DE202021102756U1 - Electronic event ticket with a health indicator and ticket shop for generating an electronic event ticket - Google Patents

Abstract

Electronic event ticket (100), the event ticket being implemented in a software environment so that it can be called up on a terminal device (200), and ticket data (D _{ID ) can be called up coded in the event ticket and a health indicator (T ID} ) can be called up in addition to the ticket data in the event ticket is coded in order to provide the stored health indicator at the same time as the stored ticket data to a readout device.

Description

The present invention relates to an electronic event ticket. The present invention also relates to a ticket shop.

Ticket controls and admission controls when entering events are generally known. Ticket control can be carried out in various ways, for example with control persons who manually check the event tickets or with automated scanning devices with a turnstile.

At the entrance to an event, an event ticket is usually checked for validity. If the event ticket is valid, the person gains entry to the event, such as a soccer game or concert.

Admission controls present the organizers with major logistical and legal challenges. If events are to take place during pandemic times, for example, organizers must ensure that only guests who have recovered, vaccinated or tested are allowed access to the event.

It can be assumed from these groups of people that they are not contagious at the time of the event and therefore cannot transmit any contagious disease to other event participants, such as the Covid-19 virus.

All three groups of people mentioned can take part in the event if they can provide evidence that they can be assigned to one of the three groups of people.

The problem here is that the verification can take place in different ways and with different systems. In addition, at least two different tests are carried out at the inlet. The event ticket as such has to be checked for validity. In addition, the health certificate must be checked.

This double check is disadvantageous because it delays admission controls and can result in long waiting times.

In addition, the examination of the health certificates presents the organizers with further problems in terms of safety. For example, it cannot be ruled out that a printed health certificate is forged. Well-known examples are, for example, that a printed PDF is presented as proof of health or a false vaccination certificate.

The object of the present invention is therefore to address one of the above-mentioned problems, to improve the general prior art or to provide an alternative to what is known up to now. In particular, a solution is to be provided with which ticket control, during which health data are to be checked, can be carried out more safely and more quickly.

According to the invention, an electronic event ticket according to claim 1 is proposed for this purpose.

The event ticket can be called up on a terminal in a software environment. An electronic event ticket is therefore proposed that is implemented on a terminal, such as, for example, on a smartphone, a tablet or on a computer. The event ticket is designed to be retrievable and implemented on the terminal in a software environment, for example in electronic form in an app on a smartphone. The event ticket is designed to be retrievable, i.e. it can be called up and displayed on the device if necessary. In addition to an app, a web application can also be provided as a software application that is implemented on a cloud server. The software application can also be understood or referred to synonymously as a software application.

It is also proposed that ticket data be coded in the event ticket so that it can be called up. It is therefore proposed that ticket data be stored in the event ticket that can be called up, for example with a control device that is used for ticket scanning. Coding can be understood as an encrypted storage of the data in the event ticket. The ticket data can therefore be called up by another device, for example by a scanner at an entrance to an event. The ticket data can also be understood as ticket information and relate, for example, to stored or stored data relating to an event for which the ticket was booked. The ticket data can be, for example, an event name, an event date and further descriptions such as a ticket price or a seat. The ticket data is coded in the event ticket so that it can be called up, i.e. the ticket data can be stored directly in the event ticket as data that can be called up. In addition, the ticket data can also be called up via a link encoded in the event ticket. The ticket data are provided or can be displayed.

It is also proposed that in addition to the ticket data in the Event ticket a health indicator is coded retrievable in order to provide the stored health indicator simultaneously with the stored ticket data to a readout device. The reading device can be, for example, the scanner described above at the entrance to the event. The health indicator is also coded in the form of retrievable data in the event ticket, analogous to the ticket data. The health indicator is used to identify whether a person has been vaccinated against a disease, whether a person has recovered from an illness and has antibodies, or whether a person has been tested as healthy.

Vaccinated thus refers to the fact that a person has received a vaccination and the protective effect of the vaccination still exists. Recovery refers to the fact that a person has developed a disease, has cured the disease, and an antibody test has shown that the person has antibodies to the disease. Tested refers to the fact that there is evidence of negative testing that is not too far in the past.

If a person comes to an event and shows the previously described event ticket at the entrance to the event, provision is made for the entrance to scan the electronic event ticket. The admission can then check that there is a valid proof of health in the form of the health indicator and that a valid event ticket is also available. This enables both digitally stored information to be checked simultaneously with a single scan, namely the ticket data and the health indicator. Thus, the inlet can be simplified.

It is therefore proposed to combine the ticket data and health data with one another in an electronic event ticket.

The inlet preferably logs the received ticket data with a scanning device and additionally or alternatively the received health indicator. On the one hand, logging enables subsequent tracking, since the ticket data is assigned to the event participants in a personalized manner. Logging also ensures that different people are not participating in an event with the same ticket or the same health certificate. This can prevent abuse.

In a particularly preferred embodiment, the ticket data are coded with a ticket identifier in the event ticket so that they can be called up. The ticket identifier can also be abbreviated as a ticket ID.

In a particularly preferred embodiment, the health indicator is coded with a test identifier in the event ticket so that it can be called up. The test identifier can also be abbreviated as test ID.

An identifier or identifier is known from the field of information technology. For example, an identifier is a unique number that is assigned to an object, such as a data record in a database. A ticket ID and a test ID are advantageous for reasons of data protection, since the information stored in the event ticket cannot be read off immediately. This increases data protection and offers a secure entry system.

It is preferably proposed that the electronic event ticket be designed on the terminal in the form of a QR code and additionally or alternatively in the form of a barcode. A QR code and a barcode are suitable means of creating the event ticket, as they can be printed out in addition to a purely electronic display option. This simplifies handling on the intake system.

It is preferably also proposed that the ticket data are designed to be readable and can be or are read into the electronic event ticket by means of a scanning device in order to encode the ticket data in the event ticket so that it can be called up, the scanning device being implemented on the terminal and being set up to use the Read ticket data from a standard ticket. It is therefore proposed that the ticket data of a customary event ticket be read in retrospectively. For this purpose, for example, a software application implemented on the end device can be used to control a camera of the end device in order to scan in the ticket data. The subsequent scanning is advantageous because a ticket provider does not have to change his existing ticket sales or his sales system. The electronic event ticket accordingly represents an independent event ticket. A standard, known event ticket in which no health data is stored, for example in the form of a health indicator, is referred to as a standard ticket.

Additionally or alternatively, it is proposed that the ticket data are designed to be readable and can be read or read into the electronic event ticket via a data interface in order to encode the ticket data in the event ticket so that it can be called up, the data interface being implemented on the terminal and being set up to receive the ticket data from a ticket server. So it will be a The second possibility is proposed as to how the ticket data are stored in the electronic event ticket, namely by receiving the ticket data via a data interface which is also to be understood as a communication interface. For example, the ticket data can be received from a cloud server via an Internet interface. This saves the manual scanning process. Both variants described above can also be implemented at the same time. In this way, the user of the electronic ticket can choose his preferred variant.

In a preferred embodiment, it is proposed that verified ticket data be coded in the event ticket so that it can be called up, the ticket data being compared with a ticket data record for verification. It is therefore proposed to store checked ticket data in the event ticket. The verification or checking takes place before the data is stored in the ticket. This is advantageous because the verification of the ticket data at the entrance can be dispensed with or at least the requirements for checking the ticket data at the entrance can be reduced. In this way, too, an entry can be implemented more easily and quickly.

In a particularly preferred embodiment, it is proposed to enter a ticket data set or the ticket data set in the software environment for comparison, for example as a table data set.

Additionally or alternatively, it is proposed to enter the ticket data record into the software environment via a cloud interface. The table data set can be made available to the software application as a CSV table file, for example, the software application comparing the ticket data with the table data set made available in the table file. The comparison is therefore carried out on the end device in the software application.

Additionally or alternatively, it is proposed that the comparison of the ticket data take place via a cloud interface, which can also be understood as an internet interface or a mobile radio interface. The comparison is therefore carried out externally and not on the end device.

It is preferably proposed that the comparison with the ticket data record includes a comparison of whether the ticket data loaded into the event ticket has already been loaded into another electronic event ticket. It is therefore proposed to carry out a comparison as to whether the electronic event ticket has already been used by another person at the entrance. This can reduce abuse.

It is also preferably proposed that a verified health indicator be encoded in the event ticket so that it can be called up, the verified health indicator being stored in encrypted form on the terminal. It is therefore proposed that the health indicator be checked analogously to the ticket data. The health indicator can be stored as a saved file on the terminal.

It goes without saying that the user of the terminal has obtained a corresponding proof of health, i.e. the person has either been tested negative for an illness, the person has been tested for the presence of antibodies, or the person has been vaccinated and can provide evidence of a valid vaccination certificate. The proof is then stored in the form of data on the terminal device. The loading or saving of the evidence on the terminal can be done manually or automatically. In a specific example, it is proposed that a person go to a rapid test center, an antibody laboratory or a vaccination center and that a health certificate is subsequently sent to the person, in paper form or in electronic form. The user can then store this proof on the end device. This can be done, for example, with the terminal that is set up with the software application to access the stored evidence and to store or encode the evidence as a health indicator in the electronic event ticket.

In addition to the alternative, it is proposed that the verified health indicator be entered into the software environment via a communication interface. It is therefore proposed that the previously described health certificate is automatically transmitted to the person via a communication interface and that the verified health indicator is stored in an automated manner. This can be done, for example, with the terminal that is set up with the software application to access the transmitted evidence and to store or encode the evidence as a health indicator in the electronic event ticket.

In a particularly preferred embodiment, it is proposed that a test means for checking the health indicator for its validity is set up on the terminal, the test means being set up to send a health indicator request to a verification server, and the test means being set up to receive a health indicator response from the To receive verification server, the received health indicator response indicating whether the health indicator is a valid or invalid one Health indicator is. It is therefore proposed to carry out an external verification of the health indicator by means of a request to a verification server. The verification server contains information about the validity of the requested health indicators. This is advantageous because the health certificate does not have to be transmitted as such.

It is preferably proposed that the ticket data and additionally or alternatively the health indicator can be displayed optically on the terminal. A visual check of the ticket data and additionally or alternatively the health indicator can thus take place. In addition, a user can subsequently view the further description, such as a seat number, etc. This is advantageous for events that do not use a digital admission control system and only carry out a visual check of the electronic event ticket by control personnel.

In a further embodiment according to the invention, a ticket shop for generating an electronic event ticket is proposed, according to claim 8.

The ticket shop comprises at least a first and a second input field, the first input field being designed as a control field for storing a person characteristic and the second input field being designed as a test code input field for storing a test code. The ticket shop is preferably designed as an online ticket shop.

The test code can be entered in the input field as a number or letter code. The test code can also be interpreted as a test ID. The test code is known to the user of the ticket shop or it is communicated to him. A test code can be, for example, an 8-digit number and letter code that is provided by a test center, a vaccination center or an antibody laboratory after a test or a vaccination.

The control field is intended to store a personal characteristic, such as a date of birth or an identity card number. The control field or the stored personal property serves as a backup and comparison for a subsequent verification of the stored or entered test code. A person characteristic therefore refers to information about a person with which an individual can be uniquely identified.

The technical implementation of a ticket shop is basically known. The ticket shop is designed, for example, as a web form that is implemented on a website for collecting data, the data collected in the web form being sent to a web server for processing. The ticket shop can, however, also be implemented offline as a software application on a computer network in the form of a cash register system which also has input fields for user input. For example, cashiers can make entries. Corresponding input fields, which are also known in information technology, are therefore provided for recording the data.

It is therefore proposed that the ticket shop have at least two input fields for entering user inputs. It goes without saying that a large number of further input fields can be provided in the ticket shop, such as input fields for names, addresses, etc. A user can be a person who wants to buy a ticket online or an employee who operates a cash register system. The ticket shop can accordingly be designed as an online shop or as an offline cash register system.

In addition, the ticket shop includes a test device that is set up to verify the validity of the stored test codes depending on the stored personal property. The test means is therefore provided to check the validity of the test code entered by the user. For example, a comparison can be made with a database on which valid test codes are stored, each of which is linked to a personal property. In addition, a request to another server can also be triggered by the test equipment as to whether a valid test code has been entered. The test means is, for example, an electronic calculation system such as a computer, a server, a tablet or a terminal, which is set up to carry out or trigger a check of the test code.

The test means is preferably set up to send an external request via a client-server system to a verification server in order to verify the test code.

In addition, the ticket shop comprises a generating means for generating the event ticket, the generation of the event ticket only being triggered when a valid test code has been verified with the checking means.

It is therefore proposed that an additional input field be provided in the ticket shop for a test code, which can also be referred to as a test ID. If a test code is entered in the input field, the test code is then automatically verified. If the If the test code is valid, an event ticket is generated.

Additionally or alternatively, it is proposed that the ticket shop include a generating means for activating the event ticket, the event ticket being activated only when a valid test code has been verified with the checking means.

The generating means is, for example, one or the previously described calculation system that is set up to generate an event ticket electronically or in paper form and, additionally or alternatively, that is set up to activate an event ticket that has already been generated. The generating means can therefore also be the same generating means that is set up to generate the ticket.

It goes without saying that other conditions may have to be met before the event ticket is generated or activated, such as payment for the ticket and further user information, such as email addresses, etc.

It is therefore proposed to introduce an additional mandatory input field when selling tickets, namely the test code input field. This field is then checked, taking into account the data stored in the control field. An event ticket is then generated or activated if a valid test code has been verified.

A ticket can be bought online on the same day of an event or at the box office if a valid test code has been verified in the ticket shop.

The proposed ticket shop also provides the option of not having to buy a ticket on the day of the event. For example, a non-activated ticket, that is to say an invalid ticket, can be generated, or an advance ticket can be generated. The ticket is activated when a valid test code has been verified so that entry to the event can take place.

It was recognized in the present case that an admission control can also be simplified if a health certificate is checked when the ticket is sold. If it is ensured that only tickets with a valid health certificate are generated or activated, the admission control can be simplified, since only the ticket data need to be checked at the entrance. A valid health certificate is verified by checking a test code. It goes without saying that the test code is associated with a health certificate.

In a particularly preferred embodiment, the test code is designed as a test identifier that can be assigned to a valid health certificate that is stored on a verification server.

It is preferably proposed that the test means is set up to send a test code request to a verification server, the test code request comprising the stored personal property of the first input field and the stored test code of the second input field, and the test means is set up to send a test code response from the verification server received, wherein the received test code response indicates whether the stored test code is a valid or invalid test code.

It is therefore proposed that an external check be carried out by the ticket shop by a request to a verification server and that a response is sent to the ticket shop in response to its request. An external verification of the test code on a verification server is therefore proposed. The result of the comparison is sent back to the end device.

It is preferably proposed that the verification server generate the test code response as a function of the test code request. It is therefore proposed that the transmitted test code and the personal property be compared with a test code database on the verification server. The test code response is thus created as a function of the test code request.

The stored personal property, such as a stored date of birth, serves as a safeguard that the person who also carried out the test or vaccination receives an activated or generated ticket. The date of birth as a personal attribute is advantageous because it has to be specified when purchasing a ticket anyway.

It was recognized in the present case that when a test or vaccination is carried out, personal data is recorded and this can be compared with the personal characteristics stored in the control field. A third party cannot purchase a ticket if, for example, they only enter a test code. Correct personal characteristics must also be entered in the control field.

In a specific example, it is provided that the ticket shop sends a test code request to a server of a test, vaccination or antibody center and receives a confirmation of the test result from the test center. In this way, a secure ticket system is provided and admission can be simplified as there is only one valid ticket is available if a valid health certificate is available at the time of the event. This is checked by verifying the test code.

A server on which test code or health certificates with personal data are stored can be regarded as a verification server.

In addition, it is proposed that the verification server only differentiate between two states as a test code response, preferably whether a valid or invalid test code is present. This ensures that e.g. a control person can only determine whether a valid test ID is available or not. In the event of a positive test, it is therefore also suggested that only the "invalid" status be coded. This ensures that test results do not reach third parties, because the verification server outputs the same feedback even if the request is incorrect. Thus, for example, a test result of a rapid test for a disease cannot be viewed. This ensures data protection.

It is preferably proposed that the test means be set up to verify provisionally stored test codes and personal characteristics as a function of a deadline. It is therefore suggested that the tickets can already be purchased, but that the tickets are only activated afterwards at the time of the appointment. One person can already purchase a ticket and, if necessary, print it out. However, the ticket is only activated and therefore valid if a valid and verified test code has been entered. It is possible to go to an event with a ticket that has already been purchased. The ticket can then be activated by subsequently entering a valid test code.

It is also proposed that a user of the ticket shop can already provisionally enter the test code and the personal property and that the ticket shop or the ticket system then checks on the day of the event whether a valid test code is available. If there is no valid test code, for example because the test is too long in the past or a person did not come to a scheduled test date, this person can be refused entry.

The ticket shop can also be understood as a ticket system, cash register system or ticket processing system.

Overall, a solution is thus provided with which an entry system with a valid health certificate is combined.

The invention also relates to a verification system for verifying qualified testing.

It is scientifically proven that, for example, a person who tested negative for SARS-CoV-2 by means of a PCR test does not pose a risk of infection for others for a certain period of time, for example 12-48 hours. The time factor depends on the number of participants in an event on the one hand and the current infection rate on the other hand, as well as on the test method used. Source: Bernhardt Nocht Institute.

This results in the possibility that organizers could resume their operations within this period of time if it could be ensured that only people who tested negative or who have already been vaccinated are admitted to the event. At the event itself it would be possible to do without distance and masks.

The problem here is that the organizers currently do not have a simple and reliable way of determining whether a qualified test was carried out by the event visitors and also not how long a test was in the past. For example, rapid tests can only provide sufficient certainty over a short period of time as to whether a person is currently infectious or not. In the case of PCR tests, this period of safety is significantly higher, as previously described.

There is therefore a need for an organizer to be able to check in the simplest possible way whether the event participants have either carried out a negative disease test within a defined period of time or are demonstrably immune to a pathogen.

In addition, organizers are obliged to notify the participants of the event if an infection is subsequently found in one of the people present so that potential chains of infection can be identified. This puts the organizers at an additional organizational and logistical level.

The object of the present invention is therefore to address one of the above-mentioned problems, to improve the general prior art or to provide an alternative to what is known up to now. In particular, a solution is to be provided with which a simple check of a qualified test is possible, for example by an organizer or another control person.

According to the invention, a verification system according to claim 12 is proposed for this purpose.

Accordingly, a verification system for verifying a qualified test is proposed that comprises at least one terminal. The terminal is connected to a network termination of a public or private data or telecommunications network and can be designed as a smartphone, tablet or computer, for example. The terminal device is preferably a smartphone.

The terminal device has an input device which is set up to record user data, which are referred to as overall user data. It is therefore proposed that the entire user data be entered into the terminal via the input means and then processed further. The input means can for example be a keyboard or a touchscreen with keyboard function on a smartphone or tablet. The total user data are user data that uniquely identify the user of the end device, such as name data, address data, date of birth, image data, MSISDN data and email data. MSISDN is an abbreviation for the English term "Mobile Subscriber ISDN Number" and describes a telephone number that is unique worldwide.

In addition, the terminal has a storage device which is set up to store partial user data of at least one test indicator. The partial user data correspond to part of the total user data recorded. It is therefore proposed that the terminal have a data memory in which at least part of the total user data recorded is stored. The storage means is, for example, an internal memory of a smartphone or a hard disk of a computer. In addition, at least one test indicator is also stored in the memory center. The state of the test indicator can be used to determine how the result of a qualified test turned out, that is to say, for example, whether a test for a disease was positive or negative.

The terminal also has a server communication means which is set up for data exchange with at least one network server. Data is thus exchanged between the terminal and a server that is a participant in a public or private data or telecommunication network via the server communication means. The server communication means can be connected to the telecommunication network with a direct, electrical or optical data connection or via a radio connection as in the case of a mobile phone or smartphone.

In addition, the terminal has a control communication means which is set up for data exchange with a control device. It is therefore proposed that the terminal have a communication means that enables data communication with a control device. The control device can, for example, be another terminal device, such as a smartphone, a tablet, a computer or a scanner. It is therefore provided that the terminal and the control device can exchange data with one another.

It is also proposed that the test indicator has a changeable current state and is designed at least to identify an initial state, a positive state, a negative state. The test indicator is set up to change its current state as a function of an external default signal that is received via the server communication means. An indicator implemented in a predetermined data format on the terminal is therefore proposed, which indicator can represent at least three different states. The initial state is intended to indicate that a qualified test is not available or has not been carried out. The positive status is intended to indicate that the result of an infection in a qualified test was positive, i.e. that the infection was found in the test. The negative status is intended to indicate that the result of an infection in a qualified test was negative, i.e. the infection was not found in the test. The test indicator can thus be sent via the control communication means. A control person with a control device accordingly has the option of reading in the test indicator implemented on the terminal device and of checking the status of the test indicator. For example, if the test indicator is in a positive state, the control person can accordingly refuse entry. In this way, a simple and safe possibility for controlling an infection process of a person can be provided via the test indicator.

Furthermore, it goes without saying that a terminal also has an internal control means, such as a CPU, which controls the means described above. In addition, the means implemented in the terminal are each connected via a data connection in order to communicate with one another or to exchange data.

In a particularly preferred embodiment, a large number of test indicators are implemented on the terminal. Different qualified tests for different infections or mutations of a disease can be displayed with the multitude of test indicators.

In a preferred embodiment it is proposed that the test indicator is also designed to identify a vaccination status. A fourth state is therefore proposed, in addition to the three previously described states. The vaccination status is provided to indicate that a person has received a vaccination against a predetermined infectious disease, such as against the corona virus. This status can be specified, for example, if a qualified antibody test has been positive or a vaccination has been carried out.

In a further preferred embodiment it is proposed that the control communication means is set up to transmit the current status of the test indicator and the subscriber data to the control device. It is therefore proposed that the control communication means can provide the user data stored in the memory of the terminal and the test indicator to a control device. It is thus possible for the test indicator and the partial user data to be read out and checked by a control person with the control device. If the control person is, for example, an organizer or a control person at the entrance to an event, the control person can grant access to persons who may have a test indicator in the negative state or a vaccination state. By sending the partial user data to the control device, the person can also be clearly identified and contacted afterwards if the received data is stored in the control device. In this way, chains of infection can be traced more easily afterwards.

In addition, a control server is preferably provided as a further component of the verification system, with the recorded overall user data being transmitted in encrypted form to the control server via the server communication means and stored in encrypted form on the control server. In a particularly preferred embodiment, the entire user data is stored by means of data-at-rest encryption. It is therefore proposed that the total user data recorded with the input means be sent to the control server after they have been entered. Accordingly, the entire user data is securely stored on a server and can be made available when required. In the event of a positive test result, the data can thus be centralized and sent directly to the responsible authority or to the responsible office. The advantage of storing the entire total user data on the control server is that in the event of a defect or loss of the terminal device, the data are still available and the person can still be identified.

In a preferred embodiment, it is proposed that the total user data recorded are stored in encrypted form in the storage means on the terminal. It is therefore proposed that the entire data of the user are stored on the terminal. This increases the data security for the user of the terminal, since the entire user data cannot be accessed during transmission to a server.

It is preferably proposed that when the positive state is present as the current state, the overall user data stored on the control server are transmitted to an office server. If a test for a predetermined illness gives a positive result, the data stored on the control server are automatically sent to an official server. This provides a quick and easy way of displaying illness reports and tracking potential chains of infection. The office server can be a data server of a health unit or a competent public authority. An automatic notification or provision of the entire user data is therefore proposed as a function of the test indicator if these are stored on the control server.

In a further preferred embodiment, it is proposed that when the positive state is present as the current state, the total user data stored in the storage means are transmitted to an office server or to the office server via the server communication means. An automatic notification or provision of the total user data is therefore proposed as a function of the test indicator if these are stored on the terminal.

A quarantine timer is preferably triggered when the state changes to the positive state. It is therefore proposed to trigger a timer with a predetermined duration as a function of the positive state, which timer then expires. The duration of the quarantine timer is preset and can be, for example, 5 to 15 days. The duration of the quarantine timer can, for example, be based on legal, political or scientific requirements. The quarantine timer can thus determine whether and for how long a person who tested positive could be contagious.

In a preferred embodiment, it is proposed that a free-running timer be triggered when the state changes to the negative state. It is therefore proposed to trigger a timer with a predetermined duration as a function of the negative state, which timer then expires. The duration of the free-running timer is preset and can for example 12 to 48 hour days. The duration of the free-running timer can, for example, be based on legal, political or scientific requirements. The free-running timer can thus determine whether and for how long a person who tested negative does not pose a risk of infection.

In a preferred embodiment it is proposed that a vaccination timer be triggered when there is a change in status to the vaccination status. It is therefore proposed to trigger a timer with a predetermined duration as a function of the vaccination status. The duration of the vaccination timer can, for example, correspond to several months. The duration of the vaccination timer can, for example, be based on legal, political or scientific requirements. The vaccination timer can thus determine whether and for how long a vaccinated person does not pose a risk of infection, i.e. whether antibodies have been detected or a protective effect has been achieved.

It is preferably proposed that the timer or timers be implemented on the terminal and additionally or alternatively be implemented on the control server. An external implementation of the timer on the control server can ensure that the timer does not fail if, for example, the terminal is lost or has a defect. In addition, implementation both on the terminal and on the server is advantageous for reasons of redundancy. The two timers can then be synchronized, for example, if one of the two timers should fail.

It goes without saying that the timer (s) is designed to be fail-safe when implemented on the terminal, i.e., for example, the start time of the timer is stored and the stored start time can be used for synchronization with an internal or external reference time, should the terminal, for example, have been issued be.

The state of the test indicator preferably changes to the initial state after the quarantine timer has expired. It is therefore proposed that the initial state be set when it can be assumed or it has been established that a previously infected person has not developed any antibodies against the disease. In this case, it is assumed that the infected person could be at risk of infection again after the quarantine timer has expired.

In a preferred embodiment, the test indicator changes to the vaccination state after the quarantine timer has expired. It is therefore proposed that the vaccination status be discontinued if it can be assumed or has been found that a previously infected person has developed antibodies against the disease. In this case, it is assumed that the infected person is no longer at risk of infection after the quarantine timer has expired. The vaccination status thus not only indicates that a vaccination has been carried out, but also the status that a person has demonstrably antibodies against the disease, for example after a cured illness, and there is no longer any risk of infection from the person, as already described above.

It is preferably proposed that after the idle timer has expired, the state of the test indicator changes to the initial state. It is therefore proposed to switch back to the initial state if the time of the qualified testing is too far in the past, for example after a rapid test such as a PCR test has been carried out. In this case, it is assumed that the qualified testing after the free-running timer has expired is too far in the past and it can no longer be ruled out that the person is infectious.

It is also preferably proposed that after the vaccination timer has expired, the state of the test indicator changes to the initial state. It is therefore suggested to switch back to the initial state if the time of vaccination is too far in the past.

In a particularly preferred embodiment, it is proposed that the terminal is set up to send a message via the server communication means to a network server if it is determined by means of GPS tracking that the terminal leaves a specified quarantine area within the term of the quarantine timer, the terminal provides position data for this purpose, for example GPS position data, and the position data is compared with the specified quarantine area. It is therefore proposed that a status message be sent by the terminal when a terminal leaves a certain area. The message is only sent if the status is positive. In this way, it can be achieved that not all people who live in an illness hotspot, for example, are required by a legal requirement not to leave their place of residence further than a predetermined radius. The quarantine area can also be understood as a location area which extends within a predetermined radius around the place of residence of the user. In a specific example, the quarantine area extends within a radius of 5 km around the registered place of residence of the user of the terminal.

The control communication means is preferably also set up to transmit the running time of the timer or the timers to the control device. It is thus possible for a control person to compare how long a received timer lasts. For example, if a received free-running timer ends before the planned end of the event, the control person can thus deny entry.

Preferably, the control communication means is additionally set up to transmit a time of receipt of a change from the initial state to the negative state to the control device. It is thus possible that the time of the qualified test at which an infection was not detected can be read on the control device.

In a particular embodiment, it is proposed that the control communication means is additionally set up to transmit a time of receipt of a change from the initial state to the positive state to the control device. It is thus possible that the time of the qualified test at which an illness was detected can be read out on the control device.

Preferably, the control communication means is additionally set up to receive data from the control device and to store it in the storage means as additional data and to provide the additional data to a network server, preferably to the exchange server, if a positive state is present, via the server communication means. It is therefore proposed that data are also transmitted from the control device to the end device, for example to acknowledge the time of entry and exit at an event or to store a time of the last control on the end device.

In a preferred embodiment it is proposed that the external specification signal for determining the status of the test indicator is received by a server, preferably via a secured infection network, such as the DEMIS network. In a particularly preferred embodiment, the status of the test indicator is received from a laboratory server. A laboratory server describes a network server that includes the result of a qualified test as data or in which the result of the test was stored as data. The laboratory server is therefore, for example, a data server of a qualified laboratory or a qualified test center in which a test carried out was evaluated. DEMIS is the abbreviation for the German electronic reporting and information system for infection protection. It is therefore proposed that the test indicator be determined by a qualified laboratory or a qualified test center and preferably transmitted via a network set up for infection protection. A qualified laboratory or a qualified test center can ensure that a test has been carried out correctly. The receipt of the external default signal can also be understood to mean that the test indicator is received from a server to which the result of the qualified test is sent. It is therefore intended that the test indicator will be created depending on the qualified testing.

The control communication means of the terminal is preferably set up to transmit the status of the test indicator optically to the control device, preferably with a QR code, in particular with a dynamic QR code. It is therefore proposed that the control communication means implemented on or in the terminal can transmit the test indicator optically or so optically that the stored information, such as the subscriber data and the test indicator, is transmitted to the control device. In a particularly preferred embodiment, the test indicator is designed as a dynamic QR code that is displayed, for example, on the display of the terminal. Accordingly, a control device can read out the released data stored in the terminal, such as the partial user data or the test indicator.

It is preferably proposed that the control communication means be set up to transmit the partial user data optically to the control device. In a particularly preferred embodiment, the partial user data are sent to the control device with a QR code. A variant that is even more secure in terms of data is the use of a dynamic QR code.

It goes without saying that optical transmission includes both direct data transmission, such as, for example, direct optical infrared transmission, and indirect optical data transmission, such as scanning a QR code.

In a further embodiment, it is proposed that the control communication means is set up to transmit the status of the test indicator to the control device by means of a short-field radio transmission. In a particularly preferred embodiment, such a transmission takes place by means of an NFC transmission or with a Bluetooth transmission. It goes without saying that the terminal or the control communication means is set up accordingly to use the at least one test indicator Forms of transmission to be sent. It is therefore proposed to send at least the test indicator or the test indicators to the control device if a user does not want to send the further recorded data for data protection reasons.

The control communication means is preferably set up to transmit the subscriber data to the control device by means of a short-field radio transmission. In a particularly preferred embodiment, such a transmission takes place by means of an NFC transmission or with a Bluetooth transmission. It goes without saying that the terminal or the control communication means is set up accordingly to transmit the sub-user data via these forms of transmission. It is therefore proposed, in addition to or as an alternative to the test indicator, also to transmit the partial user data. The user data stored in the terminal can thus be sent to the control device. This makes it easier to contact you later if an infection chain has to be traced.

The partial user data preferably consist of name data, address data, date of birth and image data. The total user data also includes MSISDN data and email data.

In a further embodiment, the control communication means is set up to transmit the overall user data and additionally or alternatively also received additional data to the control device. The additional data can, for example, have been received by the control device or be additional test data that have been received by the laboratory server.

A push-up message is preferably generated on the terminal when the test indicator has been received. It is therefore suggested that the users be informed of the push-up message as soon as the test indicator has been received.

In a particularly preferred embodiment, it is proposed that the recorded overall user data or the partial user data be checked automatically and, for this purpose, be sent to an examination center via the server communication means. It is therefore proposed to carry out an automated verification of the data entered in order to ensure that a natural person has recorded the data. For example, the email address is verified via a confirmation email, the stored address is compared with an address database and, in addition or as an alternative, an SMS is sent to verify the telephone number.

The recorded total user data or the partial user data are preferably checked in an automated manner and, for this purpose, sent to an examination center via the server communication means. It is therefore proposed that the entire user data be checked using a Postident method, for example.

It is preferably proposed that the terminal also have a booking system for booking appointments for future testing, the booking system sending an appointment request to a server via the server communication means. It is therefore proposed that, in addition to the test indicator, a booking system is also implemented on the terminal in order to request an appointment from a qualified test center to carry out a qualified test.

It is preferably also proposed that the terminal also have an identification generator for creating a digital identification, the digital identification including at least the partial user data and the test indicator and the digital identification being set up to be displayed on a screen output of the terminal. This makes it possible for the most important data relating to the user of the terminal to be output optically and for a control person to be able to check the digital ID in a simple manner.

It is also understood that the terminal has appropriate software to implement the embodiments described above.

• 1 zeigt schematisch ein elektronisches Veranstaltungsticket mit einem Gesundheitsindikator in einer Ausführungsform.
• 2 zeigt schematisch einen Ticketshop in einer Ausführungsform.
• 3 zeigt schematisch in einer Ausführungsform ein erfindungsgemäßes Verifikationssystem.

The present invention will now be explained in more detail below using exemplary embodiments with reference to the accompanying figures, the same reference numerals being used for the same or similar assemblies:

• 1 shows schematically an electronic event ticket with a health indicator in one embodiment.
• 2 shows schematically a ticket shop in one embodiment.
• 3 shows schematically in one embodiment a verification system according to the invention.

The 1 shows electronic event ticket 100 , whereby the event ticket can be called up on a terminal device 200 is implemented in a software environment, namely in an app on a smartphone. In the event ticket, ticket data D _ID and health _{indicator T ID are} coded so that they can be called up. The stored health indicator TID can thus be read out at the same time as the stored ticket data D _ID 300 to be provided. The readout device 300 is with a hand scanner 310 and a display 320 illustrated.

Will the electronic event ticket 100 with the hand scanner 310 is read out on the display 320 shows whether a valid ticket is available and whether a valid health certificate is available. This with the two tick symbols on the display 320 shown.

This means that the electronic event ticket can be checked at the entrance to an event and the ticket inspection can thus be carried out more securely and more quickly, since two separate checks do not have to be carried out to determine whether valid ticket data is available and whether a valid health certificate is available.

In addition, the 1 illustrates that the terminal 200 via a communication interface with the verification server 400 is connected for data exchange. The terminal can thus carry out a verification of the ticket data and the health indicator via the communication interface. It is also illustrated that the terminal is also connected to a ticket server 410 via the communication interface in order to receive ticket data from the ticket server. The white arrows in the 1 illustrate that the terminal is set up to send and receive data.

The 2 shows a ticket shop 500 . The ticket shop shown is designed as an online ticket shop. The ticket shop comprises at least a first and a second input field 510 and 520 , where the first input field 510 is designed as a control field for storing a personal property, for example for storing a date of birth. This date is advantageous as it has to be specified anyway when purchasing event tickets. The second input field is used as a test code input field 520 designed to store a test code. The test code is designed as an identifier consisting of numbers and letters and is in the 2 shown as test ID. The test code can be assigned to a verified health certificate, for example on the verification server 400 is filed.

In addition, the ticket shop 500 a test means, not shown, which is set up for the purpose in the input field 520 to verify the stored test code or the test ID for its validity, namely depending on the stored personal property. A successful check of the test ID is in the 2 shown symbolically with a tick.

The test equipment for testing the stored test ID is set up to request a test code Tx to the stored test code to a verification server 400 to send. The test code request Tx includes the stored personal property of the first input field 510 and the stored test code of the second input field 520 , as indicated by the equation shown in the 2 is illustrated. A data comparison then takes place on the verification server to determine whether there is a valid health certificate for the test code. The specified personal characteristics are also compared. There is therefore an external comparison of the transmitted test code with a test code database which is linked to personal data and which is stored on the verification server.

In addition, the test equipment is set up to provide a test code response Rx from the verification server 400 to receive, the received test code response Rx indicates whether the stored test code is a valid or invalid test code.

In addition, the ticket shop 500 a generating means for generating and additionally or alternatively activating the electronic event ticket 100 on, which is also not in the 2 is shown. The event ticket is only generated when a valid test code has been verified with the test equipment.

In the 2 is the case that the test ID check was successful and the ticket 100 to the end device 200 is sent or activated, which is designed as a smartphone.

This means that only the event ticket that has been sent or activated can be checked at the entrance to an event. The health certificates no longer need to be checked because the health certificate has already been checked in the ticket shop.

The 3 shows a verification system 1000 with a terminal 1100 .

The end device 1100 has an input means 1110 , a storage medium 1120 , a server communication medium 1130 as well as a control communication means 1140 on. The means mentioned are part of the terminal 1100 and are connected to each other in terms of data via data lines. This is indicated by the dashed double arrows within the terminal in the 3 illustrated. In addition, a control means (CU) is illustrated which is set up to control the individual means of the terminal. The control means is, for example, a CPU.

With the input device 1110 , which is indicated as an on-screen keyboard, user data can be recorded, for example overall user data such as name data, address data, image data, MSISDN data and e-mail data. These data are sent to the tax server after they have been recorded 2100 sent and saved there.

Part of the total user data recorded, namely the partial user data D _part are in the storage means 1120 along with a test indicator T _flag deposited or saved. The storage means 1120 is therefore for storing the subscriber data and the test indicator T _flag set up, the partial user data corresponding to a part of the recorded total user data, such as only name data, address data and image data.

The test indicator T _flag has three states, with the current state of the test indicator T _flag can be changed as a function of an external default signal Eext, which is transmitted via the server communication means 1130 from the server 2200 Will be received. The received external specification signal Eext contains information such as the stored test indicator T _flag should be set. This is indicated by the expression in brackets Ext ( T _flag ) illustrated.

The server communication medium 1130 is for data exchange with at least one network server 2000 set up, namely for data exchange with the control server 2100 , the server 2200 and the office server 2300 . The end device 1100 receives data via a communication network that is represented as a cloud. The data exchange with the servers 2100 , 2200 and 2300 The dotted double arrows illustrate the communication network.

In addition, the control means of communication 1140 for data exchange with a control device 3000 set up and established a data connection between the recording equipment 3000 and the end device 1100 here. The control device 3000 is designed as a mobile phone and is also connected to the communication network for data purposes. The end device 1100 sends the in the storage means 1120 stored sub-user data and the test indicator to the control device 3000 via the data connection, which is also shown as a dotted arrow between the control communication means 1140 and the recording equipment 3000 is indicated. The end device 1100 is used to receive data from the control device 3000 set up, which is illustrated by the double arrow.

• - Durch die vorherige Testung und die bereitgestellte Möglichkeit zur Zutrittskontrolle wird die Wahrscheinlichkeit, dass ein unerkannt Corona-Virus-infizierter Gast an einer Veranstaltung teilnimmt, reduziert. Zudem kann die betroffene Person durch das Verifikationssystem jederzeit nachverfolgt werden.
• - Durch das Verifikationssystem können unerkannt gebliebene Infizierte aufgespürt werden, die im Alltag zu Hause, im Beruf und Sozialleben eine Infektionsgefahr für andere darstellen.
• - Im Rahmen der Kontakt-Nachverfolgung wird die Arbeit der Gesundheitsämter wesentlich erleichtert, denn es gibt zu jeder Zeit vollständige und korrekte Kontaktdaten, die vorab validiert wurden. Eine manuelle Nachverfolgung, die mangels Personals oftmals tagelang dem Infektionsgeschehen nachhängt und am Wochenende vielfach gar nicht stattfindet, erübrigt sich, denn das Verifikationssystem ist dazu eingerichtet Betroffene und Behörden automatisch zu benachrichtigen.
• - Mittels des Verifikationssystems werden alle Schritte im Rahmen eines Schnelltestes oder PCR-Labor Testung digital erfasst und gesteuert.
• - Zudem wird eine automatische Ergebnismitteilung eines Tests innerhalb weniger Stunden durch Nachricht gewährleistet.
• - Eine Manipulationssichere Zugangskontrolle zu Veranstaltungen für negativ Getestete mit gleichzeitiger Teilnehmerliste wird bereitgestellt, auf die nur autorisierte Personen/Behörden Zugriff haben.

The proposed verification system achieves a number of advantages, which are summarized below:

• - The previous testing and the option of access control provided reduce the likelihood that an undetected corona virus-infected guest will take part in an event. In addition, the data subject can be tracked at any time using the verification system.
• - The verification system can be used to track down unrecognized infected people who pose a risk of infection for others in everyday life at home, at work and in social life.
• - In the context of the contact follow-up, the work of the health authorities is made much easier, because there are always complete and correct contact details that have been validated in advance. Manual tracking, which often lags behind the infection process for days due to a lack of staff and often does not take place at all on the weekend, is unnecessary because the verification system is set up to automatically notify those affected and the authorities.
• - Using the verification system, all steps are digitally recorded and controlled as part of a rapid test or PCR laboratory testing.
• - In addition, the results of a test are automatically communicated within a few hours by message.
• - Tamper-proof access control to events for those with a negative test with a simultaneous list of participants is provided, to which only authorized persons / authorities have access.

List of reference symbols

100

electronic event ticket

200

End device

300

Readout device

310

Hand scanner

320

Display screen

400

Verification server

500

Ticket shop

510

first input field

520

second input field

Tx

Test code request

Rx

Test code response

1000

Verification system

1100

End device

1110

Input means

1120

Storage means

1130

Server communication means

1140

Means of control communication

2000

Network server

2100

Tax server

2200

server

2300

Office server

3000

Control device

Tflag

Test indicator

Dpart

Sub-user data

EExt

external default signal

Claims (40)

Electronic event ticket (100), the event ticket being implemented in a software environment so that it can be called up on a terminal device (200), and ticket data (D _{ID ) can be called up coded in the event ticket and a health indicator (T ID} ) can be called up in addition to the ticket data in the event ticket is coded in order to provide the stored health indicator at the same time as the stored ticket data to a readout device. Electronic event ticket (100) according to Claim 1 , wherein the electronic event ticket (100) is designed on the terminal (200) in the form of a QR code and / or a barcode. Electronic event ticket (100) according to Claim 1 or 2 - The ticket data (D _ID ) are designed to be readable and can be read into the electronic event ticket by means of a scanning device in order to encode the ticket data in the event ticket in a retrievable manner, the scanning device being implemented on the terminal device (200) and being set up to use the Read ticket data from a standard ticket and / or - the ticket data are designed to be readable and are read into the electronic event ticket via a data interface in order to encode the ticket data in the event ticket so that it can be called up, the data interface being implemented on the terminal and being set up to store the ticket data to be received by a ticket server. Electronic event ticket (100) according to one of the preceding claims, verified ticket data (D _ID ) being coded in the event ticket in a retrievable manner, the ticket data being compared with a ticket data record for verification, the ticket data record preferably being entered into the software environment for comparison, in particular as Table data set and / or is entered into the software environment via a cloud interface. Electronic event ticket (100) according to Claim 4 , wherein the comparison with the ticket data record comprises a comparison of whether the ticket data loaded into the event ticket have already been loaded into another electronic event ticket. Electronic event ticket (100) according to one of the preceding claims, wherein in the event ticket a verified health indicator (T _ID ) is coded in a retrievable manner, the verified health indicator being stored in encrypted form on the terminal (200) and / or the verified health indicator (T _ID ) via a communication interface will enter into the software environment. Electronic event ticket according to one of the preceding claims, the ticket data (D _ID ) being displayed on the terminal (200), the ticket data in particular including an event name, an event date and a description. Ticket shop (500) for generating an electronic event ticket, comprising: - At least a first and a second input field, the first input field (510) being designed as a control field for storing a person characteristic and the second input field (520) being designed as a test code input field for storing a test code; - A test device which is set up to verify the validity of the stored test code as a function of the stored personal property; and a generating means for generating and / or activating an event ticket, the generating and / or activating of the event ticket only being triggered when a valid test code has been verified with the test means. Ticket shop (500) after Claim 8 , the test means for checking the stored test code is set up to - send a test code request (Tx) to a verification server (400), the test code request comprising the stored personal property of the first input field and the stored test code of the second input field, and - the test means is set up to receive a test code response (Rx) from the verification server (400), the received test code response indicating whether the stored test code is a valid or invalid test code. Ticket shop (500) after Claim 9 , wherein the verification server (400) stores the test code response (Rx) in Depending on the test code request (Tx) generated, in particular depending on the personal property contained in the test code request and the test code. Ticket shop (500) according to one of the preceding claims, wherein the test means is set up to verify provisionally stored test codes and / or personal characteristics as a function of a deadline. Verification system (1000) for verifying a qualified test, at least comprising - a terminal (1100), wherein the terminal is designed with - an input means (1110) which is set up to record total user data, - a storage means (1120) which is used to store of sub-user data (D _par t) and at least one test indicator (T _flag ) is set up and the sub-user data correspond to part of the recorded total user data, - a server communication means (1130) which is set up for data exchange with at least one network server (2000), and with - a control communication means (1140), which is set up for data exchange with a control device (3000), wherein the at least one test indicator (T _flag ) has a changeable current state and is designed at least to identify - an initial state, - a positive state and - a negative state and the test indicator is set up to show its current to change ellen state as a function of an external default signal that is received via the server communication means. Verification system according to Claim 12 , characterized in that the test indicator is also designed to identify a vaccination status. Verification system according to Claim 12 or 13th , characterized in that the control communication means (1140) is set up to transmit the current status of the test indicator (T _flag ) and the _{sub-user data (D par} t) to the control device (3000). Verification system according to one of the preceding claims, characterized in that the verification system also has a control server (2100), the captured total user data being transmitted in encrypted form to the control server (2100) via the server communication means (1130) and stored in encrypted form on the control server, preferably by means of a Data-at-rest encryption is saved. Verification system according to one of the preceding claims, characterized in that the recorded overall user data are stored in encrypted form in the storage means (1120) on the terminal. Verification system according to one of the preceding claims, characterized in that when the positive state is present as the current state, the total user data stored on the control server (2100) are transmitted to an office server (2200). Verification system according to one of the preceding claims, characterized in that when the positive state is present as the current state, the total user data stored in the storage means (1120) are sent to an office server (2200) via the server communication means (1130). Verification system according to one of the preceding claims, characterized in that a quarantine timer is triggered when the status changes to the positive status. Verification system according to one of the preceding claims, characterized in that a free-running timer is triggered when the state changes to the negative state. Verification system according to one of the preceding claims, characterized in that a vaccination timer is triggered when the status changes to the vaccination status. Verification system according to one of the preceding claims, characterized in that the timer or timers is or are implemented on the terminal and / or is or are implemented on the control server. Verification system according to one of the preceding claims, characterized in that after the quarantine timer has expired, the state of the test indicator changes to the initial state. Verification system according to one of the preceding claims, characterized in that after the idle timer has expired, the state of the test indicator changes to the initial state. Verification system according to one of the preceding claims, characterized in that after the vaccination timer has expired, the state of the test indicator changes to the initial state. Verification system according to one of the preceding claims, characterized in that the terminal (1000) is set up to send a message via the server communication means (1130) to a network server (2000) if it is determined by means of GPS tracking that the terminal device leaves a defined quarantine area within the term of the quarantine timer, the terminal device providing position data for this purpose and comparing the position data with the defined quarantine area become. Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is additionally set up to transmit the running time of at least one timer to the control device (3000). Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is additionally set up to transmit a time of receipt of a change from the initial state to the negative state to the control device (3000). Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is additionally set up to transmit a time of receipt of a change from the initial state to the positive state to the control device (3000). Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is additionally set up to receive data from the control device (3000) and to store it in the storage means (1120) as additional data and the additional data via the server communication means if a positive state is present (1130) to a network server (2000), preferably to the exchange server (2200). Verification system according to one of the preceding claims, characterized in that the external _{default signal (E ex} t) for determining the state of the test indicator (T _flag ) is received by a server (2300), preferably via a secure infection network, in particular from a laboratory server . Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is set up to transmit the status of the test indicator optically to the control device (3000), preferably with a QR code, in particular with a dynamic QR code. Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is set up to transmit the partial user data (D _par t) optically to the control device, preferably with a QR code, in particular with a dynamic QR code. Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is set up to transmit the status of the test indicator (T _flag ) to the control device (3000) by means of short-field radio transmission, preferably with an NFC connection or with a Bluetooth -Connection. Verification system according to one of the preceding claims, characterized in that the control communication means (1140) is set up to transmit the partial user data (D _par t) to the control device (3000) by means of a short-field radio transmission, preferably with an NFC connection or with a Bluetooth Connection. Verification system according to one of the preceding claims, characterized in that the partial _{user data (D par} t) consist of name data, address data, date of birth and image data and the total user data also include MSISDN data and email data. Verification system according to one of the preceding claims, characterized in that a push-up message is generated on the terminal when the test indicator (T _flag ) has been received. Verification system according to one of the preceding claims, characterized in that the recorded total user data or the partial user data are checked automatically and, for this purpose, are sent to an examination center via the server communication means. Verification system according to one of the preceding claims, characterized in that the terminal also has a booking system for booking appointments for future testing, the booking system sending an appointment request to a server via the server communication means. Verification system according to one of the preceding claims, characterized in that the terminal also has an identification generator for creating a digital identification, the digital identification including at least the partial user data and the test indicator and the digital identification being set up to be displayed on a screen output of the terminal .

Images