,
How to change settings.
The method of claim 16,
Receiving the biometric information from the user terminal
To receive the setting change signal including the biometric information,
How to change settings.
The method of claim 16,
If the biometric information is encrypted,
Further comprising the step of decoding the biometric information,
How to change settings. The method of claim 14,
The administrator information includes an administrator password,
How to change settings.
The method of claim 14,
Receiving the input administrator information,
To receive the setting change signal including the input manager information,
How to change settings.
The method of claim 14,
The wireless communication includes one of wireless communication among BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi,
How to change settings.
The method of claim 14,
Transmitting information as a result of the setting change to the user terminal; Further comprising,
How to change settings.
A recording medium on which a program for performing the method of any one of claims 1 to 22 is recorded.
An access control device that receives the setting change signal and manager information generated by the user terminal from the user terminal, and performs setting change when the received manager information matches the previously stored manager information,
A communication unit for communicating with the user terminal;
A storage unit that stores administrator information and
The setting change signal and the manager information input from the user terminal are received from the user terminal through the communication unit, and it is checked whether the received manager information matches pre-stored manager information, and if they match, the setting change signal A control unit that controls to perform setting change according to; Containing,
Access control device.
The method of claim 24,
Changing the above settings
Change the communication interface setting of the access control device, change the PIN setting of the access control device, change the setting of at least one of the display unit of the access control device and the voice output unit of the access control device, and a card recognized by the access control device Including at least one of changing the format of, updating the firmware of the access control device, and storing biometric information in the access control device,
Access control device.
The method of claim 24,
The setting change is storage of biometric information in the access control device,
The control unit controls to receive biometric information from the user terminal through the communication unit and to store the biometric information in the storage unit,
Access control device.
The method of claim 26,
Receiving the biometric information from the user terminal
To receive the setting change signal including the biometric information,
Access control device.
The method of claim 26,
The control unit decrypts the biometric information when the biometric information received through the communication unit is encrypted,
Access control device.
The method of claim 24,
The administrator information includes an administrator password,
Access control device. The method of claim 24,
Receiving the input administrator information,
To receive the setting change signal including the input manager information,
Access control device.
The method of claim 24,
The communication unit uses one of wireless communication methods of BLE (Bluetooth Low Energy), Bluetooth, NFC (Near Field Communication), and Wi-Fi,
Access control device.
The method of claim 24,
The control unit transmits the result information of the setting change to the user terminal through the communication unit,
Access control device.

Images