EP1318485A1 - Method and system of security-filtering users of a public transport network - Google Patents

Abstract

Security method for filtering passengers using public transport (R3) in which prior to travel passengers enroll (10, 100) thus forming a collection of agreed passengers (90) with all undesirables rejected (75). Travelers are rejected by use of security databases. At the time of travel verification (250) of agreed passengers takes place. Validation or identification can be by biometric means, e.g. digital fingerprinting, etc. <??>An Independent claim is made for a passenger filtering system to improve passenger security comprising networks for enrolling passengers and checking their identity.

Description

The present invention relates to identity verification and filtering of public transport users. These are security measures, especially in air transport, whose importance is no longer to prove. Filtering users has recently become a major concern air carriers.

The public transport users to be considered here are also both passengers and flight and ground personnel control and services like cleaning, catering (catering), maintenance or freight, personnel we will designate more globally in the following by servants.

By filtering, we mean the detection among potential or real users of dangerous individuals registered by the security services, in particular the police, to drive them out of the means of access to public transport.

In this context, there are few procedures for verifying identity of users. In general, and with regard to users, they must present an identity card, a passport, possibly with a visa, and access filtering is done "manually", without electronic means, by the air and border police and as far as a border must be crossed and, in general, by the various security services.

Various checks can also be carried out during reservations electronic type CRS (computer reservation systems) or GDS (global distribution systems), or when processing requests for passports or visas.

These processes are very ineffective and very unreliable, because false identities, or forged passports can be presented.

In addition to these processes, there are control systems to monitor, for example, the boarding of passengers and in particular to detect if these passengers are trying to "pass" fraudulently goods, even weapons. These systems are essentially made up of electromagnetic gantries and filters X-ray detection.

But these complementary systems also do not allow filtering departing passengers effectively, detecting substitutions of people when boarding. They are not designed to that.

We also know computer means of identity search by fingerprints, available to police and notably INTERPOL.

These systems, called AFIS (automated fingerprint identification systems), are very heavy to use, specific to the activities of very reserved police and access.

The needs in terms of security of access to public buildings have therefore elsewhere prompted the development of means of identification or authentication of people by their biometric characteristics, by example by recognizing the characteristics of the shape of the face, patterns of the iris of the eye, the geometry of the hand, the timbre of the voice and especially fingerprints.

In the field of electronic payment, finally, we know the usage very widespread bank cards, including memory cards, for of a transaction, authenticate the holder using a secret code.

Well, the Applicant has realized that with the means commonly used in the fields of reservation, electronic payment, combined to the means implemented in AFIS, it could greatly improve security in the area of public transport.

And that's how she proposes her invention.

To this end, the present invention relates first of all to a method of security screening of users of at least one public transport network, characterized by the fact that it includes a preparatory stage for transport, user enrollment, to train at least one set of users approved, redacted of the people to be driven back, and an initial stage of transport, verification of approved users.

It will be emphasized here again that the serving staff make a certain also use of the transport network and that, for these servants, the initial stage of transport is an initial stage of access on board the aircraft, train or boat, for example.

By enrollment, it is necessary to understand the local recording, on a support, for example a badge or a smart or memory card, or the central recording, in a database, of the biometrics of a person, preferably in this case his fingerprints.

By verification, we must understand either what the skilled person calls identification, which is what he calls authentication. authentication aims to compare a person's living biometric footprint to one reference fingerprint, for example that recorded on a badge. It's about a proper verification, a 1-on-1 comparison that can be done locally. If you use a personal "identification" code (PIN) to find the fingerprint in a central file, you must use the resources of a computer network. As for the identification of a person, this is a comparison of a fingerprint to all fingerprints from a central database to retrieve the identity of the person, of a comparison in 1 against N, with systematic exploitation of a computer network.

For the servants, we can also check the conformity of a request for access on board in relation to a service programmed in advance.

The advantage of the process of the invention is both to ensure that it does not admit for transport that persons not presenting a risk for security of all persons transported and those accessing actually by means of transportation are those that have been previously admitted.

The proposed filtering makes it possible not only to push people back sought at the level of the Police (ies) - there can be several black lists for the same trip, that of Interpol, that of the country of departure and that of the destination country - but it also allows companies to transport to refuse access to their means to the tried individuals undesirable (trouble shooters / air rage in the air, but the problem is meets of course also on the ground, for example in the buses of some locations).

The enrollment step can be carried out at the earliest, for example at the time when ordering the ticket or reservation, or even when a passport or visa application or, for the servants, when they service assignment; this step includes an identification phase.

Thus, the authorities and other administrations in charge of the files of unwanted people are contacted as soon as possible.

Preferably, after the preparatory stage for transport, a search in a central file and the receipt of an approval notice, we print a ticket of transport with characteristics of captured fingerprints.

Preferably also, after the step of enrolling the servants, a search in a central file and receipt of a notice of approval, we creates or updates a smart card or a service memory card comprising characteristics of fingerprints captured.

Advantageously, in the initial verification stage, the fingerprints are taken digital users and we compare them with fingerprints on tickets, boarding passes or amenity or service (authentication) or fingerprints stored in a database central data (identification).

Advantageously also, in the servant verification stage, the updating service card day includes fingerprint registration and a secret code that can be compared either to a seizure fingerprint or a secret code entry.

Attempts to substitute people are therefore really detected.

Advantageously always, in the servant verification stage, the service containing data allowing to find the service of the serving in a programming database of services and transport, we ensure consistency between the use of the service card by the servant for access to a protected room or enclosure and the programming of the service it must perform in said protected room.

Preferably, the consistency that is ensured relates to the protected room and on the service schedule.

Thus, the personnel of the various services called to frequent premises identical protected persons may be discriminated against.

• un réseau de moyens d'enrôlement de personnes, pour former au moins un ensemble d'usagers agréés,
• des moyens informatiques de stockage des identités d'usagers agréés, auxquels sont reliés les moyens d'enrôlement de personnes, et au moins
• un réseau de moyens de vérification des usagers agréés, reliés auxdits moyens informatiques de stockage.

The invention also relates to a system for filtering the safety of users of at least one public transport network, characterized in that it comprises

• a network of means for recruiting people, to train at least one set of approved users,
• IT means for storing the identities of approved users, to which the means for enrolling people are linked, and at least
• a network of approved user verification means, connected to said computer storage means.

Preferably, the system includes at least one network of consoles and enrollment consoles and verification and at least one network of verification consoles and enrollment consoles and verification are linked to an AFIS center and a computer server of accreditation managing at least one base for storing user identities Chartered.

Advantageously, each enrollment console comprises, around a processor to which they are connected, a fingerprint sensor, a identity input keypad, printer, card reader / writer with memory and a link input-output interface with the others elements of the system, and each verification console has at least a fingerprint sensor, a smart or memory card reader, a boarding pass reader and a fingerprint comparator connected to the sensor and both readers.

Advantageously also, the verification consoles on board the means of transport also comprise means of connection with a system centralized mission preparation and a management system for human ressources.

• la figure 1 est une illustration schématique et par blocs fonctionnels du système;
• la figure 2 est une représentation schématique d'une console d'enrôlement du système de la figure 1;
• la figure 3 est une représentation schématique d'une console de vérification des passagers du système de la figure 1;
• la figure 4 est une représentation schématique d'une console d'enrôlement et de vérification du système de la figure 1;
• la figure 5 est une représentation schématique d'une console de vérification des servants du système de la figure 1 et
• la figure 6 est une illustration schématique par blocs fonctionnels d'une vérification des servants agréés.

The invention will be better understood with the aid of the following description of the safety filtering method and system, with reference to the appended drawing, in which

• FIG. 1 is a diagrammatic and functional illustration of the system;
• Figure 2 is a schematic representation of an enrollment console of the system of Figure 1;
• Figure 3 is a schematic representation of a passenger verification console of the system of Figure 1;
• Figure 4 is a schematic representation of a console for enrollment and verification of the system of Figure 1;
• FIG. 5 is a schematic representation of a verification console for the servants of the system of FIG. 1 and
• FIG. 6 is a diagrammatic illustration by functional blocks of a verification of the approved servants.

The system of the invention which will now be described, with reference to the Figure 1, is essentially based on an R1 network of consoles enrollment of people, of two types: for passengers of the type simplified 10 and an elaborate type 100, in which enrollment is doubled a people verification function. For the servants, we have planned 87 consoles of the elaborate type seen above, but connected to one (or more) 85 human resource management server (s), servers available airport services and airlines, to manage bases 86 of serving personnel, containing in particular the references of servants and the service references to which they are assigned. The consoles 10 are located "in town". The enrollment and consoles 100 are installed, i.e. at check-in counters 20 of an R2 network of airline check-in desks airport areas, like zone 1 here considered, to take the example of an R3 air transport network, ie with servers 85 of Human Resources Management.

The system also includes, in town, an R4 network of travel 110 and a network R5 of 120 booking and ticketing counters airlines.

Enrollment consoles 10, 100, travel agencies 110 and 120 airline counters are connected to a server electronic reservation 130 of the CRS or GDS type. 85 servers human resources management are directly linked to servers 95 mission preparation. These 95 mission preparation servers are responsible for planning airport services and flights. They manage mission databases 96 containing in particular the references of the services to be performed, the premises and the periods concerned. Beyond the check-in counters 20 and the associated system of DCS departure control, there is an airport area 1 R6 network of 250 person verification consoles at points boarding area (gangways and aerobus) and another R7 network of consoles 250 at the access points on board the planes, without forgetting the immigration control crossing points. It is also planned, at the entrance cockpits, or other protected premises of the aircraft, consoles check 260 for the access of the servants. Enrollment consoles 10, 100 are linked to an AFIS 60 center as well as to a computer server agreement 80 managing a base 90 for storing user identities Chartered. 250 verification consoles are also connected to the server 80. Similarly, the servers 85 for managing resources are linked to the AFIS 60 center, to the 90 storage base for identities of authorized users and verification consoles 260.

Generally, people can be identified during issuance of passports and visas, registration and control immigration or hiring or posting to the services of serving staff, authentication being sufficient at other points and sales and reservation, embarkation and disembarkation desks, baggage delivery, etc.

AFIS center 60 is connected to a server 70 managing a file 75 of unauthorized persons which is constituted and updated by the services of safety 50, like INTERPOL.

All the connections mentioned above, and the others, are made by data communication buses and links, so that all the equipment of the system of the invention are interconnected, but securely.

The enrollment proposed here is a record of characteristics biometrics of people, in this case, their fingerprints. Thus, the base 90 and the file 75 are storage elements of the fingerprints of approved and unwanted persons, respectively.

With reference to FIG. 2, each enrollment console 10 comprises, around a processor 106 to which they are connected, a fingerprint sensor digital 101, an identity entry keyboard 102, a printer 103, a smart card or memory card reader 104 and interface 105 input-output link with the other elements of the system.

Referring to Figure 3, each verification console 250, or security, R5 and R6 networks only have one sensor 251 fingerprint reader, 25-2 smart or memory card reader, one boarding pass reader 253 and a fingerprint comparator 254, connected to the sensor and to the two readers.

Each enrollment and verification console 100, with reference to the figure 4, therefore integrates the components of an enrollment console 10 and the components of a 250 verification console, with the exception of the boarding pass 253, linked in the same way.

With reference to FIG. 5, the consoles 260 for verifying the servants for access to the pilot cabins are consoles of the console type 250 comprising, in addition to the corresponding elements, fingerprint sensor 261, smart card reader 262, comparator 264, an alphanumeric input keyboard 265. The introduction secret access codes, a 266 radio transceiver, in conjunction with a central radio transceiver 98 connected to the server 95 for preparing mission, and an access authorization module 267 which allows or not the opening of the cockpit according to the checks carried out. A screen 268 completes the device for displaying the instructions console usage.

Fingerprint data and possibly secret code are stored in the memories of smart or memory cards as well as on a magnetic strip for boarding passes.

The enrollment of a user consists in capturing their fingerprints, possibly by assigning a secret code, a search for these fingerprints in database 75 with references and fingerprints of unwanted individuals.

People who often use the R3 transport network can register, if they are passengers, or can be registered, if they are servants, in the base 90 of approved persons. For passengers, this operation is carried out with an enrollment console 10 located in city, for example in a travel agency 110 or at a counter 120 or even at a check-in counter 20 from the airport, and have an approval card, which is a memory, of authorized passenger. For the servants, it is at the time of hires or new assignments to services that require that the registration in base 90 is carried out from a console 87 of the server 85, at the same time as it is in the personal base 86 servants.

Now let's go over the description of the identification and filtering steps of users.

For the sake of clarity, let us first consider the case of passengers.

Before going to the airport 1 to take a plane 2, a person must obtain their ticket from an agency 110 or from a ticket office 120.

Before the ticket is issued, and if the person has not previously visited entered in base 90, a preliminary step is carried out using elements 10, 60, 70, 75 of the system to identify the passenger and make sure it is not junk.

Thus, unwanted people are immediately detected.

When the passenger with his ticket arrives at the airport, he must complete certain ordinary formalities to gain access to the aircraft.

During these formalities, please submit to procedures of verification of his person.

The verification consists of a 250 verification console or a console enrollment and verification 100, by capturing passenger fingerprints and a comparison of these fingerprints with the registered fingerprints, of a in one way or another, on the ticket or its approval card or with the fingerprints from the central database 75.

Thus, attempts to substitute people at the airport are perfectly detected.

• la personne est dans la situation de nouveau passager, qui ne s'est pas encore fait agréer,
• la personne est dans la situation d'un passager habituel ayant déjà été enregistré comme tel et qui est agréé ; il possède une carte d'agrément.

More specifically, when a person arrives either at a travel agency 110 or at the counter of an airline 120 to make a reservation or buy a ticket, two cases can occur:

• the person is in the situation of a new passenger, who has not yet been approved,
• the person is in the position of a regular passenger who has already been registered as such and who is approved; he has an accreditation card.

Person not yet approved

The agency 110 or the counter 120 records the ticket request using a keyboard 102 and captures the fingerprints of the person thanks to the sensor 101 of console 10.

Using this data thus recorded, the console 10 transmits, by means of its interface 105, an identification request to the AFIS center 60, accompanied by fingerprint data.

AFIS center then searches for transmitted fingerprints in the central file 75 containing the fingerprints of the individuals registered by security services 50.

If the search is positive, i.e. if the fingerprints registered by the console 10 is in file 75, the individual is undesirable and cannot be admitted as a passenger. He is turned back and the agency or the counter as well as the police are notified.

If the search is negative, the console 10 receives an approval notice and prints (103) a transport ticket including on the back the printing of characteristics of the fingerprints entered, for example in 2D bar code, possibly encrypted.

To avoid repeating this search later for the same person, the console 10 can cause the storage of the result of this search in the database 90 containing the identities of approved passengers, by through the server 80 managing the database 90 and editing, by the reader-recorder 104 an approved passenger electronic card containing the passenger's references and fingerprints. This card is can be used later on any other enrollment console and / or verification.

It will be noted that the database 90 can also be updated by AFIS and / or police services.

Person approved and registered in the database

The person already has their approval card, acquired as indicated previously.

He presents it to the agency 110 or to the counter 120. The card is read in the console 104 electronic card reader and writer 10. The processor 106 checks whether the person's status has not been changed by performing, via the input-output interface 105, a search request to the base server 80.

In the event of a positive response, the status not having been changed, the ticket is issued as in the previous case.

Otherwise, the person is turned back.

Note that the search performed here is much simpler and faster, since an alphabetical search in an alphanumeric file is sufficient.

With his ticket, the passenger can go to the counter record 20 where security screening will start with a verification procedure.

• on saisit les empreintes digitales de la personne sur le capteur 251 des consoles 250, les empreintes enregistrées sur le billet et/ou la carte d'agrément sont lues au moyen du lecteur 252 ou 253,
• on procède à la comparaison des résultats dans le comparateur 254 (comparaison un contre un).

The verification of the person to be transported is done as follows:

• the fingerprints of the person are captured on the sensor 251 of the consoles 250, the fingerprints recorded on the ticket and / or the approval card are read by means of the reader 252 or 253,
• the results are compared in the comparator 254 (comparison one against one).

The comparator indicates whether the fingerprints read on the sensor 251 are the same as those read on readers 252, 253. If so, the person is the right person and they are invited to pass through the screening station of safety.

Now for transportation service workers, steps remain similar.

When hired for service 5, servant A is seen assign a service smart card to its personnel department, by example of the airline, which enlists it in its base 86 of serving staff through the resource management server 85. At the same time, the person is previously registered in the base 90, a prior enrollment step is carried out using the elements 60, 70, 75 of the system, to identify the servant and ensure that he is not undesirable.

When servant A, with his service card, comes to ensure his S service, he must, to access the plane, and in particular to enter in protected room L, for example in the cockpit, use the console 260 verification and thus submit to verification procedures of its person.

The verification consists first of a fingerprinting of servant A and a comparison of his fingerprints with the fingerprints on his service card, which makes it possible to detect any substitution of servant.

The verification is then completed by a search in the base 86 of the service S 'which servant A must perform to verify the identity of the services S and S 'by a search in base 96 if the service S or S' is planned for protected room L and, if this is the case, a final verification consisting in comparing the date and time H of the planning of the service S in room L on the date and time when the service card was read.

These verifications are carried out in real time by the console 260, for the identity verification, and by this same console 260 in conjunction with 95 mission preparation and resource management servers human 85.

More specifically, when the servant is hired, the server 85 records the assignment request using the console keyboard 87 and enters the person's fingerprints thanks to a fingerprint sensor on the console 87.

Using this data thus recorded, the server 85 transmits a request for identification from the AFIS 60 center, accompanied by fingerprint data.

AFIS center then searches for transmitted fingerprints in the central file 75 containing the fingerprints of the individuals registered by security services 50.

If the search is positive, i.e. if the fingerprints registered by the server 85 is in file 75, the individual is junk and cannot be admitted as a servant. He was turned back and the police were notified.

If the search is negative, the server 85 receives an approval notice and manufactures a service card with characteristics of fingerprints possibly encrypted.

This card can be used later on any other console. verification.

To avoid repeating this search later for the same person, the server 85 can cause the storage of the result of this search in the database 90 containing the identities of the servants by through the server 80 managing the database 90.

The database 90 being updated by the police, can then be periodically consulted by the server 85.

Subsequently, with reference to FIGS. 5 and 6, when taking a service S in a room or enclosure, protected L, servant A is called, in one first step 300, to insert his service card into the card reader 262 of the verification console 260 in room L.

The console 260 records the time and date H of the operation and instructs it then in the next step 301 to affix his fingerprint (s) on the fingerprint reader 261. This reading gives rise, in a step 302, to a comparison on comparator 264, authentication and identification of the servant.

If this step is not completed, the introduction of the secret code is required by the authorization module 267 in a second authentication step 303.

In the event of authentication at the next step 304 or from step 302, the module 267, in step 305, requests the transmitter 266 to issue a radio request for access authorization to server 95 for preparation of mission, and through its transceiver 98, which at one step 306 of identifying servant A and his assignment to service S through the server 85 in its database 86, in one step 307 recognition of the protected premises L applicant for authorization access, and at a step 308 of checking the access schedule H by means of clock 97, determines mission A, S, L, H and checks in step 309 the advisability of its execution in the database 96.

If in step 309 this verification is positive, the server 95, by through its transceiver 98, transmits in step 310 a message authorization to access the console 260 via its 266 transceiver, which causes unlocking, by the function authorization 267, from the access door to the protected room L.

Of course, other achievements are possible. It can for example be provided that each transport is prepared in advance and that the preparation type A, S, H, L are downloaded before each service for each protected room L in their verification console 260. This console then also has a memory for preparing service updated periodically from preparation servers missions as there are for military air missions.

We can also provide several levels of access, with geographic restrictions or temporary more or less large depending on the services considered.

Note that authentication can also consist in comparing a a person's living fingerprint to a file fingerprint using a "personal identification code" (calculated PIN code).

Naturally, we can extend the system which has just been described to include include the network of embassies and any other network of administrations having to know, these networks, like those previously described, being linked to the AFIS 60 center, as well as to the elements to which it is also connected.

It will have been noted that the method of the invention which has just been described applies just as well for international flights as for domestic flights. Likewise, the example considered above concerns air transport. But the invention obviously also applies to rail transport and, in general, all other land transport as well as transport Maritime.

Note again that copies of the blacklist from file 75 could be deported to some conscription consoles or verification, at least at check-in counters.

Finally, it is perfectly possible to use the elements of the system which has just been described with reference to the boarding of users of air transport also when disembarking, on arrival of their flights.

Claims (21)

Method for filtering the security of users of at least one public transport network (R3), characterized in that it includes a preparatory step for transporting enrollment (10, 100) of users to form at least one set of approved users (90), redacted from the people to be driven back (75), and an initial stage of transport, of verification (250, 260) of the approved users. The method of claim 1, wherein in the preparatory step of enrollment, users are registered in the set of approved users (90) to enrollment consoles (10, 87) to be issued a accreditation or service card. The method of claim 2, wherein after the preparatory step during transport, a search in a central file (75) and the reception of a approval notice, we print (103) a transport ticket containing characteristics of captured fingerprints (101). Method according to one of Claims 1 to 3, in which, before to issue a transport ticket for an approved passenger, we check (106, 105, 80, 90) if its status has not been changed. Method according to one of claims 1 to 4, in which, in step initial check, the fingerprints of the passengers are captured (251) and we compare them (254) with fingerprints on tickets, boarding passes or amenity cards or fingerprints stored in a central database (75). The method of claim 2, wherein after the enrolling step of the servants, a search in a central file and the reception of a notice approval, we create or update a smart card or memory card service with captured fingerprint features. The method of claim 6, wherein in a step of verification of access to a room (L), fingerprints are taken (261) of the servant (A) and we compare them (264) with the fingerprints inscribed on his service card. The method of claim 7, wherein in the step of checking access to the room (L), recording the time (H) of access and checks in databases (86, 96) if there is a service (S) to be provided by the servant (A), in the room (L), at the hour (H). Method according to one of claims 5 to 8, wherein the cards service also have a secret code. The method of claim 9, wherein in the verification step, the secret code recorded on the card is compared to the code displayed by the serving. Security screening system for users of at least one public transport network, characterized in that it comprises a network (R1) of means (10, 100, 87) for recruiting people, to form a set of approved users, IT means (60, 80, 85, 86, 90) for storing the identities of approved users, to which the means for enrolling people are connected, and at least a network (R6, R7) of means (250, 260) for verifying approved users, connected to said computer storage means. System according to claim 11, comprising a network (R1) of enrollment consoles (10, 87) and enrollment consoles and verification (100) and at least one network (R6, R7) of consoles verification (250, 260). The system of claim 12, wherein the consoles (10) are located in town (R4, R5). System according to one of claims 12 and 13, wherein the enrollment and verification consoles (10, 100, 250) are connected to a AFIS center (60) and an approval computer server (80) managing a base (90) for storing identities of approved passengers. System according to one of claims 11 to 14, comprising a server (70) management of a file (75) of unauthorized persons. System according to one of claims 12 to 15, in which each enrollment console (10) comprises, around a processor (106) to which they are connected, a fingerprint sensor (101), a keyboard (102) of identity entry, printer (103), card reader / writer memory (104) and an interface (105) for input-output for linking with other elements of the system. System according to one of claims 12 to 16, in which each verification console (250) has a fingerprint sensor (251), a memory card reader (252), a card reader boarding pass (253) and a fingerprint comparator (254), connected to the sensor and both readers. System according to one of claims 12 to 17, in which consoles (10, 100, 250) contain a black list of unauthorized passengers. The system of claim 11, wherein the consoles enrollment (87) and verification (260) are linked to a server IT approval (85) managing an identity storage base (86) approved servants and an AFIS center (60). System according to one of claims 11 and 19, comprising a server (95) mission preparation. System according to one of claims 19 and 20, in which each verification console (260) has a fingerprint sensor (261), a smart card reader (262), a fingerprint comparator (264), connected to the sensor and the reader, and a keyboard (265) and a transceiver (266).

Images