DE102012203313A1 - Method for identifying a person - Google Patents

Abstract

The invention relates to a method for identifying a person based on an identity document in an identification system having a plurality of spatially distributed identification control points, detecting (601) an identity date from the identification document of the person by a first identification control point, and providing (603) the acquired identity data for a person second identification control point according to a queue criterion.

Description

In sovereign security-related areas, such as at airports, the identity of a person traveling has to be checked several times. For this purpose, usually spatially distributed identification control points of a control system, such as a border control system (Border Control System), are provided.

In order to collect identity data, each identification control point has a document reading device which reads out the identity data, for example a name of the person, on the basis of an identity document. For this purpose, the person himself or a border official can supply the identification document to the document reader.

However, the multiple detection of the identity data at or by the identification control points is associated with a high level of complexity and with a high level of personnel expenditure and also leads to an increase in throughput times for persons to be identified who have to pass a plurality of identification checkpoints.

It is therefore the object of the present invention to provide a concept for the efficient identification of persons in an identification system with spatially distributed identification control points.

This object is solved by the features of the independent claims. Advantageous forms of further development are the subject of the dependent claims, the description and the drawings.

The present invention is based on the finding that the above object can be achieved by a unique detection of identity data in an identification system of the aforementioned type. The captured identity data, such as a person's name and place of residence, may then be transmitted to a central server entity and provide to one or more of the spatially distributed identification control points of the identification system such that the identity data is displayed by the respective identification control point, for example whose ads are needed. This can be realized by providing the identity data for the respective identification control point according to a queue criterion. The queue criterion may be, for example, an arrangement of a person in a queue in front of the respective identification control point.

In addition, when acquiring the identity data, in particular when first collecting the identity data in an identification system, a reference identification feature can be detected and assigned to the identity data. The reference identifier is an individual identifier and may be, for example, a biometric feature of the person, such as a fingerprint or an image of the eye iris. By capturing a fingerprint of the respective person at one of the distributed identification control points, this can be compared with the reference identification features pre-stored as data records. When in accordance with one of the stored reference identification features, another security mechanism can be implemented to ensure that the identity data associated with each person is displayed.

According to one aspect, the invention relates to a method for identifying a person based on an identity document in an identification system having a plurality of spatially distributed identification control points, detecting an identity date based on the identification document of the person by a first identification control point; and providing the acquired identity data for a second identification control point according to a queue criterion.

The spatially distributed identification control points can communicate with each other via a wireless or a wired communication network. Thus, for example, the first identification control point can transmit the detected identity data, which may include information from a MRZ, via the communication network to a second identification control point via the central server device with which the spatially distributed identification control points communicate via the communication network.

The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. For example, a traveler can place his identity document on a document window of the document reader as part of the self-service, whereby the identity date can be detected optically or electronically.

The second identification control point may, for example, be a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard.

According to an embodiment, the detected identity data in the step of providing a plurality of identification checkpoints is the A plurality of spatially distributed identification control points simultaneously or sequentially, in particular depending on a location of the person provided.

According to one embodiment, the location of the person is recorded. The detection can be done, for example, by a camera-assisted personal monitoring with biometric matching or on the basis of the location of a communication device of the person, such as a smartphone, or on the basis of a bar code, which can be determined by which identification control point the person is currently pending. For this purpose, the identification control points can be provided with bar code readers.

According to one embodiment, the step of providing comprises displaying the detected identity data by the second identification control point, which in particular comprises displaying the detected identity data in accordance with the queue criterion. The display can be effected for example by means of a display device, such as a screen.

To display the identity date, for example, a known graphical display can be used, with which the respective identification control point can be equipped.

According to one embodiment, the step of providing comprises selecting the second identification control point from the plurality of spatially distributed identification control points.

According to one embodiment, the step of providing comprises associating the detected identity data with the second identification control point.

According to one embodiment, the providing step comprises storing the acquired identity data in a memory area allocated to the second identification control point, in particular in a memory area of a database of a central server device.

According to one embodiment, the detected identity data is stored in a table of the memory area according to the queue criterion.

According to one embodiment, for example, when the person is forwarded to a third identification control point, the assignment of the detected identity data to the second identification control point is resolved and the detected identity data of the third identification control point is provided according to another queue criterion.

According to one embodiment, the respective queue criterion is one of the following criteria:
Seniority of recording the recorded identity date,
Arranging the acquired identity date in an order of acquired identity data,
Seniority of an assignment of the detected identity date to the second identification control point,
Seniority of providing the acquired identity date to the second identification control body,
Arranging the detected identity data in an order of detected identity data associated with the second identification control point,
Arranging the detected identity data in an order of detected identity data to be displayed by the second identification control point,
Arranging the detected identity data in an order of detected identity data provided to the second identification control point.

According to one embodiment, the detected identity data of the second identification control point is provided via a central server entity.

According to one embodiment, the identity date is a date of a machine-readable zone of the identity document. The identity date can include, for example, a name of a person, their place of birth, their date of birth and / or their place of residence.

According to one embodiment, the method comprises creating a reference identification feature of the person, and associating the reference identification feature with the detected identity date.

According to one embodiment, the method comprises detecting an identification feature of the person by a second identification control point, and displaying the detected identity data by the second identification control point when the detected identification feature matches the reference identification feature.

The reference identification feature can be automatically created by the first identification control point, for example by recording a biometric feature. By assigning the reference identifier to the detected identity date, identifiers of persons such as theirs biometric features used to retrieve or display the collected identity date.

According to one embodiment, the detected identification feature is compared with the reference identification feature, wherein upon coincidence of the detected identification feature and the reference identification feature, the detected identity data of the second identification control point is provided.

According to one embodiment, the reference identifier and the detected identity datum are stored as mutually associated datasets. The data records assigned to one another can for example be assigned to one another in a table in a database or stored together. The database can be provided, for example, by the central server entity.

According to one embodiment, the detected reference identifier and / or detected identity data are stored in a database.

According to one embodiment, the detected identifier is compared with the reference identifier, and upon coincidence of the detected identifier and the reference identifier, the detected identity data is provided to the second identifier. The comparison of the detected identification feature with the reference identification feature can be carried out, for example, feature-wise. If the detected identity date is stored, for example, in a database of a central server entity, then the detected identity data can be transmitted to the second identification control point via a communication network.

According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a document that can be created by the first identification control point, in particular a ticket Feature of the identity document, in particular a content of a machine-readable zone of the identity document.

According to one embodiment, the method comprises detecting an identification feature of the person by a third identification control point and displaying the detected identity data by the third identification control point when the detected identification feature matches the reference identification feature. The third identification control point may communicate with the first identification control point or with the central server entity as stated above and below.

According to one embodiment, the first identification control point comprises a document reader for detecting the identity date on the basis of the identity document, wherein the identity date is detected by means of the document reading device, in particular optically or electrically.

According to a further aspect, the invention relates to an identification control system having a plurality of spatially distributed identification control points, which are configured to communicate with each other via a communication network, with a server entity, a first identification control point for acquiring a person's identity date from an identification document, wherein the first identification control point is formed the transmitted identity data is to be transmitted to the server identity, and wherein the server entity is adapted to provide the detected identity data for a second identification control point according to a queue criterion, in particular according to the aforementioned queue criterion.

The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. For example, a traveler can place his identity document on a document window of the document reader as part of the self-service, whereby the identity date can be detected optically or electronically.

The second identification control point may, for example, be a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard.

According to one embodiment, the first identification control point comprises a document reader for detecting the identity date on the basis of the identity document, wherein the identity date is detected by means of the document reading device, in particular optically or electrically. The identification control points can communicate with each other and / or with a central server entity via a communication network. The central server entity can, for example, store and provide the acquired identity data as well as the created or recorded reference identification features in a database.

According to one embodiment, the first identification control point comprises a document reader for detecting the identity date on the basis of the identity document, wherein the identity date is detected by means of the document reading device, in particular optically or electrically.

According to one embodiment, the identification control system comprises reference detection means for establishing a reference identification feature of the person, a first identification control point for detecting a person's identity date from an identification document, the identification control point being further adapted to associate the reference identification feature with the acquired identity date, and a second identification control location for detecting an identification feature the person, wherein the second identification control point is further configured to compare the detected identifier with the reference identifier and display the detected identity data by the second identification control point in accordance with the detected identifier with the reference identifier feature.

According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a document that can be created by the first identification control point, in particular a ticket Feature of the identity document, in particular a content of a machine-readable zone of the identity document.

The reference detection device may be formed, for example, a device for receiving a biometric feature or for communication with a communication device of the respective person.

According to one embodiment, the server entity comprises a database, wherein the first identification control point is adapted to transmit the detected identity data to the server entity, wherein the reference detection means is adapted to transmit the reference identification feature to the server entity, the server entity being formed, the detected identity data and the Store reference identifier in the database and transmit to the second identification control point.

According to one embodiment, the identification control system is designed or program-technically configured to carry out the method according to the invention for identifying a person.

According to a further aspect, the invention comprises a computer program with a program code for implementing a method according to the invention or for controlling the identification control points of the identification control system.

Further embodiments will be explained with reference to the accompanying drawings. Show it:

1 an identification control system having a plurality of spatially distributed identification control points;

2 an example of a display of identity data using a graphical user interface;

3 a graphical user interface with a spatial plan of the identification control system;

4 a graphical user interface with a spatial plan of the identification control system;

5 a block diagram with software components for carrying out the functionality of the identification system;

6 a diagram of a method for identifying a person based on an identity document in an identification system;

7 a dynamic management of persons in an identification system with a first identification control point; and

8th a diagram of a method for identifying a person based on an identity document in an identification system.

1 shows an identification control system with a plurality of spatially distributed identification control points 101 . 103 . 105 . 107 . 109 . 111 and 113 , The identification checkpoints are established via a communication network 115 to communicate. The identification control system comprises a central server entity 117 , which is also set up over the communication network 115 to communicate. The central server entity 117 includes, for example, a server 123 with a database 125 and an optional GCS SW 127 ,

It is also an optional server entity 119 provided, for example, a blacklist server 129 , a database 131 and a blacklist SW facility 133 may include. In the database 131 For example, a blacklist of preregistered persons may be stored.

Optionally, surveillance cameras 135 . 137 be provided, which via the communication network 115 to be able to communicate.

The identification system can be set up, for example, with communication devices 139 . 141 for example via a wireless communication network 115 to communicate. This communication may be initiated, for example, to obtain identification information about the communication devices, such as a SIM card number, which may serve as reference identification features.

The identification checkpoints 101 . 103 may be set up as first identification control points, which can capture identity data of persons based on identity documents. For this purpose, the first identification control points 101 . 103 Document readers 143 . 145 comprise, which are set up, the identity data, which are included for example in an MRZ of an identity document, for example, to capture optically and this via the communication network 115 to the central server entity 117 or to another identification control point 105 . 107 . 109 . 111 . 113 transferred to.

The first identification checkpoints 101 . 103 For example, they may be set up as so-called kiosks or eGates which allow self-service by the person to be identified. For example, travelers can independently submit their identity documents to the document readers 143 . 145 respectively.

The server entity 117 is preferably configured to provide the detected identity data for a second identification control point in accordance with a queue criterion.

The queue criterion is, for example, one of the following criteria: time of occurrence of the acquired identity date, location of the acquired identity date in an order of acquired identity data, priority of assignment of the acquired identity date to the second identification control point, priority of providing the acquired identity date for the second identification control point, location the acquired identity data being arranged in an order of acquired identity data associated with the second identification control point, ordering the detected identity data in an order of detected identity data to be displayed by the second identification control point, arranging the detected identity data in an order of acquired identity data indicative of the identity data second identification control point were provided.

The first identification checkpoints 101 . 103 can optionally reference detection devices 102 . 104 which are adapted to receive reference identification features of persons, such as biometric features. The first identification checkpoints 101 . 103 can also use PC entities 147 . 149 include, which cause the communication with the communication network and, for example, the document readers 143 . 145 Taxes.

The identification checkpoints 105 . 107 . 109 . 111 and 113 can each with display devices 151 . 153 . 155 . 157 and 159 be equipped. The display devices 151 . 153 . 155 . 157 and 159 can be provided to display each an identity date or identity data, for example, in a graphical window. The identification checkpoints 105 . 107 . 109 . 111 and 113 may also be provided with feature detection means 161 . 163 . 165 . 167 equipped to receive identification features of persons and to compare them with pre-stored reference identification features in order to display the identity data assigned to the respective person and previously recorded. The identification checkpoints 105 . 107 . 109 . 111 and 113 can each with PCs 169 . 171 . 173 . 175 and 177 be provided over the network 115 for example, with the central server entity 117 communicate in order to transfer the detected identification features there or to retrieve the acquired identity data. Furthermore, the identification control points 105 . 107 . 109 . 111 and 113 Reference detection means for detecting reference identification features. However, the reference identification features could also be provided by means of the feature detection means 161 . 163 . 165 . 167 be recorded.

The identification checkpoints 105 . 107 . 109 . 111 and 113 For example, they may be formed as so-called primary or secondary control points with an administration functionality or without an administration functionality. The display devices 151 . 153 . 155 . 157 and 159 For example, graphical user interfaces can be displayed, wherein identity data of the persons and / or their identification documents can be displayed in a browser window.

Is one of the identification checkpoints 105 . 107 . 109 . 111 and 113 as so-called supervisor Control point formed, it may, for example, all detected identity data of active travelers in a browser window of a graphical user interface on the display device 151 . 153 . 155 . 157 and 159 provide.

If one of the identification control points is provided with an administration functionality, then there can be created, deletion or modification of roles, rights or process sequences or rules.

The central server entity 117 is intended to store the identity data of the persons as well as their documents, such as document numbers. In addition, the central server entity 117 be provided to store the results of a review of persons and / or documents for authenticity and, where appropriate, status information.

The server entity 117 it may be provided to compile the data to be displayed at the identification control points, to process it graphically, for example by entering it in a graphic window, and via the communication network 115 to the server entities of the control points or to their browsers. This information can be displayed by the browsers.

In addition, the central server entity 117 be provided to query internal or external databases, for example, to retrieve identity data, which are assigned to certain reference identification features. The central server entity 117 may also be provided to manage login data and to store decisions at the identification control points, which may concern the identification or non-identification of persons.

The central server entity 117 can also be provided to run any applications of the identification system.

The components of the database 125 may be configured to store all identification data of persons, monitoring or login data.

The central server entity 117 may also be provided to log and save the decisions made by, for example, a border official.

According to one embodiment, the central server entity 117 be further configured to perform a document counterfeit detection. For this purpose, the document readers 143 . 145 For example, be provided to record security features of identity documents visually or electronically and this to the central server entity 117 transferred to. The central server entity 117 can compare the captured security features with pre-stored patterns to perform a verification of the identity documents. All test results linked to the traveler's identity data can be stored in the database 125 stored and provided to the identification checkpoints. This eliminates the need to constantly check the authenticity of identity documents.

The central server entity 117 may also be configured to direct the persons to the respective identification control points. For this purpose, the central server entity can decide based on predetermined rules, for example. The predetermined rules may be provided, for example, in the form of a rule engine or by an executable computer program. As a result, instructions can be made available, for example, to guide certain persons to lead identification control posts.

If one of the identification control stations is equipped with the supervisor functionality, then identity data of all persons located within the identification system can be displayed there, for example. In addition, for example, a status of a documentary check for authenticity, in particular passed, failed or incomplete, can be represented. The identification control point set up as a supervisor can, for example, be linked with the identification checkpoints set up as primaries or secondaries in order to activate the respective user interface. In addition, the identification control body, set up as a supervisor, can use the in 1 linked webcams link.

The document readers can, for example, be set up as document testers. They can be stationary or mobile.

As mentioned above, the identity data, or the identity data if appropriate, together with a content of an identification document, such as an image of a person, can be displayed by means of a graphic user interface (GUI).

Is one of the in 1 set up identification control points as a supervisor, it may display a picture of some identification control points and, for example, travelers on a graphical user interface.

2 shows an example of a display of identity data using a graphical user interface, with an image 201 a person who can be created for example by capturing a passport photo. In addition, for example, a window 203 be arranged in the identity data, in particular data of the machine-readable zone (MRZ: Machine-Readable Zone) are summarized. These data may include, for example, a first name, a last name, the gender of the respective person and the expiration date of an identification document, a date of birth, the issuing state, the nationality or the document number. In addition, for example, an entry date can be displayed in the identification control system.

The graphical user interface may further include controls, such as an access-rejection panel 205 or an admission permit field 207 , include. By pressing the entry rejection field 205 the access rejection is documented and saved if necessary. By pressing the access permission field 207 however, access is granted and documented.

The graphical user interface may further include an area 209 comprise, in the illustration captured by means of identification documents 209a , Illustration 209b , Illustration 209c represented by persons in the order in which these persons are present at the respective identification control point in a possible queue.

Optionally, further selectable areas may be provided, such as for displaying a facial image of a person stored on a chip of an identification document, 210 , an area with a document display 211 in which white light, infrared (IR) and / or ultraviolet (UV) images of identification documents are displayed. These recordings can be made by means of the document readers of the first identification checkpoints 101 . 103 be included. In addition, an area can 213 be provided by displaying, for example, recorded biometric features, such as fingerprints. Further, an area 215 be provided by presenting the test results based on the examination of an identification document, the results of examinations of external systems, such as blacklist servers and / or status in the system of previous decisions by, for example, border officials, such as entry, rejection or delegation. If abnormalities or errors occur, you can use the corresponding tabs, which correspond to the respective areas 210 . 211 . 213 . 215 are connected, in a signal color, for example, red, colored.

3 and 4 show a graphical user interface with a spatial plan of rooms in which the identification control system is installed. The graphical user interface may, for example, first identification control points 301 . 303 . 305 which are provided, for example, for collecting identity data. The graphical user interface may further include second identification control points 307 . 309 respectively. 311 Show. These can be set up, for example, as secondaries or as primaries. Furthermore, the graphical user interface locks 317 . 319 Show. In addition, places with surveillance cameras can 321 . 323 are displayed.

The graphical user interface may also display pictograms of persons, for example, in queues in front of the respective locks or in front of the respective identification checkpoints 305 . 309 queue. The personal pictograms can be highlighted in color, for example. Thus, for example, person pictograms shown as green 325 indicate that an examination of the identity documents of the pending persons and possibly blacklist queries are without error. A red marking of person pictograms 327 indicates that anomalies in the verification of the identity documents or blacklist queries have occurred. Gray person pictograms 339 show, for example, that a review of the identity documents has not been completed.

The corresponding graphical user interfaces of these stations, such as those in 2 can be displayed at the identification control points, for example by clicking on a field 305 . 307 . 309 . 311 be retrieved. This allows the data displayed at the respective identification control points to be displayed.

The surveillance camera symbols 321 . 323 For example, they can be connected to controlled cameras via a communication network or via a link, so that when selecting the respective camera symbol 321 . 323 a browser window is opened, which displays a real-time image of the respective camera.

According to one embodiment, the color representation or highlighting of the person from a number of persons, for example, from five persons, are summarily presented.

The functionality of the identification system can be realized, for example, by means of a software program whose routines, for example, run centrally on a server entity.

5 shows a block diagram with software components for performing the functionality of the identification system. The software architecture includes the monitoring and login functionality 501 , the backend functionality 503 , the administration functionality 505 as well as the functionality of the identification checkpoints 507 , The software architecture also includes peripheral support 509 , Database components 511 as well as application server components 513 which, for example, run on the central server entity.

6 shows a flowchart of a method for identifying a person based on an identity document in an identification system with a plurality of spatially distributed identification control points, with capture 601 an identity date on the basis of the identification document of the person by a first identification control point, and provide 603 the detected identity data for a second identification control point according to a queue criterion.

For detecting the identity date, a document reader can be used which, for example, can optically read out the data of the MRZ or electronically store the data stored on a chip of the identity document.

According to one embodiment, the persons residing within the identification control system may be managed. 7 illustrates a dynamic management of persons in an identification system using a graphical user interface, with an image of a first identification control point 701 , which is for example set up as a kiosk, with an image of a second identification control point 703 , which is set up, for example, as a primary, with an image of a third identification control point 705 , which is set up, for example, as Secondary, and with an image of a fourth identification control point 707 which is an eGate, for example.

Furthermore, states "access" 709 and "rejection" 711 displayed. In addition, a ground state 713 intended.

For example, the persons may be from the second identification control point 703 to the third identification control body 705 be continued, for example, if an automatic verification of the identity data has failed. Otherwise the persons are granted access. The third identification control body 705 can check the identity data again and either grant or deny access. For example, suggests checking the identity data at the fourth identification control point 707 fail, the data subjects may go to the third identification control body 705 to get redirected.

8th shows a diagram of a method for identifying a person based on an identity document in an identification system, for example in the above-described identification system with spatially distributed identification control points. The method includes detection 801 an identity date based on the identification document by a first identification control point, the optional creation 803 a reference identifier of the person, the assignment 804 the reference identifier to the detected identity date, for example, by a combination of records, the detection 805 an identification feature of the person by a second identification control point and the display 807 the detected identity date by the second identification control point if the detected identification feature matches the reference identification feature.

An advantage of the concept according to the invention is the shortening of the throughput times for travelers, with the use of fewer personnel and, as a result, cost savings for the operator.

• 1. Wartezeit in einer Schlange vor einer Identifikationskontrollstelle wie Kontrollbox bzw. Primary, welche durch einen Grenzbeamten bei hohem Personenaufkommen bedient werden kann,
• 2. Dauer des Lese- und Prüfvorgangs für ein Identitätsdokument,
• 3. Beurteilung der Relevanz der Prüfergebnisse und Dauer der Prüfung und Befragung eines Reisenden durch einen Grenzbeamten

The throughput times consist of the following steps:

• 1. Waiting in line at an identification control center, such as a control box or primary, which can be served by a border guardsman in the event of high numbers of passengers,
• 2. duration of the reading and verification process for an identity document,
• 3. Assessment of the relevance of the test results and duration of the test and interview of a traveler by a border official

By parallelizing steps 2 and 3, a reduction in throughput times can be achieved.

In the following an embodiment for the parallelization and the use of the waiting time in the queue is described:

The travelers are stopped, for example, at a first identification control point, which a second identification control point, such as a checkpoint, independently the identity document on a document reader, which may be a document tester. to lay. Thus, the identity data for the traveler is read in and checked, step 2, while the border guard serves another traveler for whom step 2 has already been completed, step 3.

The traveler assumes the task of document placement itself, which was previously carried out by the border official. According to one embodiment, the document verification takes place automatically and can not be influenced by the traveler.

A traveler can always be uniquely connected and identified with his identity data in the identification system based on individual identification features.

• • Gesichtsbild, das durch ein Video- oder Kamera Identifikationssystem aufgenommen werden kann
• • Fingerabdruck, der durch ein Fingerabdrucklesegerät aufgenommen werden kann,
• • Identitätsdokumente der Reisenden, z.B. Pässe oder Smartcards, aus welchen z.B. die MRZ, Fingerabdrücke oder Gesichtsbilder verwendet werden können,
• • Kommunikationsgeräte, wie Mobiltelefone oder Smartphones, welche beispielsweise über Bluetooth oder NFC kommunizieren können, und
• • Tickets mit z.B. Barcodes, welche ausgedruckt und an anderen Identifikationskontrollstellen eingelesen werden können.

A traveler can, for example, when registering a document, active or passive, for example, by placing a passport on a document verification device in the identification system based on the MRZ data, an individual identity document and optional additional identity data clearly detected. From this point on, a traveler can be identified at any time in the identification system by means of individual identifiers associated with his identity data. Possible individual identification features are, for example:

• • Face image that can be captured by a video or camera identification system
• • fingerprint that can be picked up by a fingerprint reader
• • Identity documents of the travelers, eg passports or smartcards, from which eg the MRZ, fingerprints or facial images can be used,
• • Communication devices, such as mobile phones or smartphones, which can communicate via Bluetooth or NFC, for example, and
• • Tickets with barcodes, for example, which can be printed out and read in at other identification checkpoints.

The validity of an individual identifier may expire upon the final decision by a border official to allow passage.

If the traveler with the same identity document reappears in the identification system after the final decision, a new data record with a new individual identification feature is generated.

For example, if a facial image is used as an individual identifier, a traveler may be detected by placing his identity document on a document validator in the identification system, as well as a facial image of the traveler.

The traveler is then found in the identification system by using the individual identifier in the identification system data. Thus, the traveler can be identified by comparing a real-time image of a video camera with the previously detected reference identifier and outputting or displaying the associated identity record.

An identification control system may, in one embodiment, be linked by linking two or more identification control points, e.g. a kiosk system is created, realized. In this case, the identity data are recorded at a first identification control point and processed at the second identification control point linked to the first one. Such a link can be realized between kiosks with self-service and primary or between primary and secondary or e-gates with a slave station.

In the following, a kiosk system will be described by way of example.

In a simple kiosk mode with a 1: 1 relationship, for example, a first identification control point as a kiosk and a second identification control point as a primary are linked together. The travelers will arrive at Primary in the order in which they have their identity documents on the document reader of the first identification control point. At the Primary, the border guards receive the identity document from the traveler. The assignment of the traveler to his identity data may be based on the facial image and the order of those waiting in line by the border official or automatically using one of the defined individual identification features.

Hereinafter, an embodiment will be described in consideration of the order of those waiting in line.

Two travelers A and B arrive at a first identification control station, e.g. to a kiosk, and sequentially place their identity documents on the document reader. Since the traveler A is in the queue in front of a second identification control point in front of the traveler B, his identity data is there automatically displayed first. If the traveler A passes the second identification control point, his identity data can be replaced by identity data of the traveler B.

In a multiple kiosk mode with an n: m relationship, one or more kiosks and primaries are linked together in a group. The travelers are forwarded from a kiosk to suitable Primarys.

If forwarded to the queue of a suitable primary, information is sent the traveler and his assigned Primary, for example, directly at the kiosk.

When forwarding to an end of a queue, at the beginning of which several Primarys are available, the first standing traveler can be forwarded to an appropriate Primary. The forwarding information (who, where, where) is automatically provided at the beginning of the queue based on the defined individual identification feature. At the Primary, a border official receives the identity document from the traveler. The assignment of the traveler to his identity data is done, for example, based on the facial image and the order of waiting in line by the border officials. For example, the order of the waiting travelers results either automatically from a time of their forwarding to a primary or from the use of one of the defined individual identification features.

Hereinafter, an embodiment using the dedicated assignment to a primary will be described.

A traveler is recognized as an English citizen after placing his identity document on a document validator at a German airport. For example, the identification system is configured to forward English-speaking travelers to a checkpoint with an English-speaking border official. At the kiosk, the traveler receives a message, in English, to which checkpoint he should go. Its identity data record is assigned to the queue of the corresponding control point. As soon as he arrives in front of the local border official, his identity data is automatically determined by e.g. his facial image displayed.

The following describes a dynamic wait management of travelers. By creating an individual identification feature when reading an identity document for the first time, which serves as a reference identification feature, the same data set can be repeatedly accessed at all other accesses at different identification control points, thereby avoiding the generation of duplicates. This also means that no virtual long queues form before a second identification control point, for example a primary, because repeated duplicates of the identity data are also not generated by repeated read-in of the identity data.

In the following, snake hopping, also called line hoping, is described:
A traveler whose identity data is already linked to an identification checkpoint A and subsequently registers at another identification checkpoint B is linked to this and automatically removed from the identification checkpoint A.

An exemplary embodiment is, for example, the laying on of an identity document by a traveler at a first identification checkpoint, for example at a kiosk, with automatic forwarding to a second identification checkpoint, for example to an associated primary. While waiting in line at the primary, the traveler spontaneously decides to leave to use an eGate. At the eGate, it is registered and automatically removed from the queue at the Primary at the same time - its identity data is now linked to the eGate used.

If a traveler can not pass an eGate and, for example, subsequently registers to the reader of a first identification control point, for example a kiosk, it is sorted into the corresponding queue of a primary and is no longer linked to the eGate.

According to one embodiment, mobile terminals such as smartphones may be substituted for identification control stations or may be used for, for example, the detection of reference identification features. Using one of the individual identifying features as reference identifying features of this traveler e.g. a fingerprint or a facial image or the data of an MRZ of the identity document, the traveler's identity data may be retrieved and assigned to that mobile checkpoint. At the same time, the identity data can be deleted from the original queue of the identification control point A. This can shorten the queue.

The exemplary embodiments described above by way of example can be used in any control, entry and ticket identification systems, for example for stadiums, exhibition centers or railways.

LIST OF REFERENCE NUMBERS

101

 Identification Control Authority

102

 Reference detector

103

 Identification Control Authority

104

 Reference detector

105

 Identification Control Authority

107

 Identification Control Authority

109

 Identification Control Authority

111

 Identification Control Authority

113

 Identification Control Authority

115

 Communication network

117

 central server entity

119

 server entity

123

 server

125

 Database

127

 GCS-SW

129

 Blacklist servers

131

 Database

133

 Blacklist SW facility

135

 Security Camera

137

 Security Camera

139

 communication device

141

 communication device

143

 Document reader

145

 Document reader

147

 server entity

149

 server entity

151

 display device

153

 display device

155

 display device

157

 display device

159

 display device

161

 Feature detector

163

 Feature detector

165

 Feature detector

167

 Feature detector

169

 server

171

 server

173

 server

175

 server

177

 server

201

 image

203

 window

205

 Access dismissal field

207

 Access permission field

209

 Area

209a

 Illustration

209b

 Illustration

209c

 Illustration

210

 Area

211

 Area

213

 Area

215

 Area

301

 Identification Control Authority

303

 Identification Control Authority

305

 Identification Control Authority

307

 Identification Control Authority

309

 Identification Control Authority

311

 Identification Control Authority

317

 lock

319

 lock

321

 Security Camera

323

 Security Camera

325

 people pictogram

327

 people pictogram

339

 people pictogram

501

 Login functionality

503

 Backend Functionality

505

 Administration functionality

507

 Functionality of the identification control body

509

 peripheral support

511

 Database Components

513

 Application Server Components

601

 To capture

603

 Provide

701

 Identification Control Authority

703

 Identification Control Authority

705

 Identification Control Authority

707

 Identification Control Authority

709

 access

711

 rejection

713

 ground state

801

 To capture

803

 Create

804

Assign

805

 To capture

807

 Show

Claims (15)

Method for identifying a person based on an identity document in an identification system having a plurality of spatially distributed identification checkpoints, comprising: 601 ) an identity date based on the identification document of the person by a first identification control point; and deploy ( 603 ) of the acquired identity data for a second identification control point according to a queue criterion. The method of claim 1, wherein the detected identity date in the step of providing ( 603 ) is provided to a plurality of identification control points of the plurality of spatially distributed identification control points simultaneously or sequentially, in particular depending on a location of the person. Method according to one of the preceding claims, in which the step of providing ( 603 ) comprises displaying the detected identity data by the second identification control point, in particular displaying the detected identity data in accordance with the queue criterion. Method according to one of the preceding claims, in which the step of providing ( 603 ) comprises selecting the second identification control point from the plurality of spatially distributed identification control points. Method according to one of the preceding claims, in which the step of providing ( 603 ) comprises associating the acquired identity data with the second identification control point. Method according to one of the preceding claims, in which the step of providing ( 603 ) comprises storing the detected identity data in a memory area allocated to the second identification checkpoint, in particular in a memory area of a database of a central server device. The method of claim 6, wherein the detected identity data is stored in a table of the memory area according to the queue criterion. The method of claim 5, 6 or 7, wherein the assignment of the detected identity data to the second identification control point is resolved and the detected identity data of the third identification control point is provided according to another queue criterion. Method according to one of the preceding claims, wherein the respective queue criterion is one of the following criteria: Seniority of recording the recorded identity date, Arranging the acquired identity date in an order of acquired identity data, Seniority of an assignment of the detected identity date to the second identification control point, Seniority of providing the acquired identity date to the second identification control body, Arranging the detected identity data in an order of detected identity data associated with the second identification control point, Arranging the detected identity data in an order of detected identity data to be displayed by the second identification control point, Arranging the detected identity data in an order of detected identity data provided to the second identification control point. Method according to one of the preceding claims, wherein the detected identity data is transmitted to the second identification control point from the first identification control point or from a central server entity. Method according to one of the preceding claims, comprising: creating ( 803 ) a reference identifier of the person; and assign ( 804 ) of the reference identifier at the detected identity date. The method of claim 11, comprising: detecting ( 805 ) an identification feature or reference identification feature of the person by the second identification control point; and ads ( 807 ) of the detected identity data by the second identification control point if the detected identification feature or reference identification feature matches a reference identification feature stored in the server entity. The method of claim 11 or 12, wherein the detected identifier or reference identifier is compared to a reference identifier stored in the server entity and wherein upon detection of the detected identifier or reference identifier and the reference identifier stored in the server entity, the detected identity data is provided to the second identifier. Method according to one of the preceding claims, wherein the first identification control point comprises a document reader for detecting the identity date based on the identity document, and wherein the identity date is detected by the document reader, in particular optically or electrically. Identification control system with a plurality of spatially distributed identification control points ( 101 . 103 . 105 . 107 . 109 . 111 . 113 ) which are formed with each other via a communication network ( 115 ) to communicate with: a server entity ( 117 ); a first identification control body ( 101 . 103 ) for collecting a date of identity of a person on the basis of an identification document, wherein the first identification control point ( 101 . 103 ) is formed, the detected identity date to the server identity ( 117 ) transferred to; and wherein the server entity ( 117 ) is adapted to provide the detected identity data for a second identification control point according to a queue criterion.

Images