RU2306603C1 - Computer-based system for carrying out personal identification of citizens from passport and visa documents data - Google Patents

Abstract

FIELD: computer engineering.

SUBSTANCE: system has passport and visa documents data input unit, unit for identifying record address of data resident in server database, memory units, unit for receiving record address data and reading data, unit for selecting data-processing modes, unit for integrating data input/output signals, unit for receiving server database records, unit for identifying personal biological parameters, black list data documenting control unit, unit for producing current addresses of risk data documenting.

EFFECT: high reliability of system operation.

7 dwg

Description

The invention relates to the field of computer technology, in particular to an automated system for identifying citizens according to passport and visa documents.

The main purpose of an identity card for the purpose of ensuring security is a unique identification of the person, otherwise authentication is a confirmation that a person is who he claims to be.

Identification of citizens to be reliable, fast, unobtrusive and not expensive. Earlier, methods such as checking special passport documents (passports, badges, etc.), knowing classified information (password, personal code, signature, etc.) or personal identification by security guards were used for this purpose. But all these traditional approaches work only within the basic requirements.

A more promising approach to this task is biometrics, which provides a convenient, reliable and inexpensive way to identify or authenticate a person and can be used in uncontrolled and remote places.

Using biometrics, a person’s uniqueness is determined by measuring certain physical and behavioral properties and obtaining a measurement sample (also called a “living sample”) in a standard data format. This sample is compared with a standard (also called a signature), which is obtained by measuring the same parameters, recognized as a unique identifier of the person and stored in the database of the security system. The close similarity of the sample and the standard means confirmation of the authenticity of the person.

One of the main problems associated with the use of passport and visa documents in transport and when crossing state borders is the verification of the authenticity of the document and its compliance with the owner. It is no secret that the visual comparison with the photograph in the passport that is currently used can be effective only if the employees of these services have undergone special training. At the same time, fatigue and a decrease in employee attention with a dense flow of inspectors is very high. In addition, corruption or negligence among employees of passport control services is possible.

Known systems that could be used to solve the problem (1, 2).

The first of the known systems contains data reception and storage units connected to control and data processing units, search and selection units connected to data storage and display units, the synchronizing inputs of which are connected to the outputs of the control unit (1).

A significant drawback of this system is the impossibility of solving the problem of updating data stored in memory in the form of relevant documents at the same time as solving the problem of delivering the contents of these documents to users in real time.

Another system is known that contains data processing units, the information inputs of which are connected to the data reception and control units, and the outputs are connected to the first group of memory units, the central processor, the inputs of which are connected to the outputs of the memory units of the first group and data processing units, and the outputs are connected with the inputs of the memory blocks of the second group and data display blocks (2).

The last of the above technical solutions is closest to the described.

Its disadvantage lies in the low reliability of personal identification, due to the fact that the personality control procedure is carried out by visual viewing of passport data, and this inevitably leads to the fact that upon presentation of high quality forged documents, false identification is possible, and, as a result, the passage of potential terrorists through the border point.

The purpose of the invention is to increase the reliability of the identity verification system by implementing procedures for automatic control of biometric parameters and documented identity data.

This goal is achieved by the fact that in a known system containing a unit for receiving data of passport and visa documents, the information and synchronizing inputs of which are the first information and synchronizing inputs of the system, and the first information output of the unit for receiving data of passport and visa documents is an information output of the system, intended for data output to the information input of the database server, while the first information input of the system is designed to receive citizens' data from automata workplaces of passport and visa services, and the first synchronizing input of the system is designed to receive a synchronizing signal from automated workplaces of passport and visa services for entering input data into the data receiving unit of passport and visa documents, the unit for receiving data recording and reading addresses, the information input of which connected to the output of the first memory unit, and the output of the unit for receiving write and read addresses is connected to one information input of the unit for integrating data write and read signals the address output of which is the address output of the system intended for issuing write and read addresses to the address input of the database server, wherein the first synchronizing output of the unit for integrating data write and read signals is the first synchronizing output of the system intended for issuing synchronizing signals to the input of the first a database server interrupt channel, and the second clock output of the data write and read signal integration unit is the second clock output m of a system designed to issue a synchronizing signal to a data display board, a server database record receiving unit, the information and synchronizing inputs of which are the second information and synchronizing inputs of the system, while the second information input of the system is designed to receive server database records, and the second the system input is intended for receiving server synchronizing pulses for entering server database records into the server database records receiving block, by entering we have a recording address identification block in the server database, the information input of which is connected to the second output of the passport and visa document data receiving block, the synchronizing input of the recording address identification block in the server database is connected to one synchronizing output of the passport and visa document data block, and the control the outputs of the recording address identification block in the server database are connected to the corresponding read inputs of the first memory block, the selection block for data processing modes, information the first input of which is connected to the third output of the passport and visa document data receiving unit, the synchronizing input of the data processing mode selection unit is connected to another synchronizing output of the passport and visa document data receiving unit, while one output of the data processing mode selection unit is connected to the first synchronizing input of the unit integration of data recording and reading signals, the other output of the data processing mode selection unit is the third synchronizing output of the system, intended for issuing and synchronizing pulses to the input of the second channel for interrupting the database server, and the synchronizing input of the unit for receiving write and read addresses is connected to another synchronizing output of the unit for receiving data of passport and visa documents, the unit for identifying biological personality parameters, one information input of which is connected to the fourth output of the unit receiving data from passport and visa documents, another information input of the identification unit of the biological parameters of the personality is connected to the output of the recording unit the server database, the synchronizing input of the identification block of the biological parameters of the personality is connected to the second synchronizing input of the system, while one output of the identification block of the biological parameters of the personality is the signal output of the system, designed to issue synchronizing pulses to the input of the third channel of the server interrupt, the unit for generating current documentation addresses the data output of which is connected to another information input of the unit for integrating data recording and reading signals, sec the first memory block, the output of which is connected to the information input of the unit for generating the current addresses for documenting data, and the black list data management unit, the input of which is connected to the other output of the biological personality identification module, while the first output of the black list data management unit is connected to the input read the second memory block, the second output of the control unit for documenting data of the black list is connected to one synchronizing input of the block of forms the current address of the data documentation and with the second synchronizing input of the unit for integrating data recording and reading signals, and the third output of the control unit for documenting data of the black list is connected to another synchronizing input of the unit for generating the current addresses of data documentation and to the third synchronizing input of the unit for integrating data recording and reading signals .

The invention is illustrated by drawings, where Fig. 1 is a structural diagram of a system, Fig. 2 is a structural diagram of a data receiving unit for passport and visa documents, Fig. 3 is a structural diagram of a unit for identifying an entry address of a permanent data identifier in a server database, Fig. 4 is a structural diagram of a block for selecting data processing modes, Fig. 5 is a structural diagram of a unit for integrating data recording and reading signals, Fig. 6 is a structural diagram of a unit for identifying biological personality parameters, and Fig. 7 is a structure The main scheme of the risk data documentation control unit.

The system (Fig. 1) comprises a unit 1 for receiving data from passport and visa documents, a unit 2 for identifying a recording address of a permanent data identifier in a server database, a first memory unit 3, a unit 4 for receiving write and read addresses, a unit 5 for selecting data processing modes, unit 6 for integrating signals for recording and reading data, unit 7 for receiving records of the server database, unit 8 for identifying biological parameters of the person, unit 9 for managing documentation of blacklist data, the second memory unit, unit 11 for generating current addresses documenting risk data.

1 also shows the first 21 and second 22 information inputs of the system, the first 23 and second 24 synchronizing inputs of the system, as well as the information 25 and address 26 outputs of the system, the first 27, second 28 and third 29 synchronizing and signal 30 outputs of the system.

In this case, the first information input 21 of the system is designed to receive citizens' data from workstations of passport and visa services of the Ministry of Internal Affairs, and the first synchronization input 23 is designed to receive a synchronization signal from workstations of passport and visa services of the Ministry of Internal Affairs for entering input data into input data receiving unit.

The second information input 22 of the system is intended for receiving server database records, and the second synchronizing input 24 is for receiving server synchronization signals for recording server database records in the server database record receiving unit.

The information output 25 of the system is intended for the delivery of data received by the system to the information input of the server.

Address output 26 of the system is designed to provide write addresses and read data to the address input of the database server.

The first synchronizing output 27 is designed to issue synchronizing signals to the input of the first channel of the database server interrupt.

The second synchronizing output 27 is intended for issuing synchronizing signals to the input of the display panel "Error in the code of biometric parameters."

The third synchronizing output 29 is intended for issuing synchronizing signals to the input of the second channel of the database server interrupt.

The signal output 30 of the system is designed to issue a synchronizing signal to the third input of the database server interrupt.

Block 1 (figure 2) receiving passport and visa documents contains a register 31, elements 32, 33 delays. The drawing shows information 21 and synchronizing 23 inputs, as well as synchronizing 13, 14 and information outputs 15-18 outputs.

Block 2 (figure 3) identifying the write address in the server database contains a decoder 34, elements 35-37. The drawing shows information 40 and synchronizing 41 inputs, as well as control 43-45 outputs.

Block 3 (figure 1) of memory is made in the form of a permanent storage device having inputs 46-48 and output 49.

Block 4 (Fig. 1) of receiving write and read addresses is made in the form of a register having information 50 and synchronizing 51 inputs, as well as output 52.

Block 5 (figure 4) selection of data processing modes contains a decoder 55, elements 56, 57 And, element 58 delay. The drawing shows information 59 and clock 60 inputs, as well as outputs 61, 62.

Block 6 (Fig. 5) of the integration of data write and read signals contains an OR element 64, a trigger 65, an OR element 66, an AND element group 67, 68, an OR element group 69, and a delay element 70. The drawing shows information 71, 72 and synchronizing 73-75 inputs, as well as address 26 and synchronizing 27 outputs.

Block 7 (figure 1) receiving records of the server database is made in the form of a register having information 22 and synchronizing 24 inputs, as well as output 19.

Block 8 (Fig.6) identification of the biological parameters of the person contains a comparator 53 and a delay element 54. The drawing shows information 77, 78 and synchronizing 79 inputs, as well as the first 80 and second 81 outputs.

Block 9 (Fig.7) management documentation of the data of the black list contains a trigger 85, elements 86, 87 And, and element 88 delay. The drawing shows the input 89, and outputs 90-92.

Block 10 (figure 1) of the memory is made in the form of a permanent storage device having an input 93 and an output 94.

Block 11 (Fig. 1) of forming current addresses for documenting risk data is made in the form of a counter having information 95, synchronizing 74 and counting 97 inputs, as well as output 98.

All nodes and elements of the system are made on standard potential-impulse elements.

The system operates as follows.

When issuing and issuing to each citizen of the Russian Federation a new generation passport with a microchip-chip embedded in the passport, in which the owner’s biometric data is recorded, passport and visa services record in the database the following indicators of the citizen who received the new generation passport:

- identifier of persistent data;

- last name;

- name;

- patronymic;

- date of birth;

- Place of Birth;

- gender;

- biometric parameters of personality.

It should be borne in mind that the permanent data identifier (SDI) is issued to each citizen of the Russian Federation by the State Register of Population and is irremovable throughout a person’s life. An IPD is assigned to the personal data of a citizen at the birth of a person, and during the transitional period when citizens of Russia apply to authorities, to other persons if they acquire citizenship, or if they register at a place of residence in Russia (taking into account the possibility of assigning an identifier for personal data to moment of crossing the state border of the Russian Federation).

The data of a citizen who has received a new generation passport is sent by the appropriate passport and visa services of the Ministry of Internal Affairs of the Russian Federation to the State Population Register in the form of codograms having the following structure:

THE CODE THE CODE THE CODE THE CODE Permanent Data Identifier (SDI) Citizen Sign of data processing Name, Date of birth, Place of birth, Gender Citizen Biometrics

In this codogram, the sign code of the processed data can take one of two values.

The first of them corresponds to the mode of updating data in the database of the state register of the population, and the second refers to the mode of control of the transmitted data for their compliance with the reference values of the IPD stored in the database of the state register of the population.

We begin to consider the operation of the system in the mode of updating the system database, which implements the procedure for recording received messages in the system database.

The input codogram is fed to the information input of the system 21 and then to the input of the register 31, into which it is entered by a synchronizing pulse supplied to the input 23 of the system.

From the output 15 of block 1, the contents of the entire codogram is output to the output 25 of the system.

From the output 16 of block 1, the citizen’s permanent identifier code goes to the information input 40 of block 2, from where it is issued to the input of the decoder 32.

The decoder 32 decodes the IPD code and prepares the signal path from the input 41 of block 2, opening one of the elements 35-37 I. For definiteness, we assume that a high potential is received at one input of the 35 I.

In parallel, the synchronizing pulse from the input 23 of the system is delayed by the element 32 for the time the codogram is entered into the register 31 of the block 1 and the decryptor 34 of the block 2 is activated, and then from the output 13 of the block 1 it goes to the input 42 of the block 2, where it polls the states of elements 35-37 AND.

Considering the fact that only the And element 35 will be open at one input, then passing this And element, the clock pulse from the output 43 of block 2 is fed to the read input of a fixed memory cell of the permanent storage device 3, in which the write address code of the data having this IPD is stored .

The address code of the received SDI from the block 3 of the memory is read to the output 49 and then through the input 50 of the block 4 is fed to the information input 50 of the register 4.

In parallel with the described process, the same read pulse from the output of the element 32 of block 1 is delayed by the delay element 33 for the duration of reading the contents of the fixed cell ROM 3 and then from the output 14 of block 1 it goes to the synchronizing input 51 of register 4, fixing in it the code of the address of the base memory cell server data, in which the input data of the IPD should be written.

The address code from the output 52 of register 4 is issued to the input 71 of block 6, and then goes to one of the inputs of elements 68 And groups that are open at the other input with high potential from the inverse output of trigger 65, which is in its original state at this point in time. As a result of this, the address code passes through elements 68 AND groups and elements 69 OR groups to the output 26 of the system.

At the same time, the synchronizing pulse from the output 14 of block 1 goes to the input 60 of block 5, the other input 59 of which from the output 17 of block 1 receives a data sign code, in this case, corresponding to the database update mode.

The decoder 55 of block 5 decrypts the code of the sign of data and opens one input element 56 And, the other input of which receives a synchronizing pulse from input 60, delayed by element 58 for the time the code is entered in register 4.

The synchronizing pulse from the output 61 of block 5 goes to the input 73 of block 6 and then, firstly, it goes to the installation input of the trigger 65, confirming its initial state, and secondly, it passes through the element 66 OR, is delayed by the element 70 for the duration of the operation trigger 65, and through the output 27 of the system is issued to the input of the first channel of the interruption of the database server.

By this signal, the database server goes to the subroutine for recording data of the input codogram from the output 25 of the system at the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

Thus, the system database is updated by writing the reference SDIs sent by the passport and visa services of the Ministry of Internal Affairs to the system database, as a result of which, in each memory cell of the system database, citizens data will be stored in the following structure:

THE CODE THE CODE THE CODE Citizen Permanent Data Identifier (SDI) Name, Date of birth, Place of birth, Gender Citizen Biometrics

The second mode of operation is designed to control the data transmitted to the system for their compliance with the reference values of the IPD stored in the system database. This mode of operation allows passport and visa services to identify all violations associated with the falsification of an electronic passport by changing the data stored in its chip.

In this case, when receiving the input codogram, the code of the data processing flag at the output 17 of block 1 will have a different meaning and the decoder 55 of block 5 will close the And element 56 with a low potential and open the And element 57. As a result, the synchronizing pulse from the output of the delay element 56 passes through the element 57 And to the output 62 of block 5, and then from the output 29 of the system it enters the input of the second channel of the database server interrupt.

With the arrival of this signal, the database server goes to the subroutine for reading the contents of the memory cell of the server database, the address of which is generated at the output of the system 26, and issuing the read record to the information input 22 of the system, from where it goes to the information input of block 7, which is entered into the synchronizing the server pulse entering input 24 of the system.

The code of the biometric parameters of the person located in block 1, from the output 18 of the block 1 goes to the information input 77 of the block 8, and the code of the biometric parameters of the person located in the block 7, from the output 19 of the block 7 goes to another information input 78 of the block 8.

In parallel with this process, the synchronizing pulse from input 24 enters the synchronizing input 79 of block 8, where it is delayed by the element 54 for the time the code is entered in block 7, and then it goes to the synchronizing input of the comparator 53.

According to this sync pulse, the comparator 53 compares the input codes and if the code of the biological parameters of the personality located in block 1 matches the code of the biological parameters of the personality located in block 7, then a signal appears at the output 81 of the block 8, which is fed to the input of the third through the output 30 of the system database server interrupt channel.

By this signal, the database server switches to the subroutine for generating a response message about the correspondence of the code of biological parameters of the personality sent in the input codogram to the reference code of biological parameters of the personality stored in the reference database.

If the code of the biological parameters of the personality, located in block 1, does not coincide with the code of the biological parameters of the personality, located in block 7, then a signal appears at the output 80 of block 8, which, through the input 89 of block 9, enters the input of elements 86, 87, and block 9 controlled by trigger 85.

Given the fact that at this point in time the trigger 85 was in the initial state, then with the high potential from the inverse output of the trigger 85, the element 87 will be open, and the element 86 And with the low potential from the inverse output of the trigger 85 will be closed. As a result of this, the synchronizing pulse from input 89 passes through element 87 to output 90 of block 9 and then goes to the read input of memory block 10, which stores the starting address of the memory zone in the server database, in which all the input codograms in which the code of biological parameters of personality did not coincide with the reference code of biological parameters of personality.

In addition, the synchronizing pulse from the output of the element 87 And is delayed by the delay element 88 for the time of reading the code of the starting address from the memory unit 10, and, firstly, it goes to the direct input of the trigger 85, setting it to a single state, in which the element And 87 will closed, and element 86 AND - open.

Secondly, the same synchronizing pulse through the output 91 of block 9 is supplied to both input 74 of block 6 and input 96 of block 11.

As a result of reading the start address code from block 10, the start address code from output 94 through the input 95 of block 11 is fed to the counter information input, into which it is entered by the synchronizing pulse from the input 96 of block 11. The start address code from the output 98 of the counter 11 goes to the information input 72 blocks 6.

In parallel with this process, the synchronizing pulse from the input 74 of block 6 is supplied to the direct input of the trigger 65 and sets it to a single state, in which elements 67 And groups will be open, and elements 68 And groups will be closed. As a result of this, the code of the starting address for documenting data from the input 72 of block 6 passes the elements 67 AND groups, then the elements 69 OR groups to the address output 26 of the system.

At the same time, the synchronizing pulse from the input 74 of the block 6 is supplied to the input of the OR element 64, as well as to the input of the OR element 66.

Having passed the element 64 OR, the synchronizing pulse is fed to the output of the system 28 and then to the data display panel, which records the content of the received codogram from the output 25 of the system as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 66, is delayed by the element 70 for the switching time of the trigger 65, and then from the output of the system 27 is issued to the input of the first channel of the database server interrupt.

By this signal, the database server switches to the subroutine for documenting the data of the input codogram from the output 25 of the system at the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

If, when checking the code of the biometric personality parameters of the next input codogram, the mismatch of the biological code of the personality parameters with the reference code stored in the system database is again revealed, then the signal from the output 80 of block 8 through the input 89 of block 9 will now pass not through the 87 And element, but through the element 86 And, since the trigger 85 will be in a single state, in which it opens with a high potential from a direct output element 86 I.

In this case, the synchronizing pulse from the input 89 of the block 9 passes through the element 86 AND to the output 92 of the block 9 and then goes to the counting input 97 of the block 11, increasing the documentation address by one.

In addition, the same clock pulse through the input 75 of block 6 is supplied both to the input of the OR element 64 and to the input of the OR element 66.

After passing the element 64 OR, the synchronizing pulse is fed to the output 28 of the system and then to the data display panel, which records the content of the received codogram from the output 25 of the system as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 66, is delayed by the element 70 for the duration of the switching of the trigger 65, and then from the output of the system 27 is issued to the input of the first channel of the database server interrupt.

By this signal, the database server switches to the subroutine for documenting the data of the input codogram from the output 25 of the system at the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

Thus, the introduction of new nodes and blocks has significantly improved the reliability of the system by implementing procedures for automatic control of biometric parameters and authentication of personal data.

The introduction of the system into the practice of the work of checkpoints will significantly increase the efficiency and reliability of the work of checkpoints throughout the Russian Federation.

Information sources

1. US patent No. 5136708, M. cl. G06F 15/16, 1992.

2. US Patent No. 5129083, M. cl. G06F 12/00, 15/40, 1992 (prototype).

Claims (1)

An automated system for identifying citizens according to passport and visa documents, containing a unit for receiving data from passport and visa documents, the information and synchronizing inputs of which are the first information and synchronizing inputs of the system, and the first information output of the unit for receiving data from passport and visa documents is the information output of the system, designed to send data to the information input of the database server, while the first information input of the system is intended for I receive citizens' data from workstations of passport and visa services, and the first synchronizing input of the system is designed to receive a synchronization signal from workstations of passport and visa services for entering input data into the data receiving unit of passport and visa documents, the unit for receiving write and read addresses data, the information input of which is connected to the output of the first memory unit, and the output of the unit for receiving write and read addresses is connected to one information input of the integ data write and read signals, the address output of which is the address output of the system, designed to provide write and read addresses to the address input of the database server, while the first clock output of the unit for integrating data write and read signals is the first clock output of the system, designed to issuing synchronization signals to the input of the first channel of the database server interruption, and the second synchronizing output of the data recording and reading signals integration unit x is the second synchronizing output of the system, intended for issuing a synchronizing signal on the data display board, the server database record receiving unit, the information and synchronizing inputs of which are the second information and synchronizing system inputs, while the second information input of the system is designed to receive server database records and the second synchronizing input of the system is designed to receive server synchronizing pulses for recording server database entries in the block receiving database server records, characterized in that the system comprises a recording address identification unit in the server database, the information input of which is connected to the second output of the passport and visa document data receiving unit, the synchronizing input of the recording address identification unit in the server database is connected to one synchronizing the output of the data receiving unit of passport and visa documents, and the control outputs of the identification unit of the recording address in the server database are connected to the corresponding reading inputs memory block, a selection block of data processing modes, the information input of which is connected to the third output of the data receiving unit of passport and visa documents, the synchronizing input of the data processing mode selection unit is connected to another synchronizing output of the data receiving unit of passport and visa documents, with one output of the block selection of data processing modes is connected to the first synchronizing input of the unit for integrating data recording and reading signals, another output of the block of selection of data processing modes is they are the third synchronizing output of the system, intended for issuing synchronizing pulses to the input of the second channel of the database server interrupt, and the synchronizing input of the unit for receiving write and read data addresses is connected to another synchronizing output of the unit for receiving data for passport and visa documents, the unit for identifying biological personality parameters, one the information input of which is connected to the fourth output of the data receiving unit of passport and visa documents, another information input of the identification unit biological parameters of the personality is connected to the output of the reception unit of the database records of the server, the synchronizing input of the identification block of the biological parameters of the personality is connected to the second synchronizing input of the system, while one output of the identification block of the biological parameters of the personality is the signal output of the system, designed to issue synchronizing pulses to the input of the third channel server interruption, a unit for generating current data documentation addresses, the output of which is connected to other information the ion input of the integration block of the data recording and reading signals, the second memory block, the output of which is connected to the information input of the block for generating the current data documentation addresses, and the black list data management control unit, the input of which is connected to the other output of the personality biological identification module, the first the output of the blacklist data management unit is connected to the read input of the second memory unit, the second output of the data management unit is x the black list is connected to one synchronizing input of the unit for generating the current addresses of data documentation and to the second synchronizing input of the unit for integrating the write and read signals, and the third output of the unit for managing documentation of data for the black list is connected to another synchronizing input of the unit for generating the current addresses for documenting data and to the third the synchronizing input of the unit for integrating data recording and reading signals.

Images