WO2010007479A2

WO2010007479A2 - Apparatus and method for generating a secure entitlement on the basis of an official entitlement

Info

Publication number: WO2010007479A2
Application number: PCT/IB2009/006044
Authority: WO
Inventors: Gilles Leroux; Hervé Mongin
Original assignee: Gilles Leroux Industries
Priority date: 2008-06-24
Filing date: 2009-06-24
Publication date: 2010-01-21
Also published as: WO2010007479A3; FR2932914A1

Abstract

The invention relates to an apparatus (1) for generating at least one secure entitlement on the basis of at least one official entitlement, comprising: - at least one reader of official entitlements (10, 11, 12), - a device for recognizing information contained in the official entitlement, - a device for verifying the authenticity of the official entitlement on the basis of the information contained in the official entitlement, - a device (14) for generating a personalized secure entitlement on the basis of the information contained in the official entitlement, - data representative of authorization parameters defining the types of entitlements that the apparatus is authorized to issue and the information required for issuing these entitlements. The invention allows fast issuing of the secure entitlement and ensures security against theft and fraud.

Description

APPARATUS AND METHOD FOR GENERATING A SECURE TITLE FROM AN OFFICIAL TITLE

The present invention relates to an apparatus and method for generating a secure title from an official title. For example, it involves generating a badge of access to a large company, an exhibition, a university, a sports club, a public transport network, etc. from an official title such as a passport, or to renew an official title from the official title at the end of validity or even to generate or renew an official title, from at least one official title. It is known, particularly in some large companies, devices for generating an access badge from data on an official title. An operator enters the data contained on the official title of a visitor on his computer, connected to a device of this type. The device generates a secure access badge according to the data entered by the operator. However, the use of this type of device requires the intervention of an operator for data entry. Human intervention renders the process susceptible to seizure errors and susceptible to theft and fraud. In addition, the known solutions of the prior art do not allow to issue various types of titles (official or unofficial) because they do not allow to verify the titles presented by users or to verify various information necessary for the issuance of various securities with entities such as competent authorities, for example.

The object of the invention is therefore to provide an apparatus for generating at least one secure title from at least one official title which allows a rapid issuance of the secure title, which avoids input errors and provides security against theft and fraud.

This object is achieved by an apparatus for generating at least one secure title from at least one official title, comprising:

- at least one player of official titles,

- a system for recognizing information contained in the official title, - a device for verifying the authenticity of the official title on the basis of the information contained in the official title, - a device for generating a personalized secure title from the information contained in the official title

data representative of authorization parameters defining the types of securities that the device is authorized to deliver and the information necessary for the issue of these securities.

According to another feature, the official title reader (s) is a scanner and / or a contact smart card reader and / or a contactless smart card reader.

According to another feature, the secure title generation device comprises a graphic writing device and / or an electric writing device.

According to another feature, the apparatus further comprises a graphic and / or electrical erasing device.

In another feature, the verification device is adapted to query a database external to the device to verify the authenticity of the official title. In another feature, the apparatus further comprises a screen.

According to another particularity, the screen is a touch screen.

According to another feature, the apparatus further comprises a digital camera.

According to another feature, the apparatus further comprises one or more biometric sensors.

In another feature, the apparatus further comprises a securities storage store to secure.

According to another feature, the apparatus further comprises a delivery slot security title. According to another feature, the apparatus further comprises a stealth cabin.

According to another particularity, the data representative of the authorization parameters comprise: data representative of at least one type of title which can be delivered by the apparatus and at least one type of title which must be presented so that the device generates at least one title data representative of the information to be used for the issuance of this title, data representative of the authorizations of the entities and persons, preferably defining both the authorized persons and entities and the information to which they are authorized to access; data enabling the apparatus to be linked to databases of the entities and persons with whom prior authorizations have been defined, in particular for verifying the validity of the securities presented or the validity of the information presented, - data representative of the parameters defining operations that can be performed according to the authorizations of the entities or persons and the types of securities presented and delivered, according to the level of security required by the securities used, representative data of authenticators.

The invention also relates to a method for generating at least one secure title from at least one official title by the apparatus described above, comprising the following steps:

- display by the device of at least one title that the device is authorized to deliver, determined from data representative of authorization parameters, - choice of at least one title to be delivered by the device, then function of data representative of authorization parameters:

- reading an official title,

- recognition of information contained in the official title,

- verification of the authenticity of the official title, at least on the basis of information contained in the official title,

- generating a personalized secure title at least from information contained in the official title.

According to another particularity, the method comprises a prior step of verification in person by a person authorized of the correspondence between the user of the device and the holder of the official title presented. According to another particularity, the method comprises at least one preliminary parameter setting step of the apparatus for defining the values of the data representative of the authorization parameters.

Other characteristics and advantages of the invention will appear on reading the following detailed description of the embodiments of the invention given by way of example only and with reference to the drawings which show: FIG. 1, a perspective view of an apparatus according to the invention; - Figure 2, a perspective view of an apparatus according to the invention, provided with a stealth cabin; - Figure 3, a schematic view of the elements of an apparatus according to the invention.

The present invention relates to an apparatus for generating at least one secure title from at least one official title.

An official title is a title issued by a competent authority (town hall, police headquarters, health insurance body, etc.) prior to the use of the device. The official title serves as identification support for the user of the device. The official title is for example a passport, an identity card, a residence permit, a driving license, a vital card, etc. Note however that, by extension, in some embodiments, the title presented, said official, may be in fact an unofficial type of title, that is to say issued by an entity that is not an authority competent for the official titles but an authorized entity, in particular thanks to the apparatus according to the invention, to issue secure securities. Indeed, the setting of the device allows to define what type of title must be presented and what type of title can be generated from the title (s) presented (s), as detailed below. It will be understood that the term "official title" may in fact generally designate a "title presented", knowing that it is preferably a title of official type, used on the apparatus according to the invention. for identification of the user requesting the issuance of a secure title. It will be understood from reading the following description that the title presented is not only presented in the sense that it is shown, but that the information it contains are used by the apparatus according to the invention.

Secure title means a title generated by the device according to the invention. It may be an official type of title issued by a competent authority, such as a administration, but also a title of unofficial type, such as for example a badge of access to a company or an exhibition. The secure title is for example a passport, an identity card, a residence card, a driver's license, a vital card, etc., or an access badge for example to a company, an exhibition, a university, a sports club, etc., or a public transport ticket. It will also be noted here that, by extension, in some embodiments, the title generated by the device may not be secure, as for example in the case of a card access to a place that does not require increased security . In this case, the title generated may have been generated from a title presented unofficial type (for example, it renews a pool card by presenting the old) and the title generated may not be specially secure. It will be understood that the term "official title" may in fact generally designate a "delivered title", which is generated by the apparatus and made available to the user by means of the apparatus according to the invention, knowing that, preferably, this issued title is secure because the apparatus according to the invention makes it possible to authenticate the title (s) presented (s) and to secure the title (s) delivered (s), as detailed below. Note that it can be considered that the title issued is secured simply by the fact that the title presented is authenticated prior to the issuance of the security title and / or, as detailed below, that it is secured by the inclusion security data in the issued title.

The apparatus according to the invention comprises at least one official title reader. The apparatus also includes an information recognition device contained in the official title. The apparatus also includes a device for verifying the authenticity of the official title from this information. The authenticity verification device provides security against theft and fraud. The apparatus also includes a device for generating a personalized secure title according to the information contained in the official title.

Thus, the apparatus makes it possible to avoid the presence of an operator during the entire method of generating the secure title, that is to say during the entire period of use of the device by the user. The presence of an operator is limited to a simple identity check, face to face, before the use of the device to verify that the user of the device is the holder of the official title. Thus, the device provides security against theft and fraud and allows a quick release of the security. In addition, the device allows to issue various types of titles (official or not) from various types of titles presented (official or not). For this, the device is set according to the security levels required by each type of title presented and / or delivered.

The references which are identical in the different figures represent identical or similar elements.

Figures 1 and 2 show a perspective view of an apparatus according to the invention. In some embodiments, the apparatus 1 is intended to be used in town halls, prefectures, business halls or event entry halls such as exhibitions or public transport stations (station metro, station, airport, etc.) or any facility capable of accommodating an apparatus according to the invention and in which such an apparatus can deliver at least one type of title. These entities (this term here designating organizations, administrations or even legal or natural persons) provide, thanks to the apparatus according to the invention the possibility of issuing various types of titles, depending on a setting of the device . For example, an entity such as a prefecture may have a set device to issue more types of official titles than a town hall. In addition, the device used with an entity may also be set to issue types of securities normally issued by another entity, called external. For example, the device in a town hall may be set to issue a number of titles normally issued by a prefecture. For this, the apparatus according to the invention of the first entity will be set to allow such a delivery by accessing a database of the external entity (and / or an apparatus according to the invention of the external entity having access, for example direct, to the database), so as to secure the issuance of securities by the device of the first entity, in particular from information belonging to the external entity. These features are defined through settings that define various permissions as detailed below. In some embodiments, the apparatus 1 is intended to be used by a user in complete confidentiality, thus without the intervention of an outside operator. This secures the secure title generation procedure.

In some embodiments, the apparatus 1 makes it possible, for example, in a town hall or a prefecture, to renew an official title such as for example an identity card, a passport or a driving license. The official title in the possession of the user, before use of the device, then serves the user of official identification title. The official title generated by the device after the use of the device constitutes the secure title. The official title used for the renewal may be the old official title to be renewed and / or another official title proving the identity of the user. For example, it is conceivable that a user can renew a passport (secure title) by presenting a national identity card

(official title), possibly by supplementing certain information from other titles presented during the renewal and / or from a database of an external entity and / or from captures (photo, imprint, measurement, etc) made thanks to the device.

In some embodiments, the apparatus is set according to the security titles it is able to generate. If the device is intended to generate secure titles that are official titles issued by the Prefecture of Police, it may be provided for example to be able to renew a passport by presenting the old passport as official title. However, to renew a card issued by the city council, type Paris Pass Family, it can be expected to renew it by presenting the old card Pass Family Pass, an identity card, a vital card, etc. The device is set according to the security level required for the secure title. In some embodiments, the apparatus therefore uses data representative of parameters relating to the security levels required by the various types of titles presented and delivered, as detailed below.

In certain embodiments, the apparatus 1 makes it possible, in a business hall or an entrance hall to an exhibition, to generate a secure title, such as an access badge to the company or to the company. exhibition, from an official title proving the identity of the user. In some embodiments, the apparatus 1 comprises a face 2 facing which the user installs to be able to generate his secure title. This face 2 comprises a screen 15. The screen 15 allows the device 1 to communicate with the user to give him instructions to follow for the generation of its secure title. The screen 15 is for example a touch screen. The touch of the screen 15 by the user allows for example to start the process of generating the secure title.

In some embodiments, the apparatus 1 comprises at least one official title reader 10, 11, 12. Preferably, the apparatus comprises several readers of official titles, each of the official title readers being provided with a different technology . Thus, the same official title can be read with several different technologies. The official title to identify the user of the device 1. The presence of different readers of official titles can read a large number of types of official titles, and allows the user to use different types of official titles to identify themselves. The official title readers 10, 11, 12 are for example located on a horizontal plane of the device for convenience of use.

In some embodiments, the apparatus 1 is for example provided with a support column 26 of the apparatus. The readers of official titles 10, 11, 12 are for example fixed in the column 26. This column 26 is for example fixed in the ground. The face 2 of the apparatus 1 is preferably fixed on a telescopic arm adapted to slide in the column 26. This allows the user of the apparatus 1 to adjust the height of the face 2, for example to take photo or to have the screen at a height that suits him. At least one of the official title readers is for example a scanner 10. The scanner 10 provides access to graphic information contained on the official title. The scanner is suitable for example in the case of an identity card, a passport or a driver's license. The scanner 10 is adapted to read in particular the following standard formats: ICAO ID3 format (for the passport), ID2 format (for national ID cards) and IDI ISO 7816 format (for plastic cards with magnetic stripes). At least one of the readers may also be any type of image acquisition device arranged to digitize the information graphics contained on a title, for example with an optical character recognition (OCR, for "Optical Character Recognition" according to the English terminology).

Other readers of titles are for example smart card readers with contact 12 or contactless 11. Smart card readers with or without contact allow access to the data stored in the card and representative for example information electrical and / or biometric information. The smart card reader with contact 12 is suitable for example in the case of a vital card. The contactless smart card reader 11 is suitable for example in the case of an identity card or a passport. The smart card readers with or without contact 12, 11 are adapted to read in particular the ID 3 and IDl formats mentioned above.

FIG. 3 represents a schematic view of the elements of an apparatus according to the invention.

In particular, the apparatus 1 comprises a device 13 for recognizing the information read by the official title readers 10, 11, 12. The recognition device 13 is connected to the official title readers 10, 11, 12. It then receives and recognizes the information read by the readers of official titles 10, 11, 12. The information recognized by the recognition device 13 are for example the surname, first name, the number of the identity card or passport, the social security number , address, etc. Such an apparatus may, in some embodiments, recover this information from information read by one of the official title readers of the apparatus, for example a scanner performing optical character recognition (OCR).

The apparatus also includes a device 23 for verifying the authenticity of the official title. This verification device 23 receives the information contained in the official title and recognized by the recognition device 13. The verification device 23 is adapted to verify that the official title presented is authentic and that it has not been the subject of a flight. For this, the verification device 23 is adapted to connect to a database external to the device 1 for interrogation. The external database contains the necessary information. The external database is located in the entity (administration, company, or exhibition hall) in which the device is located. Alternatively, the external database is located in other the entity in which the device is placed. The verification device 23 communicates with the external database in a secure manner. The verification device 23 communicates with the external database for example via the Internet or intranet. The information exchanged between the verification device 23 and the external database is for example encrypted to ensure the confidentiality of the data during the communication of the device with the outside and to avoid any fraud. A firewall, an anti-virus and / or other anti-intrusion tools may be provided in the device as well as in the system containing the external database in order to ensure the security of the devices. data. It is thus clear that the apparatus makes it possible to access data stored in external databases, in particular databases of entities different from those having the apparatus used by the user. It is also understood that these databases may, in some embodiments, be made accessible through at least one system or server managing the data exchange with the device according to the invention, from previously defined authorization. As a variant, a first apparatus of a first entity will communicate with a second apparatus of a second other entity, this second apparatus having access (for example direct) to at least one database storing the data relating to the titles issuable by the second entity. second entity and managing the data transmitted to the first device according to permissions previously stored in the first and / or second device and / or the database of the second entity. For example, the data representative of the setting of the device allow it to access the server of an entity and to authenticate to require the recovery of a certain amount of information. The server of this entity may also include additional data for the security of exchanges, including representative authorization previously defined and / or at least one authenticator to use for data access, encryption, etc..

The apparatus 1 also comprises a device 14 for generating a personalized secure title from the data contained in the official title. The generation device 14 manufactures the secured securities from non-personalized securities contained in at least one store 19 and from the information recognized by the recognition device 13. The issuance of different securities also assumes different blank stock storage stores. Similarly, the generation device 14 may include several editing devices, using different types of blank media. For example, a first editing device will make it possible to edit smart cards (for example a smart card printer, or a laser marking device) and a second editing device (for example a simple jet printer). ink or laser) will allow to edit A4 documents (for example to edit a proof of civil status or any other printed document ...). In addition, particularly in the case of official titles that can be delivered by the apparatus according to the invention, the magazine 19 is preferably shielded to prevent any attempted theft. The generation device 14 is adapted to write graphically and / or electrically the necessary information on a non-personalized title. The necessary information for the secure title includes for example all the information contained in the official title (for example in case of renewal of official title) or only part of the information contained in the official title (for example in the case of a badge of access to a company or an exhibition). The generation device 14 can also write on the blank title information acquired directly from the user during the secure title generation process, such as for example a photograph, biometric fingerprints, a signature or information entered by the user. such as his workplace (useful information for example in the case of a badge for access to a company or an exhibition), or information from the external database. The generation device 14 can also write on the secure title the duration of validity of the title. The title can be temporary or not. The validity period can be one day (for example for a company visit), as for 10 years (for example for a passport or an identity card) or without a time limit.

In order to acquire information during the generation process, the apparatus 1 optionally includes a camera 16, 17. This camera includes, for example, a camera 16 and a lighting system 17 The camera 16, 17 is necessary when the secure title must include a photograph of the user. The device Shooting 16, 17 is located on the side 2 of the camera 1 for reasons of convenience of use.

Similarly, the apparatus 1 may also include one or more biometric sensors 18. Different biometric sensors 18 may be provided as needed to generate the secure title. The biometric sensors 18 can record, for example, fingerprints, the iris, the shape of the hand, the face, the voice, etc.

Thus, the generation device 14 can use all or part of the information contained in at least one official title and / or information captured by a device for capturing the device, such as a camera and / or biometric sensor (fingerprints, iris, genetic markers, etc.), to generate the secure title. This information (from the title or the user) to be used by the generation device 14 can be defined by the data representative of the parameters defined according to the level of security required by the secure title whose delivery has been requested by the user.

In addition, if the screen 15 is a touch screen, the user can enter information through a virtual keyboard displayed on the touch screen or form his signature on the touch screen with his finger .

If the screen 15 is not tactile, a real keyboard can be provided on the side 2 of the device. A mouse may optionally also be provided to allow a cursor to move on a non-touch screen. The actual keyboard and mouse, not shown in the figures, are for example on a board articulated on the face 2 of the device 1, for example under the screen 15 for reasons of practicality.

In some embodiments, the apparatus 1 also includes at least one secure title delivery slot 21 when the title is ready.

In some embodiments, the apparatus 1 also comprises a throat 27 (FIG. 2) for the return of secured titles. This feedback port 27 allows the user to return a temporary badge at the end of its life. In the event of renewal of an official title, the user may return his old official title, which may have been used as an official identification title, upon receipt of his new official title, which will then be his secure title obtained by the process according to the invention. The return throat 27 may be on another face of the apparatus than the interface face 2 of the user with the apparatus 1.

In certain embodiments, the apparatus also comprises a graphic and / or electrical erasing device of the title restored in the rendering chute. After erasure, the secure title becomes a blank title to secure and it is stored in a store 30 (Figure 2) for securities storage to secure. This helps to recycle titles and avoid waste.

The apparatus 1 optionally comprises, as shown in FIG. 2, a stealth cabin 20. This stealth cabin 20 is for example formed of two walls facing each other. The stealth cabin 20 allows the confidentiality of operations.

The apparatus 1 also comprises a central unit 25 which controls the method of generating secure titles. The central unit 25 is connected to all the elements (10-19, 21, 23, 27, 30) forming the apparatus 1, as shown in FIG. 3, and controls these various elements. The central unit executes algorithms allowing the various operations authorized on the device (image or fingerprint capture, connection with databases of external entities, authentications of the device, titles and entities or persons, user guidance, printing, editing, storage of data used during operations and / or relating to the use of the apparatus and / or various data, updating, etc.). These algorithms may be supported for example by data allowing the execution of a software application on the central unit.

As previously mentioned, the apparatus uses, in some embodiments, data representative of parameters relating to the security levels required by the various types of titles presented ("official title") and issued

("Secure title"). These data representative of these parameters may be stored in storage means accessible to the central unit 25, either located in the apparatus, or remote and accessible via suitable communication means. As a variant, these data representative of these parameters can in fact be materialized in the algorithms used by the processing unit to carry out the various possible operations on the apparatus (reading, capture, verification, linking to external databases, etc.). Thus, for example, software means condition the possible operations on the device. This data generally defines the authorized operations and therefore the titles and information that are required as well as the titles that can be delivered through the device.

The central unit 25 may, in certain variants, provide a parameterization of the apparatus for modifying the data defining these authorizations, whether in the form of stored data or processing algorithms. This setting of the device can of course be conditioned by an authentication of the operator performing the parameterization so as to restrict the setting only to authorized persons or entities. In addition, these data representative of the authorization parameters require, in some embodiments, prior agreements between the entities, in particular to allow access to the databases of these entities (especially in the case where at least one of the entities is a competent authority to issue and / or verify official titles). This data may then include authenticators (identifiers, encryption keys, secure codes, etc.) required for the various operations (or tasks), in particular those implementing a cooperation between these entities. The skilled person will appreciate the security measures that can be implemented from authorizations previously defined through the parameters described here.

In general, these representative data of the authorization parameters may include, in some embodiments:

- data representative of at least one type of title ("secure title") that can be issued by the device and at least one type of title ("official title") to be presented for the device generates at least one title, as well as information to be used (information read and / or entered and / or captured and / or written on the title and / or recorded in the title and / or in the apparatus and / or database) for the issue of this title, data representative of the authorizations of entities and persons, preferably defining both the authorized persons and entities and the information to which they are authorized to access,

- data enabling the device to be linked to databases of the entities and persons with whom prior authorizations have been defined, in particular for verifying the validity of the securities presented or the validity of the information presented (seizures or captured), data representative of the parameters defining feasible operations according to the authorizations of the entities or persons

(including the owner of the device) and the types of securities (presented and delivered), depending on the level of security required by the securities used, data representative of authenticators,

Preferably, the data representative of the authorization parameters may include these various data by associating them with each other to define the operations to be performed.

For example, the parameters will define the titles that the device is allowed to deliver and that can thus be offered to the user on an interface. The parameters will also define, for each of these titles, the data representative of the information that the device must obtain from persons (the user or the operator, for example for a verification) and / or entities and / or of titles. Finally, the parameters will define how to obtain the required information, including the data to obtain them as the servers to contact and the data to be used for the permissions that will require the servers of external entities. For example, the authorities competent to issue official titles may define the security measures required for the titles that they authorize the device to be issued and this data makes it possible to group all the data for each entity and each type of security and allow the device to fulfill the required conditions. The parameters can therefore define authorizations of the user and / or an entity. In some embodiments, the apparatus also makes it possible to check the presence of the blank media in the warehouse and for example a count of the delivered securities and the remaining blank media, for example for the updating of at least one internal database. or external concerning the securities issued, so as to verify that no blank media has been stolen and / or to archive the data used during the issuance of securities.

Thus, for example, a customer will not be able to choose to issue an identity card if he is not authorized because the device will not allow access to blank media and the program (s). necessary customization (s), or connections to at least one government database. For example on a device placed in a university, the user will have the choice between a student card, a canteen card, a sports club card and a NAVIGO transport card through a partnership with the university. In a shopping mall, the device could offer a loyalty card for each store in the area. In a marriage, the device can offer titles and official documents but also a map city, parking, garbage or other ...

In some embodiments, especially when the apparatus according to the invention is intended to be outside or in unsecured premises, the central unit 25 is deported, for example in a secure room not accessible to the public, of to avoid theft, fraud or vandalism. The apparatus is then connected to this remote central unit via communication means adapted to control the various elements (10-19, 21, 23, 27, 30) of the apparatus, in substantially the same manner as if the unit central unit is integrated into the device. In some embodiments, only the storage means storing the data necessary for the operation of the apparatus (the data including those supporting the algorithms and those defining the authorization parameters) are deported, the apparatus then comprising a central unit provided with data processing means accessing, via suitable communication means, the data stored in these remote storage means. In a variant, only the most sensitive data are deported, such as, for example, the data representative of the authorization parameters (relative to the various entities and titles in particular). Thus, in these embodiments, the data relating to the entities and the parameters of security, and possibly the data allowing the operation of the device (eg data representative of a software application and / or an operating system of the device) are not exposed to theft or fraud, as they are not stored directly in the device but are transmitted to it during the execution of the various operations.

In some embodiments, the method according to the invention comprises at least one preliminary parameter setting step of the apparatus. Thus, before its use for the issuance of securities, the device can be set by the customer or tenant of the device or by an authorized operator (especially in the case where sensitive data is required) to define which securities can be issued by the device. For each title that the device is authorized to deliver, the parameterization may include at least one of the following steps: - definition of the information to be registered and / or recorded (printing, programming a chip, recording data representative of a photo and / or biometric data, etc.) definition of the titles to be submitted to issue the title to be issued, definition of the verifications to be carried out on the title and / or the information presented for the issue of the title definition of the data to be acquired by the device

The step of defining the verifications to be carried out on the title and / or the information presented for issuing the title may, in some embodiments, include at least one of the following checks:

a definition of a connection to a database to check the existence of the title and the coherence of the information read,

- a definition of the types of control to be performed on the title (such as hologram, Ultra-violet or Infrared image checks, etc.), - a definition of a verification of the entitlement to receive the title of the person requesting the issuance of a security, - a definition of verification that an application for grant is pending with a competent authority, etc.)

The step of defining the data to be acquired by the apparatus may comprise at least one step of defining data to be acquired on at least one title presented and / or from at least one database of an entity and / or from the user (by user input and / or capture by the device: photo, biometrics, etc.). This step of defining the data to be acquired may also comprise at least one step of defining the conditions in which the data are required. For example, an expiry date of at least one of the data, for example those representative of the photo itself or information concerning the date on which it was taken or the entity that took it , will require that a new photo is taken on the device. The apparatus thus presents the user with a series of displays concerning the titles to be presented and / or the seizures and / or captures and / or manipulations of titles to be made (the entry of a new address can be requested in case of moving, etc.) and / or the conditions under which they must be entered (for example, taking a new photo in an official format and presenting a title, etc.)

It will be understood that these various steps make it possible to define the values of the data representative of the authorization parameters whose central unit requires use to deliver a security security chosen from those set.

The method of generating at least one secure title from at least one official title will now be described.

Prior to the use of the device to generate the secure title, the user presents his identity documents to an authorized person who verifies that the papers presented correspond to the person who will use the device.

This step is performed during a face-to-face meeting between the user of the device and the authorized person.

Verification done, the user installs in front of the face 2 of the apparatus 1, which is a user interface face with the apparatus 1. In certain modes of realization, the user is isolated in the isolation space 20. The user can signal his presence by touching the touch screen 15. In general, the device is arranged to present the user with successive steps of displaying information relating to at least one choice of at least one title (s) to be delivered, then to the following steps and to the elements (10-19, 21, 23, 27, 30) to be used for the issue of the securities chosen.

The central unit 25, connected to the screen 15, then displays on the latter instructions to be followed by the user for the generation of its secure title. Preferably, an animated virtual agent guides the user throughout the secure title generation process.

The virtual agent can begin by asking the user what secure title he wants to obtain. The user can then choose from several possibilities. Thus, in a police prefecture, the user has for example the choice between national identity card, passport and driving license.

The virtual agent can then ask the user to position his or her official title in front of or in one of the official title readers 10, 11, 12. The virtual agent can indicate to the user which official title he / she should use according to the secure title he wishes to obtain and tell him which reader he should use according to the official title he presents.

The central unit 25, connected to the official title readers 10, 11, 12, then orders the reader (s) concerned (s) to read the official title. The presence of the official title in front of the corresponding reader can be detected for example by means of a sensor. The information read by the readers 10, 11, 12 is transmitted to the recognition device 13. The central unit 25, connected to the recognition device 13, then receives the information recognized by the recognition device 13.

The central unit 25, connected to the device 23 for verifying the authenticity of the official title presented, orders this verification device 23 to interrogate at least one database of an entity defined in the authorization parameters to determine if the title is authentic and is not the subject of any fraud, at least on the basis of information recognized by the recognition device. explained above, this interrogation of the database external to the device is preferably performed by secure communication, including the issuance of official type titles. Similarly, as explained above, the validity of the title can also be verified by the presence of secure elements on the title presented (hologram etc.). Querying the external database also makes it possible to verify that the request for generating the security title by the user is justified. An authorization to generate the secure title requested by the user can then be issued or not. For example, if the user wishes to obtain a badge of access to a company when he does not have the authorization of the company, for example because he does not have an appointment with any employee of the company. company, no authorization to generate an access badge will be issued. The central unit 25 will then inform the user that it can not answer its request. A security service and / or an operator and / or authorities (depending on the configuration of the device) may be warned. If the official title is detected by the verification device 23 as being the subject of a fraud, for example if it is recorded as having been stolen, a message or an alert signal is sent by the central unit 25 to a competent department of the entity in which the device is located or of another entity (eg police services), so that the fraudster is, for example, arrested. Once the verification device 23 has verified that the official title presented is authentic, the central unit 25, connected to the device 14 for generating a personalized security title, transmits the data necessary for the generation of the security security to the security device. generation 14. These data may be partly or entirely contained in the official title presented by the user for identification. This data may also include additional information entered or captured during the process of generating the secure title by the user, such as a signature or a workplace for example, or even biometric fingerprints.

To do this, the central unit 25, possibly connected to a camera 16, 17 and / or one or more biometric sensors 18, may for example ask the user, via the virtual agent for example, to to be photographed and / or to record fingerprints, iris, the shape of the hand, the face, the voice, etc. on the biometric sensor (s) 18. The central unit 25, connected to the touch screen 15 or to a real keyboard and to a mouse (not shown or any other suitable input means, for example a stylus), can also ask the user to enter information or to form his signature on the touch screen. Particularly in the case of issuance of official titles by the device 1, the virtual agent can be arranged to guide the user on how the picture should be taken, indicating where he should center his face, for example through dynamic guidance through dedicated software analyzing a captured image and determining its validity against the requirements of official photos, and indicating a number of relevant information such as the need for glasses and jewelry, etc.

It can also be provided by the authorization parameters that the central unit 25 asks the user to answer questions about his address, his parents or other information, by entering the answer with a virtual keyboard on the screen. touch or a real keyboard.

It can also be provided by the authorization parameters that the central unit 25 asks the user to present a title other than the first title presented, for example to scan a document other than the first official title, for example an excerpt birth certificate that he brought with him (or that he is delivered on the spot in the case of a town hall, or even that he is delivered through the device by presenting other titles, as for example a family booklet). In this case, the information recognized by the recognition device 13 is verified by interrogating at least one (external) database parameterized in the device as having the data enabling verification. An authorization to generate the secure title requested by the user can then be issued or not.

The central unit 25 transmits all the information necessary for the establishment of the secure title to the generation device 14 of a personalized secure title, in particular the information obtained from the official title presented by the user, and additional information obtained from the of the user during the generation process, the external database or another partner database, etc. The generation device 14 then generates a personalized secure title from a blank title previously stored in the store 19. The generation of the personalized secure title consists of a graphic and / or electric writing on the blank title from the information transmitted by the central unit 25 to the generation device 14.

Once the secure title ready, the central unit 25 controls its expulsion through the slot 21 of delivery of the secure title. At least one database is updated to signal the generation of the secure title for the identified user. It may be an internal database to the device and / or an external database that does not belong to the issuing entities but centralizing the information concerning the securities issued.

It is understood that the method may therefore comprise for example a succession of at least one iteration of at least a portion of the following steps:

- display of a list of deliverable titles, - choice, by the user, of the title that he wants to produce among those proposed on the device.

- display of at least one title to be presented to allow the issue of the title chosen, and if necessary instructions on the steps to be carried out

- recognition of the title presented, - safety control (s) (eg verification of hologram, or visible inscriptions to ultraviolet, etc.) to verify that the title is not a forgery,

- connection to at least one internal and / or external database to validate the title and / or the issuing authorization, with the possible retrieval of information from the database,

- display of instructions concerning seizures or catches to be made, for example if the information provided is not sufficient or is outdated or non-compliant,

- title edition (printing, programming) - title issue

updating at least one database to record the issue. Official titles, such as identity cards, for example, are now centrally personalized. The apparatus according to the invention proposes a decentralized or distributed version, placed closer to the users. This allows the user to leave directly with his official title. It also avoids official securities transfers between factories and distribution offices and thus reduces the risk of theft / fraud. It also extends the service to users without increasing management costs. In addition, the method for generating secure titles is simplified since steps, such as receiving forms and identity photos, transfer to the production center, receipt of titles by the administration, are deleted. In addition, security against theft and fraud is ensured, despite the use of the device directly by users.

Of course, the present invention is not limited to the embodiments described by way of example; thus, for example after verification of the official title by an authorized person, the user of the device for generating a secure title can use an electronic chip card, called a biometric safe card (CCB), in place of the official title . Similarly, in some embodiments, the apparatus may use a CCB, for example issued by an apparatus according to the invention having the authorizations for such an operation, to generate an official title, from blank titles for example present in an armored store of the device. Such a biometric safe card is described for example in the patent application No. FR 08 53813 and in a PCT application filed by the applicant of the present application on the same day as the present application. The biometric safe card (CCB) contains photographic, biometric and civil status data of the cardholder. The biometric safe card (CCB) authenticates the user for example by a code provided by the latter, as for a credit card for example. The smart card reader with contact 12 of the device, for example, is adapted to read the information contained in the card biometric trunk. A secure title can thus be generated by the device according to the invention from the information contained in the biometric safe card (CCB).

In some embodiments, data about the holder (or bearer) of the CWB is digitized and associated with authorizations defining read and / or write access to the various stored data for each of the entities or persons who may use them as listed in the CWB. In some embodiments, each of the entities or persons listed is associated with at least one security identifier defining the type of data to which access is allowed.

The biometric safe card (also called biometric safe) comprises: a support comprising at least one face, storage means integrated into the support and processing means, the storage means comprising: an administrative data storage area, a biometric data storage area, a storage area for technical data relating to the administrative and / or biometric data, and / or at least one program executed by the processing means. The biometric safe card is characterized in that the storage means further comprise at least one access table for administrative and / or biometric and / or technical data, said authorization table (s). access gives for each administrative and / or biometric and / or technical data the list of authorized sources and the list of authorized users or the program may for each administrative data and / or biometric and / or technical deliver outside the data authorized access based on identifiers and data accessed.

In addition, the access authorization table (s) may comprise two matrices, a first matrix containing in at least one cell first information indicating whether a source is authorized to modify the content of an administrative data item. and / or biometric and / or technical, a second matrix containing in at least one cell a second information indicating whether a data user organization is authorized to read the contents of an administrative and / or biometric and / or technical data. In certain embodiments of the CWB, the processing and / or storage means are arranged so that each authorization table stored in the biometric safe is only modifiable by the organism that issued the biometric safe and / or or by bodies authorized to issue administrative and / or biometric and / or technical data. In certain embodiments of the CWB, the access to each administrative and / or biometric and / or technical data is read or write protected by an access code stored in the storage means of the biometric safe, this memorized code being compared by the processing means to that received to give or not access to the administrative and / or biometric and / or technical data. In some embodiments of the CWB, the storage means includes a data encryption algorithm executed by the processing means and making the data accessible only to an authority having an encryption key. In some embodiments of the CWB, the biometric safe includes means (authorization table, program) to verify the authority of a source to enter the vault a data type. In some embodiments of the CWB, the biometric trunk or a terminal or device or apparatus (eg according to the present invention) communicating with the trunk includes means for converting each raw data into a predetermined electronic format based on further processing (defined for the CWB).

The apparatus according to the present invention may, in some embodiments, be able to generate a CCB, for example by requiring various information defined in the authorization parameters. It will therefore be possible to provide a method for generating CCB, comprising at least the following steps: one or more steps for storing the personal data in the biometric vault; a step of verifying the authority of a data source; -vis each data entered when entering this data for each data source.

In some embodiments of the CCB generation method, the storage step (s) is (are) preceded by at least one delivery step that includes at least one acquisition step of a first series of raw data that includes at least: a transfer step in storage means of the integrated terminal for editing the raw data; a step of converting each raw data into a predetermined electronic format according to a subsequent processing. In some embodiments of the method of generating the CCB, the step of acquiring a first series of raw data further comprises a quality control step of each raw data. The step of acquiring a first series of raw data may further include a step of checking the integrity of each raw data verifying the non-falsification of each raw data. The delivery step may further include a processing step that includes at least one step of converting the raw data into an electronic format in which elaborate data is stored. The processing step may further include a step of developing visual identification information to be reproduced on the biometric trunk. At least some of the elaborated data may be encrypted. The data developed may be dated and possibly associated with a validity date and a format defining the nature and the data model. The delivery step further comprises a storage step which comprises at least: a step of transfer and writing in storage areas specific to each type of data of the biometric safe for the elaborated data stored in electronic form, a step reproducing on at least one side of the biometric safe at predetermined locations for data to be directly visible. The storage step may further comprise a step of reading the elaborate data stored in the biometric safe and a comparison with the data developed before registration. The delivery step may further comprise a step of generating at least one data access authorization table consisting of at least one matrix listing the access rights to read and / or modify the data based on an identifier of the carrier and / or user organizations. The step (s) of storage of personal data may include all or part of the steps of the issuing step. During the step (s) of storage of personal data, the control step quality may consist of the reading of the corresponding data of the biometric safe and the comparison of the previous data stored with the updated data. The step of verifying the authority of a data source vis-à-vis each data input during the input of these data for each data source can be achieved by consulting at least one table of data. authorization of access to the data.

It is understood that the apparatus according to the invention is adapted to generate a CCB because it comprises at least: storage means; raw data acquisition means, a raw data processing program for generating elaborate data, means for transmitting elaborate data to the biometric vault.

In addition, the CCBs may require various types of "sensitive" data, that is to say from official entities and the apparatus according to the invention makes it possible to obtain and / or verify these data. In addition, the generation of the CWB may require the presentation of at least one official title and it is therefore understood that the present invention will prove particularly advantageous. The raw data acquisition means may comprise the sensors 16, 17, 18 (images and / or fingerprints and / or sounds and / or communications means for connecting to external storage means containing the raw data). The integrity and quality and integrity of each raw data can be verified and the raw data can be converted into elaborate data.

The use of CWB on an apparatus according to the present invention makes it possible to implement a secure method, for example for the issue of title as described in the present application. With the CWB, this method will comprise at least the following steps: a step of insertion of the biometric safe in a reader adapted to the terminal having an input keyboard and / or a fingerprint reader, a step of identifying a holder of the biometric safe and authorizing the use of data by dialing an identification code and / or reading a fingerprint, a step of extracting the necessary data from the database stored in biometric safe storage means after verification of the access authorization of the user organization to the data, a step of issuing the document.

In some embodiments of the method of using the CWB on the apparatus 1, the access authorization check of the user organization to the data is performed by consulting at least one access authorization table. to the data. The access authorization verification of the user organization to the data may be performed by a program of the biometric safe depositing a sequence of instructions allowing access to an address area defined in the program according to an identifier provided by the terminal. The step of extracting the necessary data from the database stored in the biometric safe may be followed by a step of completion by the user organization of the data necessary for issuing the document.

In the CWB, authorization data (eg table) may also relate to the authorization parameters of a device according to the invention, depending on the user and / or entity, to allow them to access certain information from the CWB, for example by recognizing an identifier of the device. However, in other variants, the security provided by the device according to the invention (thanks to its authorization parameters) will complement the security provided by the CWB (thanks to its authorization data). Thus, the CWB which is a secure title can be used in an apparatus according to the invention (through at least one reader of the apparatus) to generate other titles, either simply from the CWB, or from other data, depending on the setting of the device. The device allows more types of titles to be delivered than the CWB alone can, thanks to its securities verification and database consultation features. Thus, the device accesses, through its access authorization, CWB data and in addition to defining other data to which access is authorized (in particular among the data relating to different types of securities) and conditioning the type of security that is to be used in conjunction with the CWB and / or that can be generated from at least one security (the CWB and possibly at least one other) and / or at least one information and / or data provided by the user and / or obtained from the databases that the device allows to consult.

The various embodiments and embodiments described herein may be combined together unless they are incompatible and / or do not meet at least one of the objects of the present invention. In addition, it should be obvious to those skilled in the art that the present invention allows embodiments in many other specific forms without departing from the scope of the invention as claimed. Therefore, the present embodiments should be considered by way of illustration, but may be modified within the scope defined by the scope of the appended claims, and the invention should not be limited to the details given above.

Claims

Apparatus (1) for generating a secure title from an official title, comprising: - at least one official title reader (10, 11, 12),

a device (13) for recognizing information contained in the official title,

- a device (23) for verifying the authenticity of the official title from the information contained in the official title, - a device (14) for generating a personalized secure title from the information contained in the official title

Apparatus (1) according to claim 1, wherein the one or more official title readers is a scanner (10) and / or a contact chip card reader (12) and / or a smart card reader without contact (11).

Apparatus (1) according to claim 1 or 2, wherein the secure title generating device (14) comprises a graphic writing device and / or an electric writing device.

4. Apparatus (1) according to claim 3, further comprising a graphic and / or electrical erasing device.

5. Apparatus (1) according to one of claims 1 to 4, wherein the verification device (23) is adapted to query a database external to the device (1) to verify the authenticity of the official title.

6. Apparatus (1) according to one of claims 1 to 5, further comprising a screen (15).

7. Apparatus (1) according to claim 6, wherein the screen (15) is a touch screen.

8. Apparatus (1) according to one of claims 1 to 7, further comprising a digital camera (16, 17).

9. Apparatus (1) according to one of claims 1 to 8, further comprising one or more biometric sensors (18).

10. Apparatus (1) according to one of claims 1 to 9, further comprising a store (19) for securities storage to secure.

11. Apparatus (1) according to one of claims 1 to 10, further comprising a slot (21) delivery of secure title.

12. Apparatus (1) according to one of claims 1 to 11, further comprising a stealth cabin (20).

13. Apparatus (1) according to one of claims 1 to 12, characterized in that the data representative of the authorization parameters comprise: - data representative of at least one type of title that can be issued by the device and at least one type of security that must be submitted for the device to generate at least one security that is representative of the information that is to be used for the issuance of that security, - data representative of the authorizations of the entities and persons, preferably defining both the authorized persons and entities and the information to which they are authorized to access, data enabling the device to be linked to databases of the entities and persons with whom prior authorizations have been granted. defined, in particular for the verification of the validity of the titles presented or the validity of the information presented, data representative of the parameters defining operations that are feasible according to the authorizations of the entities or persons and the types of securities presented and delivered, according to the level of security required by the securities used, data representative of authenticators.

A method of generating at least one secure title from at least one official title by the apparatus according to any one of the preceding claims, comprising the steps of:

- display by the device of at least one title that the device is authorized to deliver, determined from data representative of authorization parameters,

choice of at least one title to be delivered by the apparatus, and then according to the data representative of authorization parameters:

- reading an official title,

- recognition of information contained in the official title, - verification of the authenticity of the official title, at least on the basis of information contained in the official title,

15. The method of claim 14, comprising a prior step of verification face to face by a person authorized correspondence between the user of the device and the holder of the official title presented.

16. Method according to one of claims 14 and 15, comprising at least one preliminary step of setting the device to define the values of the data representative of the authorization parameters.