KR101745482B1 - Communication method and apparatus in smart-home system - Google Patents

Abstract

A communication method and a device in a smart home system are disclosed. A method of data communication at a server comprising: receiving a data request encrypted with a server public key from a mobile terminal; Decrypting the encrypted data request with a first server secret key corresponding to a server public key of the server, encrypting the data request with a second server secret key, and transmitting the encrypted data request to the smart device; And receiving data encrypted with the second server secret key corresponding to the data request from the smart device, decrypting the encrypted data with the second server secret key, encrypting the encrypted data with the terminal public key, and transmitting the encrypted data to the mobile terminal .

Description

[0001] The present invention relates to a communication method and apparatus in a smart home system,

The present invention relates to a secure communication method and apparatus in a smart home environment.

With the development of information and communication technology, things have become intelligent and networked, and ubiquitous society in human life has come to reality. The realization of ubiquitous society is accelerating through IoT (Internet of Things). Smart home refers to a home environment in which home appliances are connected by a network to provide convenient and useful services to people. With IoT, smart home technology and services are rapidly evolving and diversifying.

With the development of smart devices for smart phones and smart TVs, smart home has been influenced by various home appliances, electricity, communication, and welfare. With the development and growth of smart devices, services of smart home such as healthcare service, environmental service and monitoring service have diversified. We are building a network based on network communication between smart devices for mutual communication of smart home. The user manages the necessary resources and receives the smart home data desired by the user through the network communication from the outside.

However, a variety of smart devices and network communications have created new security threats, and security incidents are increasing.

Korean Patent Publication No. 10-2008-0005344 (Nov. 11, 2008)

The present invention provides a secure communication method and apparatus in a smart home environment.

It is another object of the present invention to provide a communication method and apparatus in a smart home environment capable of authenticating smart devices in a smart home and blocking external access to securely transmit data.

Also, the present invention provides a communication method in a smart home environment, which can block data forgery and can verify the integrity of transmitted data using a hash result value based on a random number will be.

According to an aspect of the present invention, a secure communication method in a smart home environment is provided.

According to an embodiment of the present invention, there is provided a method of data communication at a server, comprising the steps of: (a) receiving an encrypted data request from a mobile terminal with a server public key; (b) decrypting the encrypted data request with a first server secret key of the server, encrypting the data request with a second server secret key, and transmitting the encrypted data request to the smart device; And (c) receiving, from the smart device, data encrypted with the second server secret key in response to the data request, decrypting the encrypted data with the second server secret key, encrypting the encrypted data with the terminal public key, And a data communication method including the step of transmitting data.

The encrypted data request may include at least one of a data request message, terminal information of the mobile terminal, random number value, and mobile terminal signature value.

The step (b) may be performed after the terminal information is extracted from the decrypted data request, and then the mobile terminal is authenticated by confirming whether it matches the previously registered terminal information, and if the authentication is successful.

Wherein the data encrypted by the terminal public key in step (c) further includes a hash value obtained by concatenating data corresponding to the data request and the random number value, and after step (c) Decrypting the encrypted data using the terminal secret key corresponding to the terminal public key, comparing the decrypted data with the random number and concatenating the resultant value with the result value included in the encrypted data, The integrity of the data can be verified.

Before the step (a), the mobile terminal may register the terminal information, transmit the server public key to the mobile terminal, and may precede the terminal registration process of receiving the terminal public key from the mobile terminal.

According to another embodiment of the present invention, there is provided a data communication method for a mobile terminal, comprising: transmitting a data request including at least one of a data request message, terminal information of the mobile terminal, Encrypting and transmitting to the server; Receiving a data value corresponding to the data request from the server by concatenating the random number value and hashed value and data obtained by encrypting data with a terminal public key; And decrypting the encrypted data with the terminal secret key, comparing the decrypted data with the random number value and comparing the hash result value with a result value included in the encrypted data, and verifying the integrity of the data The data communication method comprising the steps of:

Wherein the mobile terminal transmits the encrypted data request to the server by registering the terminal information of the mobile terminal with the server and receiving the server public key from the server and transmitting the terminal public key of the mobile terminal to the server Can be preceded.

According to another embodiment of the present invention, there is provided a method of data communication in a smart device, the method comprising: receiving a data request of a mobile terminal encrypted with a secret key from a server, the encrypted data request including a random value; And decrypting the encrypted data request with the secret key encrypted with the secret key, concatenating the data according to the data request with the random number value, encrypting the hashed result value and the data with the secret key, Wherein the server decrypts the encrypted data with the secret key, encrypts the data and the hashed result value with a terminal public key, and transmits the encrypted result to the terminal. have.

And a device registration step of registering device information of the smart device and receiving the secret key from the server before receiving the data request.

According to another aspect of the present invention, there is provided an apparatus for providing a secure communication method in a smart home environment.

According to an embodiment of the present invention, there is provided a server for communication between a mobile terminal and a smart device in a smart home environment, the server receiving a data request encrypted with a server public key from a mobile terminal, An authentication unit for authenticating the mobile terminal using terminal information included in the data request and previously registered terminal information; And transmitting the decrypted data request to the smart device by encrypting the decrypted data request with the second server secret key if the authentication result of the authentication unit is successful and transmitting the data encrypted with the second server secret key in response to the data request from the smart device Decrypting the encrypted data with the second server secret key, and encrypting the decrypted data with the terminal public key, and transmitting the decrypted data to the mobile terminal.

The encrypted data request may further include at least one of a data request message, a random number value, and a mobile terminal signature value.

Wherein the data encrypted with the terminal public key further includes a result obtained by hashing data corresponding to the data request with the random number value, wherein the mobile terminal uses the terminal secret key corresponding to the terminal public key to encrypt the encrypted data After the decryption, the integrity of the data can be verified by comparing the decrypted data with the random number value and comparing the resultant value obtained by hashing and the resultant value included in the encrypted data.

The terminal registration information may be registered from the mobile terminal, the server public key may be transmitted to the mobile terminal, and the terminal registration procedure for receiving the terminal public key from the mobile terminal may be performed.

The method and apparatus for communicating in a smart home environment according to an embodiment of the present invention are advantageous in that smart devices in a smart home are authenticated and data can be securely transmitted by blocking external access.

Accordingly, the present invention can block data forgery and corruption in advance, and can verify the integrity of transmitted data using a hash result based on a random number.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 schematically illustrates the structure of a smart home system according to an embodiment of the present invention; FIG.
2 is a flowchart illustrating a process of registering a mobile terminal with a server in a smart home system according to an exemplary embodiment of the present invention.
3 is a flowchart illustrating a method of communicating a smart home system according to an embodiment of the present invention.
4 is a block diagram schematically illustrating an internal configuration of a server according to an embodiment of the present invention;
5 is a block diagram schematically illustrating an internal configuration of a mobile terminal according to an embodiment of the present invention;
6 is a block diagram schematically illustrating an internal configuration of a smart device according to an embodiment of the present invention;

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. In addition, numerals (e.g., first, second, etc.) used in the description of the present invention are merely an identifier for distinguishing one component from another.

Also, in this specification, when an element is referred to as being "connected" or "connected" with another element, the element may be directly connected or directly connected to the other element, It should be understood that, unless an opposite description is present, it may be connected or connected via another element in the middle.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic view illustrating a structure of a smart home system according to an embodiment of the present invention.

Referring to FIG. 1, a smart home system according to an exemplary embodiment of the present invention includes a mobile terminal 110, a server 120, and a plurality of smart devices 130.

The mobile terminal 110 is a subject for accessing the smart home system from outside to request data.

The mobile terminal 110 may be, for example, a portable terminal such as a mobile communication terminal or a notebook computer.

The mobile terminal 110 may precede the registration process of registering the terminal information with the server 120 in charge of the home communication in advance and then exchanging the respective public keys with the server 120 in order to access the smart home system .

In addition, the mobile terminal 110 may request communication with the server 120 for communication with the smart device 130 existing in the home. At this time, the mobile terminal 110 and the server 120 can perform data communication using the shared public key.

The server 120 is a server located in a smart home and communicates with the mobile terminal 110 by a non-overlapping key. In the smart home, the server 120 communicates with the smart device 130 using a symmetric key, And provides communication between the mobile terminal 110 and the smart device 130. This will be more clearly understood from the following with reference to FIG.

The smart device 130 is a device that communicates with the server 120 using a symmetric key in various devices existing in a smart home.

The type of the smart device 130 may be various devices existing in a smart home such as a refrigerator, a TV, a home phone, a light, an audio, and the like.

Although not described in detail herein, the smart device 130 may perform a process of registering a smart device in the first server 120 for communication in the smart home system. At this time, the smart device registers device information of the smart device in the server 120 and can receive a secret key (symmetric key) from the server 120. [

The smart device 130 according to an exemplary embodiment of the present invention encrypts and transmits data with the secret key provided from the server 120 in the data communication in the smart home system so that access to the unauthorized device not registered in advance is blocked There is an advantage to be able to.

2 is a flowchart illustrating a process of registering a mobile terminal with a server in a smart home system according to an embodiment of the present invention.

In step 210, the server 120 registers terminal information of the mobile terminal from the user. Here, the terminal information of the mobile terminal may be at least one of a serial number and identification information (e.g., a telephone number) of the mobile terminal.

That is, the server 120 can register terminal information of the mobile terminal using a device other than the mobile terminal 110.

For example, the mobile terminal 110 accesses the server 120 using a pre-registered user account (e.g., an ID and a password) and transmits the terminal information of the mobile terminal 110 to the server 120 May be registered.

In step 215, the mobile terminal 110 sends a connection request to the server 120. At this time, the connection request includes terminal information of the mobile terminal 110.

)를 모바일 단말(110)로 전송한다. 이하에서는 서버의 공개키를 서버 공개키로 통칭하기로 한다.In step 220, when the server 120 confirms the terminal information included in the connection request of the mobile terminal 110 and is a pre-registered terminal, the public key of the server 120

To the mobile terminal 110. Hereinafter, the public key of the server will be collectively referred to as a server public key.

)를 서버(120)로 전송한다.In operation 220, when the mobile terminal 110 receives the public key from the server 120, the mobile terminal 110 transmits its public key (i.e., the public key of the mobile terminal 110

To the server 120.

As described above, the mobile terminal 110 and the server 120 exchange their public keys in the registration process of the mobile terminal in order to perform communication based on the asymmetric keys, The message can be encrypted to perform communication. This will be more clearly understood from the description of FIG.

Although only the registration process of the mobile terminal 110 is described in FIG. 2, the registration process of the smart device 130 may be very similar to the registration process of the mobile terminal 110. FIG. In the case of the smart home system according to the embodiment of the present invention, since the home communication is performed based on the symmetric key, the smart device 130 only receives the secret key from the server 120, There may be a difference in that there is no process of transmitting the secret key of the server 130 to the server 120. The registration process of the other remaining smart devices 130 is substantially the same as the registration process of the mobile terminal 110, and thus a duplicated description will be omitted.

3 is a flowchart illustrating a communication method of a smart home system according to an embodiment of the present invention.

In step 310, the mobile terminal 110 transmits the data request to the server 120 by encrypting the data request using the server public key received from the server 120 in the terminal registration process in advance. Here, the data request is a data request to the smart device located in the home in the smart home environment, and the mobile terminal 110 can communicate with the smart device through the server 120 without directly communicating with the smart device.

)중 적어도 하나를 단말 등록 과정에서 서버(120)로부터 수신받은 서버 공개키(

)를 이용하여 암호화한 후 암호화된 데이터 요청을 서버(120)로 전송할 수 있다.For example, the mobile terminal 110 may include a data request message, terminal information, a random number value, and a mobile terminal signature for authenticating that the data request message is from the mobile terminal for requesting data to the smart device located in- value(

) From the server 120 in the terminal registration process (step < RTI ID = 0.0 >

And then transmit the encrypted data request to the server 120. [0033] FIG.

Accordingly, in step 315, the server 120 transmits the encrypted data request received from the mobile terminal 110 to a secret key corresponding to the public key of the server 120 (i.e., the server 120) And performs authentication on the mobile terminal after decryption.

For example, the server 120 decrypts the data request encrypted with the first server secret key of the server 120, and confirms whether the terminal information included in the decrypted data request matches the previously registered terminal information to authenticate the mobile terminal .

In step 320, the server 120 determines whether authentication is successful as a result of the authentication.

If authentication has failed as a result of performing the authentication, the server 120 can release communication with the mobile terminal at step 325. At this time, the server 120 may transmit a guidance message according to the authentication failure to the mobile terminal 110.

)로 복호된 데이터 요청을 암호화하여 스마트 디바이스(130)로 전송한다.If authentication is successful as a result of the authentication, in step 330, the server 120 transmits the secret key

) And transmits the decrypted data request to the smart device 130.

At this time, the data request encrypted with the secret key may include a data request message and a random number value.

In this specification, a separate registration process for the smart device is not described in detail, but it is possible to precede the server 120 and the initial registration process with the smart device as in the terminal registration process. At this time, the smart device 130 may receive the secret key from the server 120 after transmitting the device information to the server 120.

In step 335, the smart device 130 decrypts the encrypted data request with the secret key provided from the server 120 in advance, and then confirms the data request of the mobile terminal 110.

In step 340, the smart device 130 concatenates the data corresponding to the data request of the mobile terminal 110 with the random number value, encrypts the hash value and the data with the secret key, and transmits the resultant value to the server 120.

)을 더 포함할 수 있다.In operation 345, the server 120 decrypts the encrypted data received from the smart device, encrypts the data and the result of hashing the encrypted data with the terminal public key, and transmits the encrypted result to the mobile terminal 110. Here, the encrypted data also includes a server signature value ("

). ≪ / RTI >

In operation 350, the mobile terminal 110 decrypts the encrypted data using the secret key corresponding to the public key of the mobile terminal 110 (hereinafter, referred to as a terminal secret key) The integrity of the transmitted data is verified by comparing the hash result and the result contained in the decoded data.

If the integrity verification result does not match, the mobile terminal 110 may determine the data as unreliable data and discard it.

4 is a block diagram schematically illustrating an internal configuration of a server according to an embodiment of the present invention.

4, the server 120 includes a communication unit 410, an authentication unit 415, a data transfer unit 420, a memory 425, and a processor 430.

The communication unit 410 is a means for transmitting and receiving data with another device (e.g., the mobile terminal 110, the smart device 130).

The authentication unit 415 receives the encrypted data request from the mobile terminal using the server public key, decrypts the decrypted data with the first server secret key of the server, decrypts the decrypted data using the terminal information included in the decrypted data request, And is means for authenticating the terminal.

The data transmission unit 420 transmits data using the asymmetric key exchanged with the mobile terminal 110 and transmits data using the symmetric key (secret key) to the smart device 130 located in the home .

For example, if the authentication result of the authentication unit is successful, the data transfer unit 420 encrypts the decrypted data request with the secret key and transmits the decrypted data request to the smart device, and receives data encrypted with the secret key in response to the data request from the smart device Decrypts the encrypted data with the secret key, encrypts the decrypted data with the terminal public key, and transmits the decrypted data to the mobile terminal.

The detailed operation of the data transfer unit 420 is the same as that described with reference to FIG. 3, so that a duplicate description will be omitted.

The memory 425 is a means for storing various algorithms, applications, and various data derived in this process required for data communication between the mobile terminal 110 and the smart device 130 in the smart home system.

The processor 430 may be coupled to the internal components of the server 120 (e.g., the communication unit 410, the authentication unit 415, the data transfer unit 420, the memory 425, etc.) ).

5 is a block diagram schematically illustrating an internal configuration of a mobile terminal according to an embodiment of the present invention.

5, a mobile terminal 110 according to an exemplary embodiment of the present invention includes a communication unit 510, an encryption unit 515, a decryption unit 520, an integrity verification unit 525, a memory 530, (535).

The communication unit 510 is a means for transmitting and receiving data to and from another device (for example, the server 120) through a communication network.

The encryption unit 515 encrypts the data request including at least one of the data request message, the mobile terminal's terminal information, the random number value, and the mobile terminal signature value with the server public key for data request to the smart device to be. The encrypted data request may be transmitted to the server 120 via the communication unit 510 under the control of the processor 535. [

The decryption unit 520 is means for decrypting the data encrypted with the terminal public key received from the server 120. [ For example, the decryption unit 520 can decrypt the data encrypted with the terminal secret key corresponding to the terminal public key.

The integrity verification unit 525 verifies the integrity of the data by judging whether the result of decoding the decrypted data by concatenating the decrypted data with the random number value transmitted to the server 120 by itself and the result value included in the decrypted data .

The memory 530 is a means for storing various algorithms, applications, and various data derived in this process required for performing data communication based on the server 120 and the asymmetric key in the smart home.

The processor 535 is coupled to the internal components (e.g., the communication unit 510, the encryption unit 515, the decryption unit 520, and the integrity verification unit 525) of the mobile terminal 110 according to an embodiment of the present invention. ), The memory 530, and the like).

6 is a block diagram schematically illustrating an internal configuration of a smart device according to an embodiment of the present invention.

6, a smart device 130 according to an exemplary embodiment of the present invention includes a communication unit 610, an encryption unit 615, a decryption unit 620, a memory 625, and a controller 630, do.

The communication unit 610 is a means for transmitting and receiving data with other devices (e.g., the server 120).

The encryption unit 615 is means for encrypting data by using the secret key previously provided from the server 120. [

At this time, the encryption unit 615 may concatenate the random number value and the data provided through the mobile terminal 110, and may encrypt the result value obtained by hashing the data together with the data to be used for data integrity verification.

The decryption unit 620 is a means for decrypting the encrypted data request received from the server 120 using the second server secret key previously provided from the server 120. [

The memory 625 is a means for storing various algorithms, applications, and various data derived in this process required for performing data communication based on the server 120 and the symmetric key in the smart home.

The controller 630 controls the internal components (e.g., the communication unit 610, the encryption unit 615, the decryption unit 620, the memory 625, etc.) of the smart device according to an embodiment of the present invention .

The dynamic power management method in the mobile device according to the present invention can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all kinds of recording media storing data that can be decoded by a computer system. For example, it may be a ROM (Read Only Memory), a RAM (Random Access Memory), a magnetic tape, a magnetic disk, a flash memory, an optical data storage device, or the like. In addition, the computer-readable recording medium may be distributed and executed in a computer system connected to a computer network, and may be stored and executed as a code readable in a distributed manner.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the following claims And changes may be made without departing from the spirit and scope of the invention.

110: mobile terminal
120: Server
130: Smart Device

Claims (13)

A method of data communication in a server,
(a) receiving terminal information from a mobile terminal, transmitting the server public key to the mobile terminal, and receiving a terminal public key from the mobile terminal;
(b) receiving an encrypted data request from a mobile terminal with a server public key;
(c) decrypting the encrypted data request with a first server secret key corresponding to a server public key of the server, encrypting the data request with a second server secret key, and transmitting the encrypted data request to the smart device; And
(d) receiving data encrypted with the second server secret key in response to the data request from the smart device, decrypting the encrypted data with the second server secret key, encrypting the encrypted data with the terminal public key, The method comprising the steps of:
The method according to claim 1,
Wherein the encrypted data request comprises at least one of a data request message, terminal information of the mobile terminal, a random number value, and a mobile terminal signature value.
3. The method of claim 2,
The step (c)
Extracting the terminal information from the decrypted data request, checking whether the registered terminal information matches with the registered terminal information, and authenticating the mobile terminal and performing authentication if the authentication is successful.
3. The method of claim 2,
The data encrypted with the terminal public key in step (d) further includes a hash value obtained by concatenating data corresponding to the data request and the random number,
After the step (d)
The mobile terminal decrypts the encrypted data with the terminal public key, and then compares the decrypted data with the random number value to compare the resultant value with the resultant value included in the encrypted data to verify the integrity of the data The data communication method comprising:
delete delete delete delete delete A server for communication between a mobile terminal and a smart device in a smart home environment,
Receiving a data request encrypted with a server public key from a mobile terminal, decrypting the decrypted data with a first server secret key corresponding to a server public key of the server, An authentication unit for authenticating the terminal; And
Encrypts the decrypted data request with a second server secret key and transmits the decrypted data request to the smart device if the authentication result of the authentication unit is successful, and receives data encrypted with the second server secret key in response to the data request from the smart device And decrypting the encrypted data with the second server secret key, and encrypting the decrypted data with the terminal public key, and transmitting the decrypted data to the mobile terminal.
11. The method of claim 10,
Wherein the encrypted data request further comprises at least one of a data request message, a random number value and a mobile terminal signature value.
12. The method of claim 11,
Wherein the data encrypted by the terminal public key further includes a hash value obtained by concatenating data corresponding to the data request and the random number,
The mobile terminal decrypts the encrypted data with the terminal secret key, and then compares the decrypted data with the random number to compare the resultant value with the resultant value included in the encrypted data, thereby verifying the integrity of the data Lt; / RTI >
11. The method of claim 10,
A server registration step of registering terminal information from the mobile terminal, transmitting the server public key to the mobile terminal, and receiving a terminal public key from the mobile terminal.

Images