AT525212A1 - METHOD FOR DIGITAL GENERATION OF AN OFFLINE VERIFIABLE MANIPULATION-PROOF ACCESS DOCUMENT - Google Patents

Abstract

The invention relates to a method for digitally generating a tamper-proof access document (1) that can be checked offline to prove access authorization for a person (2), the method comprising the following steps: a) storing a person's profile (2a) in a database (3), wherein the personal profile (2a) has personal data (2aa) and proof of identity (2N) for at least one identity document (2ab) for determining the identity of the person (2), wherein the identity document (2ab) has at least one identity photo (2ab') of the person to be identified ( 2) and the proof of identity (2N) includes a representation of this identity photo (2ab'), b) authenticity check of the identity document (2ab) by executing a first check algorithm (AL1), c) uploading an entry authorization document (4) to prove an entry authorization in the Database (3), d) authenticity check of the entry authorization document (4) with the execution of a second test algorithm (AL2) and recording and storing entry authorization data (4a), e) in the event of the existence of positive test results in steps b) and d) creation of a digitally displayable access document (1).

Description

METHOD OF GENERATION OF AN OFFLINE VERIFIABLE DIGITALLY

MANIPULATION-PROOF ACCESS DOCUMENTS

The invention relates to a method for digitally generating an offline-verifiable, tamper-proof access document for proving access authorization to a

Person.

In order to prevent the spread and to contain pandemics, there has been a need to link entry or access to certain events and/or locations to criteria. In connection with the Covid-19 pandemic in particular, entry eligibility criteria were created, for example, which require the submission of a negative infection test or the existence of immunization as a result of recovery from an illness

require infection or at least vaccination.

One difficulty in checking access authorizations is that the authenticity of the access documents is difficult to check. Access documents were often simply provided with photos of the person authorized to access, and an examiner checking the document (e.g. a bouncer) was presented with a printout of such a document, which, by visual comparison with the one in front of him

document submitter can carry out a simple check.

A problem with this method is that documents to be printed out can easily be manipulated. For example, the photo and name in the document could go through

simple machining methods are changed.

In order to create higher security standards, methods have become known in which, for example, access authorization is checked online. So by comparing with a

Database can be checked in a simple way whether the submitted document is genuine.

However, a decisive disadvantage of this online check is that it requires a stable internet connection and the corresponding databases have to be created. At various events such as music events, it can

However, due to the large number of people, network overloads can occur.

Establishing a stable internet connection can also be difficult at events in remote locations. There is therefore a need for an improved one

Entry verification procedures.

For this purpose, in a first aspect of the invention, a method is provided for digitally generating an offline-verifiable, tamper-proof access document for proving a person's access authorization, the method comprising the following steps

includes:

a) Storing a personal profile in a database, the personal profile having personal data and proof of identity for at least one identity document for determining the identity of the person, the identity document comprising at least one identity photo of the person to be expelled and the

proof of identity includes a representation of this identity photograph,

b) verification of the authenticity of the identity document by executing a first verification algorithm,

c) uploading an entry authorization document to prove a

authorization to enter the database,

d) Checking the authenticity of the entry authorization document by executing a second one

Test algorithm and collection and storage of entry authorization data,

e) if there are positive test results in steps b) and d), create a

digitally displayable access document, where

el) the access document at least one identity photo of the identity document

includes,

e2) the access document further comprises an area code, wherein the area code

at least

e21) encoded information on the entry authorization data of the person, as well as

e22) encoded information for the reproduction of an image section of the

Has identity photos of the identity document.

With the method according to the invention, an admission authorization can now be reliably checked offline, specifically at the location of an event, by creating a suitable document for this, namely the admission document with its inventive features. This access document is prepared to be checked offline in a tamper-proof manner in a further step, which relates to a second aspect of the invention, in that the area code contains image information that is not disclosed to a user (apart from a test person operating a test device). Of course, the access document that can be displayed digitally can also include several pages, which can also be displayed separately from one another. An identity document can be a passport or identity card, for example. The first check algorithm can, for example, work in such a way that a checksum is formed from the specified data after OCR and compared with the checksum stored in the MRZ; provision can also be made for metadata of the identity document or an associated file to be examined for traces of image processing programs; or e.g. the background noise of the identity document can be examined for uniformity. With regard to the second verification algorithm, it can be provided, for example, that a QR code attached to the entry authorization document can be processed in order to read out the data stored therein together with the digital signature and to validate the stored data with the signature; or e.g. a validation hyperlink listed on the entry authorization document can be followed in order to read data from the corresponding website and compare it with the

compare specified data for validation.

In particular, it can be provided that the area code is a QOR code that can already be optically processed by a wide variety of existing test devices, the test devices being portable devices as well as stationary devices such as turnstiles

Reading unit can act.

Furthermore, it can be provided that the database is implemented on a server

whereby the same database can be accessed from different devices.

In particular, it can be provided that at least part of the area code, in particular the part that encodes the image section, is asymmetrically encrypted, which means that the content and position of the image section remain unknown to potential fraudsters and it is therefore impossible to take a manipulated photo that contains the image section , to create. For example, the image section can cover an area of 16x16 pixels with a color depth of 16 bits, be base64 coded and stored on the server with the private key of an asymmetric ECC

Key pairs are encrypted.

Furthermore, it can be provided that at least the part of the area code that encodes the entry authorization of the person is digitally signed, so that the entry authorization can no longer be manipulated in a row. For example, the entry credential can be encoded in a JSON object with key-value pairs for credential type, issue date, validity period, etc. and the whole JSON object on the server with

signed with the private key of an asymmetric EdDSA key pair.

In particular, it can be provided that the identity photo is segmented by means of an image processing algorithm and the individual segments are subjected to an evaluation with regard to their succinctness, with at least one segment of high succinctness being selected as the image section, thereby avoiding that a part of the image that is not suitable for comparison, such as a white one Background is chosen and the comparison at the

Verification is simplified and accelerated.

Provision can also be made for the personal data to be checked automatically by means of OCR by comparing it with the personal profile. For example, an OCR software can be implemented on the server, which converts an uploaded identity photo of an identity document into machine-readable text, after which it can be determined whether the data stored in the personal profile, such as first name, last name and

date of birth appear in the identity document and appear in the correct place.

In particular, it can be provided that the authenticity of the identity document is checked by means of OCR or image analysis. For example, noise patterns of different image areas, particularly the name and date of birth areas, can be analyzed, with jumps in the noise pattern indicating forgeries

Clues; Using copy-move detection, it can be determined whether individual areas of the

Documents have been manipulated with a copy stamp; Font change detection can be used to determine whether the document has been changed by text added later; checksums stored in the MRZ of passports can be evaluated to determine whether they match the other data in the passport; through metadata analysis

the document is checked for inconsistencies that indicate post-processing.

It can also be provided that criteria classified for entry authorization documents are stored in the database and that in individual cases the entry authorization document is checked using at least one of these criteria using the second check algorithm to confirm the authenticity of the entry authorization document. For example, an entry authorization document can have an OR code printed on it, which contains a link to an Internet-accessible verification page with which the personal data can be compared. Or a certificate such as an EHC can also be stored via QR code, which in turn has a digital signature that verifies

can be.

In particular, provision can be made for F entry authorization documents to be classified with the aid of machine learning. For example, access authorization documents can be divided into issuer classes using machine learning, so that documents from an issuer can be found in the same class as a specific test site, so that new documents can subsequently be determined by which issuer they were created or whether they were created by the previously known documents

from the same issuer to the extent that a forgery must be suspected.

In a further aspect, the invention relates to a method for offline verification of an access document generated according to one of the preceding claims, this

Procedure includes the following steps:

a) Provision of a checking device that can be operated offline to record the area code stored in the access document, the checking device being set up to check the access document

to record and evaluate offline,

7127

b) Submission of the access document by the person associated with the access document,

hereinafter also referred to as entry person,

c) decoding the area code and detecting at least two pieces of information using the

test device, viz

cl) the existence of the entry authorization of the person by comparison with the

entry authorization data and

c2) the reproduction of the image section of the identity photo stored in the area code

the identity document,

d) Output of an entry authorization confirmation by the testing device to a test person checking the entry authorization by using the testing device, wherein the output of the entry authorization confirmation depends on the presence of the entry authorization data according to step c1) including the decoded reproduction of the image section according to step c2).

The testing device is therefore set up to record and evaluate the access document. For this purpose, the test device can be preconfigured in advance - also through online access. The configuration then remains saved, so that the test device then also

can record and evaluate the access document in offline mode.

In particular, it can be provided that the testing device is operated by the test person to be tested the entry authorization feedback, and wherein the

Submission of the access document according to step b) is presented by the person entering.

Furthermore, it can be provided that the identity photo of the entry person assigned to the access document is stored in the access document and this identity photo is reported back by the checking device in the entry authorization confirmation, in particular graphically

is shown.

In particular, it can be provided that the testing device for the graphical display of the

Identity photos and / or the image section of the identity photo is set up.

Furthermore, it can be provided that the access document is stored on a smartphone and can be displayed graphically on the smartphone display, whereby the

test device is set up to scan the smartphone display.

In particular, it can be provided that the checking device is set up to automatically evaluate the area code and to automatically compare the image section with the identity photo. As a result, if the test person submits a positive comparison, only the physical appearance of the person entering with

identify the identity photo.

In other words, the background to the invention can also be described as follows: Under certain circumstances, only authorized persons should be allowed to access certain locations such as events, restaurants, etc. For this purpose, the validity of

Entry permissions checked.

Entry authorizations can be in particular:

1. Health Certificates

2. Tickets

Modern entry authorizations are secured with digital security features such as digital certificates. These can be checked by an EDP system. Some entry authorizations, such as health certificates, are personal. These should therefore still be clearly assigned to a person. The assignment is often based on name and date of birth. To verify identity, an official photo ID is then presented upon entry, with an inspector verifying that the name and date of birth on the ID document and health certificate match on the one hand, and on the other hand

ascertains the identity of the person entering by checking the photograph.

This operation is inconvenient, time consuming and troublesome. The following digital solution is therefore proposed: Guests are provided with a smartphone app in which they can

can register. In the course of registration, your name and date of birth will be disclosed

queried. In addition, an official photo ID must be loaded into the system, either by photographing or uploading it. The ID card is digitally validated on a server, i.e. the convergence between ID card data and profile data is checked using OCR on the one hand, and checks for possible forgeries are carried out on the other. After successful verification, the guest's passport photo is segmented and separated from the ID card

saved.

In a further step, the guest is given the opportunity to load entry authorizations into the system. These entry authorizations are also processed and validated on the server. If the validation is successful, the system creates an access page that is displayed in the guest app. This entry page includes (1) the guest's passport photograph; (2) a QR code

with the access information

The QOR code contains the following components:

1st version of the code

2. Type of entry authorization

3. Date of admission authorization (e.g. vaccination date) or admission

Date of Expiry

4. Tile (e.g. 16x16 pixels) with crop from the guest passport photo and its coordinates

(asymmetric encrypted)

5. Additionally for online support:

a. Guest passport photo online address

b. Symmetric key to decode guest passport photo

6. Digital Signature

When the guest enters an event, the access page can be given to the inspector

be shown. This first compares the presented passport photo with the face of the

guest and then uses its own app to check the validity of the

entry permits and passport photo by scanning the QR code on the page.

The checking app can display the following information:

1. Validity of access YES / NO. If the stored entry authorizations and validity dates match the requirements of the event location (e.g. access allowed 22 days after initial vaccination against COVID-19) and the signature can be successfully verified, the status YES will be displayed, otherwise NO.

2. The guest passport photo cropped tile located on a blank space the size of the original passport photo. The inspector compares the tile on their smartphone with the corresponding section of the guest's passport photo. If both match, the passport photo is considered successfully validated, the ID check is done

completed and the guest may enter.

The invention is described below by way of example and not by way of limitation

Embodiment explained in more detail, which is illustrated in the figures. In it shows

FIG. 1 shows a schematic representation of a variant of a method according to the invention for digitally generating an offline-verifiable—tamper-proof

access document, and

Figure 2 shows a schematic representation of a variant of a method according to the invention

for offline verification of the tamper-proof access document.

Unless otherwise stated, the same reference symbols designate in the following figures

same characteristics.

FIG. 1 shows a schematic representation of the method according to the invention for digitally generating an offline-verifiable, tamper-proof access document 1 to prove an access authorization for a person 2. Offline is understood to mean the absence/non-use of an Internet connection. The procedure includes

the following steps:

10

a) Storing a personal profile 2a in a database 3, the personal profile 2a having personal data 2aa and proof of identity 2N for at least one identity document 2ab for determining the identity of the person 2, the identity document 2ab having at least one identity photo 2ab' of the person 2 to be expelled

and the proof of identity 2N includes a representation of this identity photo 2ab',

b) Checking the authenticity of the identity document 2ab with the execution of a first

test algorithm AL1,

c) uploading an entry authorization document 4 to prove a

Entry authorization into the database 3,

d) Checking the authenticity of the entry authorization document 4 while executing a second

Test algorithm AL2 and acquisition and storage of entry authorization data 4a,

e) if there are positive test results in steps b and d, create a

digitally displayable access document 1, wherein

el) the access document 1 at least one identity photo 2ab' of the identity document

2ab includes,

e2) the access document 1 further comprises an area code 1a, wherein the area code

1a at least

e21) encoded information on the entry authorization data 4a of the person 2,

such as

e22) encoded information for the reproduction of an image section 2ab" des

Has identity photos 2ab' of the identity document 2ab.

In the present example, the area code la is a QR code, for example. The database 3 can be implemented on a server. In order to transfer image information on the identity photo 2ab' to the area code la that is difficult for unauthorized third parties to access, it can be provided that at least part of the area code 1a, in particular

the part that encodes the image section is asymmetrically encoded. For example, he can

11

Image section covers an area of 16x16 pixels with a color depth of 16 bits, are base64 coded and encrypted on the server with the private key of an asymmetric ECC key pair. For example, an identity document can be a passport or identity card. In particular, it can be provided that at least the part of the area code 1a that encodes the entry authorization of the person 2 is digitally signed. For example, the entry credential can be encoded in a JSON object with key-value pairs for credential type, issue date, validity period, etc., and the entire JSON object signed on the server with the private key of an asymmetric EdDSA key pair. It can also be provided that the identity photo 2ab' is segmented by means of an image processing algorithm and the individual segments are subjected to an evaluation with regard to their conciseness, with at least one segment of high conciseness being selected as the image detail. Provision can also be made for the personal data 2aa to be checked automatically by means of OCR by comparison with the personal profile 2a. For example, OCR software can be implemented on the server, which converts an uploaded identity photo 2ab' of an identity document 2ab into machine-readable text, after which it can be determined whether the data stored in the personal profile, such as first name, last name and date of birth in

Identity document 2ab occur and occur in the right place.

Provision can also be made for the authenticity of the identity document 2ab to be checked by means of OCR or image analysis. For example, noise patterns of different image areas, particularly the name and date of birth areas, can be analyzed, with jumps in the noise pattern indicating forgeries; Copy-MoveDetection can be used to determine whether individual areas of the document have been manipulated with a copy stamp; Font change detection can be used to determine whether the document has been changed by text added later; checksums stored in the MRZ of passports can be evaluated to determine whether they match the other data in the passport; through metadata analysis, the document can access

Inconsistencies are examined that indicate post-processing.

Furthermore, it can be provided that criteria classified for entry authorization documents 4 are stored in the database and the entry authorization document present in the individual case is used on the basis of at least one of these criteria

of the second verification algorithm AL2 to confirm the authenticity of the

12

Entry authorization document is checked. For example, an entry authorization document can have an OR code printed on it, which contains a link to an Internet-accessible verification page with which the personal data can be compared. Or a certificate such as an EHC European Health Certificate can also be stored via QR code, which in turn has a digital

signature that can be verified.

Entry authorization documents 4 can also be classified with the aid of machine learning. For example, access authorization documents can be divided into issuer classes using machine learning, so that documents from an issuer can be found in the same class as a specific test site, so that new documents can be determined by which issuer they were created or whether they came from the previously known ones Documents from the same issuer differ in that one

forgery must be suspected.

In a further aspect of the invention, which is shown schematically in FIG. 2, the invention relates to a method for offline checking of a device generated according to the invention

Access document 1, the method comprising the following steps:

a) Provision of a test device 5 that can be operated offline to record the area code 1a stored in the access document 1, with the test device 5 being set up to

capture and evaluate access document 1 offline,

b) Submission of the access document 1 by the person 2 associated with the access document 1,

hereinafter also referred to as entry person 2,

c) decoding of the area code 1a and detecting at least two pieces of information using the

Tester 5, viz

c1) the existence of the entry authorization of the person 2 by comparison with the entry authorization data 4a and

c2) the reproduction of the image section 2ab'' of the identity photo 2ab' of the identity document 2ab stored in the area code,

13

d) Output of entry authorization feedback 6 by the test device 5 to an examiner 7 checking the entry authorization by using the test device 5, the output of the entry authorization response 6 depending on the presence of the entry authorization data 4a after step cl including the decoded

Reproduction of the image section 2ab"" according to step c2.

Furthermore, it can be provided that the test device 5 is operated by the test person 7 who is to check the entry authorization confirmation 6 , and the presentation of the access document 1 according to step b is presented by the person entering 2 . It can be advantageous if the identity photo 2ab' of the entry person 2 assigned to the access document 1 is stored in the access document 1 and this identity photo 2ab' is reported back by the checking device in the entry authorization confirmation message 6, in particular displayed graphically. In this way, it is no longer necessary for the person entering 2 to carry an identity document with him, while still carrying out a secure identity check due to the link to the access document 1 and the area code 1a

the examiner 7 are made.

Furthermore, it can be provided that the checking device 5 is set up for the graphic display of the identity photo 2ab and/or the image section 2ab'' of the identity photo 2ab'. In particular, it can be provided that the access document 1 is stored on a smartphone 8 and can be displayed graphically on the smartphone display, with the checking device 5 being set up to scan the smartphone display. The testing device 5 can also be used, for example

smartphone trained.

In particular, it can be provided that the testing device 5 is set up to automatically evaluate the area code la and to automatically compare the image section 2ab' with the identity photo 2ab'. In this way, the work of the examiner 7 can be made easier. Upon submission of a positive comparison, the examiner 7 only has to verify the correspondence of the physical appearance of the person entering 2 with the

Check ID photo 2ab'.

The invention is not limited to the embodiments shown but is defined by the full scope of the claims. Individual aspects of the

Invention or the embodiments are taken up and combined with each other.

14

Any reference signs in the claims are exemplary and for convenience only

Readability of the claims without limiting them.

Claims (16)

15 CLAIMS 1. A method for digitally generating an offline-verifiable, tamper-proof access document (1) for proving access authorization for a person (2), the Procedure includes the following steps: a) Storing a personal profile (2a) in a database (3), the personal profile (2a) having personal data (2aa) and proof of identity (2N) for at least one identity document (2ab) for determining the identity of the person (2), the Identity document (2ab) comprises at least one identity photo (2ab') of the person (2) to be expelled and the proof of identity (2N) comprises a representation of this identity photo (2ab'), b) authenticity check of the identity document (2ab) with execution of a first test algorithm (AL1), c) uploading an entry authorization document (4) as proof of a Access authorization to the database (3), d) verification of the authenticity of the entry authorization document (4) by executing a second verification algorithm (AL2) and detecting and storing entry authorization data (4a), e) if there are positive test results in steps b) and d), create a digitally displayable access document (1), wherein el) the access document (1) at least one identity photo (2ab') of the identity document (2ab), e2) the access document (1) further comprises an area code (la), wherein the Area code (1a) at least e21) encoded information on the entry authorization data (4a) of the person (2), as well 16 e22) encoded information for the reproduction of an image section (2ab") of the Has identity photos (2ab') of the identity document (2ab). 2. The method according to claim 1, wherein the area code (1a) is a QR code. 3. The method according to claim 1 or 2, wherein the database (3) implemented on a server is. 4. The method according to any one of the preceding claims, wherein at least part of the area code (la), in particular the part that encodes the image detail, asymmetrical is encrypted. 5. The method according to any one of the preceding claims, wherein at least part of the Area code (la), which encodes the entry authorization of the person (2), is digitally signed. 6. The method according to any one of the preceding claims, wherein the identity photo (2ab ') is segmented by means of an image processing algorithm and the individual segments are subjected to an assessment with regard to their conciseness, with at least a highly concise segment is selected as the image section. 7. The method according to any one of the preceding claims, wherein the personal data (2aa) is automatically checked by means of OCR by comparison with the personal profile (2a) takes place. 8. The method according to any one of the preceding claims, wherein by means of OCR or image analysis the authenticity of the identity document (2ab) is checked. 9. The method as claimed in one of the preceding claims, in which criteria classified for entry authorization documents (4) are stored in the database and the entry authorization document present in the individual case is confirmed on the basis of at least one of these criteria using the second checking algorithm (AL2). the authenticity of the entry authorization document is checked. 10. The method according to claim 9, wherein entry authorization documents (4) under be classified with the help of machine learning. 17 11. A method for off-line verification of a according to any one of the preceding claims generated access document (1), the method comprising the following steps: a) providing a checking device (5) that can be operated offline for detecting the area code (la) stored in the access document (1), the checking device (5) for this purpose is set up to record and evaluate the access document (1) offline, b) Submission of the access document (1) by the person (2) associated with the access document (1), hereinafter also referred to as the entry person (2), c) decoding of the area code (1a) and detection of at least two items of information by means of the test device (5), viz c1) the existence of the entry authorization of the person (2) by comparison with the entry authorization data (4a) and c2) the reproduction of the image section (2ab') of the identity photo (2ab') of the identity document (2ab') stored in the area code, d) Output of entry authorization feedback (6) by the test device (5) to a test person (7) checking the entry authorization by using the test device (5), the entry authorization response (6) being output depending on the presence of the entry authorization data (4a). Step cl) including the decoded reproduction of the image section (2ab”) according to step c2). 12. The method according to claim 11, wherein the checking device (5) is operated by the person (7) to check the entry authorization confirmation (6), and wherein the presentation of the access document (1) according to step b) is presented by the person entering (2). will. 13. The method according to claim 12, wherein the identity photo (2ab') of the entry person (2) assigned to the access document (1) is stored in the access document (1) and this identity photo (2ab') in the entry authorization confirmation (6) by the test device reported back, in particular graphically, is. 18 14. The method according to any one of claims 11 to 13, wherein the checking device (5) is set up for graphically displaying the identity photo (2ab) and/or the image section (2ab'') of the identity photo (2ab'). 15. The method according to any one of claims 11 to 14, wherein the access document (1) is stored on a smartphone (8) and can be displayed graphically on the smartphone display, wherein the testing device (5) is set up to scan the smartphone display. 16. The method according to any one of claims 11 to 15, wherein the test device (5) is set up to automatically evaluate the area code (1a) and the image section (2ab ') with the Compare identity photo (2ab') automatically.