AU2004268693B2

AU2004268693B2 - Document verification system

Info

Publication number: AU2004268693B2
Application number: AU2004268693A
Authority: AU
Inventors: Stephen Scott
Original assignee: 0055 Management Services Pty Ltd
Current assignee: 0055 Management Services Pty Ltd
Priority date: 2003-08-29
Filing date: 2004-08-27
Publication date: 2009-11-19
Anticipated expiration: 2024-08-27
Also published as: AU2004268693C1; AU2004268693A1

Description

WO 2005/021283 PCT/AU2004/001166 1 DOCUMENT VERIFICATION SYSTEM FIELD OF THE INVENTION 5 The present invention relates generally to the verification of documents, and in particular to a system and method for providing enhanced security with respect to the issuance and use of identification documents such as passports or documents that are intended to be used for other purposes but have an identification function such as cards that are used to access accounts. 10 BACKGROUND OF THE INVENTION The ability to correctly identify individuals, especially when entering or leaving a country across national borders, has assumed increased importance in recent years due to the increasing threat of terrorism. However, the primary 15 means for identifying and tracking the movement of individuals across borders is the use of paper documents, such as passports. Although the increased computerisation of customs procedures has improved the ability to track the movements of individuals, the system is still only as reliable as the documents presented by travellers at customs desks. 20 Theft and fraudulent use are major problems associated with important identification documents, such as passports. For example, a stolen passport can be modified by a skilled forger to include a photograph of a person other than the passport's original owner and/or a new passport number. The person shown in the photograph is then, for all practical purposes, able to travel using the passport 25 under the assumed identity of the original owner and/or a new identity. This may enable a person known to the authorities in a particular country to leave or enter that country undetected. Theft of identification documents or documents that have an identification function may occur as a result of a burglary of an owner's place of residence. In 30 some instances, the owner may not be immediately aware that their passport or other important documentation has been stolen, providing the thief with ample opportunity to sell the stolen documents, and for them to be modified and/or used fraudulently.

WO 2005/021283 PCT/AU2004/001166 2 Further exacerbating these problems is the fact that, in many cases, new identification documents and documents with an identification function are sent out to their owners in the mail. These documents may therefore be intercepted and used fraudulently before the rightful owner is even aware that they have been 5 stolen. Additionally, many important identity documents have relatively long periods of validity, for example ten years or more. One reason for this is that the overheads associated with reissuing or revalidating documents are presently relatively high, for both the document holder and the issuing authority. 10 Accordingly, it is inefficient and inconvenient to require document holders to reapply for replacement documents at shorter time intervals. The disadvantage of such long periods of validity is that they present an extended window of opportunity for the trafficking in valid documents for fraudulent use. It is, for example, possible for documents belonging to a deceased person to remain valid 15 for many years after their death, unless some action is taken to cancel the documents rather than simply allowing them to expire. The same problem exists with respect to other documents such as cards that are used to access accounts and in particular, credit cards. Fradulent use of credit cards is a significant problem. Some issuing authorities have taken steps 20 in an attempt to reduce the incidence of interception and fraudulent use of a newly issued credit card. For example, some issuers require an activation process to be executed before the card will be effective. However, this process is usually limited to requiring the recipient of the card to call an operator and provide some detail of the user such as their birth date. Unfortunately, the detail required 25 is usually information that is relatively easy to obtain thus allowing theft of a newly issued card from a mailbox and activation of the card by a fraudulent user. Accordingly, there is a need for a more secure means and method of verifying the correct delivery and possession of important documents, and in particular for limiting the circumstances in which identification documents and 30 documents with an identification function may be fraudulently used. It is also desirable to provide a means and method by which the legitimate holder of a document may conveniently and securely effect certain actions with respect to the document, such as renewal, cancellation and revalidation, thereby 3 providing the document holder with greater individual control over the maintenance of the document. Additionally, it is desirable to provide an efficient means and method whereby document holders are required to communicate with the issuing 5 authority on a more frequent basis than is presently the usual practice, in order to increase the confidence of the authority that issued documents remain under the control of their legitimate owners. Any discussion of documents, devices, acts or knowledge in this specification is included to explain the context of the invention. It should not be 10 taken as an admission that any of the material formed part of the prior art base or the common general knowledge in the relevant art on or before the priority date of the claims herein. SUMMARY OF THE INVENTION The Method of the Invention 15 In one aspect, the present invention provides a method for enabling a user to effect an action with respect records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: 20 associating a telephone number with the document; the user establishing a communications link over a network with a verification server connected to the network wherein during the step of establishing the link, the telephone number from which the user is calling is identified by a calling line identification service; 25 the verification server verifying that the telephone number with which the communications link has been established corresponds with the telephone number associated with the document; and enabling the user to effect an action with respect to the records pertaining to the document only if the verification is successful. 30 Accordingly, the user is only able to effect an action with respect to the records of a document by calling from the telephone number associated with the document, thus providing a relatively high level of confidence that the user is the person that was the intended recipient/user of the document.

TPRA/AU

3a In a particularly preferred embodiment, a personal identification number (PIN) is associated with the document and in addition to the step of identifying the

IPEA/AU

4 telephone number, a PIN is obtain from the user over the communications link. In this particular embodiment, in addition to verifying that the telephone number corresponds with that number previously associated with the document, the PIN obtained from the user is also verified as corresponding with the PIN previously 5 associated with the document. The PIN provides an additional level of security such that a user is only able to effect an action with respect to the records of a document by calling from the telephone number associated with the document and providing the PIN previously associated with the document. In one embodiment, the document is a passport and the communications 10 link is established by use of the telephony network. Alternatively, the document may be any other type of document that is intended to identify the user, such as a driver's license, a pilot's license or any identification document for security purposes or, a document that has other purposes but is only intended to be used by a legitimate owner such as credit cards or cards for accessing cash. In 15 another embodiment, the number of the document assigned by the issuing authority is also required from the user before they are able to effect any action with respect to records pertaining to the document. Advantageously, the records pertaining to the document may be accessed by an authorised person or organisation in order to determine the status of the 20 document as part of a procedure used to assess whether the document is being used fraudulently. For example, customs officials would be able to verify that an issued passport has been correctly validated by an authorised user in accordance with the method of the invention. Identifying the Calling Number 25 The step of identifying the telephone number include obtaining the telephone number using a calling line identification service or means. The calling number may be obtained from a signal transmitted across the communications link, the signal providing the number from which the line has been established. As an alternative, the user may provide the telephone number to the 30 verification server via the communications link, and the verification server may confirm that the user is actually calling from the number provided by disconnecting and calling the user back, referred to as a "call back" service. In W:1WM190OUve PtyLtd~spacificatons nd drawlngsi751113- amandmentsa rrepor toW tpin~inflccepted cannges)-12DcOSdon MP Amended Sheet T)1L A / ATT 5 this alternative, prior to disconnecting, the user may be provided with a temporary code and upon calling the user, the temporary code is requested. Provision of the temporary code provides a higher level of confidence that the user providing the code is the user who previously placed the call from the 5 telephone number provided to the verification server. Advantageously, public switched telephony networks provide a relatively high level of security, making it extremely difficult for an unauthorised user to falsify a calling number identification in order to circumvent the security of a system or method according to the present invention. 10 Nominating a Telephone Number Preferably, the step of associating a telephone number with the document includes the user providing the telephone number as part of the process of applying to an issuing authority to obtain the document. Alternatively, an issuing authority may associate a telephone number with the document based upon other 15 personal details of the user provided at the time of application for the document, for example the issuing authority may obtain a telephone number based upon the user's name and address. The user may subsequently be allowed to change the telephone number associated with the document. It is preferred that the telephone number associated with the document is a 20 number corresponding to a fixed terrestrial telephone line. Advantageously, this enables the owner of the line to be easily identified, improving the security of the method by making it difficult for unauthorised users to conceal or falsify their identities. It is particularly preferred, in order to ensure a relatively high level of 25 security, that the telephone number associated with the document is the user's own home telephone number. However, the telephone number may alternatively be the user's mobile telephone number, business telephone number, the telephone number of a trusted friend or relative, or any other telephone number nominated by the user and acceptable to the issuing authority. 30 Nominating a Personal Identification Number (PIN) The step of associating a PIN with the document preferably includes the user providing their chosen personal identification number as part of the process I P E A / A U fl.9.7 3 r , . W n f ., t.d d hS.... U2 O * .O S d. M P

][PEAIAU

6 of applying to obtain the document. This provides the advantage that it is then extremely difficult for an unauthorised user to obtain the personal identification number in order to circumvent the security of the method. Alternatively, the issuing authority may choose a personal identification number, 5 for example at random, and transmit it to the user independently of the document. The user may subsequently be allowed to change the personal identification number associated with the document. In a particularly preferred embodiment, the PIN includes four digits. However, it will be appreciated by those skilled in the art that different numbers of 10 digits may be used for the personal identification number, and that the personal identification number should not be limited to contain only numeric characters. Verification Server / IVR Gateway In preferred embodiments, the method also includes the step of providing a verification server connected to a telephony network. The step of establishing a 15 communications link may include the user dialling a telephone number that connects the user's telephone to the verification server. Preferably, the verification server includes an interactive voice response gateway. The verification server may include a database. In a particularly preferred embodiment, the database contains records including data such as the 20 telephone numbers associated with documents and is a database maintained by the issuing authority. In the event that verification of any details is not successful, the method may include a range of options depending upon the type of error during the verification process. For example, when a PIN is incorrect, the user may be 25 informed and advised to re-enter the PIN. However, in the instance that a more serious verification failure occurs, further details of the document may be requested such as the document number as issued by the issuing authority and the details of the attempt to effect actions with respect to the document may be passed to a relevant law enforcement agency. 30 In any event, once a verification failure occurs, an entry in a database, referred to as a "sieze" database, occurs and further actions with respect to entries in the "sieze" database may be decided by a relevant authority.

TPEA/AU

7 PIN Entry In preferred embodiments, the step of obtaining a PIN from the user includes the verification server prompting the user to enter the number. The prompt may be a voice prompt. The verification server may obtain a PIN by the 5 user entering the digits of the number using the touch-tone keys of the telephone. Alternatively, a voice recognition system may be employed in the verification server to enable the user to speak the digits of the personal identification number. Choice of Action The action that the user is able to effect may include one or more of the 10 following: validating the document; cancelling the document; and reinstating the document. A particular advantage of the invention in its preferred forms is that the document may be initially invalid for use, however upon receipt by the intended recipient the document may be validated through the use of the method provided by the invention. This prevents unauthorised use by any party 15 intercepting the document prior to its receipt by the rightful owner. Preferably, the verification server provides the user with a menu of numbered options to access the available actions. The menu may be a voice menu. The user may effect the desired action by entering the corresponding number via the touch-tone keys of the telephone. Alternatively, voice recognition 20 may be employed in the verification server to enable the user to select the desired action by speaking the corresponding number. In some embodiments, the user may be required to provide a further identifying number associated with the document prior to the action being effected. 25 Interface with Issuing Authority In preferred forms, the step of verifying that the user's telephone number and the PIN obtained correspond with the telephone number and PIN associated with the document includes sending the telephone number and the obtained PIN to the issuing authority of the document for verification. The issuing authority may 30 respond with an indication of whether the telephone number and PIN are valid or invalid.

IPEA/AU

8 Preferably, the step of enabling the user to effect an action includes sending a request to effect the action to the issuing authority. The issuing authority may respond with an indication of whether the attempt to effect the action has been successful or unsuccessful. 5 In particularly preferred embodiments, communication with the issuing authority is entirely electronic such as, for example, via a database interface over a communications network. Advantageously, this arrangement ensures that it is not necessary for the user or the provider of the document verification service to have access to any of the detailed, and potentially confidential and sensitive, data held by 10 the issuing authority in order to perform a verification step. The System of the Invention In another aspect, the present invention provides a system for enabling a user to effect an action with respect to records pertaining to an identification 15 document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the system including: a network, within which the user is able to establish a communications link; a calling line identification service for identification of the telephone number 20 with which a communications link is established; a verification server connected to the network for verifying that said telephone number corresponds with a telephone number associated with the document; and means for enabling the user to effect an action with respect to records 25 pertaining to the document only upon successful verification that the telephone number associated with the document corresponds with the telephone number identified as the number with which the communications link was established. The calling line identification service may include a computing means that receives a signal transmitted across the communications link that provides the 30 telephone number from which the link has been established. In another aspect, the present invention provides a system for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the 35 system including: 05/05/09,ct. 15920.amended speci.5-may-09,8 8a a network, within which the user is able to establish a communications link; a calling line identification means for determining the telephone number with which the communications link has been established; a verification server connected to the network for verifying that the 5 telephone number with which the communications link has been established corresponds with a telephone number associated with the document; wherein the calling line identification means receives the calling number from the user and provides the user with a temporary code, the calling line identification means then disconnecting the initial call placed by the user and placing 10 a call to the telephone number provided by the user and requesting the temporary code from the user; and the system also including means for enabling the user to effect an action with respect to records pertaining to the document only upon successful verification that a telephone number associated with the document corresponds with the 15 telephone number identified by the calling line identification means as the number with which the communications link was established and by receipt of the correct temporary code from the user. The present invention may also provide a method including the additional step of the entity receiving a request to effect an action from a user, transmitting 20 said request to the issuing authority and receiving a response from the issuing authority indicating whether or not the attempt to effect the action has been successful or otherwise. In an embodiment where a PIN is also associated with the document, the system includes a means for obtaining a PIN from the user via the communications 25 link and means for verifying that the PIN obtained from the user corresponds with the PIN previously associated with the document. In this embodiment, the user is only allowed to effect an action in relation to the records 30 05/05/09,ct. 15920.amended speci.5-may-09,9 Received 13 December 2005 9 pertaining to the document if verification of both the telephone numbers and PIN numbers is successful. In preferred embodiments, the system further includes a verification server connected to a communications network in the form of a telephony network, such 5 that the communications link established by the user connects the telephone to the verification server. The user may establish the communications link by dialling a telephone number corresponding to the verification server. Preferably, the verification server includes an interactive voice response gateway. The verification server may further include a computer system 10 programmable to carry out one or more of the functions of the system. The verification server may include a database. In a particularly preferred embodiment, the database contains records including telephone numbers associated with documents for the purpose of verifying the originating telephone numbers of incoming connections and is maintained by the issuing authority. 15 The means for obtaining a PIN may include electronic hardware and/or computer program code capable of receiving touch-tone signals from a telephone via the telephony network so that the user is able to enter a PIN via the keypad of the telephone. In a particularly preferred embodiment, the computer system in the 20 verification server is able to create an electronic connection to an interface to a database maintained by the issuing authority of the document. The means for verifying that said telephone number corresponds with a telephone number associated with the document and the means for verifying that said PIN corresponds with a PIN associated with the document may include computer 25 program code designed to open a connection to the issuing authority database, and to request verification that the telephone number and PIN correspond to numbers associated with a document. The computer program code may further be designed to receive a response from the issuing authority database indicating whether the telephone number and PIN are valid or invalid. 30 Preferably, the means for enabling the user to effect an action includes computer program code configured to provide the user with a menu of numbered options to access the available actions. The menu may be a voice menu. The user may effect the desired action by entering the corresponding number via the W.W 1900Uve Pty Ltdisp~ eeons and drawing\51113 .amandments for rport tWritten OpWinilen (acetdchanges). a2DecO 5denM Amended Sheet

IPEA/AU

10 touch-tone keys of the telephone. The computer program code may further be configured to open a connection to the issuing authority database, and to send a request to effect an action selected by the user. The computer program code may be further configured to receive a response from the 5 issuing authority database indicating whether the attempt to effect the action has been successful or unsuccessful. The Method of the Invention from the User's Perspective A method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an 10 identification function, said action including at least validation of the identification document to allow the valid use of same, the method, including the steps of: establishing a communications link with a verification server connected to a network; and 15 transmitting an instruction to effect an action with respect to records pertaining to the document over the communications link; wherein the telephone number from which the communications link is established is identified by a calling line identification service, the telephone number being provided to the end of said communications link connected to 20 the verification server, and wherein the user is only permitted to effect an action with respect to records pertaining to the document if the telephone number corresponds with a telephone number previously associated with the document. The Method of the Invention from the Issuing Authority's Perspective 25 A method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid user of same, the method including the steps of: 30 05/05/09,ct. I 5920.amended speci.5-may-09,8 11 the establishment of a communications link by a user with a verification server connected to a network; receiving credentials from the user and identifying the telephone number from which the user established the communications link by a calling 5 line identification service; and authorising the user to effect an action with respect to the document only if the telephone number from which the communications link is established corresponds with a telephone number previously associated with the document. 10 In another aspect, the present invention provides a method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: 15 establishing a communications link with a verification server connected to a network, wherein during the step of establishing the link, a calling line identification means identifies the calling number from which the user has established the communications link and provides the user with a temporary code; 20 disconnecting the communications link and subsequent re establishment of the communications link between the verification server and user by the calling line identification means placing call to the identified calling number and requesting the previously provided temporary code; the calling line identification means confirming to the verification 25 server successful establishment of a communications link with the user calling from a confirmed number in the event that the temporary codes provided and subsequently received match; the verification server then verifying that the telephone number from which the user established the initial communications link corresponds with a 30 telephone number associated with the document; and enabling the user to effect an action with respect to the records pertaining to the document only if the verification is successful. 05/05/09,ct. 5920.amended speci.5-may-09,9 lla In yet another aspect, the present invention provides a method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the 5 valid use of same, the method including the steps of: establishing a communications link with a verification server connected to a network; the user providing credentials including a telephone number that has been previously associated with the identification document, the user 10 credentials being provided to a calling line identification service that identifies the calling number from which the user has established the communications link, the calling line identification service providing the user with a temporary code across said communications link; the calling line identification service disconnecting the previously 15 established communications link and establishing another communications link by placing a call to the identified calling number and requesting the temporary code from the user; and authorising the user to effect an action with respect to the document only upon successful verification that the telephone number provided by the 20 user corresponds with a telephone number previously associated with the identification document and receipt of the correct temporary code from the user. Preferably, a PIN is obtained from the user via the communications link and authority for the user to effect an action is only provided if the PIN 25 obtained from the user corresponds with a PIN previously associated with the document and the telephone numbers also correspond. Further benefits and advantages of the method and system according to the present invention will become apparent in the following description of a preferred embodiment of the invention. 30 05/05/09.ct. 15920.amended speci.5-nay-09.8 1lb BRIEF DESCRIPTION OF THE DRAWINGS A preferred embodiment of the invention will now be described. The following description should not be considered to limit the scope of the invention or any of the preceding statements. The preferred embodiment is 5 described with reference to the accompanying drawings in which: Figure 1 is a flow chart illustrating a method according to the present invention; and Figure 2 is a block diagram of a secure document verification system according to the present invention. 10 DESCRIPTION OF PREFERRED EMBODIMENT For convenience, the following example of a preferred embodiment of the invention relates to the specific example of a passport application, however it will be appreciated by those skilled in the art that the invention is not limited to this particular use. 15 In accordance with the invention, an applicant applying for a passport includes in the application a nominated telephone number, most preferably a home telephone number, and a nominated PIN being, for example, a four digit number devised at the applicant's choice. By including these details in the application, the numbers become 20 associated with the identity document, which is a passport in this example, in accordance with the steps 102, 104 of the flow chart 100 shown in Figure 1. 05/05/09,ct. 15920.amended spcci.5-may-09,9 1lb BRIEF DESCRIPTION OF THE DRAWINGS A preferred embodiment of the invention will now be described. The following description should not be considered to limit the scope of the invention or any of the preceding statements. The preferred embodiment is 5 described with reference to the accompanying drawings in which: Figure 1 is a flow chart illustrating a method according to the present invention; and Figure 2 is a block diagram of a secure document verification system according to the present invention. 10 DESCRIPTION OF PREFERRED EMBODIMENT For convenience, the following example of a preferred embodiment of the invention relates to the specific example of a passport application, however it will be appreciated by those skilled in the art that the invention is not limited to this particular use. 15 In accordance with the invention, an applicant applying for a passport includes in the application a nominated telephone number, most preferably a home telephone number, and a nominated PIN being, for example, a four digit number devised at the applicant's choice. By including these details in the application, the numbers become 20 associated with the identity document, which is a passport in this example, in accordance with the steps 102, 104 of the flow chart 100 shown in Figure 1. 05/05/09,ct. 15920.amended spcci.5-may-09,9 12 When the application has been processed by the issuing authority, the passport is sent to the applicant, for example by postal mail. Upon receipt of the new document, the applicant uses the nominated telephone to establish a communications link, in accordance with the step 106. At the receiving end of the 5 link, the calling number is identified 108, for example using a calling line identification (CLI), calling number display (CND) service or a call back service (CBS) as provided by the intervening telephony network. CLI and CND are acronyms for services provided by Australian telephony services and other countries will have similar telephony services that are known by different names 0 and/or acronyms. In any event, telephony services in developed countries around the world include systems and services that generate and transmit signals across the communications links that provide the telephone number from which the link has been established. The applicant is then prompted 114 to provide a PIN, as a further stage of 15 verification. This provides at this point an identification number consisting of a total of, for example, 14 digits, being 10 digits of the telephone number (including area code) and a four digit personal identification number, offering a relatively high level of security. Accordingly, in the next step 116 the user is provided with a list of options 20 for actions that they are able to effect with respect to the records pertaining to the new passport. This list may include, for example, validate a new passport; cancel an existing passport; and reinstate an existing passport. For security purposes, the new passport will have been sent out to the applicant without having been validated. The records pertaining to the passport 25 will accordingly indicate that the passport is not validated and upon any attempt by any person to use the passport, the records will be checked by an authorised person such as a customs officer who may then seize the passport. Thus, until the passport has been validated by the applicant, it cannot be used by any authorised or unauthorised person thus preventing fraudulent use of the newly 30 issued passport. In the case of a new passport, the applicant will be required to initially validate same and will select this option at the step of entering a selection 118. Unauthorised persons who may intercept the passport will generally not have Ao f dLf a and dawingsA75113 -aendments fo rrphar WWrIUWnOpinion (acceptdchanges)- 12 Dc 05do MP

IPEA/AU

13 access to the nominated telephone and will also not know the associated PIN and therefore will be unable to validate the passport. In the next step 120 the combination of the telephone number and PIN are submitted to the issuing authority database for verification to ensure that they are 5 associated with an issued passport. At step 122, the user request is sent to the issuing authority to effect the selected action. At step 124, confirmation or otherwise of successfully effecting the user's requested action may be provided by the issuing authority. If the action is successfully effected, the method proceeds to step 126 wherein an IVR message 0 is provided to the user confirming that the action was successful. The method may then proceed back to step 116 wherein the user is once again presented with a menu of options. If the user does not require any further actions to be effected, they may simply terminate the call by hanging up the telephone. However, if at step 124 the issuing authority provides an indication that the 15 requested action was not successful, the method proceeds to step 128 wherein the telephone number and PIN previously supplied by the user is entered into the "seize" database. Subsequently, the method proceeds to step 130 wherein the passport number is requested from the user in order to identify the particular passport number for which a user may be attempting to fraudulently use. Once 20 the passport number has been obtained from the user, the method proceeds to step 132 wherein the passport number is also listed in the "seize" database. The method then proceeds to step 134 wherein an IVR message may be provided to the user. In a particularly preferred embodiment of the invention, the IVR message provided at step 134 does not provide any indication to the user that the 25 attempted fraudulent use has been detected although the entry of the passport number in the "seize" database will automatically be identified to a customs official when the user attempts to use the passport. This particular approach has the beneficial advantage that although an attempted fraudulent use of a passport has been identified the user is not alerted to the detection of their attempted 30 fraudulent validation of the passport and hence will be unaware that customs officials or law enforcement officers will be monitoring the use of the passport for the purposes of detaining the fraudulent user. W:\N /MAiso " Lv Pty LtdSplicA atn d drawinU- S 11 W. amendment frrprt.WUte Opinn (accpted chan..) - 12 -O5.d- MP Amended Sheet . A I ATT 14 A system for automating the method of the invention is illustrated in Figure 2. The system includes the applicant user's telephone 202 connected to a communications network in the form of a telephony network 204. By dialling an appropriate telephone number, which may be provided, for example, along with 5 the new passport when delivered by mail, the user is able to establish a telephone connection as a communications link to a receiving location 206. At the receiving location there is provided a verification server 208 including an interactive voice response gateway, which includes a switch 210 for routing incoming calls, programmable computing means 212 for terminating incoming 10 calls and carrying out processing operations, and local data storage 214. A connection 216 may be opened from the verification server to a database 218 operated by the passport issuing authority. Although shown as a connection distinct from the telephony network in Figure 2, the connection 216 may also be via the telephony network if required. Alternatively the connection 15 may be via a dedicated communications channel, or may be via another network such as the Internet. The computing means is programmed to carry out the processing steps required to implement the method described previously with reference to Figure 1. 20 A software program therefore provides means for identifying the telephone number of the telephone 202, for example using calling line identification or calling number display or a call back service, as required at step 108. The software also provides means for verifying that the telephone number corresponds with the telephone number associated with the passport. At step 25 120, this may include checking the identified number against a database of all nominated telephone numbers held in the local storage 214. The software further provides means for obtaining a personal identification number from the user via the communications link, for example by receiving touch-tone signals generated by the user pressing buttons of the key pad of the 30 telephone 202. Alternatively, the PIN may be obtained by a live operator. Also included in the software are means for verifying that the personal identification number provided by the user corresponds with the personal identification number associated with the passport. This may be implemented via W;NWM\1900Uv" Pty LtdSp.cifications and drawings\75113. amnmet fo eott rte piil~cetdcag -12Dec05 do MP Amended Sheet - A IATT 15 the connection 216 to the database 218 of the issuing authority. A request may be sent to the database to verify the credentials consisting of the personal identification number and the telephone number, to which the database responds with an indication of whether or not the combination is valid. 5 The software also includes means for enabling the user to effect an action with respect to the records pertaining to the passport via the menu of choices presented in accordance with step 116. The software may provide the user with a menu of numbered options to access the available actions, which may be a voice menu over the telephone link. The user selects the desired action by 10 entering the corresponding number via the touch-tone keys of the telephone. The software then sends a request to effect the selected action via the connection to the issuing authority database, and receives a response indicating whether the attempt to effect the action has been successful or unsuccessful. It will be appreciated by those skilled in the art that may further variations 15 of the invention are possible, in addition to what is described in the foregoing preferred embodiment. For example, the method and system of the invention may be used to cancel a document, rather than to validate the document. In an embodiment, the cancellation action will be successful so long as the user is validated according to 20 the telephone number and personal identification number, and the document is currently valid. This enables the user to prevent any unauthorised use of the document after it is lost or stolen. Furthermore, if the document is subsequently recovered, the system and method of the invention may be used to revalidate it. Further, or alternatively, security measures may also be introduced. For 25 example, verification of identification may include requiring the user to enter their date of birth, and/or to enter their first name using the keypad. If a user is having difficulties with the automated system, or is receiving repeated unsuccessful responses from the issuing authority database, the system could recognise the problem and offer to switch the user to a live operator at the 30 issuing authority office. For users without fixed home telephone lines, the option of providing a mobile number may be provided. Users may alternatively or additionally be permitted to provide the telephone numbers of trusted friends or relatives if they o s A n ddang\ 5 1113-,mndnetsforrepmrttoWdttnOpbininaccptedchanges)12DcOSdoM ToIn A /ATT 16 do not have other access to a suitable telephone line. An option to enter the nominated telephone number via a telephone keypad, rather than obtaining it from calling line identification, may be provided to enable the service to be used, for example, from overseas in an emergency. 5 In the particular instance of a user being overseas and losing all of their identification documents, the unique identification number accorded to users of the system may be used by overseas Consulates as a means of identifying individuals. In this respect, it would usually be very difficult to require individuals to remember a long identification number comprising 18 or more digits. However, 0 where those numbers accord with the users telephone number, birth date and a four digit PIN, the difficulty in memorising such a number is restricted to the PIN as the other numbers are usually easy for most people to recall. By using this unique number accorded to a user by the system of the present invention, overseas Consulates would also have an improved level of confidence with 15 respect to the identity of an individual who claimed to have lost all documents that could serve to identify them. As a further enhancement of security procedures for important documents, the system and method of the present invention may be used to implement an efficient and cost effective periodic revalidation program. For example, document 20 holders may be required to use the system to revalidate their documents at regular intervals, e.g. annually, otherwise the document is automatically invalidated. This would ensure that in cases where a document holder was not aware that the document was missing or stolen, or where the document holder has died, the period of validity during which the document may be used 25 fraudulently is limited. It would also ensure that document holders are compelled to maintain regular contact with the issuing authority. In a particularly preferred embodiment, a system according to the present invention places calls to owners of documents to initiate re-validation of the document and warn the user that cancellation of the document is pending unless re-validation is effected. 30 Furthermore, the requirement for periodic revalidation may be accompanied by a fee, and in this case the system and method of the present invention may be further enhanced to provide for automatic charging of the fee to

TPRA/AU

17 a bank account or credit card account of the applicant, or the fee could be automatically charged to the applicant's telephone account. In another embodiment, the method and system of the present invention is used to improve the security associated with the issuance of documents that are 5 used for other purposes but have an identification function. For example, new credit cards are generally sent to users through the postal system and if intercepted, the card may be fraudulently used. This is particularly the case where the card has a portion for a users signature which is blank at the point of issuance. Of course, if intercepted, a fraudulent user can simply sign the blank 10 portion with the user's name and commence using the card to access the legitimate owners credit account. Attempts have been made to reduce the possibility of fraudulent interception and use of documents such as credit cards by requiring users to activate the card by calling an operator and providing some personal detail. 15 However, the call to the operator may be placed from any telephone and the detail required about the legitimate user is usually relatively easy to obtain from publicly available records (eg. birth date). As will be recognised from the foregoing description, when the method and system of the present invention is used in relation to the issuance of documents 20 such as credit cards or cash access cards, there is a significant improvement with respect to the level of confidence on the part of the issuing authority that the card has been activated by the intended recipient. WNM1900Uv PtyLtaSPe~Uicationsanddr 0 0 awi 113-amendmetsforreportoWrittenOpinion~acceptdhk un0lge).12D 5doo MP Amended Sheet m77- A / AT T

Claims

1. A method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification 5 function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: associating a telephone number with the document; the user establishing a communications link over a network with a verification server connected to the network wherein during the step of establishing the link, the 10 telephone number from which the user is calling is identified by a calling line identification service; the verification server verifying that the telephone number with which the communications link has been established corresponds with the telephone number associated with the document; and 15 enabling the user to effect an action with respect to the records pertaining to the document only if the verification is successful.

2. A system for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification 20 function, said action including at least validation of the identification document to allow the valid use of same, the system including: a network, within which the user is able to establish a communications link; a calling line identification service for identification of the telephone number with which a communications link is established; 25 a verification server connected to the network for verifying that said telephone number corresponds with a telephone number associated with the document; and means for enabling the user to effect an action with respect to records pertaining to the document only upon successful verification that the telephone number associated with the document corresponds with the telephone number identified as 30 the number with which the communications link was established. 23/10/09,dh- 15920 - clean claims 23oct09 - nwm. 18 19

3. A system for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the system including: 5 a network, within which the user is able to establish a communications link; a calling line identification means for determining the telephone number with which the communications link has been established; a verification server connected to the network for verifying that the telephone number with which the communications link has been established corresponds with a 10 telephone number associated with the document; wherein the calling line identification means receives the calling number from the user and provides the user with a temporary code, the calling line identification means then disconnecting the initial call placed by the user and placing a call to the telephone number provided by the user and requesting the temporary code from the 15 user; and the system also including means for enabling the user to effect an action with respect to records pertaining to the document only upon successful verification that a telephone number associated with the document corresponds with the telephone number identified by the calling line identification means as the number with which 20 the communications link was established and by receipt of the correct temporary code from the user.

4. A method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification 25 function, said action including at least validation of the identification document to allow the valid use of same, the method, including the steps of: establishing a communications link with a verification server connected to a network; and transmitting an instruction to effect an action with respect to records pertaining 30 to the document over the communications link; wherein the telephone number from which the communications link is established is identified by a calling line identification service, the telephone number 23/10/09,dh-15920 - clean claims 23oct09 - nwm,19 20 being provided to the end of said communications link connected to the verification server, and wherein the user is only permitted to effect an action with respect to records pertaining to the document if the telephone number corresponds with a telephone number previously associated with the document. 5

5. A method for enabling a user to effect an action with respect to records pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: 10 the establishment of a communications link by a user with a verification server connected to a network; receiving credentials from the user and identifying the telephone number from which the user established the communications link by a calling line identification service; and 15 authorising the user to effect an action with respect to the document only if the telephone number from which the communications link is established corresponds with a telephone number previously associated with the document.

6. A method for enabling a user to effect an action with respect to records 20 pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: establishing a communications link with a verification server connected to a network, wherein during the step of establishing the link, a calling line identification 25 means identifies the calling number from which the user has established the communications link and provides the user with a temporary code; disconnecting the communications link and subsequent re-establishment of the communications link between the verification server and user by the calling line identification means placing call to the identified calling number and requesting the 30 previously provided temporary code; the calling line identification means confirming to the verification server successful establishment of a communications link with the user calling from a 23/10/09,dh-15920 - clean claims 23octO9 - nwm,20 21 confirmed number in the event that the temporary codes provided and subsequently received match; the verification server then verifying that the telephone number from which the user established the initial communications link corresponds with a telephone 5 number associated with the document; and enabling the user to effect an action with respect to the records pertaining to the document only if the verification is successful.

7. A method for enabling a user to effect an action with respect to records 10 pertaining to an identification document, or document that has an identification function, said action including at least validation of the identification document to allow the valid use of same, the method including the steps of: establishing a communications link with a verification server connected to a network; 15 the user providing credentials including a telephone number that has been previously associated with the identification document, the user credentials being provided to a calling line identification service that identifies the calling number from which the user has established the communications link, the calling line identification service providing the user with a temporary code across said 20 communications link; the calling line identification service disconnecting the previously established communications link and establishing another communications link by placing a call to the identified calling number and requesting the temporary code from the user; and authorising the user to effect an action with respect to the document only upon 25 successful verification that the telephone number provided by the user corresponds with a telephone number previously associated with the identification document and receipt of the correct temporary code from the user.

8. A method according to any one of claims 1, 4, 5, 6 or 7 substantially as 30 hereinbefore described with reference to the accompanying figures. 23/10/09,dh-15920 - clean claims 23oct09 - nwm,21 22

9. A system according to either claim 2 or claim 3 substantially as hereinbefore described with reference to the accompanying figures. 23/10/09,dh-15920 - clean claims 23octO9 - nwm,22