KR102883873B1 - Multi-factor authentication hub device for access control and multi-factor authentication relay system including the same - Google Patents

Abstract

The present invention relates to a hub device for processing multiple authentication for access control and a relay system for processing multiple authentication including the same. The problem to be solved is to provide an interface that can be connected to various input/output devices, perform authentication through a user's mobile device, and manage access records in conjunction with an access control server, thereby enhancing the security of access control and reducing installation and operating costs.
For example, a relay system for relaying between a mobile device and the access control system for access control and authentication, which is additionally connected to an access control system including an authentication information reader, an entry/exit status detection sensor, and an entry/exit control device, is disclosed, wherein the relay system receives user authentication information input from a mobile device, generates a control signal for the access control device based on an entry/exit status signal collected from the entry/exit status detection sensor to control the opening and closing of an access door, compares the user authentication information with pre-stored registered authentication information to determine whether authentication has been performed, and transmits and receives data with an access control server for authentication confirmation and entry/exit recording; and a relay system for multi-authentication processing for access control is disclosed, which includes an application installed in a mobile device and, while communicating with the relay hub device by wire, performs entry/exit requests, authentication processing assistance, and entry/exit record confirmation.

Description

{MULTI-FACTOR AUTHENTICATION HUB DEVICE FOR ACCESS CONTROL AND MULTI-FACTOR AUTHENTICATION RELAY SYSTEM INCLUDING THE SAME}

An embodiment of the present invention relates to a hub device for multi-authentication processing for access control, which is connected to a mobile device and can control access by interlocking with various authentication readers, access status detection sensors, and access control devices, and a relay system for multi-authentication processing including the hub device.

Most existing access control systems rely on a single authentication method (RFID card, password input, etc.) or are structured to allow only a small number of devices to be connected through limited input/output ports.

These access control systems are difficult to flexibly configure depending on the installation environment, and additional controllers or relay devices had to be installed to link additional sensors or readers.

Additionally, the existing system lacked a method in which each authentication device operated individually and directly connected to a mobile device to process authentication information.

Accordingly, the need for a multi-functional hub to utilize mobile devices as a central device for access control has been raised.

In particular, the scope of smartphone use has recently expanded, and technologies that utilize various authentication methods such as NFC, Bluetooth, and biometrics on a mobile basis are becoming widespread.

However, existing access control devices lacked standardized hardware configurations and software linkage systems for direct connection with mobile devices, leading to compatibility issues, increased construction costs, and reduced security.

Therefore, there is a growing need for an integrated hub device that can easily connect with various input/output devices, utilizes mobile devices as authentication terminals, and provides both security and expandability by linking with an access control server.

US7349761B1 US7523243B2 US8942107B2

An embodiment of the present invention provides a hub device for multi-authentication processing for access control and a relay system for multi-authentication processing including the hub device, which can enhance the security of access control and reduce installation and operation costs by providing an interface connectable to various input/output devices, performing authentication through a mobile device, and managing access records in conjunction with an access control server.

According to one embodiment of the present invention, a hub device for processing multiple authentications for access control is additionally connected to an access control system including an authentication information reader, an entry/exit status detection sensor, and an access control device, and relays between a mobile device and the access control system for access control and authentication, the hub device including an input/output interface unit for receiving user authentication information from a mobile device through the authentication information reader, receiving an entry/exit status signal from the entry/exit status detection sensor, and including a plurality of input/output ports for outputting control signals to the access control device; a central processing control unit for comparing the user authentication information with pre-stored registered authentication information to determine whether authentication has been performed, and generating a control signal for controlling an opening/closing operation of the access control device according to the authentication determination result; and a network communication unit connected to an access control server for transmitting and receiving confirmation of the user authentication information and an entry/exit record.

In addition, the input/output interface unit may include at least one serial communication port and at least one USB A type port connected to the authentication information reader for receiving the user authentication information; at least one digital input port connected to the access status detection sensor for receiving the access status signal; at least one relay output port for outputting the control signal to the access control target device; and a DC input port connected to an external power supply device.

In addition, the central processing control unit can control the transmission and reception flow of data and signals between the input/output interface unit, the network communication unit, the authentication information reader, the entry/exit status detection sensor, and the entry/exit control device, including an internal microprocessor.

In addition, the central processing control unit can generate a control signal for controlling the opening and closing of the access control device that matches the access status signal input from the access status detection sensor.

In addition, the central processing control unit can determine whether authentication is required by referring to the registration authentication information received from the access control server together with the registration authentication information stored in the local memory when comparing the user authentication information with the registration authentication information.

In addition, the user authentication information includes a user password entered through a mobile device, the central processing control unit compares the user password with a pre-stored registration password to determine whether authentication is performed, and generates a control signal for controlling the opening and closing operation of the access control device based on the authentication determination result, and the network communication unit is connected to the access control server to confirm the user password and transmit and receive access records.

In addition, the central processing control unit can determine whether authentication is successful by referring to the registration password received from the access control server together with the registration password stored in the local memory when comparing the user password and the registration password.

In addition, the network communication unit includes an RJ45 port for TCP/IP communication, and can perform authentication requests for user authentication information and transmission of entry/exit records through connection with the access control server.

In addition, the network communication unit can transmit and receive the user authentication information and entry/exit records by applying a TLS-based encryption protocol to enhance security.

In addition, the authentication information reader may include at least one of an RFID reader, a QR reader, a barcode reader, a fingerprint reader, an iris reader, a face reader, and a Bluetooth reader, the access status detection sensor may include at least one of a door sensor, a light sensor, a magnetic switch, a pressure sensor, a gyro sensor, and a motor rotation sensor, and the access control device may include a door opening/closing control device.

According to another embodiment of the present invention, a relay system for multi-authentication processing for access control is provided, which is additionally connected to an access control system including an authentication information reader, an entry/exit status detection sensor, and an access control device, and relays between a mobile device and the access control system for access control and authentication, the relay system comprising: a relay hub device that receives user authentication information input from at least one of the authentication information reader and the mobile device, generates a control signal for the access control device based on an entry/exit status signal collected from the entry/exit status detection sensor to control the opening and closing of an access door, compares the user authentication information with pre-stored registered authentication information to determine whether authentication has been performed, and transmits and receives data with an access control server for authentication confirmation and entry/exit recording; and an application that is installed in a mobile device and performs access request, authentication processing assistance, and entry/exit record confirmation while communicating with the relay hub device by wire, receives a user password through a screen of the mobile device, and inputs the user password into the relay hub device through the mobile device.

In addition, the relay hub device may include an input/output interface unit that receives user authentication information from a mobile device through the authentication information reader, receives an entry/exit status signal from the entry/exit status detection sensor, and includes a plurality of input/output ports for outputting control signals to the entry/exit control device; a central processing control unit that compares the user authentication information with pre-stored registered authentication information to determine whether authentication has occurred and generates a control signal for controlling the opening/closing operation of the entry/exit control device based on the authentication determination result; and a network communication unit that is connected to an access control server to confirm the user authentication information and transmit/receive an entry/exit record.

In addition, the input/output interface unit may include at least one serial communication port and at least one USB A type port connected to the authentication information reader for receiving the user authentication information; at least one digital input port connected to the access status detection sensor for receiving the access status signal; at least one relay output port for outputting the control signal to the access control target device; and a DC input port connected to an external power supply device.

In addition, the central processing control unit can control the transmission and reception flow of data and signals between the input/output interface unit, the network communication unit, the authentication information reader, the entry/exit status detection sensor, and the entry/exit control device, including an internal microprocessor.

In addition, the central processing control unit can generate a control signal for controlling the opening and closing of the access control device that matches the access status signal input from the access status detection sensor.

In addition, the relay system for multi-authentication processing may include: the access control server that communicates with the relay hub device to confirm the user authentication information and manage the entry/exit records, and provides pre-stored registration authentication information; and the central processing control unit may, when comparing the user authentication information and the registration authentication information, refer to the registration authentication information received from the access control server together with the registration authentication information stored in the local memory to determine whether authentication has been performed.

In addition, the input/output interface unit further includes a USB C type port for communication with and power supply to a mobile device, the central processing control unit compares the user password with a pre-stored registration password to determine whether authentication is performed, and generates a control signal for controlling the opening/closing operation of the access control device based on the authentication determination result, and the network communication unit is connected to the access control server to confirm the user password and transmit/receive the access record.

In addition, the central processing control unit can determine whether authentication is successful by referring to the registration password received from the access control server together with the registration password stored in the local memory when comparing the user password and the registration password.

In addition, the network communication unit includes an RJ45 port for TCP/IP communication, and can perform authentication requests for user authentication information and transmission of entry/exit records through connection with the access control server.

In addition, the network communication unit can transmit and receive the user authentication information and entry/exit records by applying a TLS-based encryption protocol to enhance security.

In addition, the application includes: a user authentication information confirmation unit that receives user authentication information input from the authentication information reader and communicates with the relay hub device or the access control server to confirm whether the user authentication information has been authenticated; a registration authentication information storage unit that stores registration authentication information issued by an administrator; an access request recording unit that records access request attempts to a mobile device or the access control server in real time and stores authentication means used at the time of the access request and authentication result information; an abnormal access reporting unit that detects abnormal access attempts such as authentication failures, unauthorized access attempts, and time zone violations and reports them to the access control server; a remote control processing unit that transmits a door opening/closing control signal received from the access control server to the relay hub device to control the opening/closing operation of the access control device and displays whether access has been successful, a system failure, or an emergency notification on the screen of the mobile device; a security processing unit that encrypts a database stored in the application, automatically deletes information stored in the database when a mobile device is lost, and applies an encryption protocol when communicating with the access control server; The application may include an access policy setting unit that sets the application to be activated only within a specific time zone or specific area, or sets the application to perform access authentication by combining multiple authentication methods; and a secret key interface unit that receives a user password through the screen of a mobile device.

In addition, the application may further include a relay authentication processing unit that, in response to an authentication request signal received from the relay hub device, confirms whether authentication has been performed through communication with the access control server, and then transmits an access control signal based on the authentication result to the relay hub device.

In addition, the authentication information reader may include at least one of an RFID reader, a QR reader, a barcode reader, a fingerprint reader, an iris reader, a face reader, and a Bluetooth reader, the access status detection sensor may include at least one of a door sensor, a light sensor, a magnetic switch, a pressure sensor, a gyro sensor, and a motor rotation sensor, and the access control device may include a door opening/closing control device.

According to the present invention, access control based on a mobile device can be enabled, thereby improving both user convenience and security.

Additionally, it is possible to link various authentication methods (RFID, fingerprint, facial recognition, etc.) to enable multi-authentication-based access control.

Additionally, compared to existing access control systems, installation and operating costs can be significantly reduced.

Additionally, the reliability and efficiency of the access control system can be improved through access record management and external authentication verification functions by linking with an external access control server.

Additionally, flexible system configuration that can be applied to various access control system environments is possible.

FIG. 1 is a block diagram showing the overall configuration of a relay system for multi-authentication processing for access control according to an embodiment of the present invention.
FIG. 2 is a block diagram showing the configuration of a relay hub device (hub device for multi-authentication processing) according to an embodiment of the present invention.
Figure 3 is a block diagram showing a detailed configuration of an input/output interface unit according to an embodiment of the present invention.
FIG. 4 is a drawing exemplarily showing the appearance of a relay hub device according to an embodiment of the present invention.
FIG. 5 is a drawing showing the right side (a), left side (b), and front side (c) of a relay hub device according to an embodiment of the present invention.
Figure 6 is a block diagram showing a detailed configuration of an application according to an embodiment of the present invention.

The terms used in this specification will be briefly explained, and the present invention will be described in detail.

The terms used in this invention have been selected from widely used, current terms, taking into account the functions of the invention. However, these terms may vary depending on the intentions of those skilled in the art, precedents, the emergence of new technologies, etc. Furthermore, in certain cases, terms may be arbitrarily selected by the applicant, in which case their meanings will be described in detail in the relevant description of the invention. Therefore, the terms used in this invention should not be defined simply as names, but rather based on their inherent meanings and the overall content of the invention.

When a part of the specification is said to "include" a component, this does not exclude other components, but rather implies the inclusion of other components, unless otherwise specifically stated. Furthermore, terms such as "part," "module," etc., used throughout the specification refer to a unit that processes at least one function or operation, which may be implemented in hardware, software, or a combination of hardware and software.

Below, with reference to the attached drawings, embodiments of the present invention are described in detail so that those skilled in the art can easily implement the present invention. However, the present invention may be implemented in various different forms and is not limited to the embodiments described herein. In addition, in the drawings, parts irrelevant to the description are omitted for clarity of description, and similar parts are designated with similar reference numerals throughout the specification.

FIG. 1 is a block diagram showing the entire configuration of a relay system for multi-authentication processing for access control according to an embodiment of the present invention, FIG. 2 is a block diagram showing the configuration of a relay hub device (multi-authentication processing hub device) according to an embodiment of the present invention, FIG. 3 is a block diagram showing the detailed configuration of an input/output interface unit according to an embodiment of the present invention, FIG. 4 is a drawing showing an example of the appearance of a relay hub device according to an embodiment of the present invention, FIG. 5 is a drawing showing the right side (a), the left side (b), and the front (c) of a relay hub device according to an embodiment of the present invention, and FIG. 6 is a block diagram showing the detailed configuration of an application according to an embodiment of the present invention.

Referring to FIG. 1, a relay system (1000) for multi-authentication processing for access control according to an embodiment of the present invention includes a relay hub device (multi-authentication processing hub device) (100) as an essential component, and may include at least one of an application (200), a network switch (300), and an access control server (400) as an optional component.

A relay system (1000) for multi-authentication processing for access control according to an embodiment of the present invention is additionally connected to an access control system (10) including an authentication information reader (11), an access status detection sensor (12), and an access control device (13), and can relay between a mobile device (1) and the access control system (10) for access control and authentication.

The authentication information reader (11) according to the present embodiment may include at least one of an RFID reader, a QR reader, a barcode reader, a fingerprint reader, an iris reader, a face reader, and a Bluetooth reader, and a user may input authentication information through the reader when entering or exiting.

In addition, the entry/exit status detection sensor (12) may include a door sensor, a light sensor, a magnetic switch, a pressure sensor, a gyro sensor, or a motor rotation sensor, and may detect the entry/exit status and transmit it to a relay hub device (100).

In addition, the access control device (13) can perform the role of physically opening and closing the access door according to the control signal of the relay hub device (100), including the door opening and closing control device.

The above relay hub device (100) receives user authentication information input from at least one of an authentication information reader (11) and a mobile device (1), generates a control signal for an access control device (13) based on an access status signal collected from an access status detection sensor (12) to control the opening and closing of the access door, compares the user authentication information with pre-stored registered authentication information to determine whether authentication has occurred, and can transmit and receive data with an access control server (400) for authentication confirmation and access recording.

For example, a relay hub device (100) can be installed in front of a building entrance and connected to various readers such as an RFID reader, a fingerprint reader, and a facial recognition device, and can control the opening and closing of the physical entrance door by processing a user's entry request in real time.

User authentication information according to this embodiment may include an RFID tag ID, QR code, fingerprint data, facial image data, password (secret key), etc., and may be entered by the user when requesting entry and used to determine whether authentication is permitted.

To this end, the relay hub device (100) may include at least one of an input/output interface unit (110), a central processing control unit (120), and a network communication unit (130), as illustrated in FIG. 2.

The above input/output interface unit (110) may include a plurality of input/output ports that receive user authentication information through an authentication information reader (11), receive an entry/exit status signal from an entry/exit status detection sensor, and output a control signal to an entry/exit control device (13).

To this end, the input/output interface unit (110) may include at least one of a serial communication port (111), a USB A type port (112), a digital input port (113), a relay output port (114), a DC input port (115), and a USB C type port (116), as illustrated in FIG. 3.

The above serial communication port (ex. screw terminal) (111) and USB A type port (112) can be connected to an authentication information reader (11) to receive user authentication information.

More specifically, the serial communication port (111) is a UART1-based port that can be connected to an external authentication device such as an RFID reader or QR reader via RS232, RS485, or Wiegand communication. The USB A type port (112) is connected to various USB-based external readers and can support the transmission and reception of authentication information.

The above digital input port (113) is connected to an entry/exit status detection sensor (12) and can receive an entry/exit status signal.

More specifically, the digital input port (113) is provided in the form of a screw terminal and can be connected to a door sensor or an emergency switch to receive input for entry/exit status or emergency situations.

The entry/exit status signal according to this embodiment may mean a signal input from the entry/exit status detection sensor (12) indicating whether the door is open, closed, or in an emergency state.

The above relay output port (114) can output a control signal to the access control target device (13).

More specifically, the relay output port (114) is provided in the form of a screw terminal and can be connected to an electronic door lock or a warning light to perform a physical operation according to a control signal.

The above DC input port (115) can be connected to an external power supply (not shown) to receive DC power.

More specifically, the DC input port (115) is provided in the form of a screw terminal and can be connected to an external power supply to supply 12V power to the entire system.

The above USB C type port (116) can be installed for communication and power supply with a mobile device (1).

More specifically, the USB C type port (116) can be used as a port for communication with and charging a mobile device (1).

The central processing control unit (120) can compare user authentication information with pre-stored registration authentication information to determine whether authentication has occurred, and generate a control signal to control the opening and closing operation of the access control device (13) based on the authentication determination result.

The registration authentication information according to this embodiment is unique authentication data registered in advance in the system, and may include an RFID tag ID, fingerprint template, registration password, temporary access key, etc., and may be used as a reference value for determining whether or not to grant access by comparing it with user authentication information.

The central processing control unit (120) can control the transmission and reception flow of data and signals between the input/output interface unit (110), the network communication unit (120), the authentication information reader (11), the entry/exit status detection sensor (12), and the entry/exit control device (13), including an internal microprocessor.

The central processing control unit (120) can generate a control signal to control the opening and closing of the access control device (13) that matches the access status signal input from the access status detection sensor (12).

For example, when a signal indicating that the door is open is received from the entry/exit status detection sensor (12), the central processing control unit (120) can output a door closing signal to the entry/exit control device (13) to automatically close the door. Conversely, when proper authentication is performed while the door is closed, a control signal for opening the door can be generated to permit entry/exit.

When comparing user authentication information and registration authentication information, the central processing control unit (120) can determine whether authentication is required by referring to the registration authentication information received from the access control server (400) along with the registration authentication information stored in the local memory.

For example, authentication accuracy can be improved by first comparing with registration authentication information stored in local memory, and then performing additional comparisons by downloading the latest registration authentication information in real time from the access control server (400). This allows the administrator to determine whether authentication is required by reflecting the latest information in real time when the administrator updates the registration information.

The central processing control unit (120) can compare a user password with a pre-stored registration password to determine whether authentication has occurred, and generate a control signal to control the opening and closing operation of the access control device (13) based on the authentication determination result.

For example, if the password entered through the application (200) installed on the mobile device (1) matches the registered password, the central processing control unit (120) can transmit a signal to the access control device (13) to open the door. Conversely, if the passwords do not match, the access request may be rejected.

When comparing a user password and a registration password, the central processing control unit (120) can determine whether authentication is required by referring to the registration password received from the access control server (400) along with the registration password stored in the local memory.

For example, the central processing control unit (120) can enhance security by requesting and comparing the latest password information of the user in real time from the access control server (400) when the password data stored in the local memory does not exist or is old.

The above network communication unit (130) is connected to the access control server (400) via a network and can confirm user authentication information and transmit and receive access records.

For example, when a user tags an RFID card to an authentication information reader (11), the information is transmitted to the access control server (400) via the network communication unit (130) through the relay hub device (100), and the authentication confirmation result can be received from the server again via the network communication unit (130). During this process, the access record can also be stored on the server in real time.

The above network communication unit (130) is connected to the access control server (400) and can confirm user passwords and transmit and receive access records.

For example, password information entered from a mobile device (1) is transmitted to an access control server (400) via a network communication unit (130) through a relay hub device (100), and the access control server (400) verifies the validity of the password and then transmits the result back through the network communication unit (130) to determine whether or not access is permitted.

The above network communication unit (130) includes an RJ45 port (131) for TCP/IP communication, and can perform authentication requests for user authentication information and transmission of entry/exit records through connection with the access control server (400).

For example, the relay hub device (100) can stably communicate with the access control server (400) by connecting to a wired network in the office through an RJ45 port (131), and through this connection, can perform authentication requests, receive authentication results, store access records, etc.

The above network communication unit (130) can transmit and receive user authentication information and entry/exit records by applying a TLS-based encryption protocol to enhance security.

For example, TLS-based encryption can be applied to prevent network packets from being eavesdropped or altered by third parties when communicating with the access control server (400), thereby ensuring the confidentiality and integrity of access information. This secure communication can not only protect the user's personal information but also enhance the security of the entire access control system.

The above application (200) is installed on a mobile device (1) and can perform access request, authentication processing assistance, and access record confirmation while communicating with a relay hub device (100) through a C-type connection.

For example, a security officer can remotely command the opening and closing of specific doors via the application (200), set access permissions for specific users, and force doors to close or receive notifications in the event of an emergency. Furthermore, the application (200) can support access history analysis by querying access records in real time.

The relay hub device (100) according to this embodiment performs basic functions for processing access requests and generating access control signals, and the mobile application (200) is configured to perform administrative functions such as setting management, policy setting, and remote control of the access control system or to perform the functions of the relay hub device (100) on behalf of the device. Some overlapping functions may be intentionally configured to be distributed for convenience and security enhancement.

Such an application (200) may include at least one of a user authentication information verification unit (210), a registration authentication information storage unit (220), an access request recording unit (230), an abnormal access reporting unit (240), a remote control processing unit (250), a security processing unit (260), an access policy setting unit (270), a relay authentication processing unit (280), and a secret key interface unit (290), as illustrated in FIG. 6.

The user authentication information verification unit (210) receives user authentication information entered through an authentication information reader (11) or a mobile device (1), and communicates with a relay hub device (100) or an access control server (400) to determine whether the authentication information is appropriate.

For example, when a user approaches a QR reader or RFID reader and requests authentication, the information is transmitted to the user authentication information verification unit (210) and compared with pre-registered authentication information to determine whether or not to grant access.

The above-mentioned registration authentication information storage unit (220) can store registration authentication information issued by an administrator. For example, the unique identification number of an RFID card issued for access to a specific office, a temporary QR code issued to a specific user, fingerprint data or a biometric authentication template, or a temporary visitor authentication key valid for a specific period of time can be stored as registration authentication information.

More specifically, the registration authentication information storage unit (220) serves to store registered authentication information such as digital keys, fingerprint templates, and passwords issued by an access control manager, and can also store authentication keys for temporary visitors, for example.

The above-mentioned registration authentication information storage unit (220) can prevent unauthorized access or data leakage by encrypting and safely storing such information. Furthermore, registered authentication information can be automatically deleted as needed, with a specific expiration date or usage conditions set.

The above access request recorder (230) can record access request attempts in real time on a mobile device (1) or access control server (400) and store information on the authentication method used and authentication result when requesting access.

More specifically, the access request log (230) records the request in the mobile device (1) or access management server (400) each time a user attempts to request access, and can store the access means and results in connection therewith.

For example, when a user requests access using an RFID card, the request time, authentication method used (RFID), and whether authentication was successful can be stored together. Furthermore, the access request log (230) can also record repeated authentication failures for the same user, which can be utilized for detecting abnormal behavior. In other words, information such as the number of access requests made per day for a specific user and whether they were successful or failed can be recorded. This recorded information can be accessed through the application (200).

The above abnormal entry/exit reporting unit (240) can detect abnormal entry/exit attempts such as authentication failures, unauthorized access attempts, and time zone violations and report them to the access control server (400).

For example, in the event of an attempt to enter outside of working hours, an attempt to access using an unregistered authentication method, or repeated authentication failures by the same user, the abnormal entry reporting unit (240) can immediately transmit the relevant details to the access control server (400) to provide a warning notification to the administrator. This can enhance the security of the access control system (10).

The above remote control processing unit (250) transmits the door opening/closing control signal received from the access control server (400) to the relay hub device (100) to control the opening/closing operation of the access control device (13), and can display whether entry/exit was successful, a system failure, or an emergency notification on the screen of the mobile device (1).

For example, when an emergency closure command is issued through an application (200), the remote control processing unit (250) can transmit the command to a relay hub device (100) to control the forced closure of the entrance/exit doors of the relevant area. At the same time, a related notification message can be displayed in real time on the mobile device (1).

The above security processing unit (260) encrypts the database stored in the application (200), automatically deletes information stored in the database when the mobile device (1) is lost, and can apply an encryption protocol when communicating with the access control server (400).

For example, if an administrator reports a lost mobile device, the security processing unit (260) can automatically delete internally stored data, thereby preventing personal information leakage. Furthermore, all data transmitted to and from the access control server (400) can be safely protected through TLS-based encrypted communication.

The above access policy setting unit (270) can set the application (200) to be activated only during a specific time period or within a specific area, or can set it to perform access authentication by combining multiple authentication means.

For example, a policy could be established that allows access solely through RFID card authentication during regular working hours, but requires additional fingerprint authentication at night. Furthermore, access rights to specific areas could be differentiated based on department or position, and these policies could be reflected in real time through the access control server (400).

The above relay authentication processing unit (280) can, in response to an authentication request signal received from the relay hub device (100), confirm whether authentication has been performed through communication with the access control server (400), and then transmit an access control signal according to the authentication result to the relay hub device (100).

For example, if a user requests entry using his/her own authentication method in front of the entrance/exit door, the relay authentication processing unit (280) transmits the authentication request to the entrance/exit management server (400) and transmits the authentication result received from the server back to the relay hub device (100), thereby ultimately controlling the opening/closing of the entrance/exit control device (13). This enables centralized access control.

The above secret key interface unit (290) can receive a user password (secret key) through the screen of a mobile device (1) and input the entered user password into a USB C type port (116) through the mobile device (1).

More specifically, the secret key interface unit (290) can generate a virtual keypad interface on the screen of the mobile device (1) to guide the user to enter a password. In addition, as an additional optional function, the user can enter authentication information through fingerprint recognition, facial recognition, or QR code input, and the application (200) can transmit the entered authentication information to the relay hub device (100) through the USB C type port (116).

The above application (200) may include a function for viewing a user's entry/exit records, and may also provide a function for storing a temporary entry/exit key issued by an administrator.

Additionally, the application (200) can be configured to automatically switch authentication methods based on specific time zones or locations. For example, a policy can be set to allow authentication through password entry alone during normal times, but require additional biometric authentication at night or in certain secure areas.

The above network switch (300) can connect between the relay hub device (100) and the access control server (400), and at this time, can be connected to the LAN port (RJ45) of the relay hub device (100).

Meanwhile, the relay hub device (100) enables access control to be operated through a standalone connection structure connected to a mobile device (1), even if the access control server (400) is not connected to the relay hub device (100) by the network switch (300).

The above access control server (400) can communicate with the relay hub device (100) to confirm user authentication information and manage access records, and provide pre-stored registration authentication information.

More specifically, the access control server (400) is a server that performs the central management role of the entire access control system and can serve as a communication hub between the relay hub device (100) and the application (200).

The above access control server (400) can store and manage all authentication information (including registered authentication information) registered in advance, and can perform a function of checking whether authentication is performed for each request for access in real time.

Additionally, the access control server (400) can store each user's access records and provide them to the application (200) when necessary. In the event of an emergency, the access control server (400) can send an emergency blocking command to the entire access control system and can also set and apply access policies for specific areas or specific time periods.

In addition, the access control server (400) can safely transmit and receive data with the relay hub device (100) and application (200) by utilizing a TLS-based encryption protocol.

In addition, the access control server (400) can configure a real-time monitoring dashboard within the server to allow access status to be grasped at a glance, and can also be linked with an external security management system if necessary.

As an example of the overall operation process of the relay system (100) for multi-authentication processing according to this embodiment, when a user stands in front of a door and touches an RFID card to an authentication information reader (11), the corresponding user authentication information can be transmitted to the relay hub device (100).

At this time, the relay hub device (100) can check whether authentication has been completed by transmitting an authentication request to the application (200) or the access control server (400), and if authentication is successful, can transmit an opening/closing signal to the access control device (13) through the relay output port (114) to permit entry/exit.

At this time, the entry/exit record is stored in the entry/exit management server (400) and can be viewed through the application (200), and the application (200) can manage the system by remotely opening and closing the door or modifying the policy if necessary.

The above description is only one embodiment for implementing a multi-authentication processing hub device for access control according to the present invention and a multi-authentication processing relay system including the same, and the present invention is not limited to the above embodiment, and as claimed in the following claims, it will be understood that the technical spirit of the present invention exists to the extent that various modifications can be implemented by anyone having ordinary skill in the art to which the present invention pertains without departing from the gist of the present invention.

1000: Relay system for multi-authentication processing for access control
100: Relay hub device (hub device for multi-authentication processing)
110: Input/output interface section
111: Serial communication port
112: USB Type A port
113: Digital input port
114: Relay output port
115: DC input port
116: USB Type-C port
120: Central Processing Control Unit
130: Network Communications Department
131: RJ45 port
200: Application
210: User authentication information verification section
220: Registration authentication information storage unit
230: Entry Request Log
240: Abnormal Entry and Exit Reporting Department
250: Remote control processing unit
260: Security Processing Unit
270: Entry Policy Setting Department
280: Relay authentication processing unit
290: Secret key interface section
300: Network Switch
400: Access Control Server
1: Mobile devices
10: Access Control System
11: Authentication information reader
12: Entry/Exit Status Detection Sensor
13: Access control device

Claims (23)

delete delete delete delete delete delete delete delete delete delete In a relay system that is additionally connected to an access control system including an authentication information reader, an entry/exit status detection sensor, and an access control device, and relays between a mobile device and the access control system for access control and authentication,
A relay hub device that receives user authentication information entered from at least one of an authentication information reader and a mobile device, generates a control signal for the access control device based on an access status signal collected from the access status detection sensor to control the opening and closing of the access door, compares the user authentication information with pre-stored registered authentication information to determine whether authentication has been performed, and transmits and receives data with the access control server for authentication confirmation and access recording; and
An application is installed on a mobile device and performs access request, authentication processing assistance and access record verification while communicating with the relay hub device through a wire, receives a user password through the screen of the mobile device, and inputs the user password into the relay hub device through the mobile device.
The above application,
A user authentication information verification unit that receives user authentication information entered from the authentication information reader and communicates with the relay hub device or the access control server to verify whether the user authentication information has been authenticated;
A registration authentication information storage unit that stores registration authentication information issued by an administrator;
An access request log that records access request attempts in real time on a mobile device or the access control server and stores information on the authentication method used and authentication result when requesting access;
An abnormal access reporting unit that detects abnormal access attempts such as authentication failures, unauthorized access attempts, and time zone violations and reports them to the access control server;
A remote control processing unit that transmits the door opening/closing control signal received from the access control server to the relay hub device to control the opening/closing operation of the access control device and displays the success or failure of entry/exit, system failure, or emergency notification on the screen of a mobile device;
A security processing unit that encrypts the database stored in the application, automatically deletes information stored in the database when a mobile device is lost, and applies an encryption protocol when communicating with the access control server;
An access policy setting unit that sets the application to be activated only within a specific time zone or specific area, or to perform access authentication by combining multiple authentication methods; and
A relay system for multi-authentication processing for access control, characterized by including a secret key interface unit for receiving a user password through the screen of a mobile device.
In Article 11,
The above relay hub device,
An input/output interface unit including a plurality of input/output ports for receiving user authentication information from a mobile device through the authentication information reader, receiving an entry/exit status signal from the entry/exit status detection sensor, and outputting a control signal to the entry/exit control device;
A central processing control unit that compares the above user authentication information with the pre-stored registration authentication information to determine whether authentication is required and generates a control signal to control the opening and closing operation of the access control device based on the authentication determination result; and
A relay system for multi-authentication processing for access control, characterized in that it includes a network communication unit that is connected to an access control server and transmits and receives the user authentication information and access records.
In Article 12,
The above input/output interface section,
At least one serial communication port and at least one USB A type port connected to the above authentication information reader for receiving the user authentication information;
At least one digital input port connected to the above entry/exit status detection sensor for receiving the entry/exit status signal;
At least one relay output port for outputting the control signal to the access control target device; and
A relay system for multi-authentication processing for access control, characterized in that it includes a DC input port connected to an external power supply.
In Article 12,
The above central processing control unit,
A relay system for multi-authentication processing for access control, characterized in that it controls the transmission and reception flow of data and signals between the input/output interface unit, the network communication unit, the authentication information reader, the entry/exit status detection sensor, and the access control device, including an internal microprocessor.
In Article 12,
The above central processing control unit,
A relay system for multi-authentication processing for access control, characterized in that it generates a control signal for controlling the opening and closing of the access control device that matches the access status signal input from the access status detection sensor.
In Article 12,
The above multi-authentication processing relay system is,
The access control server communicates with the relay hub device to verify the user authentication information and manage the access record, and provides pre-stored registration authentication information; and
The above central processing control unit,
A relay system for multi-authentication processing for access control, characterized in that when comparing the user authentication information and the registration authentication information, authentication is determined by referring to the registration authentication information received from the access control server together with the registration authentication information stored in the local memory.
In Article 12,
The above input/output interface section,
It also includes a USB Type-C port for communication and power supply to mobile devices.
The above central processing control unit,
By comparing the above user password with the pre-stored registration password, it is determined whether authentication is successful, and a control signal is generated to control the opening and closing operation of the access control device based on the authentication determination result.
The above network communication unit,
A relay system for multi-authentication processing for access control, characterized in that it is connected to the access control server and transmits and receives the user password confirmation and access records.
In Article 17,
The above central processing control unit,
A relay system for multi-authentication processing for access control, characterized in that when comparing the user password and the registration password, authentication is determined by referring to the registration password received from the access control server together with the registration password stored in the local memory.
In Article 12,
The above network communication unit,
A relay system for multi-authentication processing for access control, characterized in that it includes an RJ45 port for TCP/IP communication and performs authentication requests for user authentication information and transmission of access records through connection with the access control server.
In Article 19,
The above network communication unit,
A relay system for multi-authentication processing for access control, characterized in that it transmits and receives the user authentication information and access records by applying a TLS-based encryption protocol to enhance security.
delete In Article 11,
The above application,
A relay system for multi-authentication processing for access control, characterized in that it further includes a relay authentication processing unit that, in response to an authentication request signal received from the relay hub device, confirms whether authentication has been performed through communication with the access control server, and then transmits an access control signal according to the authentication result to the relay hub device.
In Article 11,
The above authentication information reader includes at least one of an RFID reader, a QR reader, a barcode reader, a fingerprint reader, an iris reader, a face reader, and a Bluetooth reader,
The above entry/exit status detection sensor includes at least one of a door sensor, a light sensor, a magnetic switch, a pressure sensor, a gyro sensor, and a motor rotation sensor.
The above access control device is a relay system for multi-authentication processing for access control including a door opening/closing control device.