DE102012203311A1 - Method for identifying a person - Google Patents

Abstract

The invention relates to a method for identifying a person on the basis of an identity document in an identification system with spatially distributed identification control points, comprising: acquiring (601) an identity date from the identification document by a first identification control point, creating (603) a reference identification feature of the person, assigning (604) Reference identifier to the detected identity data, detecting (605) an identification feature of the person by a second identification control point, and displaying (607) the detected identity data by the second identification control point if the detected identification matches the reference identification feature.

Description

In sovereign security-related areas, such as at airports, the identity of a person traveling has to be checked several times. For this purpose, usually spatially distributed identification control points of a control system, such as a border control system (Border Control System), are provided.

In order to collect identity data, each identification control point has a document reading device which reads out the identity data, for example a name of the person, on the basis of an identity document. For this purpose, the person himself or a border official can supply the identification document to the document reader.

However, the multiple detection of the identity data at or by the identification control points is associated with a high level of complexity and with a high level of personnel expenditure and also leads to an increase in throughput times for persons to be identified who have to pass a plurality of identification checkpoints.

It is therefore the object of the present invention to provide a concept for the efficient identification of persons in an identification system with spatially distributed identification control points.

This object is solved by the features of the independent claims. Advantageous forms of further development are the subject of the dependent claims, the description and the drawings.

The present invention is based on the finding that the above object can be achieved by a unique detection of identity data in an identification system of the aforementioned type. The captured identity data, such as information about a name and a place of residence of a person, can then be transferred to a central server and there the spatially distributed identification control points of the identification system available. Thus, the reading of the identity data at each identification control point is eliminated.

In order to be able to uniquely assign the identity data once recorded and provided to the respective person, at least one reference identification feature, which is assigned to the identity data, is detected during the detection of the identity data, in particular during the first detection of the identity data in an identification system. The reference identifier is an individual identifier and may be, for example, a biometric feature of the person, such as a fingerprint or an image of the eye iris.

By capturing a fingerprint of the respective person at one of the distributed identification control points, this can be compared with the reference identification features pre-stored as data records. If in accordance with one of the stored reference identification features, a stored record having the identity date may be transmitted to and displayed to the respective identification control point where the subject is located.

According to one aspect, the invention relates to a method for identifying a person based on an identity document in an identification system with spatially distributed identification control points, acquiring an identity date from the identification document by a first identification control point, creating at least one reference identification feature of the person, assigning the reference identification feature or a plurality of reference identification features at the detected identity date, detecting an identification feature of the person by a second identification control point, and displaying the detected identity data by the second identification control point when the detected identification feature matches the reference identification feature.

The spatially distributed identification control points can communicate with each other via a wireless or a wired communication network. Thus, for example, the first identification control point can transmit the detected identity data, which may include information from a MRZ, via the communication network to the second identification control point or to a central server with which the spatially distributed identification control points communicate via the communication network.

To display the identity date, for example, a known graphical display can be used, with which the respective identification control point can be equipped.

The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. For example, a traveler can place his identity document on a document window of the document reader as part of the self-service, whereby the identity date can be detected optically or electronically. In addition, for example, biometric features can be recorded and as Reference identification features may be stored or used for comparison with the reference identification method. The second identification control point may, for example, be a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard.

The reference identification feature can be automatically created by the first identification control point, for example by recording a biometric feature. By associating the reference identifier with the acquired identity date, identifiers of persons, such as their biometric features, may be used to retrieve or display the acquired identity date.

According to one embodiment, the first identification control point comprises a document reader for detecting the identity date on the basis of the identity document, wherein the identity date is detected by means of the document reading device, in particular optically or electrically. The identification control points can communicate with each other and / or with a central server entity via a communication network. The central server entity can, for example, store and provide the acquired identity data as well as the created or recorded reference identification features in a database.

According to one embodiment, the first identification control point comprises a document reader for detecting the identity date on the basis of the identity document, wherein the identity date is detected by means of the document reading device, in particular optically or electrically.

According to one embodiment, the reference identifier and the detected identity datum are stored as mutually associated datasets. The data records assigned to one another can for example be assigned to one another in a table in a database or stored together. The database can be provided, for example, by the central server entity.

According to one embodiment, the detected reference identifier and / or detected identity data are stored in a database.

According to one embodiment, the detected identifier is compared with the reference identifier, and upon coincidence of the detected identifier and the reference identifier, the detected identity data is provided to the second identifier. The comparison of the detected identification feature with the reference identification feature can be carried out, for example, feature-wise. If the detected identity date is stored, for example, in a database of a central server entity, then the detected identity data can be transmitted to the second identification control point via a communication network.

According to one embodiment, the detected identity data is stored in a queue associated with the second identification control point in accordance with a queue rule, in particular in a database. The queue rule can be specified.

According to one embodiment, the queue rule is determined by an order of detection of the identity data. This stores the collected identity data in the database in order. In this way, in addition to the comparison of the detected identifier with the reference identifier, another control or security mechanism is implemented.

According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a document that can be created by the first identification control point, in particular a ticket Feature of the identity document, in particular a content of a machine-readable zone of the identity document.

According to one embodiment, the detected identity date is assigned to the second identification control point. In this case, the first identification control point can query or initiate the transmission of the reference identification feature at the communication device. The identification number may be, for example, a number of a memory card of the communication device, which may be a smartphone.

According to one embodiment, the reference identification feature is created on the basis of an identification number of a communication device or of a data set that can be transmitted electronically by a communication device.

According to one embodiment, the identity date is a date of a machine-readable zone of the identity document. For example, the identity date can be a name of a person whose Place of birth, date of birth and / or place of residence.

According to one embodiment, the method comprises detecting an identification feature of the person by a third identification control point and displaying the detected identity data by the third identification control point when the detected identification feature matches the reference identification feature. The third identification control point may communicate with the first identification control point or with the central server entity as stated above and below.

According to one embodiment, the detected identity data is utilized, for example evaluated, by the third identification control point when the detected identification feature matches the reference identification feature.

According to a further aspect, the invention relates to an identification control system with a plurality of spatially distributed identification control points, which are designed to communicate with each other via a communication network, with a reference detection device for establishing a reference identification feature of the person, a first identification control point for detecting a person's identity date based on an identification document wherein the identification control point is further adapted to associate the reference identification feature with the detected identity date and a second identification control point for checking or detecting an identification feature or reference identification feature of the person, the second identification control point being further adapted to compare the detected identification feature with the reference identification feature or in the server entity perform stored data and display the detected identity date in accordance with the detected identification feature with the reference identifier feature.

The reference detection device may be formed, for example, a device for receiving a biometric feature or for communication with a communication device of the respective person.

According to one embodiment, the invention relates to the identification control system, further comprising a server entity with a database, wherein the first identification control point or all identification control points are adapted to transmit the detected identity data to the server entity, wherein the reference detection means is adapted to transmit the reference identification feature to the server entity wherein the server entity is adapted to store the detected identity data and the reference identifier in the database and to provide it to the second or any other identification control point.

According to one embodiment, the identification control system is designed or program-technically configured to carry out the method according to the invention for identifying a person.

According to one embodiment, the second identification control point has the functionality of the first identification control point. In addition, comparison of identification document with data of the server entity and / or comparison of reference identification feature with the data of the server entity is performed. This ensures that people can be registered at any inspection body, even if they have the upstream, first inspection bodies 101 . 103 be ignored.

According to a further aspect, the invention comprises a computer program with a program code for implementing a method according to the invention or for controlling the identification control points of the identification control system.

Further embodiments will be explained with reference to the accompanying drawings. Show it:

1 an identification control system having a plurality of spatially distributed identification control points;

2 an example of a display of identity data using a graphical user interface;

3 a graphical user interface with a spatial plan of the identification control system;

4 a graphical user interface with a spatial plan of the identification control system;

5 a block diagram with software components for carrying out the functionality of the identification system;

6 a diagram of a method for identifying a person based on an identity document in an identification system; and

7 a dynamic management of persons in an identification system with a first identification control point.

1 shows an identification control system with a plurality of spatially distributed identification control points 101 . 103 . 105 . 107 . 109 . 111 and 113 , The identification checkpoints are established via a communication network 115 to communicate. The identification control system comprises a central server entity 117 , which is also set up over the communication network 115 to communicate. The central server entity 117 includes, for example, a server 123 with a database 125 and an optional GCS SW 127 ,

It is also an optional server entity 119 provided, for example, a blacklist server 129 , a database 131 and a blacklist SW facility 133 may include. In the database 131 For example, a blacklist of preregistered persons may be stored.

Optionally, surveillance cameras 135 . 137 be provided, which via the communication network 115 to be able to communicate.

The identification system can be set up, for example, with communication devices 139 . 141 for example via a wireless communication network 115 to communicate. This communication may be initiated, for example, to obtain identification information about the communication devices, such as a SIM card number, which may serve as reference identification features.

The identification checkpoints 101 . 103 may be set up as first identification control points, which can capture identity data of persons based on identity documents. For this purpose, the first identification control points 101 . 103 Document readers 143 . 145 comprise, which are set up, the identity data, which are included for example in an MRZ of an identity document, for example, to capture optically and this via the communication network 115 to the central server entity 117 and to another identification control point 105 . 107 . 109 . 111 . 113 in addition also document readers 161 . 163 . 165 . 167 to capture identity data.

The first identification checkpoints 101 . 103 For example, they may be set up as so-called kiosks or eGates which allow self-service by the person to be identified. For example, travelers can independently submit their identity documents to the document readers 143 . 145 respectively.

The first identification checkpoints 101 . 103 can also reference detection devices 102 . 104 which are adapted to receive reference identification features of persons, such as biometric features. The first identification checkpoints 101 . 103 can also use PC entities 147 . 149 include, which cause the communication with the communication network and, for example, the document readers 143 . 145 Taxes.

The identification checkpoints 105 . 107 . 109 . 111 and 113 can each with display devices 151 . 153 . 155 . 157 and 159 be equipped. The display devices 151 . 153 . 155 . 157 and 159 can be provided to display each an identity date or identity data, for example, in a graphical window. The identification checkpoints 105 . 107 . 109 . 111 and 113 may also be provided with feature detection means 161 . 163 . 165 . 167 equipped to receive identification features of persons and to compare them with pre-stored reference identification features in order to display the identity data assigned to the respective person and previously recorded.

In addition, the identification checkpoints 105 . 107 . 109 . 111 and 113 be equipped with reference detection devices, which are the features of the reference detection devices 102 . 104 the first identification checkpoints 101 . 103 can have. According to one embodiment, however, the feature detection devices may also be used 161 . 163 . 165 . 167 be formed to include reference identification features.

The identification checkpoints 105 . 107 . 109 . 111 and 113 can each with PCs 169 . 171 . 173 . 175 and 177 be provided over the network 115 for example, with the central server entity 117 communicate in order to transfer the detected identification features there or to retrieve the acquired identity data.

The identification checkpoints 105 . 107 . 109 . 111 and 113 For example, they may be formed as so-called primary or secondary control points with an administration functionality or without an administration functionality. The display devices 151 . 153 . 155 . 157 and 159 For example, graphical user interfaces can be displayed, wherein identity data of the persons and / or their identification documents can be displayed in a browser window.

Is one of the identification checkpoints 105 . 107 . 109 . 111 and 113 As a so-called supervisor control point, this may, for example, all detected identity data of active travelers in a browser window of a graphical user interface on the display device 151 . 153 . 155 . 157 and 159 provide.

If one of the identification control points is provided with an administration functionality, then there can be created, deletion or modification of roles, rights or process sequences or rules.

The central server entity 117 is intended to store the identity data of the persons as well as their documents, such as document numbers. In addition, the central server entity 117 be provided to store the results of a review of persons and / or documents for authenticity and, where appropriate, status information.

The server entity 117 it may be provided to compile the data to be displayed at the identification control points, to process it graphically, for example by entering it in a graphic window, and via the communication network 115 to the server entities of the control points or to their browsers. This information can be displayed by the browsers.

In addition, the central server entity 117 be provided to query internal or external databases, for example, to retrieve identity data, which are assigned to certain reference identification features. The central server entity 117 may also be provided to manage login data and to store decisions at the identification control points, which may concern the identification or non-identification of persons.

The central server entity 117 can also be provided to run any applications of the identification system.

The components of the database 125 may be configured to store all identification data of persons, monitoring or login data.

The central server entity 117 may also be provided to log and save the decisions made by, for example, a border official.

According to one embodiment, the central server entity 117 be further configured to perform a document counterfeit detection. For this purpose, the document readers 143 . 145 For example, be provided to record security features of identity documents visually or electronically and this to the central server entity 117 transferred to. The central server entity 117 can compare the captured security features with pre-stored patterns to perform a verification of the identity documents. All test results linked to the traveler's identity data can be stored in the database 125 stored and provided to the identification checkpoints. This eliminates the need to constantly check the authenticity of identity documents.

The central server entity 117 may also be configured to direct the persons to the respective identification control points. For this purpose, the central server entity can decide based on predetermined rules, for example. The predetermined rules may be provided, for example, in the form of a rule engine or by an executable computer program. As a result, instructions can be made available, for example, to guide certain persons to lead identification control posts.

If one of the identification control stations is equipped with the supervisor functionality, then identity data of all persons located within the identification system can be displayed there, for example. In addition, for example, a status of a documentary check for authenticity, in particular passed, failed or incomplete, can be represented. The identification control point set up as a supervisor can, for example, be linked with the identification checkpoints set up as primaries or secondaries in order to activate the respective user interface. In addition, the identification control body, set up as a supervisor, can use the in 1 linked webcams link.

The document readers can, for example, be set up as document testers. They can be stationary or mobile.

As mentioned above, the identity data, or the identity data if appropriate, together with a content of an identification document, such as an image of a person, can be displayed by means of a graphic user interface (GUI).

Is one of the in 1 If the identification checkpoints are set up as supervisors, this can be a representation of some Display identification control points and, for example, travelers on a graphical user interface.

2 shows an example of a display of identity data using a graphical user interface, with an image 201 a person who can be created for example by capturing a passport photo. In addition, for example, a window 203 be arranged in the identity data, in particular data of the machine-readable zone (MRZ: Machine-Readable Zone) are summarized. These data may include, for example, a first name, a last name, the gender of the respective person and the expiration date of an identification document, a date of birth, the issuing state, the nationality or the document number. In addition, for example, an entry date can be displayed in the identification control system.

The graphical user interface may further include controls, such as an access-rejection panel 205 or an admission permit field 207 , include. By pressing the entry rejection field 205 the access rejection is documented and saved if necessary. By pressing the access permission field 207 however, access is granted and documented.

The graphical user interface may further include an area 209 include, in the captured on the basis of identification documents mappings 209a . 209b . 209c represented by persons in the order in which these persons are present at the respective identification control point in a possible queue.

Optionally, further selectable areas may be provided, such as for displaying a facial image of a person stored on a chip of an identification document, 210 , an area with a document display 211 in which white light, infrared (IR) and / or ultraviolet (UV) images of identification documents are displayed. These recordings can be made by means of the document readers of the first identification checkpoints 101 . 103 . 161 . 163 . 165 . 167 be included. In addition, an area can 213 provided by, for example, recorded biometric

Features, such as fingerprints. Further, an area 215 be provided by presenting the test results based on the examination of an identification document, the results of examinations of external systems, such as blacklist servers and / or status in the system of previous decisions by, for example, border officials, such as entry, rejection or delegation. If abnormalities or errors occur, you can use the corresponding tabs, which correspond to the respective areas 210 . 211 . 213 . 215 are connected, in a signal color, for example, red, colored.

3 and 4 show a graphical user interface with a spatial plan of rooms in which the identification control system is installed. The graphical user interface may, for example, first identification control points 301 . 303 . 305 which are provided, for example, for collecting identity data. The graphical user interface may further include second identification control points 307 . 309 respectively. 311 Show. These can be set up, for example, as secondaries or as primaries. Furthermore, the graphical user interface locks 317 . 319 Show. In addition, places with surveillance cameras can 321 . 323 are displayed.

The graphical user interface may also display pictograms of persons, for example, in queues in front of the respective locks or in front of the respective identification checkpoints 305 . 309 queue. The personal pictograms can be highlighted in color, for example. Thus, for example, person pictograms shown as green 325 indicate that an examination of the identity documents of the pending persons and possibly blacklist queries are without error. A red marking of person pictograms 327 indicates that anomalies in the verification of the identity documents or blacklist queries have occurred. Gray person pictograms 339 show, for example, that a review of the identity documents has not been completed.

The corresponding graphical user interfaces of these stations, such as those in 2 can be displayed at the identification control points, for example by clicking on a field 305 . 307 . 309 . 311 be retrieved. This allows the data displayed at the respective identification control points to be displayed.

The surveillance camera symbols 321 . 323 For example, they can be connected to controlled cameras via a communication network or via a link, so that when selecting the respective camera symbol 321 . 323 a browser window is opened, which displays a real-time image of the respective camera.

According to one embodiment, the color representation or highlighting of the person from a number of persons, for example, from five persons, are summarily presented.

The functionality of the identification system can be realized, for example, by means of a software program whose routines, for example, run centrally on a server entity.

5 shows a block diagram with software components for performing the functionality of the identification system. The software architecture includes the monitoring and login functionality 501 , the backend functionality 503 , the administration functionality 505 as well as the functionality of the identification checkpoints 507 , The software architecture also includes peripheral support 509 , Database components 511 as well as application server components 513 which, for example, run on the central server entity.

6 shows a diagram of a method for identifying a person based on an identity document in an identification system, for example in the above-described identification system with spatially distributed identification control points. The method includes detection 601 an identity date based on the identification document by a first identification control point, the Create 603 at least one reference identification feature of the person, the assignment 604 the reference identifier to the detected identity date, for example, by a combination of records, the detection 605 an identification feature of the person by a second identification control point and the display 607 the detected identity date by the second identification control point if the detected identification feature matches the reference identification feature.

According to one embodiment, the persons residing within the identification control system may be managed. 7 illustrates a dynamic management of persons in an identification system using a graphical user interface, with an image of a first identification control point 701 , which is for example set up as a kiosk, with an image of a second identification control point 703 , which is set up, for example, as a primary, with an image of a third identification control point 705 , which is set up, for example, as Secondary, and with an image of a fourth identification control point 707 which is an eGate, for example.

Furthermore, states "access" 709 and "rejection" 711 displayed. In addition, a ground state 713 intended.

For example, the persons may be from the second identification control point 703 to the third identification control body 705 be continued, for example, if an automatic verification of the identity data has failed. Otherwise the persons are granted access. The third identification control body 705 can check the identity data again and either grant or deny access. For example, suggests checking the identity data at the fourth identification control point 707 fail, the data subjects may go to the third identification control body 705 to get redirected.

An advantage of the concept according to the invention is the shortening of the throughput times for travelers, with the use of fewer personnel and, as a result, cost savings for the operator.

• 1. Wartezeit in einer Schlange vor einer Identifikationskontrollstelle wie Kontrollbox bzw. Primary, welche durch einen Grenzbeamten bei hohem Personenaufkommen bedient werden kann,
• 2. Dauer des Lese- und Prüfvorgangs für ein Identitätsdokument,
• 3. Beurteilung der Relevanz der Prüfergebnisse und Dauer der Prüfung und Befragung eines Reisenden durch einen Grenzbeamten

The throughput times consist of the following steps:

• 1. Waiting in line at an identification control center, such as a control box or primary, which can be served by a border guardsman in the event of high numbers of passengers,
• 2. duration of the reading and verification process for an identity document,
• 3. Assessment of the relevance of the test results and duration of the test and interview of a traveler by a border official

By parallelizing steps 2 and 3, a reduction in throughput times can be achieved.

In the following an embodiment for the parallelization and the use of the waiting time in the queue is described:
For example, the travelers are encouraged to independently place the identity document on a document reading device, which may be a document checking device, at a first identification control point which, at a second identification control point, such as a checkpoint. Thus, the identity data for the traveler is read in and checked, step 2, while the border guard serves another traveler for whom step 2 has already been completed, step 3.

The traveler assumes the task of document placement itself, which was previously carried out by the border official. According to one embodiment, the document verification takes place automatically and can not be influenced by the traveler.

A traveler can always be uniquely connected and identified with his identity data in the identification system based on individual identification features.

A traveler may, for example, when registering a document, active or passive, for example, by placing a passport on a document checking device, in the identification system based on the MRZ data, an individual identity document and optional additional identity data clearly recorded. From then on, a traveler can be identified at any time in the identification system by means of individual identification features associated with his identity data. Possible individual identification features are, for example:

• - Face image that can be captured by a video or camera identification system
• - fingerprint that can be picked up by a fingerprint reader
• - Identity documents of travelers, e.g. Passports or smartcards from which e.g. the MRZ, fingerprints or facial images can be used
• - Communication devices, such as mobile phones or smartphones, which can communicate, for example, via Bluetooth or NFC, and
• - Tickets with e.g. Barcodes that can be printed out and read in at other identification checkpoints.

The validity of an individual identifier may expire upon the final decision by a border official to allow passage.

If the traveler with the same identity document reappears in the identification system after the final decision, a new data record with a new individual identification feature is generated.

For example, if a facial image is used as an individual identifier, a traveler may be detected by placing his identity document on a document validator in the identification system, as well as a facial image of the traveler.

The traveler is then found in the identification system by using the individual identifier in the identification system data. Thus, the traveler can be identified by comparing a real-time image of a video camera with the previously detected reference identifier and outputting or displaying the associated identity record.

An identification control system may, in one embodiment, be linked by linking two or more identification control points, e.g. a kiosk system is created, realized. In this case, the identity data are recorded at a first identification control point and processed at the second identification control point linked to the first one. Such a link can be realized between kiosks with self-service and primary or between primary and secondary or e-gates with a slave station.

In the following, a kiosk system will be described by way of example.

In a simple kiosk mode with a 1: 1 relationship, for example, a first identification control point as a kiosk and a second identification control point as a primary are linked together. The travelers will arrive at Primary in the order in which they have their identity documents on the document reader of the first identification control point. At the Primary, the border guards receive the identity document from the traveler. The assignment of the traveler to his identity data may be based on the facial image and the order of those waiting in line by the border official or automatically using one of the defined individual identification features.

Hereinafter, an embodiment will be described in consideration of the order of those waiting in line.

Two travelers A and B arrive at a first identification control station, e.g. to a kiosk, and sequentially place their identity documents on the document reader. Since the traveler A is in the queue in front of a second identification control point in front of the traveler B, his identity data is there automatically displayed first. If the traveler A passes the second identification control point, his identity data can be replaced by identity data of the traveler B.

In a multiple kiosk mode with an n: m relationship, one or more kiosks and primaries are linked together in a group. The travelers are forwarded from a kiosk to suitable Primarys.

When forwarded to the queue of a suitable primary, information is sent to the traveler and the primary assigned to him, for example, directly at the kiosk.

When forwarding to an end of a queue, at the beginning of which several Primarys are available, the first standing traveler can be forwarded to an appropriate Primary. The forwarding information (who, where, where) is automatically provided at the beginning of the queue based on the defined individual identification feature. At the Primary, a border official receives the identity document from the traveler. The assignment of the traveler to his identity data are given, for example, on the basis of the facial image and the order of the passengers waiting in line by the border official. For example, the order of the waiting travelers results either automatically from a time of their forwarding to a primary or from the use of one of the defined individual identification features.

Hereinafter, an embodiment using the dedicated assignment to a primary will be described.

A traveler is recognized as an English citizen after placing his identity document on a document validator at a German airport. For example, the identification system is configured to forward English-speaking travelers to a checkpoint with an English-speaking border official. At the kiosk, the traveler receives a message, in English, to which checkpoint he should go. Its identity data record is assigned to the queue of the corresponding control point. As soon as he arrives in front of the local border official, his identity data is automatically determined by e.g. his facial image displayed.

The following describes a dynamic wait management of travelers.

By creating an individual identification feature when reading an identity document for the first time, which serves as a reference identification feature, the same data set can be repeatedly accessed at all other accesses at different identification control points, thereby avoiding the generation of duplicates. This also means that no virtual long queues form before a second identification checkpoint, for example a primary, because duplicate readings of the identity data do not generate duplicates.

In the following, snake hopping, also called line hoping, is described:
A traveler whose identity data is already linked to an identification checkpoint A and subsequently registers at another identification checkpoint B is linked to this and automatically removed from the identification checkpoint A.

An exemplary embodiment is, for example, the laying on of an identity document by a traveler at a first identification checkpoint, for example at a kiosk, with automatic forwarding to a second identification checkpoint, for example to an associated primary. While waiting in line at the primary, the traveler spontaneously decides to leave to use an eGate. At the eGate, it is registered and automatically removed from the queue at the Primary at the same time - its identity data is now linked to the eGate used.

If a traveler can not pass an eGate and, for example, subsequently registers to the reader of a first identification control point, for example a kiosk, it is sorted into the corresponding queue of a primary and is no longer linked to the eGate.

According to one embodiment, mobile terminals such as smartphones may be substituted for identification control stations or may be used for, for example, the detection of reference identification features. Using one of the individual identifying features as reference identifying features of this traveler e.g. a fingerprint or a facial image or the data of an MRZ of the identity document, the traveler's identity data may be retrieved and assigned to that mobile checkpoint. At the same time, the identity data can be deleted from the original queue of the identification control point A. This can shorten the queue.

The exemplary embodiments described above by way of example can be used in any control, entry and ticket identification systems, for example for stadiums, exhibition centers or railways.

LIST OF REFERENCE NUMBERS

101

 Identification Control Authority

102

 Reference detector

103

 Identification Control Authority

104

 Reference detector

105

 Identification Control Authority

107

 Identification Control Authority

109

 Identification Control Authority

111

 Identification Control Authority

113

 Identification Control Authority

115

 Communication network

117

 central server entity

119

 server entity

123

 server

125

 Database

127

 GCS-SW

129

 Blacklist servers

131

 Database

133

 Blacklist SW facility

135

 Security Camera

137

 Security Camera

139

 communication device

141

 communication device

143

 Document reader

145

 Document reader

147

 PC-entity

149

 PC-entity

151

 display device

153

 display device

155

 display device

157

 display device

159

 display device

161

 Feature detector

163

 Feature detector

165

 Feature detector

167

 Feature detector

169

 server

171

 server

173

 server

175

 server

177

 server

201

 image

203

 window

205

 Access dismissal field

207

 Access permission field

209

 Area

209a

 Illustration

209b

 Illustration

209c

 Illustration

210

 Area

211

 Area

213

 Area

215

 Area

301

 Identification Control Authority

303

 Identification Control Authority

305

 Identification Control Authority

307

 Identification Control Authority

309

 Identification Control Authority

311

 Identification Control Authority

317

 lock

319

 lock

321

 Security Camera

323

 Security Camera

325

 people pictogram

327

 people pictogram

339

 people pictogram

501

 Login functionality

503

 Backend Functionality

505

 Administration functionality

507

 Functionality of the identification control body

509

 peripheral support

511

 Database Components

513

 Application Server Components

601

 To capture

603

 Create

604

Assign

605

 To capture

607

 Show

701

 Identification Control Authority

703

 Identification Control Authority

705

 Identification Control Authority

707

 Identification Control Authority

709

 access

711

 rejection

713

 ground state

Claims (15)

Method for identifying a person on the basis of an identity document in an identification system with spatially distributed identification checkpoints, comprising: detecting ( 601 ) an identity date based on the identification document by a first identification control point; Create ( 603 ) at least one reference identification feature of the person; Assign ( 604 ) the reference identification features at the detected identity date; To capture ( 605 ) an identification feature of the person by a second identification control point; and ads ( 607 ) of the detected identity data by the second identification control point in accordance with the detected identification feature with the reference identification feature. The method of claim 1, wherein the detected identity data is transmitted to the second identification control point from a central server entity. The method of claim 1 or 2, wherein the first identification control point comprises a document reader for detecting the identity date based on the identity document, and wherein the identity date is detected by the document reading device, in particular optically or electrically. Method according to one of the preceding claims, wherein the reference identification feature and the detected identity data are stored as mutually associated data records, in particular in a database. Method according to one of the preceding claims, wherein the detected identification feature is compared with the reference identification feature and wherein upon coincidence of the detected identification feature and the reference identification feature the detected identity data of the second identification control point is provided. Method according to one of the preceding claims, wherein the detected identity data in a queue associated with the second identification control point is determined according to a Queue rule, especially in a database. The method of claim 6, wherein the queue rule is determined by an order of detection of the identity date. Method according to one of the preceding claims, wherein the reference identification feature is one of the following features:  a biometric feature, in particular a facial image, a fingerprint, or an iris image, a barcode associated with the person or the identity document, a document that can be created by the first identification control point, in particular a ticket, a feature of the identity document, in particular a content of a machine-readable zone of the identity document. Method according to one of the preceding claims, wherein the reference identification feature is created on the basis of an identification number of a communication device or a recordable by a communication device electronically transmitted record. Method according to one of the preceding claims, wherein the identity date is a date of a machine-readable zone of the identity document. Method according to one of the preceding claims, comprising:  Detecting an identification feature of the person by a third identification control point; Displaying the detected identity date by a third identification control point if the detected identification feature matches the reference identification feature. The method of claim 11, wherein the detected identity date is utilized by the third identification control point in accordance with the detected identification feature with the reference identifier feature. Identification control system with a plurality of spatially distributed identification control points ( 101 . 103 . 105 . 107 . 109 . 111 . 113 ) which are formed with each other via a communication network ( 115 ), comprising: a reference detection device ( 102 . 104 ) for creating a reference identification feature of the person; a first identification control body ( 101 . 103 ) for collecting a date of identity of a person on the basis of an identification document, wherein the first identification control point ( 101 . 103 ) is further configured to associate the reference identifier with the detected identity date; and a second identification control body ( 105 . 107 . 109 . 111 ) for checking or detecting an identification feature or a reference identification feature of the person, the second identification control point ( 105 . 107 . 109 . 111 ) is further adapted to perform a comparison of the detected identifier with the reference identifier or with the data stored in the server entity and display the detected identity data if the detected identifier matches the reference identifier. The identification control system of claim 13, further comprising a server entity ( 117 ) with a database ( 125 ), whereby the first or all of the identification inspection bodies ( 101 . 103 . 105 . 107 . 109 . 111 ) are formed, the detected identity data to the server entity ( 117 ), the reference detection device ( 102 . 104 ), the reference identifier to the server entity ( 117 ), the server entity ( 117 ), the detected identity data and the reference identifier in the database ( 125 ) and the second identification control body ( 101 . 103 ) to provide. An identification control system as claimed in claim 13 or 14, adapted programmatically to carry out the method of any one of claims 1 to 12.

Images