EP2203900B1 - System for screening people and method for carrying out a screening process - Google Patents

Description

The invention relates to a control system and to a method for carrying out a person control, in which persons are checked with regard to their identity and, depending on their verified identity and optionally further verification information, a control decision is made, which usually has an entry into and / or exit decides from an area and / or passing a checkpoint of a border.

Personal checks are usually carried out at borders. The limits may be both sovereign limits and organizational limits, e.g. in a passenger control during a domestic flight, or even borders to buildings or grounds act. In a simple known control system or method for person control, a person's identity document is checked for authenticity. On the basis of the person identifying data in the identity document, an identity check of the person is additionally performed. If both checks are positive, that is, the identity document is verified as genuine and, in addition, a correspondence between the identity of the person in the identity document and the person is determined, a control decision is made permitting the person to pass the boundary. On the other hand, if one of the two checks is negative, the person will not pass the limit.

In addition, many borders have a need to limit a group of people who may pass this border. Persons, for example, who have been struck by criminal acts in a sovereign territory of a state and then deported from that state should be prevented at a border control from re-entering the territory of that state. Therefore, the data identifying the person is preferably also reconciled with verification information including, for example, a wanted list and / or information about deported and / or unwanted persons, and so on. The group of people who may pass a border can also be restricted otherwise. For example, for persons of some nationalities, a visa may be required which is included in the identity document.

In order to speed up handling of checkpoints of the borders and to accelerate the detection of the person-identifying data in the identity document and to make it largely error-free, the identity documents have been created in which the information identifying the person is at least partially machine-readable, ie can be detected by a control device.

Although this speeds up check-in at a checkpoint by speeding up detection of the person identifying data specified in the security document, however, the time required to store this information against the check information, which is preferably stored in a control database, is needed, not reduced. For this reason, long waiting times often occur at checkpoints for the persons to be checked, especially when a large number of people want to pass the border at the same time or in a short period of time.

From the WO 96 / 06409A there is known a method for providing an identification of an individual, comprising: maintaining a database of identification information specific to the look and / or nature of an individual; Providing a unique identifier for each individual to allow access to the individual's identification data in the database; and providing identification means adapted to be carried with the individual and containing the unique identifier. Describe is also a method in which identification information from the database to a control point, such as a gate of an airport, transmitted, which are used there for person control.

EP 1 318 485 A1 describes a security filtering system comprising a network with means for registering people, computerized means for storing the identities of authorized users associated with the means for registering people, and at least one network having means for verifying authorized users associated with the computerized means for storing.

The invention has for its object to provide a control system and a control method, with which a time required for the person control can be reduced without compromising a reliability of the person control.

The technical problem is solved according to the invention by a control method with the features of claim 1 and a control system with the features of claim 8. Advantageous embodiments of the invention will become apparent from the dependent claims.

For this purpose, a method for carrying out a person control comprising the steps of: detecting a person's intention to pass; Communicating announcement data indicating the person's intention to pass and the person's identifying data (ID data) to a controller; Matching the person-identifying data (ID data) with verification information of a control database and generating the verification data required for the person control; Transmitting the test data to at least one control body of at least one control body; Acquiring control information of the person and an identity document by means of the control device; Evaluate the control information based on the audit data and generate a control decision and issue the control decision. Passing is the intention of a person to cross a border. This is transmitted in the form of announcement data, which additionally comprise the person identifying data, to the supervisory authority, in order to enable it in the run-up to the control, to carry out a comparison with verification information. The verification information may include access lists, wanted lists, etc., for example. In this comparison so-called test data are generated, which are then required for the actual person control. The exam data includes a result of the Matching with the verification data as well as at least part of the data identifying the person in order to be able to associate the examination data of the person at the checkpoint. The test data are transmitted to at least one control device of a control point of the border that the person wishes to pass. Upon arrival at the corresponding control point, examination data are therefore available which, inter alia, include, for example, information as to whether, on the basis of a comparison of the data identifying the person against the verification information, a passing of the border is permitted or not permitted. This check, which is usually time-consuming, can thus be carried out in advance of the actual check. Control information of the person is recorded at the checkpoint by means of the control device. On the one hand, these are information which is gathered from the identity document in order to allow an assignment of the transmitted examination data to the person and to enable a verification of the identity document, ie to enable an examination as to whether the person is the one whose identity information is stored in the identity document are specified. In addition, as control information, information about the person himself is recorded, which makes it possible to identify the person. In the simplest embodiment, the control device may for this purpose comprise input means via which the staff of the control point inputs information that is taken from the identity document and / or result from a survey of the person to be controlled and / or include information perceived by the controlling personnel, for example a Result of a passport-facial comparison. The control information is evaluated with the aid of the examination data and a control decision is generated which indicates, for example, whether the person may pass the border or not. This is issued by the control facility. A control system for carrying out personal checks thus comprises at least one intention detection device for detecting a person's intention to pass, a central control device of a control entity which is connected to the intention detection device in terms of information, so that the control instance can be provided with announcement data indicating a person's intention to pass and data identifying the person comprising, a control database associated with the central control device with verification information of the control body, wherein the central control device is adapted for matching the person identifying data against the verification information and generating required for the person control examination data, and at least one control device at least one control point, the information technology with the Central control device is connected to receive the test data, the Kontrol at least one control information acquisition device for acquiring control information Person, an evaluation device for evaluating the control information based on the test data and making a control decision and an output unit for issuing the control decision comprises. In the event that control personnel are used not only to monitor the control equipment, but to finally decide on the passing of the limit, the control decision of the control body should be considered as a decision recommendation for the control staff and thus a control recommendation.

With this control system, it is achieved that the time required to carry out the check of persons at the checkpoint is significantly reduced, since a comparison of the data identifying the person against the check information already after the announcement of the intention to pass before the person arrives at the checkpoint can be made. Since the times which individuals have to wait at the control body of the control body are reduced, the number of control equipment at a control point can be reduced without reducing the control capacity of the control body. Without a reduction in control equipment, the control system is able to control an increased number of persons at a control point. The fact that the comparison of the data identifying the person against the verification information is carried out centrally, it can be ensured in a simple manner that a comparison is made in each case against current verification information, as long as it is ensured that the central device has the current verification information. These often sensitive data do not have to be transmitted from the central control facility to the checkpoints. The control bodies of the control bodies are only provided with test data which only have to include the result of the comparison and are thus greatly reduced in their quantity.

Since a passport intent is to be detected and transmitted in the simplest possible way by the person to be checked, a control system according to the invention provides that the intention detection device is connected by means of the central control device via a trust device which comprises an ID information database and is designed to: retrieve at least a portion of the person-identifying data from the ID information database and add the advertisement data using detected advertisement data. If the transmission of the announcement data thus takes place via a trust device, it is advantageously provided that it retrieves at least part of the data identifying the person from an ID information database of the trust device and that Adds announcement data. The passport intent in the original advertisement data transmitted from the intent capture device thus only needs to include information that allows the trust device to identify the person who wants to pass a border. The information identifying the person needed to match the verification data may then be retrieved from the trusted entity's database and added to the advertisement data, which is then transmitted to the supervisory authority.

The Passierabsicht is detected in a preferred embodiment of the invention by means of a spatially separated from the control device formed electronic communication device, in particular a mobile phone, a personal digital assistant (PDA), a laptop, a computer or similar device. This offers the advantage that a person's intention to pass can be easily detected and sent by the person. In particular, it may be announced in advance of the arrival at the control point, that is to say at a location which is physically remote from the control point.

In particular, at the sovereign limits of states that have a large number of control bodies, it is difficult to ensure that the checks on persons are carried out at the same standard at all the control posts. Moreover, because of the multitude of different identity documents produced in the different countries, it is difficult to keep up-to-date information about the individual identity document types and the procedures for checking and verifying the authenticity of these identity documents at the individual control points. To solve this problem, it is therefore proposed to provide the central device of the supervisory authority with a so-called Passiersteuerungstabellen database in which control-relevant information is stored. These can be used to correctly align the reconciliation of the person identifying data with the verification data. An adjustment of the announcement data thus takes place appropriately depending on the information of the Passiersteuerungstabellen database.

According to the invention, the central control device of the supervisory authority contains a passport control table database containing information about security features of identity documents to be checked, information about the control steps necessary for checking the security features, instructions for control steps to be carried out in the person control depending on a control situation and / or control instructions be stored, by means of which the Controlling device is controlled in the person control and / or configured for the person control, and at least part of the information of the pass control table database (PCT information) is transmitted to the trusted device, and from the trusting device a desired by the control part of the person identifying information is selected from the data stored in the ID information database and inserted into the announcement data, so that only the required part of the data identifying the person is transmitted to the supervisory authority.

According to the invention, it is provided that the central control device is designed to add passport control table data to the examination data. Thus, the information relevant to the respective control of the pass control table database is transmitted to the respective control point at which the actual control is carried out. This ensures that a check is carried out at the respective control point in accordance with the centrally established review standard.

Furthermore, it is provided that the control device is designed to be controlled and / or configured during the detection and evaluation of the control information by means of the pass control table data transmitted in the test data. In this way, it is possible to centrally control the controls depending on a current threat situation and / or depending on a specific control situation. If the security situation changes, the examination data can be changed centrally and the control of the person at the control point can be controlled and influenced. For example, if there is a normal risk situation, it may be provided that only certain identification features of the person are recorded and evaluated as control information. Likewise, only certain security features of the identity document can be detected and verified. On the other hand, if the security situation changes, by simply changing the pass control table data added to the check data, more and / or other identification features of the person may be detected as control information and other or more security features of the identity document may be detected and verified. It is also conceivable that the type of evaluation and / or verification of the individual identification features and / or security features are performed in different ways. As a result, the quality of the identity checks can be significantly increased. Even if a part of the person identifying features, for example via an alphanumeric detection unit, in particular a keyboard, must be detected with the help of an official of the control institution, can be achieved on the basis of Passiersteuerungstabell data that the control device Ask staff members to enter the correct identification features and thus to ensure a uniform standard in each case and for each security document in comparison with a hitherto customary control. This relieves the staff of the control body and reduces the training required by the staff, since they are assisted by the control panel to display the necessary test information for the respective check, for example by displaying instructions on a control facility.

In order to detect a Passierabsicht by means of a mobile phone, it is provided in a preferred embodiment that an application module, for example, designed as a Java script module, for example, retrieved from the trust device and installed on the mobile phone. With the help of such a module, it is comfortably possible to capture the information required for a Passierabsicht by the mobile phone and at the same time to ensure a completeness of the required by the trust device and / or the supervisory authority information.

For example, in one embodiment of the invention, information about the checkpoint to be passed and identifying information is needed that, for example, sufficiently identifies the person and / or allows the trusted device to add that information from the ID information database to the advertisement data.

In particular, in control bodies that use a variety and / or complex person identifying information, such as biometric data, such as a fingerprint, multiple fingerprints, an iris pattern of an eye or both eyes of the person, face shape information, etc. in the control, is an input of this information difficult or impossible for the user and above all error prone. Therefore, it is advantageous to have the information identifying the person previously sent to a trust device, which later adds this from a database to the announcement data. In a preferred control system, further control information acquisition units are coupled to the trusting device, via which further control information can be detected from which the data identifiable by the person can be derived and / or derived. The further control information can, for example, be recorded directly by the person to be checked by means of the further control information acquisition units. In one embodiment of the invention, it is therefore provided that the control information acquisition units and / or the further control information acquisition units include fingerprint scanners, iris scanners, 3D personal scanners, in particular face scanners, video acquisition units, alphanumeric capture units, speech capture, recognition and / or analysis facilities, and document capture facilities. The document capture devices may be any devices that are capable of capturing data that is stored in an identity document and identifying the person. In particular, they can thus comprise a document scanner, a text recognition unit, RFID readers, chip readers, etc. Since the biometric data stored in chips or RFID devices are protected against unauthorized reading out of identity documents, for example passports, the biometric data are generally acquired by the trust device directly from the person via the further control detection devices. For this purpose, the trusted device will be coupled to a plurality of further control information acquisition units that are spatially distributed at different locations to allow individuals to register with the trust facility and deposit their personal identifying data.

In order to be able to transmit only a small amount of data after a registration when announcing a control intention and to ensure that only the person himself can trigger adding the person identifying data to the announcement data, in a preferred embodiment of the invention it is provided that the trusting device is a token generator comprises, by means of which upon detection of the person identifying data, a token is generated, via which an assignment of the person identifying data in the ID information database is possible. The token may be, for example, a personal identification number (PIN). In order to announce a passport intent of a border, by means of the intention recognition device, for example a mobile phone, only this token must be transmitted to the trust device, by means of which the trust device can identify the person and add the person identifying data to the announcement data.

In order to ensure that the comparison of the data identifying the person against the verification information at the control instance takes place ahead of the actual control, but as soon as possible to the control, to ensure that the comparison is made against the most recent review data, the supervisory authority intervenes Specify a time window that is adapted to the processing time of the announcement data. In most cases, the time window will be such that the person to be checked is already on the way to the checkpoint when announcing the intention to pass.

In a preferred development of the invention, it is provided that the at least one checkpoint or a group of checkpoints from a set of checkpoints are automatically determined on the basis of the detected Passiereinsicht and / or information on the transmission of the announcement data and the test data only to the control facilities of these control bodies or the control bodies are transmitted to the group of control bodies. If, for example, the intention to pass is detected by means of a mobile telephone, the position of the mobile telephone can be determined from the communication data of the mobile telephone with the mobile telephone network operator. This information can be added to the advertisement data so that the trusting device can determine the nearest local inspection agencies. For example, if the intention to pass is detected by a computer on a ferry, the checkpoint at which the person wishes to pass the border can be determined from the destination port of the ferry.

Other embodiments may include multiple controllers and / or multiple trusters. A large controller may further comprise a plurality of central controllers and pass control table databases and check databases with check information, each of which is kept synchronized with each other. As a result, a higher clearance throughput and a redundancy with regard to reliability of one of the central control devices or one of the databases can be achieved.

The control decision may be issued in a form that may be used to drive blocking means denying access to an area and / or exit from an area. The output can be effected in particular in the form of a signal which can be processed in terms of information technology. Fully automatic unmanned control equipment can be set up at checkpoints. Where appropriate, a human operator may be employed by the control body to monitor the control equipment.

Fig. 1a und 1b

ein schematisches Ablaufdiagramm eines Verfahrens zum Durchführen einer Personenkontrolle; und

Fig. 2

eine schematische Darstellung eines Kontrollsystems.

The invention will be explained in more detail with reference to preferred embodiments with reference to a drawing. Hereby show:

Fig. 1a and 1b

a schematic flow diagram of a method for performing a person control; and

Fig. 2

a schematic representation of a control system.

The following is based on the Fig. 1a and 1b , which is a schematic flow diagram of a method 101 for performing a person control, and Fig. 2 , which schematically illustrates a control system 1, a preferred control will be explained. With the control system 1, a person 3 interacts in the described embodiment at three different times t ₁ , t ₂ and t ₃ . A decision as to whether or not the person 3 is allowed to pass a border 5 is made by a supervisory authority 7. For example, if the border 5 is a state border, the supervisory authority 7 becomes a public authority, for example, the Federal Border Police, the Customs or the military, his. If the limit is an expiration limit or, for example, the limit Boundary of a sports field or factory premises, it may be another institution responsible for handling persons at this border.

This control instance 7 determines the criteria that must be met in order for the person 3 to pass the border 5. At the same boundary 5, these criteria may be different for different people 3 and at different times. It may also play a role from which direction the person 3 approaches the border 5. If the border 5, which is for example a state border, is to be passed at an airport, then the criteria may depend on the country of entry of the person. Likewise, a general threat situation can influence the criteria that the person 3 must meet in order to pass the border 5. All this information is summarized in a so-called Passage Control Table (PCT).

In this Passiersteuerungstabelle (PCT), which is stored in a pass control table database 9, moreover, information on identity documents are stored, which can lead the people who want to pass the border 5, with them. These identity documents may be, for example, passports, identity cards, identity cards, driving licenses, company passes, etc. In general, the identity document will be a so-called security document. Security documents are considered to be documents that include one or more security features that are intended to make it difficult or impossible to duplicate and / or falsify information from a simple copy stored in the identity document. The information stored in the identity document usually includes, among other things. a name, date of birth, place of birth, place of residence, nationality, height, eye color, skin color, gender, graphic representation of the person associated with the identity document, in particular a passport photograph, biometric data of the person associated with the identity document, for example fingerprint data , Iris information, face information, etc. In addition to the information identifying the person to whom the identity document is associated, identity documents often also include information that identifies the identity document itself, such as a badge number, characteristic security features, etc.

For security documents, it is common for only a portion of the security features to be publicly disclosed to make it difficult for counterfeiting and / or duplicating the identity document by unauthorized bodies. But one To allow the supervisory authority to verify the authenticity of the identity document, the supervisory authority must be provided with the necessary information as to which security features are contained in the individual identity documents and how they can be checked for authenticity and verified. All of this information is additionally included in the pass control table PCT.

Furthermore, in a preferred embodiment, the pass-control table PCT is provided with information defining individual check scenarios, for example, depending on the entry country, the security situation and so on. Furthermore, instructions and / or control information are available for the individual security scenarios, by means of which the control devices 13 at controls 15 of the control entity 7 at the border 5 can carry out checks. In the exemplary method, in method step 103, the creation and updating of the PCT is summarized as a method step.

The Passiersteuerungstabelle PCT is preferably published by the inspection authority in excerpts, for example, to tell the person 3, in which of the Passierszenarien which identity document is to be carried. For the person 3, for example, it may be sufficient to carry an identity document when entering from a country A, which does not include any machine-readable biometric data. On entry from country B, on the other hand, when passing the same border 5, it may be necessary for the identity document 11 to be one comprising machine-readable biometric data of the person.

At the in Fig. 2 1, part of the pass control table 9 is thus exported to a trusting device 17, preferably electronically, or made accessible 105. The trusting device 17 is an institution which temporally precedes the person 3 before passing the border 5 at a time t ₁ the data identifying this person 3 for the fiduciary administration. This means that the person 3 registers with the trusting device 17, as indicated in method step 107. When registering, those data are recorded 109 that can be evaluated and / or checked during a control of the person at the border 5. This is usually the information that is stored in the identity document 11 by printing technology, holographic, electronic and / or other means. For reasons of data protection and in particular the maintenance of a forgery security, these data are at least partially encoded in the identity document 11 and / or secured against retrieval of the data. Therefore, it will usually not be possible for the trust device 17 to completely derive the person identifying data from the Identity document 11 read. The complete detection of the information stored in the identity document 11 will be reserved to control detection units 19 of the control devices 13 at the control points 15. However, the trusting device 17 is preferably coupled with further control detection units 21 that can detect the person identifying features and data. As with the control detection units 19, the further control detection units 21 may comprise any possible means capable of detecting the person 3 itself or its features 111, the identity document 11 and / or the information stored therein 113. For example, the control detection units 19 and further control detection units 21 optical scanners, 3D scanners, text recognition systems, image recognition systems, holographic readers, bar code readers, fingerprint scanners, video cameras, iris scanners, etc., as well as systems that can be used to collect further information. These other systems may include, for example, a terminal with a keyboard and / or a mouse, a trackball, a joystick, or the like, as well as speech acquisition and recognition and / or analysis units.

In a typical registration of the person 3, a part of the data identifying the person is thus acquired from the ID document 11, in which, for example, the data of a machine-readable zone (MRZ) is detected by means of a corresponding reading device. In addition, for example, one or more fingerprints are detected, an iris scan of one or both eyes is performed, a facial structure is captured by a 3D face scanner, and / or individual person identifying information, such as a name, a first name, a maiden name, a birthplace, a date of birth , a nationality, a sex, a skin color, an eye color, etc. entered and / or detected via an input device. Which information is to be detected and how it is to be detected results from the part of the pass control table PCT which has been transmitted to the trusting device 17. Furthermore, during the registration, information that is relevant only for passing a certain limit and / or only for a certain period of time can also be detected. Such information or data may concern, for example, a visa or the like. In order to achieve that a registration is carried out as completely as possible, the detection of the person identifying data on the other control information acquisition devices 21 based on the trusted device 17 transmitted PCT data. Preferably, the PCT data is used to control the controller 13.

In order to be able to assign the recorded data identifying the person 3 to the person 3 in a simple manner and to prevent a third party from gaining unauthorized access to the data identifying the person 3, a token is generated during the registration 115. The token becomes the person This can be done, for example, in an electronic form by means of a transmission by email and / or SMS or the like to a communication device of the person 3. The information identifying the person is stored with the token in an ID information database 25 119. Such a registration is carried out by the person at the time t ₁ with the trusting device 17. If no information required for a single pass, such as a visa, is needed to pass the boundary 5, this registration is executed once and can be used for any number of passages of the boundary 5 and / or other boundaries.

If an immediate passing of the border 5 by the person 3 is imminent, then the person 3 announces this passing intention of the inspection authority 7 at the time t ₂ 121 (announcing), which after the time t ₁ and before an inspection at the control point 15 at the time t ₃ is located.

To announce the intention to pass, the person 3 uses an intention detection device 27. This is preferably designed as a communication device associated with the person 3. The intention detection device 27 can be, for example, a mobile telephone, a personal digital assistant PDA, a personal computer, but also communication devices that are not directly associated with the person 3, a public telephone, a public computer, a fax machine, a special telephone Terminal for announcing border passport intentions, etc. If the intent detection device 27 is designed as a mobile telephone, for example, the person 3 may preferentially retrieve a detection module embodied, for example, in Java script, from the trust device 17. Executing this module on the mobile telephone initiates the person 3, to enter the information needed to complete the Passier intent. The intention detection module is preferably formulated by the trusting device 17 to use the PCT data transmitted to the trusted device 17 to fully acquire 125 the information needed to pass a boundary. If the person 3 is registered with the trusting device 17, only a few have to do so Person 3 identifying data, such as the token can be specified. For example, for a specific purpose of passage, it may be necessary and sufficient to indicate the state from which the entry is to be made, the control point 15 at which the border 5 is to pass, and the token, above the person 3 identifying data in the ID information database 25 can be found.

Announcement data, which include the intention to pass on and the data identifying the person, here the token, are transmitted 127 to the monitoring unit 7 by the mobile telephone. The transmission takes place, for example, via a mobile telephone operator 29, which is represented schematically here by means of stylized receiving antennas, and the trusting device 17 , which is connected in terms of information technology with a central control device 31 of the control entity 7. During the transmission of the advertisement data, an advertisement data evaluation unit 33 of the trusting device 17, which may be formed by a process-controlled computer, evaluates the announcement data from 129, analyzes the token and adds the data associated with the token, identifying the person 3, which originates from the ID In this case, preferably only the data identifying the person 3 are inserted into the advertisement data which, according to the PCT data transmitted to the trusted device 17, is required by the control entity 7 in order to pass the data Border 5 prepare. As a result, the amount of data transmitted to the control unit 7 announcement data is meaningfully limited. In order to prepare a check of the person at the control point 15, the central control unit 31 evaluates the announcement data taking into account the data contained in the pass control table PCT 135. The data identifying the person is compared with, among other things, verification information, which includes search information, for example Verification information is stored in a control database 32. For example, if the person 3 is listed as a wanted person in a wanted list, this matching would make it clear that this person is being sought by a government agency. As a result of the matching, test data is generated 139, which is transmitted to the control devices 13 of the control point 15 141. The test data includes all the information needed for a control at the border 5. Thus, according to the present invention, the PCT data is added to the pass control table for the check data needed to control the controllers and / or to assist in proper control at the checkpoint. The examination data will further comprise a result of the comparison against the verification data as well as at least part of the data identifying the person in order to be able to assign the examination data to the person 3 at the control point 15.

At a time t ₃ , which is later than the times t ₁ and t ₂ , the person 3 is checked at the checkpoint 15 before passing the border 5. In this case, the person 3 and, as a rule, also the identity document 11 acquire features 143 as control information by means of the control information acquisition units 19. The acquisition is carried out via the control information acquisition units 19 of the control device 13, preferably automated and / or controlled on the basis of the PCT data transmitted with the examination data , These determine which characteristics of the person and how they are to be recorded and which features of the identity document 11 are to be recorded and how they are to be verified. Individual acquisition steps and / or control and verification steps may require assistance from a control personnel (not shown). For example, a correspondence of a personal identity between the data identifying the person and the person 3 transmitted by the trusting device 17 can take place on the basis of a passport picture displayed on an output device whose data has been transmitted from the trusting device 17 to the control entity 7. The identity comparison between this transmitted passport photo and the person and possibly additionally a passport image in the identity document 11 can be carried out by such a control personnel and a result of this identity verification by means of a keyboard, a switch and / or any other detection device, for example, a speech recognition device detected become. The acquired control information is then evaluated 145 together with the test data and any PCT data contained therein to derive a control decision. The control decision is made by an evaluation device 35 and output via an output unit 37 147. In an unmanned control device, the output of the control decision can also be made by, for example, an electronic signal is output, which releases a mechanical locking device (not shown), so that the person 3 can pass the limit 5, provided that the control decision with regard to a passport approval has been positive. Otherwise, the person 3 is issued the negative control decision acoustically, visually or otherwise.

If control personnel are deployed at the control point who supervise the access to or exit from an area, the control decision of the control facility shall be regarded as a control recommendation or a decision recommendation for the control staff. The passing decision is taken in such a case the control personnel.

The described method and the described control system 1 offer the advantage that the time, which at time t ₃ for the actual control of the person 3 at the Control point 15 can be significantly reduced, since a comparison of the person identifying data with the verification information and obtaining the possibly necessary PCT data indicating how to verify and / or read the security features of the identity document 11, already timed be transmitted or take place before the inspection of the control body 15 or control device 13. At checkpoints 15, which have a plurality of control devices 13, it may be provided that the persons 3 who have announced their border crossing, preferably be handled. For example, it is possible to provide individual control devices 13 which may only be used by persons 3 who have previously registered or announced to pass the border 5. The remaining persons must wait at another control facility for the time required to carry out the reconciliation of the data identifying the person 3 with the verification data during the control at the time t ₃ . Given the number of control devices 13, the system required by the invention can reduce the time required for the control of the individual persons and thus control a larger number of persons in the same period of time. Otherwise, with the same number of controlled persons, the number of required control devices can be reduced.

In another embodiment of the invention can be provided that in the announcement data, ie when detecting the Passierabsicht, the specific control point does not need to be detected, but this on the basis of the information generated when transmitting the announcement data from the trust device 17 and / or the Control instance 7 are determined automatically. If a mobile telephone is used as the intention detection device, the location of the person 3 can be deduced on the basis of the transmission mast, via which the announcement data are acquired. Since an announcement must take place at a certain time window before the actual control at the border 5, the control point 15 or the group of control points 15 can be determined from the position of the person 3 at the time t _{2 of} the announcement and from geographical information about the control points 15 the person 3 is likely to move to pass the border 5.

LIST OF REFERENCE NUMBERS

1

control system

3

person

t ₁ -t ₃

timings

5

border

7

control institutions

9

Passiersteuerungstabellen database

11

ID document

13

control device

15

control Authority

17

trust facility

19

Control detector

21

further control detection device

23

token generator

25

ID information database

27

Intention detector

29

Mobile phone operator

31

Central control device

32

Control database

33

Ankündigungsdatenauswerteeinheit

35

evaluation

37

output unit

101

method

103

Create / update / save the pass control table (PCT)

105

Exporting / providing part of the PCT (e.g., transmitting to trust device)

107

to register

109

Collecting further control information (ID information)

111

Collect data about the person

113

Collect data about the identity document

115

Generate tokens

117

Issue the token to the person

119

Store the ID information in the ID information database

121

Announce the Passier intent

123

Retrieval of an acquisition module

125

Collect the announcement data

127

Transfer the announcement data

129

Evaluate the announcement data (search token)

131

Retrieve the ID data to the ID information database token

133

Insert ID information in announcement data

135

Evaluating the announcement data taking into account the PCT data

137

Matching the ID data with the verification data

139

Create examination data (insert PCT data)

141

Transmission of the test data to the control body (s) of the control body (s)

143

Capture the control information taking into account the PCT data

145

Evaluation of the control information including the examination data and generation of a control decision

147

Issuing the control decision

Claims (10)

1. Method for carrying out a screening process of persons, comprising the steps:

   detecting an intention of a person (3) to pass through;

   transmitting notification data indicating the control intention of the person (3), and comprising data identifying the person (3) to a central controlling device (31) of a control authority (7);

   comparing the data identifying the person (3) against examination information of a control database (32) of the central controlling device (31), and

   generating the check data necessary for the person screening process, which comprises a result of the comparison and at least a part of the data identifying the person;

   transmitting the check data to at least one control device (13) of at least one control station (15);

   recording control information of the person (3) and of an identity document (11) by means of the at least one control device (13), wherein the control information comprises features acquired of the person (3) and features acquired of the identity document (11);

   evaluating the control information based on the check data and generating a control decision, and

   outputting the control decision,

   wherein the method is characterised in that

   the transmitting of notification data takes place by way of a trust device (17), which calls up at least a part of the data identifying the person (3) from an ID information database (25) of the trust device (17) and adds it to the notification data,

   that stored in a pass-through controlling table database (9) of the central controlling device (31) of the control authority (7) is information about security features of identity documents which are to be checked, information about the control steps necessary for checking the security features, instructions for control steps which are to be carried out during the person screening, as a function of a control situation, and controlling instructions, by means of which the control device (13) is controlled during the person screening and/or is configured for the person screening, and that at least a part of the information contained in the pass-through database is transmitted to the trust device (17), and the trust device (17) selects a part, wanted by the control authority (7), of the information identifying the person (3) from the data deposited in the ID information databank (25) and inserts it into the notification data, such that only the necessary part of the data identifying the person (3) is transmitted to the control authority (17), and

   the central controlling device (31) adds data from the pass-through controlling table database (9) to the check data, and the control device (31) is controlled and/or configured in the acquisition and evaluation of the control information by means of the check data from the pass-through controlling table database (9) which is transmitted to the check data.
2. Method according to claim 1, characterised in that the intention to carry out control is acquired by means of an electronic communications device, in particular a mobile telephone, a PDA, a laptop, or a computer, which is configured to be spatially separated from the control device (13).
3. Method according to claim 1 or 2, characterised in that the data identifying the person (3) is acquired by the trust device (17) beforehand and separately from the acquisition of the intention to carry out control, and is stored in the ID information databank (25).
4. Method according to claim 3, characterised in that, at the acquiring of the data identifying the person (3) for the trust device, further control information relating to the person (3) is acquired, from which the data identifying the person (3) is derived.
5. Method according to claim 4, characterised in that, at the acquiring and/or storing of the data identifying the person (3), a token is produced, by means an allocation is possible of the data identifying the person (3) in the database, and that, at the acquiring of the intention to carry out control, the token is acquired and included in the notification data.
6. Method according to any one of claims 1 to 5, characterised in that the at least one control station (15) or a group of control stations from a totality of control stations is or are determined automatically, on the basis of the intention to carry out control which has been acquired, and/or of information regarding the transmitting of the notification information, and the check data is transmitted only to the control devices (13) of this control station (15) or the group of control stations determined in this way.
7. Method according to any one of claims 1 to 6, characterised in that the transmitting of the notification data must take place in a time window determined by the control authority, such that a comparison is made against current examination information stored beforehand at the control authority before the actual control, but nevertheless close in time to the actual control.
8. Control system (1) for carrying out a screening process of persons, comprising at least one intention acquisition device (27) for acquiring the intention to carry out a control of a person (3),
   a central controlling device (31) of a control authority (17), which is connected by information technology means to the intention acquisition device (27), such that notification data can be transmitted to the control authority (17), which indicates the intention to carry out a screening of a person (3) and comprises data identifying the person (3),
   a control database (32) linked to the central controlling device (31), with examination information of the control authority (17), wherein the central controlling device (31) is configured such as to compare the data identifying the person (3) against the examination information from a control database, and to generate check data needed for carrying out the screening of a person, which comprises a result from the comparison and at least a part of the data identifying the person, and
   at least one control device (13) of at least one control station (15), which is connected by information technology means to the central controlling device (31), in order to receive the check data, wherein the control device (13) comprises at least one control information acquisition device (19) for acquiring features of the person (3) and features of an identity document (11) as control information, an evaluation device (35) for evaluating the control information on the basis of the check data, and reaching a control decision, as well as an output unit (37) for outputting the control decision, wherein the control system is characterised in that
   the intention acquisition device (27) is connected by information technology means to the central controlling device (31) by way of a trust device (17), which comprises an ID information database (25) and is configured, on the basis of acquired notification data, to call up at least a part of the data identifying the person (3) from the ID information database (25) and adding it to the notification data,
   that stored in a pass-through controlling table database (9) of the central controlling device (31) of the control authority (7) is information relating to security features of identity documents which are to be checked, information about the control steps necessary for the examination of security features, instructions for control steps to be carried out in the screening of persons depending on a control situation, and controlling instructions, by means of which the control device (13) is controlled during the screening of the person and/or is configured for the screening of the person, that the trust device is connected to the central controlling device (31) by information technology means in such a way that at least a part of the information from the pass-through controlling table database (9) is transmitted to the trust device (17), and the trust device (17) selects a part wanted by the control authority (7) from the information identifying the person (3) from the data deposited in the ID information database (25) and adds it to the notification data, such that only the required part of the information identifying the person (3) is transmitted to the control authority (17), and
   that the central controlling device (31) is configured such as to add data from the pass-through controlling table database (9) to the check data, and the control device (31) is designed such as to be controlled and/or configured in the acquiring and evaluating of the control information by means of the data from the pass-through controlling table database (9) transmitted in the check data.
9. Control system (1) according to claim 8, characterised in that the trust device (17) comprises a token generator, by means of which, at the acquisition of the data identifying the person (3), a token is produced, and by means of which an allocation of the data identifying the person (3) in the ID information database is possible, and that the notification data acquired comprises the token, on the basis of which the trust device (17) calls up the data identifying the person (3) from the ID information databank (25) and adds it to the notification data.
10. Control system (1) according to any one of claims 8 or 9, characterised in that control-relevant information is stored in the pass-through controlling table database (9), and a comparison is carried out of the notification data with the control database (32), depending on the information from the pass-through controlling table database (9).

Images