KR20220139532A - Door Lock System and Door Lock Entrance Control Method Using the Same - Google Patents

Abstract

Provided are a door lock system and a method for determining access to a door lock using the same. The door lock system comprises: an access device storing a first asymmetric key pair including a first private key and a first public key; and a door lock for determining whether to allow access for a holder of the access device when the access device is tagged. The door lock requests a certificate from the access device when the access device is tagged. When the access device receives a request for the certificate from the door lock, the access device transmits a stored certificate to the door lock. The door lock verifies the validity of the certificate and when it is confirmed that the certificate is valid, generates a random number and transmits the random number and time information to the access device. The access device generates an access signature with the first private key for the random number and the time information, and transmits the access signature to the door lock. The door lock verifies the access signature and allows access when the access signature is verified. In an access device registration mode, the door lock only issues a certificate to the access device and does not store any information related to the access device, so there is no limit to the number of access devices that can be accessed. In an access determination mode, the primary verification through the certificate and the secondary verification through the access signature are performed, so security risks, or the like due to the copy of the access device can be prevented.

Description

Door Lock System and Door Lock Entrance Control Method Using the Same}

The present invention relates to a door lock system and a method for determining whether to enter a door lock using the same, and more particularly, a door lock system capable of minimizing security risks due to duplication of access devices and the like without limiting the number of access devices allowed to enter and exit. It relates to a method for determining whether a door lock has been used.

In general, a door lock that rotates in one direction to open and close the door is installed on the door for guiding the entrance and exit of the indoor and outdoor areas. A key cylinder for preventing an unspecified person from entering the room is installed in such a door lock, and most of the door locks are mechanically configured to be rotated only by a specific key. However, due to the inconvenience of carrying the key, the risk of loss, and the cumbersome operation of the mechanical door lock made of such a key and a cylinder, an electronic door lock or a digital door lock has been developed and used in recent years.

Such an electronic door lock or digital door lock refers to a door lock system capable of recognizing a password, a semiconductor chip, or a smart card instead of a key interlocking with a key cylinder. In particular, recently, a number of door lock systems that can recognize smart cards are used. In the case of such a door lock system, the unique information list of smart cards allowed to enter is stored in the door lock. The unique information of the tagged smart card is read and compared with the stored unique information list to determine whether access is permitted.

However, since such a digital door lock must store a list of smart cards that are allowed to enter, there is inevitably a limit to the number of smart cards that are allowed to access, and there are security vulnerabilities such as when smart cards are duplicated. There is a problem that will occur.

Registered Patent No. 10-1296863 (2013.08.08)

The present invention is to solve the above problems, and it is to provide a door lock system and a method for determining whether access to a door lock is not limited in the number of access devices that can be accessed, and can minimize security risks due to duplication of access devices, etc. The purpose.

The door lock system according to the present invention provides an access device for storing a first asymmetric key pair including a first private key and a first public key; , wherein the door lock requests a certificate from the access device when the access device is tagged, the access device transmits a stored certificate to the door lock upon receiving a certificate request from the door lock, and the door lock determines the validity of the certificate If it is confirmed that the certificate is valid, a random number is generated, the random number and time information are transmitted to the access device, and the access device generates an access signature with the first secret key with respect to the random number and the time information. It is delivered to the door lock, and the door lock verifies the access signature and allows access when the access signature is verified.

In the door lock system according to the present invention, the door lock includes a security domain, and the security domain verifies the validity of the certificate to generate a random number when it is confirmed that it is a valid certificate, and verifies the access signature. have.

In the door lock system according to the present invention, the security domain may be provided as a security element (SE), a trust zone (TrustZone), or a microcontroller unit (Micro Controller Unit, MCU).

In the door lock system according to the present invention, the door lock may store a second asymmetric key pair including a second private key and a second public key, and the certificate may be signed with the second private key and generated in the door lock.

In the door lock system according to the present invention, the access device transmits the first public key and access device information to the door lock, and the certificate includes the door lock information, the access device information, and the first public key as the second secret. It may be one generated by the door lock by signing with a key.

In the door lock system according to the present invention, the access device information may be a unique number for identifying the access device.

In the door lock system according to the present invention, the first asymmetric key pair may be generated by the access device in response to a key generation request of the door lock.

In the door lock system according to the present invention, the door lock may verify the validity of the certificate with the second public key.

In the door lock system according to the present invention, the door lock may verify the access signature by the first public key.

In the door lock system according to the present invention, the door lock may store the access signature when access is permitted.

In the door lock access determination method according to the present invention, when an access device storing a first asymmetric key pair including a first private key and a first public key is tagged in the door lock, the door lock access determining whether the access device holder is permitted or not A method for determining permission, comprising: when the access device is tagged with the door lock, the door lock requests a certificate from the access device; A certificate transmission step of transmitting the certificate to the door lock by the access device receiving the certificate request from the door lock; a certificate verification step of verifying the validity of the certificate received by the door lock; a random number generation step of generating a random number when it is confirmed that the certificate is a valid certificate in the certificate verification step; a random number transmission step in which the door lock transmits the random number and time information corresponding to the time when the random number is generated to the access device; an access signature generating step in which the access device generates an access signature with the first secret key with respect to the random number and the time information and transmits it to the door lock; and an access signature validation step of allowing access of the holder of the access device when the door lock verifies the access signature and determines that the access signature is valid.

In the door lock access permission determination method according to the present invention, the door lock has a security domain, and the certificate verification step, the random number generation step, and the access signature validation step may be performed in the security domain.

In the door lock access permission determination method according to the present invention, the security domain may be provided as a security element (SE), a trust zone (TrustZone), or a micro controller unit (Micro Controller Unit, MCU).

The method for determining access to a door lock according to the present invention further includes, before the step of requesting the certificate, an access device registration step of registering the access device to the door lock by generating the certificate by the door lock and transmitting the certificate to the access device. can

In the method for determining access permission of a door lock according to the present invention, the step of registering the access device includes: a first public key delivery step in which the access device transmits the first public key and access device information to the door lock; The door lock generates the certificate by signing the door lock information, the access device information, and the first public key with the second private key stored in the door lock, and then transmitting the certificate to the access device; may include

In the door lock access permission determination method according to the present invention, the access device information may be a unique number for identifying the access device.

In the door lock access permission determination method according to the present invention, the door lock is capable of mutual conversion between an access device registration mode for registering a new access device and an entry/exit determination mode for determining whether an access device holder is permitted to enter, and the access device The registration step may include, before the first public key transfer step, a registration mode conversion step of converting the door lock into an access device registration mode; a key pair generation request step of requesting, by the door lock, the generation of a first asymmetric key pair to the access device when the access device is tagged with the door lock; and a first asymmetric key pair generating step in which the access device generates the first asymmetric key pair including the first public key and the first private key.

In the door lock access permission determination method according to the present invention, in the certificate verification step, the door lock may verify the validity of the certificate with a second public key forming a key pair with the second private key.

In the door lock access permission determination method according to the present invention, in the access signature verification step, the door lock may verify the access signature by the first public key.

In the method for determining access permission of a door lock according to the present invention, the step of registering the access device may further include a determination mode conversion step in which the door lock is converted into an access/exit determination mode after the certificate generation step.

The method for determining access permission of a door lock according to the present invention may further include an access signature storing step of storing the access device information and the access signature in the door lock when it is determined that the access signature is valid in the step of determining whether access is permitted or not. can

According to the door lock system and the door lock access determination method according to the present invention, in the access device registration mode, the door lock only issues a certificate to the access device and does not store any information related to the access device. There is no limit to the number of items, and in the access determination mode, the first verification through the certificate and the second verification through the access signature are performed, so that security risks due to duplication of access devices can be prevented.

1 is a conceptual diagram of a door lock system according to an embodiment of the present invention.
Figure 2 is a flowchart of a method for determining whether a door lock is in and out according to an embodiment of the present invention.

Hereinafter, specific embodiments of the present invention will be described in detail with reference to the drawings. However, the spirit of the present invention is not limited to the presented embodiment, and those skilled in the art who understand the spirit of the present invention may add, change, delete, etc. other components within the scope of the same spirit, and may use other degenerative inventions or the present invention. Other embodiments included within the scope of the spirit of the invention may be easily proposed, but this will also be included within the scope of the spirit of the present invention.

Hereinafter, specific embodiments of the present invention will be described in detail with reference to the drawings.

In addition, components having the same function within the scope of the same idea shown in the drawings of the embodiments will be described using the same reference numerals.

1 is a conceptual diagram of a door lock system 100 according to an embodiment of the present invention.

Referring to FIG. 1 , the door lock system 100 according to an embodiment of the present invention includes an access device 110 and a door lock 120 that determines whether to allow access to the access device holder when the access device is tagged. can do.

The access device 110 may be provided in the form of a smart card or smart phone having an IC chip.

The door lock 120 may include a security domain, and the security domain is provided in the form of a security element (SE), a trust zone, or a microcontroller unit (MCU). can be

Here, the door lock 120 may be mutually converted into an access device registration mode for registering a new access device and an entry/exit determination mode for determining whether the owner of the access device is allowed to enter. The operation of the door lock system 100 by the door lock 120 may be different from that when the door lock 120 is in an access device registration mode and when the door lock is in an access or not determination mode.

First, an operation when the door lock 120 is in the access device registration mode will be described.

When the access device 110 is tagged with the door lock 120 in a state in which the door lock 120 is in the access device registration mode, the door lock 120 may request the access device 110 to generate an asymmetric key pair. .

Here, the access device 110 receiving a request to generate an asymmetric key pair from the door lock 120 may generate a first asymmetric key pair including a first public key and a first private key.

In this case, the access device 110 may store the first asymmetric key pair and transmit the first public key and access device information to the door lock 120 , and the access device information may be transmitted to the access device 110 . It may be a unique number that allows identification of.

Meanwhile, the security domain 121 provided in the door lock 120 may store a second asymmetric key pair including a second public key and a second private key that are an asymmetric key pair.

Through this, the door lock 120 , which has received the first public key and the access device information from the access device 110 , performs the door lock information, the access device information, and the first public information in the security domain 121 . A certificate may be generated by generating the second secret key in the key.

In this case, the certificate may be provided in the format of a general-purpose certificate defined by X.509.

Thereafter, the door lock 120 may transmit the certificate generated by the security domain 121 to the access device 110 , and the access device 110 may store the certificate.

As described above, since the door lock 120 generates the certificate in the access device registration mode and transmits it to the access device 110 , there is no need to separately store information on the access device 110 , It can have the advantage that there is no limit to the number of registrations.

On the other hand, after the door lock 120 transmits the certificate to the access device 110, it can be switched to the access determination mode.

The door lock 120 may request a certificate from the access device when the access device 110 is tagged in the entry/exit determination mode.

At this time, the access device 110 receiving the certificate request from the door lock 120 may transmit the certificate received from the door lock 120 to the door lock 120 in the access device registration mode.

The door lock 120 receiving the certificate may verify the validity of the certificate in the secure domain 121 .

Here, since the certificate is signed and generated by the second private key, the security domain 121 verifies the validity of the certificate through the second public key forming an asymmetric key pair with the second private key. can

At this time, if the validity of the certificate is not verified, the door lock 120 may determine that access is not allowed.

In addition, when the validity of the certificate is verified, the door lock 120 may generate a random number in the security domain 121 and transmit the random number and time information to the access device 110 .

On the other hand, the access device 110 receiving the random number and the time information may generate an access signature with the first secret key for the random number and the time information and deliver it to the door lock 120 .

The door lock 120 can verify the access signature in the security domain 121, and the security domain 121 decrypts the certificate with the second public key in the process of verifying the validity of the certificate. The access signature can be verified using the key.

In other words, the security domain 121 does not need to store the first public key received from the access device 110 in the access device registration mode in order to verify the access signature, and verifies the certificate in the access determination mode. The access signature can be verified through the first public key that can be confirmed in the process.

On the other hand, the door lock 120 may determine that access is possible when the access signature is verified, and when it is determined that the access is possible, the door lock 120 may store the access signature and access device information.

In this way, the door lock 120 can manage the access record by storing the access signature and access device information when it is determined that access is possible.

As described above, according to the door lock system 100 according to the present invention, in the access device registration mode, the door lock 120 only issues a certificate to the access device 110 and any information related to the access device 110 . There is no limit to the number of access devices 110 that can be accessed because it does not store the access device ( 110) can prevent security risks due to duplication, etc.

Hereinafter, with reference to the drawings, the door lock access permission determination method (S100) according to an embodiment of the present invention will be described in detail.

When the access device 110 storing the first asymmetric key pair including the first private key and the first public key is tagged in the door lock 120, the door lock access permission determination method S100 according to an embodiment of the present invention is It may be a door lock access permission determination method (S100) for determining whether the access device holder is allowed to enter or not.

2 is a flowchart of a method for determining whether a door lock is allowed in and out (S100) according to an embodiment of the present invention.

Referring to Figure 2, the door lock access permission determination method (S100) according to an embodiment of the present invention, an access device registration step (S110), a certificate request step (S120), a certificate transmission step (S130), a certificate verification step ( S140), a random number generation step (S150), a random number transmission step (S160), an access signature generation step (S170), an access signature validation step (S180), and an access signature storage step (S190) may be included.

In the access device registration step (S100), the door lock 120 generates a certificate and transmits it to the access device 110, so that when the access device 110 is tagged with the door lock 120 in the future, the door lock 120 allows access. It may be a step to determine that it is acceptable.

In other words, the access device registration step (S100) may be a step in which the door lock 120 generates a certificate and transmits it to the access device 110 to register the access device 110 to the door lock 120. .

In more detail, the access device registration step (S110) includes a registration mode conversion step (S111), a key pair generation request step (S112), a first asymmetric key pair generation step (S113), a first public key transfer step (S114), and a certificate It may include a generating step (S115) and a decision mode conversion step (S116).

On the other hand, the door lock 120 may be mutually converted into an access device registration mode for registering so that access is possible using a new access device and an access determination mode for determining whether the owner of the access device is allowed to enter or not.

In other words, the door lock 120 can add an access device 110 that can allow access in the access device registration mode, and can determine whether or not the owner of the access device 110 is allowed access in the access determination mode. have.

The registration mode conversion step (S111) may be a step in which the door lock 120 is converted to an access device registration mode.

The key pair generation request step S112 may be a step in which the door lock 120 requests the access device 110 to generate a first asymmetric key pair when the access device 110 is tagged with the door lock 120 .

The first asymmetric key pair generation step ( S113 ) may be a step in which the access device 110 generates a first asymmetric key pair according to the request of the door lock 120 .

Here, the first asymmetric key pair may be an asymmetric key pair including a first private key and a second public key.

In this case, the access device 110 may store the generated first asymmetric key pair.

The first public key transfer step S114 may be a step in which the access device 110 transmits the first public key and access device information to the door lock 120 .

In this case, the access device information may be information for identifying the access device 110 , and more specifically, may be a unique number for identifying the access device 110 .

In the certificate generation step (S115), the door lock 120 signs the door lock information, the access device information, and the first public key with the second private key stored in the door lock 120 to generate the certificate, and then It may be a step of transmitting the certificate to the access device 110 .

Here, the door lock 120 may have a security domain (Security Domain) provided by a security element (SE), a trust zone (TrustZone), or a microcontroller unit (MCU), the certificate generating step (S115) may be performed in the domain (Security Domain).

In addition, the security domain may store a second asymmetric key pair, the second asymmetric key pair may include the second private key and a second public key forming a key pair with the second private key. have.

The determination mode conversion step (S116) may be a step in which the door lock 120 is converted into an access or not determination mode after the certificate generation step (S115).

The certificate request step ( S120 ) may be a step in which the door lock 120 requests a certificate from the access device 110 when the access device 110 is tagged in the entry/exit determination mode.

That is, the door lock 120 performs the key pair generation request step (S112) when the access device 110 is tagged in the access device registration mode, and when the access device 110 is tagged in the entry/exit determination mode, the A certificate request step (S120) may be performed.

In the certificate transmitting step (S130), the access device 110 receiving the certificate request from the door lock 120 transmits the certificate received from the access device 110 in the certificate generating step (S115) to the door lock 120. It may be a step of transmitting.

The certificate verification step ( S140 ) may be a step in which the door lock 120 verifies the certificate received from the access device 110 .

In this case, the certificate verification step (S140) may be performed in the security domain.

Meanwhile, in the certificate verification step ( S140 ), the verification of the certificate may be performed by the second public key.

Since the certificate is generated by the second private key, it can be verified by the second public key forming an asymmetric key pair with the second private key.

In addition, by decrypting the certificate using the second public key, the door lock 120 can secure the first public key.

That is, the door lock 120 can secure the first public key in the certificate verification step (S140) without separately storing the first public key in the access device registration step (S110).

The random number generation step (S150) may be a step in which the door lock 120 generates a random number when it is determined that the certificate is valid in the certificate verification step (S140).

In this case, the random number generation step (S150) may be performed in the security domain.

The random number transmission step ( S160 ) may be a step in which the door lock 120 transmits the random number generated in the random number generation step ( S150 ) and time information corresponding to the time when the random number is generated to the access device 110 . .

In the access signature generating step (S170), the access device 110 generates an access signature with the first secret key for the random number and the time information transmitted in the random number transmission step (S160) and delivers it to the door lock 120 . It may be a step to

That is, the access signature may be generated by encrypting the random number and the time information with the first secret key in the access device 110 .

The access signature validation step (S180) may be a step in which the door lock verifies the access signature received in the access signature generation step (S170) using the first public key.

In this case, the access signature validation step (S180) may be performed in the security domain.

Meanwhile, the first public key used to verify the access signature in the access signature validation step (S180) may be obtained in the process of decrypting the certificate in the certificate verification step (S140).

Through this, even if the door lock 120 does not separately store the first public key in the access device registration step (S110), the first public key can be secured in the certificate verification step (S140), so that the access signature In the validation step, the validity of the access signature may be verified through the first public key.

The access signature storing step (S190) may be a step in which the door lock 120 stores the access device information and the access signature when the access signature is validated in the access signature validation step (S180).

In this way, in the access signature storage step (S190), the access device information and the access signature are stored in the door lock 120, and the door lock 120 manages the access history using the access device information and the access signature. can do.

As described above, according to the door lock access determination method (S100) according to the present invention, the door lock 120 only issues a certificate to the access device 110 in the access device registration step (S110). Since it does not store any information related to , there is no limit to the number of access devices 110 that can be accessed, and the validity of the certificate is verified by the second public key in the certificate verification step (S140), and the access signature is performed. In the validation step (S180), the mutual verification over two steps of verifying the validity of the access signature by the first public key secured in the certificate verification step (S140) is performed, so that the access device 110 is copied, etc. security risks can be avoided.

In the above, an embodiment of the present invention has been described in detail, but the scope of the present invention is not limited thereto, and various modifications and variations are possible within the scope without departing from the technical spirit of the present invention described in the claims. It will be apparent to those of ordinary skill in the art.

100: door lock system according to an embodiment of the present invention
110: access device 120: door lock
121: Security Domain
S100: Method for determining whether a door lock enters or exits according to an embodiment of the present invention
S110: access device registration step S111: registration mode conversion step
S112: key pair generation request step S113: first asymmetric key generation step
S114: first public key delivery step S115: certificate generation step
S116: judgment mode conversion step S120: certificate request step
S130: Certificate transmission step S140: Certificate verification step
S150: Random number generation step S160: Random number transmission step
S170: Access signature generation step S180: Access signature validation step
S190: Access signature storage step

Claims (21)

An access device for storing a first asymmetric key pair including a first private key and a first public key; and
When the access device is tagged, a door lock that determines whether to allow access to the holder of the access device; includes;
The door lock requests a certificate from the access device when the access device is tagged,
When the access device receives a certificate request from the door lock, it transmits the stored certificate to the door lock,
When the door lock verifies the validity of the certificate and it is confirmed that the certificate is valid, the door lock generates a random number and transmits the random number and time information to the access device,
The access device generates an access signature with the first secret key for the random number and the time information and delivers it to the door lock,
The door lock is a door lock system, characterized in that by verifying the access signature to allow access when the access signature is verified.
The method of claim 1,
The door lock has a security domain,
The security domain is
If it is verified that the certificate is valid by verifying the validity of the certificate, a random number is generated,
A door lock system, characterized in that verifying the access signature.
3. The method of claim 2,
The security domain is a security element (SE), a trust zone (TrustZone), or a microcontroller unit (Micro Controller Unit, MCU) door lock system, characterized in that provided with.
According to claim 1,
The door lock stores a second asymmetric key pair including a second private key and a second public key,
The certificate is signed with the second secret key, the door lock system, characterized in that generated in the door lock.
5. The method of claim 4,
The access device transmits the first public key and the access device information to the door lock,
The certificate is a door lock system, characterized in that the door lock information, the access device information, and the first public key is signed with the second private key to generate in the door lock.
6. The method of claim 5,
The door lock system, characterized in that the access device information is a unique number for identifying the access device.
6. The method of claim 5,
The first asymmetric key pair is a door lock system, characterized in that generated by the access device in response to the key generation request of the door lock.
8. The method of claim 7,
The door lock system, characterized in that the verification of the validity of the certificate with the second public key.
8. The method of claim 7,
The door lock is a door lock system, characterized in that for verifying the access signature by the first public key.
According to claim 1,
The door lock is a door lock system, characterized in that to store the access signature when access is allowed.
In the door lock access permission determination method for determining whether the access device holder is allowed access when an access device storing a first asymmetric key pair including a first private key and a first public key is tagged in the door lock,
a certificate request step in which the door lock requests a certificate from the access device when the access device is tagged with the door lock;
a certificate transmission step in which the access device receiving a certificate request from the door lock transmits the certificate to the door lock;
a certificate verification step of verifying the validity of the certificate received by the door lock;
a random number generation step of generating a random number when it is confirmed that the certificate is a valid certificate in the certificate verification step;
a random number transmission step in which the door lock transmits the random number and time information corresponding to the time when the random number is generated to the access device;
an access signature generating step in which the access device generates an access signature with the first secret key with respect to the random number and the time information and transmits it to the door lock; and
and an access signature validation step of allowing the access of the holder of the access device when the door lock verifies the access signature and determines that the access signature is valid.
12. The method of claim 11,
The door lock has a security domain,
The authentication verification step, the random number generation step, and the access signature validation step are performed in the security domain.
13. The method of claim 12,
The security domain is a security element (SE), a trust zone (TrustZone), or a microcontroller unit (Micro Controller Unit, MCU) characterized in that provided with a door lock access permission determination method.
12. The method of claim 11,
Before the certificate request step, the door lock generates the certificate and transmits it to the access device, thereby registering the access device to the door lock.
15. The method of claim 14,
The access device registration step is,
a first public key transfer step in which the access device transmits the first public key and access device information to the door lock;
The door lock generates the certificate by signing the door lock information, the access device information, and the first public key with the second private key stored in the door lock, and then transmitting the certificate to the access device; Door lock access permission determination method comprising a.
16. The method of claim 15,
The door lock system, characterized in that the access device information is a unique number for identifying the access device.
16. The method of claim 15,
The door lock is capable of mutual conversion between an access device registration mode for registering a new access device and an entry/exit determination mode for determining whether the owner of the access device is permitted to enter or not,
The access device registration step is,
Before the first public key transfer step,
a registration mode conversion step of converting the door lock into an access device registration mode;
a key pair generation request step of requesting, by the door lock, the generation of a first asymmetric key pair to the access device when the access device is tagged with the door lock; and
The door lock system further comprising a; a first asymmetric key pair generating step of generating the first asymmetric key pair including the first public key and the first private key by the access device.
18. The method of claim 17,
In the certificate verification step, the door lock system, characterized in that the verification of the validity of the certificate with a second public key forming a key pair with the second secret key.
18. The method of claim 17,
In the access signature verification step, the door lock is a door lock system, characterized in that the verification of the access signature by the first public key.
18. The method of claim 17,
The access device registration step is,
After the certificate generating step, a determination mode conversion step in which the door lock is converted to an access determination mode;
12. The method of claim 11,
When it is determined that the access signature is valid in the access permission determination step, the door lock stores the access device information and the access signature storing step; the door lock access determination method further comprising a.

Images