KR102654312B1 - system and server for Managing Electronic Keys - Google Patents

Abstract

The present invention relates to an electronic key management system and server. The electronic key management system according to an embodiment of the present invention includes an electronic key for locking and unlocking an electronic lock; An electronic key storage device including a plurality of key holes and a key holder fastened with an electronic key carried into the key hole, and controlling the key holder according to preset electronic key access rights; Set access rights to the electronic locking device of the electronic key, transmit a one-time authentication ID to the electronic key that is inserted into the electronic locking device and electrically connected, and log information of the electronic key to the electronic locking device. Management server that receives data in real time; and a user terminal that transmits and receives the log information and the one-time authentication ID between the electronic key and the management server and displays real-time log information.

Description

Electronic key management system and server {system and server for Managing Electronic Keys}

The present invention relates to electronic key management systems and servers.

Locking devices installed for security purposes on doors, lockers, facilities, etc. can be roughly divided into mechanical locks and electronic locks. In the case of mechanical locks that use keys to open and close doors, lockers, etc., the keys cannot be operated or stored. In addition to security issues, there is the problem of having to replace the lock if the key is lost.

Considering this, electronic locking devices that open and close the door using a password, the user's fingerprint and voice, or an electronic key are frequently used. There is no need to worry about losing keys, general users can easily open and close doors and lockers through simple authentication, and the security is also excellent, so the market is growing rapidly in recent years.

Therefore, when multiple electronic locks are installed in multiple locations, an electronic key management system is required to store multiple electronic keys, prevent loss, and manage the electronic keys efficiently.

The technical problem to be solved by the present invention is to provide an electronic key management system and server that can manage electronic keys efficiently and stably.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the description below.

An electronic key management system according to an embodiment of the present invention for solving the above technical problem includes an electronic key for locking and unlocking an electronic lock; An electronic key storage device including a plurality of key holes and a key holder fastened with an electronic key carried into the key hole, and controlling the key holder according to preset electronic key access rights; Set access rights to the electronic locking device of the electronic key, transmit a one-time authentication ID to the electronic key that is inserted into the electronic locking device and electrically connected, and log information of the electronic key to the electronic locking device. Management server that receives data in real time; and a user terminal that transmits and receives the log information and the one-time authentication ID between the electronic key and the management server and displays real-time log information.

In one embodiment, the management server transmits one-time authentication data corresponding to the one-time authentication ID to the electronic lock through the electronic key.

In one embodiment, the management server stores at least one of location information of a plurality of electronic locking devices and current state information of the electronic locking devices, and displays the information through a display unit.

In one embodiment, the management server displays the location of the electronic lock into which an electronic key without unlocking authority is inserted differently from that of other electronic locks on a display unit displaying the positions of a plurality of electronic locks.

In one embodiment, when the management server receives administrator approval, the management server provides an electronic lock device with an electronic key without unlocking authority displayed differently from other electronic lock devices on the display unit, and a one-time authentication corresponding to the disposable authentication data on the electronic key input. It is characterized by transmitting each ID.

In one embodiment, the electronic key is characterized in that it deletes the one-time authentication ID after receiving the one-time authentication ID and unlocking the electronic lock.

In one embodiment, when an unlocking attempt by an electronic key without unlocking authority is confirmed from the electronic lock, the management server transmits a message notifying the unlocking attempt without unlocking authority to the user terminal of a user with pre-registered unlocking authority. It is characterized by:

The electronic key management server according to an embodiment of the present invention includes a communication unit that transmits and receives electronic keys and information; a storage unit that stores log information transmitted from the electronic key; and a control unit that sets access rights to the electronic lock of the electronic key and sets one-time authentication authority to the electronic key that is inserted into the electronic lock and is electrically connected, wherein the control unit sets the one-time unlock authority according to the one-time unlock authority setting. It is characterized by controlling the transmission of the generated one-time authentication ID to the electronic key.

In one embodiment, the storage unit stores the positions of a plurality of electronic locks, and further includes a display unit that displays at least one of the current state information of the electronic lock device received through the communication unit and the location of the electronic lock device. It is characterized by

In one embodiment, the control unit sets authentication authority for the electronic key, and the authentication authority includes one or more of the date, time, and day of the week on which authentication can be performed.

In one embodiment, the control unit transmits one-time authentication data corresponding to the one-time authentication ID to the electronic lock through the electronic key.

The effects according to the present invention are as follows.

Using the electronic key management system proposed in the present invention, it is possible to easily manage electronic keys, such as checking usage history and setting authentication authority. This can improve user convenience and security.

Additionally, if you need to store multiple keys, you can systematically manage the electronic keys using an electronic key storage device, and in the process, you can easily charge the electronic keys or collect usage details (log information).

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below.

1 is a block diagram schematically showing the configuration of an electronic key management system used in an embodiment of the present invention.
Figure 2 is a diagram schematically showing the configuration of an electronic locking device used in an embodiment of the present invention.
Figure 3 is a block diagram schematically showing the configuration of an electronic key according to an embodiment of the present invention.
Figure 4 is a block diagram showing the configuration of a user terminal according to an embodiment of the present invention.
Figure 5 is a block diagram showing the configuration of a management server according to an embodiment of the present invention.
Figure 6 is a block diagram schematically showing the configuration of an electronic key management system according to another embodiment of the present invention.
Figure 7 is an example of a screen displayed by the management server according to an embodiment of the present invention.
Figure 8 is an example of a screen displayed on a user terminal according to an embodiment of the present invention.

Since the present invention can make various changes and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. While describing each drawing, similar reference numerals are used for similar components.

Terms such as first, second, A, and B may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, a first component may be named a second component, and similarly, the second component may also be named a first component without departing from the scope of the present invention. The term and/or includes any of a plurality of related stated items or a combination of a plurality of related stated items.

When a component is said to be "connected" or "connected" to another component, it is understood that it may be directly connected to or connected to the other component, but that other components may exist in between. It should be. On the other hand, when it is mentioned that a component is “directly connected” or “directly connected” to another component, it should be understood that there are no other components in between.

The terms used in this application are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, terms such as “comprise” or “have” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification, but are not intended to indicate the presence of one or more other features. It should be understood that this does not exclude in advance the possibility of the existence or addition of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by a person of ordinary skill in the technical field to which the present invention pertains. Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and unless explicitly defined in the present application, should not be interpreted in an ideal or excessively formal sense. No.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the attached drawings.

1 is a block diagram schematically showing the configuration of an electronic key management system used in an embodiment of the present invention.

The electronic key management system may include a key 200, a user terminal 400, and a management server 500.

The electronic key 200 refers to a key that locks or unlocks the electronic lock 100. The electronic key 200 collects usage history and transmits it to the authorized user terminal 400 and management server 500.

Here, the electronic lock 100 is any one of a pad lock, Europrofile Double, Rim Lock, Drawer Lock, and Cam Lock. It could be one.

The user terminal 400 provides an electronic key management service by connecting to the electronic key 200 and the management server 500 through a communication network.

The user terminal 400 is installed with an application for providing an electronic key management service, and the user can use the electronic key management service through the installed application. Here, the electronic key management service refers to various services that can improve convenience and security in using the electronic key 200, and includes, for example, log information (usage history) and permission settings. Here, the log information may be information about the time when the electronic key 200 was inserted into the electronic lock 100 and electrically connected, and authentication success/failure. Permission setting is to set one or more of the date, time, and day on which the electronic key 200 can perform authentication with the electronic lock 100. Accordingly, the electronic key 200 can be activated only when permission is set. As will be described later, permission setting is possible through the user terminal 400 and/or the management server 500.

The user terminal 400 for this purpose is, for example, a smartphone, PDA, tablet PC, notebook computer, laptop computer, personal computer, or other electronic device or similar device that can perform communication, receive user input, and output a screen. It can be implemented as:

The management server 500 receives and stores electronic key-related information from one or more user terminals 400 and/or electronic keys connected through a communication network, and provides various electronic key management services. In particular, the management server 500 can search, edit, and delete stored information at the request of the user terminal 400, and grant one-time unlocking authority to the electronic key.

The management server 500 may be implemented as, for example, a workstation, server, general-purpose computer, other electronic device capable of performing communication, or a similar device.

Communication networks include, for example, LTE (Long Term Evolution), LTE-A (LTE-Advanced), WI-FI, LAN (Local Area Network), WAN (Wide Area Network), CDMA (Code Division Multiple Access), and TDMA (Time Division Multiple Access), WiBro (Wireless Broadband), GSM (Global System for Mobile Communications), etc. It can be implemented using at least some of the communication methods developed in the past, present, or that will be available in the future. Hereinafter, for convenience, the communication network will not be mentioned and will be described as if each component communicates directly. Additionally, each component may use a different communication network. For example, the electronic key 200 and the user terminal 400 may use the WI-FI communication method, and the user terminal 400 and the server may use the LTE (Long Term Evolution) communication method.

Figure 2 is a diagram schematically showing the configuration of an electronic locking device used in an embodiment of the present invention.

The electronic lock 100 includes a transmission/reception unit 112, an authentication unit 114, a command unit 116, and a storage unit 118.

When the electronic key 200 is inserted into the electronic lock 100 and makes electrical contact, the transceiver 112 receives UID (Unique ID) data pre-stored in the electronic key 200 or a disposable authentication ID (e.g. For example, the ID of an electronic lock can be received.

The authentication unit 114 performs authentication based on the UID data or one-time authentication ID. When both one-time authentication data and UID data are searched, the authentication unit 114 performs authentication using the one-time authentication data. Here, the UID data is data for commercial authentication, while the one-time authentication data is data for one-time authentication granted from the management server 500 according to the administrator's approval.

In one embodiment, the authentication unit 114 compares the UID data pre-stored in the electronic key 200 with authentication data pre-stored in the electronic lock 100 (for example, the UID of the electronic key) , authentication can be performed on the UID data based on the comparison result.

That is, when the authentication unit 114 determines that the UID data received from the electronic key 200 and the authentication data are the same, it performs an approval process (authentication success) on the UID data, and the UID data and If it is determined that the authentication data is not the same, approval for the UID data may not be processed (authentication failure).

In another modification, the authentication unit 114 performs primary authentication according to whether or not the first authentication data previously stored in the electronic key 200 matches, and the authentication unit 114 inputs by a button provided on the electronic key 200. By further receiving the password data and determining whether it matches pre-stored second authentication data, double authentication can be performed on the password data.

The authentication unit 114 can store and manage all log information related to authentication of the UID data and one-time authentication data.

Here, the log information includes, for example, log information about whether the electronic key 200 is authenticated, log information about the opening and closing time of the electronic lock 100 by the authenticated electronic key 200, and the master It may include log information about registration or change of the electronic key 200 and log information about registration or change of a blacklist depending on whether the electronic key 200 is lost.

Here, when the electronic key 200 is lost, the management server 500, which has received the loss information of the electronic key 200 from the user terminal, determines the UID for the lost electronic key 200. Data can be registered or changed by matching it with the lost information and storing it.

Specifically, when the user loses the electronic key 200, the user inputs the loss information of the electronic key 200 through the user terminal 400 and transmits it to the management server 500, and the management server ( 500) can register or change the blacklist by matching and storing the lost information with UID data related to the electronic key 200. Here, the user terminal 400 corresponds to the mobile communication terminal, and the loss information may include UID data of the electronic key 200 and data regarding whether it is lost.

When an attempt is made to unlock the electronic lock 100 with the electronic key 200, the authentication unit 114 retrieves the blacklist generated from the management server 500 from the electronic key 200. Upon reception, it is determined whether the electronic key 200 is registered in the blacklist, and if registered in the blacklist, the locked state of the electronic lock 100 can be maintained. At this time, the authentication unit 114 may send a notification message to the management server 500 that an attempt has been made to unlock the electronic lock 100 using the electronic key 200.

Meanwhile, when the user acquires the lost electronic key 200, the user terminal 400 may transmit acquisition information of the lost electronic key 200 to the management server 500. Accordingly, the management server 500 can change (delete) the blacklist corresponding to the acquired information.

Meanwhile, before the authentication unit 114 performs the authentication, the electronic key 200 may undergo a key activation operation.

For example, the electronic key 200 sets the UID data input before the terminal provided on the key head of the electronic key 200 makes electrical contact with the data communication unit of the electronic lock 100. While connected to a user terminal 400 equipped with an application for wireless communication, the password generated by the application can be received from the user terminal 400 through wireless communication.

At this time, when a key value is input by a button provided on the electronic key 200, the electronic key 200 determines whether the input key value matches the password, and can be activated when it is determined that it matches. there is.

That is, if the key value entered by the user through the button is the same as the password received from the user terminal 400, the electronic key 200 may have a function to perform the authentication thereafter. .

Alternatively, the electronic key 200 has a default value for key activation inside before the terminal provided on the key head of the electronic key 200 is electrically contacted with the data communication unit of the electronic lock 100. This can be preset.

At this time, when a key value is input by a button provided on the electronic key 200, the electronic key 200 determines whether the input key value matches the default value and is activated when it is determined that it matches. You can.

That is, the electronic key 200 may have a function that allows the authentication to be performed from that point on if the key value entered by the user through the button is the same as the default value.

In one embodiment of the present invention, the authentication unit 114 is described as performing the key activation operation using the electronic key 200, but the present invention is not limited to this and biometric recognition using fingerprints, blood vessels, iris, etc. The key activation operation can also be performed through .

The command unit 116 commands the electronic lock 100 to be unlocked when the dual authentication of the UID data and the password data is successfully completed.

That is, the command unit 116 may instruct the electronic lock 100 to be opened once the authentication for the UID data in the authentication unit 114 has passed. To this end, the command unit 116 may transmit a control signal regarding unlocking to the driving unit of the electronic lock 100.

On the other hand, the command unit 116 may instruct the authentication unit 114 to maintain the locked state of the electronic lock 100 when authentication of the UID data fails.

The storage unit 118 may store a list of identifiers (authentication data) of the electronic key 200 that can lock and unlock the electronic key 200 in the internal memory of the electronic lock device 100. Accordingly, according to an embodiment of the present invention, the security efficiency of the electronic lock 100 can be improved by performing authentication through authentication of the UID data.

Meanwhile, in one embodiment of the present invention, when an attempt is made to unlock the electronic lock 100 from the outside, information about who has accessed the electronic lock 100 can be transmitted to the management server 500 of the electronic lock 100. .

Figure 3 is a block diagram schematically showing the configuration of an electronic key according to an embodiment of the present invention.

Referring to FIG. 3, the electronic key 200 includes a communication unit 211, a transmission/reception unit 212, an authentication unit 214, a control unit 216, and a storage unit 218.

The communication unit 211 may include a module that transmits and receives information through a short-range communication network such as Bluetooth. The communication unit 211 is connected to the user terminal 400 and the management server 500 by wire or wirelessly and can transmit log information (L) to the user terminal 400 and/or the management server 500.

However, because the electronic key 200 has limitations in adding communication modules due to its size, when only a short-range communication module such as Bluetooth is added to the electronic key 200, it does not communicate directly with the management server 500. Instead, the user terminal 400 can be used to communicate with the management server 500.

In one embodiment, the communication unit 211 may be wirelessly connected to the user terminal 400 by performing a pairing operation with the user terminal 400 via Bluetooth.

The communication unit 211 may receive key access permissions from the user terminal 400 or the management server 500. For example, the communication unit 211 may receive and store authentication data for unlocking the electronic key, such as UID data, one-time UID data, and one-time authentication data, from the user terminal 400 or the management server 500.

Additionally, the communication unit 211 can transmit key usage history (log information) to the user terminal 400 or the management server 500 in real time.

When the electronic key 200 is inserted into the electronic lock 100 and makes electrical contact, the transceiver 216 receives UID (Unique ID) data pre-stored in the electronic lock 100, and receives the electronic key 100. The user ID or one-time authentication ID previously stored in (200) can be transmitted to the electronic lock (100). In addition, when the transceiver unit 216 stores disposable authentication data, when the electronic key 200 is inserted into the electronic lock 100 and makes electrical contact, the one-time authentication data can be transmitted with priority over other data. . The one-time authentication ID can be deleted when contact with the electronic lock 100 is lost.

The authentication unit 214 performs authentication based on the UID data or the one-time authentication ID. When both the one-time authentication data and the UID data are searched, the authentication unit 214 performs authentication using the one-time authentication data.

The control unit 216 controls the communication unit 211 and the storage unit 218 to perform electronic key authentication and management.

When the control unit 216 is inserted into the electronic lock 100 and makes electrical contact, the contact time and authentication success can be stored in the storage unit 218 to create a database of key usage history.

The control unit 216 is inputted into the electronic lock 100 and electrically contacted to perform authentication with the electronic lock 100, and receives disposable UID data directly from the management server 500 or through the user terminal 400. When received, authentication is performed with the electronic lock 100 using disposable UID data.

In one embodiment, the control unit 216 may store and manage information related to authentication of the UID data and the disposable data during authentication.

Meanwhile, before the authentication unit 214 performs the authentication, the electronic key 200 may undergo a key activation process. Since the key activation operation is the same as the operation described in FIG. 2, detailed description will be omitted.

In another embodiment of the present invention, the authentication unit 214 is described as performing the key activation operation using the electronic key 200, but the present invention is not limited to this and biometric recognition using fingerprints, blood vessels, iris, etc. The key activation operation can also be performed through .

If authentication of the UID data is successful, the control unit 216 commands the electronic lock 100 to be unlocked.

Here, the unlocking command of the control unit 216 is the same or similar to the process performed by the command unit 116 of the electronic lock 110 in one embodiment of the present invention, so in another embodiment of the present invention, it The explanation will be omitted.

Meanwhile, the electronic key 200 may further include a battery. The battery may be rechargeable. As described later with reference to FIG. 6 , the battery of the electronic key 200 can be charged using a key storage device.

As such, in another embodiment of the present invention, by performing authentication using the UID data based on wireless communication between the electronic key 200 and the user terminal 400, the electronic lock device ( 100) can be unlocked, and furthermore, the security efficiency of the electronic lock 110 can be improved. In addition, in another embodiment of the present invention, by performing authentication using disposable data based on wireless communication between the electronic key 200 and the user terminal 400, the electronic lock 100 is stored by the management server 500. You can easily control access rights.

The electronic lock 100 does not have a separate power source, and power is temporarily supplied from the connection terminal of the electronic key 200 through a connection terminal, and the electronic lock 100 is unlocked through this. At this time, the connection terminal of the electronic lock 100 and the connection terminal of the electronic key 200 not only supply power by physically contacting each other, but also exchange each other's identifiers (UID) to perform primary authentication.

Through this, a plurality of electronic locks 100 can be locked and unlocked with one electronic key 200. That is, the internal memory of the electronic lock 100 stores a list of identifiers of the electronic key 200 that can be locked and unlocked, and the internal memory of the electronic key 200 contains a list of identifiers that can be locked and unlocked by the electronic key 200. Since a list of identifiers of the electronic lock 100 is stored, primary authentication can be performed by touching each other's connection terminals.

Since owning the electronic key 200 is a form of authentication, higher security can be maintained than existing electronic locking devices such as door locks that simply input a password. In particular, since such a small electronic lock device is small in size and must be installed in many places, there is no power inside the electronic lock device 100, and the method of unlocking the device by supplying power from the electronic key 200 is very useful.

At this time, in order to further strengthen security, a secondary authentication method can be added to the electronic key 200. In Figure 2, four key pads 260 are attached to the electronic key 200, and secondary authentication can be performed through the key pads 260. For example, numbers such as 1, 2, 3, and 4 are printed on the keypad 260, and secondary authentication can be performed using a combination of these.

In order to unlock with the electronic key 200, the user first presses the power button of the electronic key 200 to turn on the electronic key 200 and then enters the preset password into the keypad 260. . If the password entered by the user is the same as the password stored in the internal memory of the electronic key 200, a sound or lamp informs the user that secondary authentication using the password was successful, and then the user electronically locks the electronic key 200. Two-factor authentication can be performed by unlocking the device 100 by touching it.

Of course, in Figure 1, the key pad 260 is shown to help understand the invention, but in addition, a fingerprint sensor can be added to the electronic key 200 and authentication using biometric information can be performed using the user's fingerprint. . In addition, various sensors can be added to the electronic key 200 and two-factor authentication can be performed using them.

However, because the electronic key 200 has limitations in computing power and the addition of sensors due to its size, a communication module such as Bluetooth can be added to the electronic key 200. Additionally, the electronic key 200 can communicate with an external device such as a smartphone and perform two-factor authentication using the external device.

For example, a smartphone authenticates a user through face recognition using a camera or voice recognition using a microphone, and only when this secondary authentication is successful, the smartphone sends information indicating that authentication has been successful using the electronic key 200. Can be sent. Next, double authentication can be performed by contacting the electronic key 200 with the electronic lock 100 to perform authentication. Two-factor authentication improves security.

Figure 4 is a block diagram showing the configuration of a user terminal according to an embodiment of the present invention.

Referring to FIG. 4, the user terminal 400 may include an input unit 410, a display unit 420, a communication unit 430, a storage unit 440, and a control unit 450.

The input unit 410 converts the user's input operation into an input signal and transmits it to the control unit 450. The input unit 410 may be implemented, for example, as a keyboard, mouse, touch sensor on a touch screen, touch pad, keypad, voice input, or other input processing devices that are currently available in the past or will be available in the future.

The display unit 420 outputs a screen under the control of the control unit 450. The display unit 420 may be implemented as, for example, a liquid crystal display (LCD), a light emitting diode (LED), an organic light emitting diode (OLED), a projector, or other display devices that are currently available in the past or will be available in the future. For example, the display unit 420 may display an interface page for providing information or a result page for providing information. Depending on the embodiment, a component that uses other methods to convey information to the user, such as voice output or vibration, instead of screen output, may be used instead of the display unit 420.

The communication unit 430 exchanges data with the management server 500 and/or the electronic key 200.

In one embodiment, the communication unit 430 transmits the one-time authentication ID received from the management server 500 to the control unit 450. Additionally, the communication unit 430 transmits data to the management server 500 under the control of the control unit 450. The communication technology used by the communication unit 430 may vary depending on the type of communication network or other circumstances. The communication unit 430 may communicate with the electronic key 200 through a first communication network and with the management server 500 through a second communication network.

The storage unit 440 stores data under the control of the control unit 450 and transmits the requested data to the control unit 450.

The control unit 450 controls the overall operation and each component of the user terminal 400.

When the user terminal 400 transmits and receives data, depending on the viewpoint, it may be expressed that the communication unit 430 transmits and receives data under the control of the control unit 450, or the control unit 450 controls the communication unit 430 to transmit and receive data. It can also be expressed that it does.

In particular, the control unit 450 may transmit a one-time authentication ID request message to the management server 500 according to the information input from the input unit 410.

Additionally, the control unit 450 may transmit the one-time authentication ID received from the management server 500 to the electronic key 200.

In this way, when the user terminal 400 transmits and receives data, depending on the viewpoint, it may be expressed that the communication unit 430 transmits and receives data under the control of the control unit 450, or the control unit 450 controls the communication unit 430 It can also be expressed as sending and receiving data.

Figure 5 is a block diagram showing the configuration of a management server according to an embodiment of the present invention.

Referring to FIG. 5, the management server 500 may include a display unit 520, a communication unit 530, a storage unit 540, and a control unit 550. In one embodiment of the present invention, the management server is disclosed as including a display unit 520, a communication unit 530, a storage unit 540, and a control unit 550, but some of these may be implemented by physically separate devices. You can. For example, the display unit 520 may be implemented as a separate monitor or an external terminal such as an administrator terminal.

The display unit 520 outputs a screen under the control of the control unit 550.

The display unit 520 may be implemented as, for example, a liquid crystal display (LCD), a light emitting diode (LED), an organic light emitting diode (OLED), a projector, or other display devices that are currently available in the past or will be available in the future. For example, the display unit 520 may display an interface page for providing information or a result page for providing information. Depending on the embodiment, a component that uses other methods to convey information to the user, such as voice output or vibration, instead of screen output, may be used instead of the display unit 520.

The display unit 520 may display the previously stored location of the electronic lock 100 on a map, as described below with reference to FIG. 7 . The display unit 520 displays the location of the electronic lock 100 on the map and the current status of the electronic lock 100 (including the charging state and connection status of the electronic key, etc.) in real time. The display unit 520 can display the location of the locking device in different colors depending on the current state. As a result, the user can check the map to intuitively determine the location and current status of the lock.

The communication unit 530 exchanges data with the user terminal 400 and/or the electronic key 200.

In one embodiment, the communication unit 530 receives log information from the electronic key 200 and/or the user terminal 400 and transmits it to the storage unit 540.

In one embodiment, the communication unit 530 may receive one-time authentication request information from the electronic key 200 and/or the user terminal 400 and transmit it to the control unit 550. The communication technology used by the communication unit 530 may vary depending on the type of communication network or other circumstances.

The storage unit 540 stores data under the control of the control unit 550 and transmits the requested data to the control unit 550.

The control unit 550 controls the overall operation and each component of the management server 500. In particular, as described later, the control unit 550 transmits a one-time authentication ID request message to the management server 500 according to the information input from the input unit (not shown), and uses the one-time authentication ID received from the management server 500 as an electronic key. It can be delivered to (200).

When the control unit 550 receives a signal from the electronic key 200 without unlocking authority that is put into electrical contact with the electronic lock 100, the control unit 550 determines the location of the corresponding electronic lock 100 in the Braille-type lock 100. is displayed on the display device. Here, the lack of unlocking authority means that the electronic key does not have a UID corresponding to the electronic lock 100. The position of the electronic lock 100 into which the electronic key 200 without unlocking authority is inserted is displayed differently from the position of the electronic lock 100 into which the electronic key 200 is not inserted. For example, the position of the electronic lock 100 where the electronic key 200 is not inserted is displayed in black. The location of the electronic lock 100 where the electronic key 200 without unlocking authority is inserted can be displayed in red. One-time authentication can be performed by selecting the electronic lock 100 displayed in red (clicking the mouse or touching the touch panel). That is, the control unit 550 generates a one-time authentication ID and one-time authentication data for the selected electronic lock 100, and uses the electronic key 200 and the electronic lock 100 through the communication unit 530. send to

Data for one-time authentication is implemented so that authentication authority disappears when the electronic lock 100 and the electronic key 200 are separated. For example, the one-time authentication ID and one-time authentication data stored in the electronic key 200 and the electronic lock 100 can be implemented to be deleted after one-time authentication.

In another embodiment, the control unit 550 may set authorization for authentication stored in the electronic key 200.

The control unit 550 sends information for setting one or more of the date, time, and day of the electronic key 200 directly or through the user terminal 400 according to the input through the input unit (not shown) to set authentication authority. It can be delivered to the electronic key 200. Accordingly, the electronic key 200 can be activated only when permission is set.

Figure 6 is a block diagram schematically showing the configuration of an electronic key management system according to another embodiment of the present invention.

The electronic key management system may include an electronic lock 100, an electronic key 200, an electronic key storage device 300, a user terminal 400, and a management server 500.

Since the electronic key 200, user terminal 400, and management server 500 are the same as those described in FIG. 1, detailed descriptions are omitted.

The electronic locking device 100 is used not only in drawers, cabinets, storage boxes, and safes, but also in CCTV or traffic signal control panel doors, telecommunication repeater enclosure doors, telecommunication base stations, entrance doors to police stations/military units/arsenals/ammunition warehouses, ARM devices, and logistics vehicles. It can be used in loading boxes, etc.

This electronic lock device 100 does not have a separate power source, but receives power temporarily from the connection terminal (not shown) of the electronic key 200 through a connection terminal (not shown), and thereby locks the electronic lock device 100. Release . At this time, the connection terminal of the electronic lock 100 and the connection terminal of the electronic key 200 not only supply power by physically contacting each other, but also perform authentication by exchanging each other's identifiers (UID; Unique ID).

Since a small electronic lock device is small in size and must be installed in many places, it is very useful to unlock the device by receiving power from the electronic key 200 without having a power source inside the electronic lock device 100.

The electronic key storage device 300 can transmit and receive information with the management server 500 through a communication network. For example, the electronic key storage device 300 may transmit the history of the electronic key inserted into the key hole, which will be described later, and/or the charging information of the fastened electronic key to the management server 500 in real time. Additionally, the electronic key storage device 300 can receive access authority information for the electronic lock for each electronic key or download firmware update information for the electronic key storage device. The electronic key storage device 300 may notify the management server 500 when a unlocking attempt by an electronic key without unlocking authority is confirmed. When the management server 500 confirms a unlocking attempt by an electronic key without unlocking authority, it transmits a message notifying the unlocking attempt without unlocking authority to a pre-registered terminal. At this time, the pre-registered terminal may be an administrator or an external terminal registered by the administrator.

The electronic key storage device 300 includes a plurality of key holes and a key holder engaged with the electronic key 200 carried into the key hole.

The electronic key storage device 300 can store the electronic key 200 by inserting the electronic key 200 into each hole. For example, 25 key holes 330 may be provided, but the number is not limited to this. When a key is brought into the key hole 300, the electronic key 200 may be charged.

The electronic key storage device 300 also controls the fastening and unlocking of the key holder for the electronic key 200 according to preset electronic key access rights (accessible electronic key/accessible time). Additionally, the electronic key storage device 300 charges the fastened electronic key 200.

In another embodiment, the electronic key storage device 300 may receive and store log information from the entered electronic key 200.

The electronic key storage device 300 receives a password when unlocking and withdrawing the electronic key 200 fastened by the user, and only responds when the entered password matches the stored password with the corresponding electronic key 200. The electronic key 200 can be unlocked.

Additionally, the electronic key storage device 300 can change the color of the status display unit provided around the key holder depending on whether the user has access authority through password authentication. For example, the status display unit 340 around the key hole 330 matching a key that can be used by the user is displayed in blue, and the status display unit 340 around the key hole 330 matching a key that cannot be used by the user is displayed in blue. may be displayed in red. This allows the user to easily identify keys that can be used and key holes to be returned.

Additionally, when a pre-stored password is input, the electronic key storage device 300 may output information about the location of the key hole where the electronic key 200 matching the input password is fastened. For example, an LED provided at the location of the key hole can be turned on.

The electronic key storage device 300 can further display the charging status through the status display unit. For example, when the electronic key 200 is charging, when charging is completed, when data is being read/written, etc., the user can be informed of the status using colors.

Figure 7 is an example of a screen displayed by the management server according to an embodiment of the present invention.

Referring to Figure 7, the management server displays the locations of a plurality of electronic locks on a map.

Each electronic lock is displayed to reflect its current status in real time. Each electronic lock displays whether or not the electronic key is inserted and electrically connected. This status indication can be displayed differently in color and/or image. For example, a state in which the electronic key is connected may be displayed in red, and a state in which the electronic key is not connected may be displayed in blue.

Additionally, the management server can further display statistical information according to the status of the electronic lock previously stored in a separate area. For example, the number of electronic locks in the locked state, electronic locks in the unlocked state, electronic locks with an electronic key connected, and electronic locks with a blacklisted electronic key connected can be displayed.

Figure 8 is an example of a screen displayed on a user terminal according to an embodiment of the present invention.

Referring to FIG. 8, the user terminal may include a connection information display unit 810 with the server, a discovering button 820, a pairing button 830, a signal quality display unit 840, and a key list 850 on the display screen. You can.

The connection information display unit 820 is a screen that displays the status of connection to the management server. Each time the screen is clicked, connection to and disconnection from the server are selected and displayed. When the connection status with the server changes, the status change is displayed in color, etc. For example, if the connection is successful, the button can be displayed in blue.

The discovering button 820 is a button that selects to search for an electronic key in the communication range that is not initially connected to the user terminal and the electronic key. When the discovering button 820 is selected, a list of electronic keys in the communication range is displayed in the key list 850.

The pairing display unit 830 is a button that instructs pairing of the electronic key with an electronic key selected from among the electronic keys displayed in the key list 850.

The signal quality display unit 840 can display the quality of the paired signal.

The key list 850 can display the ID of the electronic key according to the conditions selected according to the discovering button 820 and the pairing button 830.

According to this electronic key storage device, attempts to export the electronic key other than the export date and time of the entered electronic key can be prevented.

In addition, electronic keys can be systematically managed using an electronic key management system, and in the process, charging of electronic keys or collection of usage details can be easily performed. Additionally, the authentication authority of the electronic key can be easily set and changed. In addition, electronic key management can be easily performed through the UI of the user terminal.

Although embodiments of the present invention have been described above with reference to the attached drawings, those skilled in the art will understand that the present invention can be implemented in other specific forms without changing its technical idea or essential features. You will be able to understand it. Therefore, the embodiments described above should be understood in all respects as illustrative and not restrictive.

100: Electronic lock
200: electronic key
300: Key storage device
400: User terminal
500: Management server

Claims (11)

Electronic keys to lock and unlock electronic locks;
An electronic key storage device including a plurality of key holes and a key holder fastened with an electronic key carried into the key hole, and controlling the key holder according to preset electronic key access rights;
Set access rights to the electronic locking device of the electronic key, transmit a one-time authentication ID to the electronic key that is inserted into the electronic locking device and electrically connected, and log information of the electronic key to the electronic locking device. Management server that receives data in real time; and
A user terminal that transmits and receives the log information and one-time authentication ID between the electronic key and the management server and displays real-time log information
Including,
The management server transmits one-time authentication data corresponding to the one-time authentication ID to the electronic lock through the electronic key,
The electronic key is
Characterized by supplying power to the electronic locking device through a connection terminal and transmitting pre-stored UID data or the one-time authentication data to the electronic locking device,
The electronic locking device,
Characterized in that authentication is performed based on the UID data or the one-time authentication data based on the power supplied from the electronic key,
When both the UID data and the one-time authentication data are searched, the electronic key management system is set to perform authentication using the one-time authentication data.
delete According to paragraph 1,
The management server is an electronic key management system characterized in that it stores one or more of the location information of a plurality of electronic lock devices and the current status information of the electronic lock device, and displays it through a display unit.
According to paragraph 3,
The management server is an electronic key management system, characterized in that the position of the electronic lock device into which the electronic key without unlocking authority is inserted is displayed differently from that of other electronic lock devices on the display unit where the positions of the plurality of electronic lock devices are displayed.
According to clause 4,
Upon receiving administrator approval, the management server transmits one-time authentication data and a corresponding one-time authentication ID to the electronic lock device and the inserted electronic key, which are displayed differently from other electronic lock devices on the display, and to which an electronic key without unlocking authority is inserted. An electronic key management system characterized in that.
According to paragraph 1,
The electronic key management system is characterized in that the electronic key receives the one-time authentication ID and deletes the one-time authentication ID after unlocking the electronic lock.
According to paragraph 1,
When an unlocking attempt by an electronic key without unlocking authority is confirmed from the electronic lock, the management server transmits a message notifying the unlocking attempt without unlocking authority to at least one of a pre-registered administrator or a pre-registered external terminal. An electronic key management system characterized in that.
A communication unit that transmits and receives electronic keys and information;
a storage unit that stores log information transmitted from the electronic key; and
a control unit that sets access rights for the electronic key to the electronic locking device and sets one-time authentication rights to the electronic key that is inserted into and electrically connected to the electronic locking device;
Including,
The control unit controls the communication unit to transmit a one-time authentication ID generated according to the one-time unlock authority setting to the electronic key,
The control unit transmits one-time authentication data corresponding to the one-time authentication ID to the electronic lock through the electronic key,
The electronic key is
Characterized by supplying power to the electronic lock device through a connection terminal and transmitting pre-stored UID data or the one-time authentication data to the electronic lock device,
The electronic locking device,
Characterized in that authentication is performed based on the UID data or the one-time authentication data based on the power supplied from the electronic key,
When both the UID data and the one-time authentication data are searched, the electronic key management server is set to perform authentication using the one-time authentication data.
According to clause 8,
The storage unit stores the positions of a plurality of electronic locks,
A display unit that displays at least one of the current status information of the electronic lock device received through the communication unit and the location of the electronic lock device.
An electronic key management server further comprising:
According to clause 8,
The control unit sets authentication authority for the electronic key,
The electronic key management server characterized in that the authentication authority includes one or more of the date, time, and day of the week on which authentication can be performed.
delete