EP2820623A1

EP2820623A1 - Method for identifying a person

Info

Publication number: EP2820623A1
Application number: EP13703446.8A
Authority: EP
Inventors: Carsten Meinicke; Armin Schuster; Rüdiger STANKE; Thilo PFLÄGING; Joachim KÜTER; Christoph Maggioni
Original assignee: Bundesdruckerei GmbH
Current assignee: Bundesdruckerei GmbH
Priority date: 2012-03-02
Filing date: 2013-02-12
Publication date: 2015-01-07
Also published as: CN104335252A; WO2013127625A1; DE102012203311A1; CN104335252B

Abstract

The invention relates to a method for identifying a person by means of an identification document in an identification system with spatially distributed identification control points. The method has the following steps: detecting (601) an identification data item by means of the identification document using a first identification control point; generating (603) a reference identification feature of the person; assigning (604) the reference identification feature to the detected identification data item; detecting (605) an identification feature of the person using a second identification control point; and displaying (607) the detected identification data item using the second identification control point if the detected identification feature matches the reference identification feature.

Description

METHOD FOR IDENTIFYING A PERSON

In sovereign security-related areas, such as at airports, the identity of a person traveling has to be checked several times. For this purpose, usually spatially distributed identification control points of a control system, such as a border control system (Border Control System), are provided.

In order to collect identity data, each identification control point has a document reading device which reads out the identity data, for example a name of the person, on the basis of an identity document. For this purpose, the person himself or a border official can supply the identification document to the document reader.

However, the multiple detection of the identity data at or by the identification control points is associated with a high degree of complexity and with a high personnel expenditure and also leads to an increase in throughput times for persons to be identified, who have to pass a plurality of identification checkpoints.

It is therefore the object of the present invention to provide a concept for efficient

Identification of persons in an identification system with spatially distributed

To create identification control posts.

This object is solved by the features of the independent claims. Advantageous forms of further development are the subject of the dependent claims, the description and the drawings. The present invention is based on the finding that the above object can be achieved by a unique detection of identity data in an identification system of the aforementioned type. The captured identity data, such as information about a name and a place of residence of a person, can then be transferred to a central server and there the spatially distributed identification control points of the identification system available. Thus, the reading of the identity data at each identification control point is eliminated.

In order to be able to uniquely assign the identity data once recorded and provided to the respective person, the identification data, especially when first collecting the identity data in one

Identification system, at least one reference identifier detected, which is associated with the identity data. The reference identifier is an individual identifier and may be, for example, a biometric feature of the person, such as a fingerprint or an image of the eye iris.

By capturing a fingerprint of the respective person at one of the distributed identification control points, this can be compared with the reference identification features pre-stored as data records. If in accordance with one of the stored reference identification features, a stored record having the identity date may be transmitted to and displayed to the respective identification control point where the subject is located.

According to one aspect, the invention relates to a method for identifying a person on the basis of an identity document in an identification system with spatially distributed identification control points, with detection of an identity date on the basis of

Identification document by a first identification control point, creating at least one reference identification feature of the person, assign the

Reference identifier or a plurality of

Reference identification features to the detected identity date, detection of an identification feature of the person by a second identification control point, and displaying the detected identity date by the second identification control point in accordance with the detected identification feature with the

Reference identifier. The spatially distributed identification control points can communicate with each other via a wireless or a wired communication network. For example, the first identification control point can use the detected identity data, which can include, for example, information from a MRZ, about the

Communication network to the second identification control point or to a central server, communicate with the spatially distributed identification control stations over the communication network transmit. To display the identity date, for example, a known graphical display can be used, with which the respective identification control point can be equipped.

The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. One

For example, in the context of self-service, the traveler can place his identity document on a document window of the document reading device, whereby the

Identity date can be detected optically or electronically. In addition, for example, biometric features can be recorded and as

Reference identification features stored or for comparison with the

Reference identification method can be used. The second

Identification control point may be, for example, a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard.

The reference identifier can be automatically generated by means of the first

Identification control point, for example, by the inclusion of a biometric feature created. By associating the reference identifier with the acquired identity date, identifiers of persons, such as their biometric features, may be used to retrieve or display the acquired identity date.

According to one embodiment, the first identification control point comprises a

Document reader for collecting the identity date on the basis of

Identity document, wherein the identity date is detected by the document reader, in particular optically or electrically. The identification checkpoints can communicate with each other and / or with a central server entity via a

Communicate communication network. The central server entity can, for example, the collected identity data as well as the created or recorded

Store reference identifiers in a database and make them available.

According to one embodiment, the first identification control point comprises a

Document reader for collecting the identity date on the basis of Identity document, wherein the identity date is detected by the document reader, in particular optically or electrically.

According to one embodiment, the reference identifier and the detected identity datum are stored as mutually associated datasets. The data records assigned to one another can for example be assigned to one another in a table in a database or stored together. The database can be provided, for example, by the central server entity.

According to one embodiment, the detected reference identifier and / or detected identity data are stored in a database.

According to one embodiment, the detected identification feature with the

Reference Identification feature is compared, and upon coincidence of the detected identification feature and the reference identification feature, the detected identity data of the second identification control point is provided. The comparison of the detected identification feature with the reference identification feature can be carried out, for example, feature-wise. If the detected identity date is stored, for example, in a database of a central server entity, the detected identity data can be sent to the second identification control center via a

Communication network are transmitted.

According to one embodiment, the detected identity data is stored in a queue associated with the second identification control point in accordance with a

Queue rule stored, especially in a database. The

Queue rule can be specified.

According to one embodiment, the queue rule is determined by an order of detection of the identity data. This stores the collected identity data in the database in order. In this way, in addition to the comparison of the detected identifier with the reference identifier, another control or security mechanism is implemented.

According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a facial image Fingerprint, or an eye iris image, a bar code assigned to the person or the identity document, a document that can be created by the first identification control point, in particular a ticket, a feature of the identity document, in particular a content of a machine-readable zone of the identity document. According to one embodiment, the detected identity date of the second

Assigned to identification control point. In this case, the first identification control point can query or initiate the transmission of the reference identification feature at the communication device. The identification number can, for example, a

Number of a memory card of the communication device, which may be a smartphone, be.

According to one embodiment, the reference identifier is based on an identification number of a communication device or a through

Communication device created electronically transmitted record.

According to one embodiment, the identity date is a date of one

machine-readable zone of the identity document. The identity date can include, for example, a name of a person, their place of birth, their date of birth and / or their place of residence.

According to one embodiment, the method comprises detecting a

Identification feature of the person by a third identification control point and displaying the detected identity date by the third identification control point in accordance with the detected identification feature with the

Reference identifier. The third identification control point may communicate with the first identification control point or with the central server entity as stated above and below.

According to one embodiment, the detected identity date is determined by the third

Identification control point used in accordance with the detected identification feature with the reference identifier feature, for example, evaluated.

According to a further aspect, the invention relates to an identification control system with a plurality of spatially distributed identification control points, which are formed are to communicate with each other over a communication network, with one

Reference detection means for establishing a reference identification feature of the person, a first identification control point for detecting a date of identity of a person based on an identification document, wherein the

Identification control point is further configured to assign the reference identifier to the detected identity date, and a second identification control point for checking or detecting an identification feature or a

Reference identifier of the person, the second

Identification control point is further formed, a comparison of the detected

Perform identification feature with the reference identifier or with the data stored in the server entity and the detected identity date in accordance with the detected identification feature with the

Display reference identifier.

The reference detection device may be formed, for example, a device for receiving a biometric feature or for communication with a communication device of the respective person.

According to one embodiment, the invention relates to the identification control system, which further comprises a server entity with a database, wherein the first

Identification control point or all identification control points are designed to transmit the detected identity date to the server entity, wherein the

Reference detection device is adapted to transmit the reference identifier to the server entity, wherein the server entity is adapted to store the detected identity data and the reference identifier in the database and to provide the second or any other identification control point.

According to one embodiment, the identification control system is designed or program-technically configured to carry out the method according to the invention for identifying a person.

According to one embodiment, the second identification control point has the functionality of the first identification control point. In addition, comparison of

Identification document with data of the server entity and / or comparison of

Reference identifier performed with the data of the server entity. Thereby ensures that persons can be detected at any control point, even if they are ignored at the upstream first inspection posts 101, 103.

According to a further aspect, the invention comprises a computer program with a program code for implementing a method according to the invention or for controlling the identification control points of the identification control system.

Further embodiments will be explained with reference to the accompanying drawings. 1 shows an identification control system with a plurality of spatially distributed

Identification checkpoints;

FIG. 2 shows an example of a display of identity data using a

graphical user interface;

3 is a graphical user interface with a spatial plan of

Identification control system;

4 is a graphical user interface with a spatial plan of

Identification control system;

FIG. 5 is a block diagram showing software components for executing the

Functionality of the identification system; 6 is a diagram of a method for identifying a person based on a

Identity document in an identification system; and

Fig. 7 shows a dynamic management of persons in an identification system with a first identification control point.

Fig. 1 shows an identification control system with a plurality of spatially distributed identification control points 101, 103, 105, 107, 109, 1 1 1 and 1 13. Die

Identification control stations are set up to communicate via a communication network 15. The identification control system comprises a central server entity 1 17, which is also set up, via the communication network 1 to 15

communicate. The central server entity 17 includes, for example, a server 123 with a database 125 and an optional GCS SW 127.

Further, an optional server entity 1 19 is provided, which may include, for example, a blacklist server 129, a database 131, and a blacklist SW device 133. In the database 131, for example, a blacklist with

be recorded.

Optionally, surveillance cameras 135, 137 may be provided, which may communicate via the communication network 15.

The identification system can be set up, for example, with

Communication devices 139, 141, for example via a wireless

Communication network 1 15 to communicate. This communication can be initiated, for example, to provide identification information about the

Communication devices, such as a number of a SIM card, which can serve as reference identification features.

The identification checkpoints 101, 103 can be set up as first identification checkpoints, which can capture identity data of persons on the basis of identity documents. For this purpose, the first identification control points 101, 103

Document readers 143, 145, which are set up, the identity data, which are contained for example in a MRZ of an identity document, for example, to capture optically and transfer them via the communication network 1 15 to the central server entity 1 17 and to another identification control point 105, 107, 109, 1 1 1, 1 13 can also additionally include document readers 161, 163, 165, 167 for detecting identity data .. The first identification control points 101, 103 may be configured for example as so-called kiosks or eGates, which allow self-service by the person to be identified. For example, the travelers can independently supply their identity documents to the document readers 143, 145. The first identification control points 101, 103 may further

Reference detection means 102, 104 comprise, which are formed

Include reference identification features of persons such as biometric features. The first identification control points 101, 103 may further comprise PC entities 147, 149 communicating with the

Effect communication network and control, for example, the document readers 143, 145.

The identification control points 105, 107, 109, 1 1 1 and 1 13 can each with

Display devices 151, 153, 155, 157 and 159 be equipped. The

Display devices 151, 153, 155, 157, and 159 may be provided to display, respectively, an identity data or identity data, for example, in a graphical viewing window. The identification checkpoints 105, 107, 109, 1131, and 13 may also be provided with feature detectors 161, 163, 165, 167, which are arranged to receive identification features of persons and to compare them with pre-stored reference identification features associated with the respective person and previously captured identity data.

In addition, the identification control stations 105, 107, 109, 11 1 and 13 may be equipped with reference detection devices, which have the features of

Reference detection means 102, 104 of the first identification control points 101, 103 may have. However, according to one embodiment, the

Feature detection means 161, 163, 165, 167,

Include reference identification features. The identification control stations 105, 107, 109, 11 1 and 13 may each be provided with PCs 169, 171, 173, 175 and 177, which communicate via the network 15, for example, with the central server entity 11 to detect the detected ones

To transfer identification features there or to retrieve the acquired identity data.

The identification checkpoints 105, 107, 109, 1131 and 13 may be formed for example as so-called primary or secondary checkpoints with an administration functionality or without an administration functionality. The display devices 151, 153, 155, 157 and 159 may represent, for example, graphical user interfaces, wherein in a browser window identity data of the persons and / or their

Identification documents can be displayed.

If one of the identification checkpoints 105, 107, 109, 11 1 and 13 is designed as a so-called supervisor checkpoint, this can, for example, record all detected identity data of active travelers in a browser window of a graphical user

User interface on the display device 151, 153, 155, 157 and 159 to

Make available.

If one of the identification control points is provided with an administration functionality, then there can be created, deletion or modification of roles, rights or process sequences or rules.

The central server entity 1 17 is provided to store the identity data of the persons as well as their documents, such as document numbers. In addition, the central server entity 1 17 can be provided, results of a review of

To authenticate persons and / or documents and, if necessary, status information.

The server entity 1 17 can be provided to compile the data to be displayed at the identification control points, to reprogram them graphically, for example, by entering them in a graphic window, and via the

Communication network 1 15 to the server entities of the control points or to transmit to their browsers. This information can be displayed by the browsers.

In addition, the central server entity 1 17 may be provided to query internal or external databases, for example, to retrieve identity data associated with particular reference identifier features. The central

Server entity 1 17 can also be provided to manage login data as well

To store decisions at the identification control points, which may concern the identification or non-identification of persons.

The central server entity 1 17 can also be provided to run any applications of the identification system. The components of database 125 may be configured to store all person identification data, monitoring or login data.

The central server entity 117 can also be provided for logging and storing the decisions made by, for example, a border official.

According to an embodiment, the central server entity 1 17 may further be configured to perform document forgery detection. For this purpose, the

Document readers 143, 145 may be provided, for example, to record security features of identity documents optically or electronically and to transmit these to the central server entity 17. The central server entity 1 17 can compare the recorded security features with pre-stored patterns and thus perform a verification of the identity documents. All test results associated with the traveler's identity data may be stored in the database 125 and provided to the identification checkpoints. This eliminates the need to constantly check the authenticity of identity documents.

The central server entity 1 17 can also be designed to guide the persons to the respective identification checkpoints. For this purpose, the central server entity can decide based on predetermined rules, for example. The predetermined rules may be provided, for example, in the form of a rule engine or by an executable computer program. As a result, instructions can be made available, for example, to guide certain persons to lead identification control posts.

If one of the identification control points is equipped with the supervisor functionality, then identity data of all persons who are located within the

Identification system are located. In addition, for example, a status of a documentary check for authenticity, in particular passed, failed or incomplete, can be represented. The identification control point set up as a supervisor can be used, for example, with the primaries or

Secondaries established identification control points are linked to turn on the respective user interface. In addition, the identification control point set up as a supervisor can link the webcams shown in FIG. The document readers can, for example, be set up as document testers. They can be stationary or mobile.

As mentioned above, the identity data, or the identity data if appropriate, together with a content of an identification document, such as an image of a person, can be displayed by means of a graphic user interface (GUI).

If one of the identification checkpoints shown in FIG. 1 is set up as a supervisor, it can display a picture of some identification checkpoints and, for example, travelers on a graphical user interface.

Fig. 2 shows an example of a display of identity data using a graphical user interface, with a map 201 of a person, which can be created for example by capturing a passport photo. In addition, for example, a window 203 can be arranged, in which identity data, in particular data of the machine-readable zone (MRZ: machine-readable zone) are combined. These data may include, for example, a first name, a last name, the gender of the respective person and the expiration date of an identification document, a date of birth, the issuing state, the nationality or the

Include document number. In addition, for example, an entry date can be displayed in the identification control system.

The graphical user interface may further include controls, such as

Access denial field 205 or an admission permit field 207. By actuating the access rejection field 205, the access rejection is documented and, if necessary,

saved. By pressing the access permission field 207 access is granted and documented. The graphical user interface may further include an area 209 in which representations 209a, 209b, 209c of persons identified by identification documents are presented in the order in which those persons are present at the respective identification control point in a possible queue. Optionally, further selectable areas may be provided, such as for displaying a facial image of a person on a chip of a person

Identification document is stored 210, an area with a document display 21 1, in the white light, infrared (IR) and / or ultraviolet (UV) images of

Identification documents are displayed. These recordings can be made by means of

Document readers of the first identification control points 101, 103, 161, 163, 165, 167 be included. In addition, an area 213 may be provided by, for example, displaying recorded biometric features such as fingerprints. Furthermore, an area 215 can be provided by the inspection results based on the examination of an identification document, the results of examinations of external systems, such as blacklist servers and / or a status in the system of previous decisions by, for example, border officials, such as entry, rejection or delegation , can be represented. If abnormalities or errors occur, the corresponding tabs, which are connected to the respective areas 210, 21 1, 213, 215, can be colored in a signal color, for example red.

FIGS. 3 and 4 show a graphical user interface with a spatial plan of rooms in which the identification control system is installed. The graphical user interface can, for example, display first identification control points 301, 303, 305, which are provided, for example, for collecting identity data. The graphical user interface may further second

Identification control points 307, 309 and 31 1 show. These can be set up, for example, as secondaries or as primaries. Furthermore, the graphic

Display user interface locks 317, 319. In addition, locations may be displayed with surveillance cameras 321, 323.

The graphical user interface may also display pictograms of persons waiting, for example, in queues in front of the respective locks or in front of the respective identification control points 305, 309. The personal pictograms can be highlighted in color, for example. Thus, for example, person pictograms shown as green 325 may indicate that an examination of the

Identity documents of the pending persons and, if necessary, blacklist queries without errors. A red mark on person pictograms 327 indicates that abnormalities in the verification of the identity documents or

Blacklist queries have occurred. Gray-shaded personal pictograms 339 show For example, a verification of identity documents has not been completed.

The corresponding graphical user interfaces of these stations, as shown for example in FIG. 2, can be retrieved at the identification control points, for example by clicking on a field 305, 307, 309, 31 1. This allows the data displayed at the respective identification control points to be displayed.

The surveillance camera symbols 321, 323 can be connected, for example, to controlled cameras via a communication network or via a link, so that when the respective camera symbol 321, 323 is selected, a browser window is opened which displays a real-time image of the respective camera.

According to one embodiment, the color representation or highlighting of the person from a number of persons, for example, from five persons, are summarily presented.

The functionality of the identification system can be realized, for example, by means of a software program whose routines are centrally located on a

Server entity expires.

FIG. 5 shows a block diagram with software components for executing the

Functionality of the identification system. The software architecture includes the

Monitoring and login functionality 501, the backend functionality 503, the

Administration functionality 505 as well as the functionality of the identification checkpoints 507. The software architecture further comprises a peripheral support 509,

Database components 51 1 and application server components 513, which run, for example, on the central server entity. 6 shows a diagram of a method for identifying a person based on an identity document in an identification system, for example in the above-described identification system with spatially distributed identification control points. The method comprises detecting 601 an identity date using the

Identification document by a first identification control point, the creation 603 at least one reference identifying feature of the person, associating 604 the reference identifying feature with the detected identity datum, e.g., by linking datasets, detecting 605 an identifying feature of the person by a second identification checking place, and displaying the detected identity datum 607 by the second identification checking place if the detected one

Identifier matches the reference identifier.

According to one embodiment, the persons who are within the

Stop the identification control system. Fig. 7 illustrates dynamic management of persons in an identification system using a graphical user interface, with an image of a first one

Identification control point 701, which is set up, for example, as a kiosk, with an image of a second identification control point 703, which is set up, for example, as a primary, with an image of a third identification control point 705, which is set up, for example, as secondary, and with an image of a fourth identification check point 707 which is an eGate, for example.

Further, states "access" 709 and "rejection" 71 1 are displayed. In addition, a ground state 713 is provided. The persons may, for example, be continued from the second identification control point 703 to the third identification check point 705 if, for example, an automatic verification of the identity data has failed. Otherwise the persons are granted access. The third identification control point 705 may be the

Review identity data again and either grant or deny access. For example, suggests checking the identity data on the fourth

Identification control point 707 fails, the affected persons can be forwarded to the third identification control point 705.

An advantage of the concept according to the invention is the shortening of the throughput times for travelers, with the use of fewer personnel and, as a result, cost savings for the operator.

The throughput times consist of the following steps: 1 . Waiting in a queue in front of an identification control center, such as a control box or primary, which can be served by a border official in the event of high numbers of people,

2. duration of the reading and verification process for an identity document,

3. Assessment of the relevance of the test results and duration of the test and interview of a traveler by a border official

By a parallelization of steps 2 and 3 can shorten the

Throughput times are achieved. In the following an embodiment for the parallelization and the use of the waiting time in the queue is described:

The travelers are stopped, for example, at a first

Identification control point, which a second identification control point, such as a checkpoint, independently to put the identity document on a document reader, which may be a document tester. Thus, the identity data for the traveler are read in and checked, step 2, while the border guard serves another traveler, for whom step 2 is already completed, step 3. The traveler assumes the task of document placement itself, which was previously undertaken by the border official. According to one embodiment, the document verification takes place automatically and can not be influenced by the traveler.

A traveler can always be uniquely connected and identified with his identity data in the identification system based on individual identification features.

For example, a traveler may be subject to registration of a document, active or passive, e.g. by placing a passport on a document tester, in

Identification system based on the MRZ data, an individual identity document and optional additional identity data clearly detected. From this point on, a traveler can use a single person linked to his / her identity data

Identification features are identified at any time in the identification system. Possible individual identification features are, for example: · Facial image that can be captured by a video or camera identification system

• fingerprint that can be picked up by a fingerprint reader

• Identity documents of the travelers, e.g. Passports or smartcards from which e.g. the MRZ, fingerprints or facial images can be used

· Communication devices, such as mobile phones or smartphones, which can communicate via Bluetooth or NFC, for example, and

• Tickets with e.g. Barcodes, which are printed and at others

Identification control points can be read. The validity of an individual identifier may expire upon the final decision by a border official to allow passage.

If the traveler with the same identity document reappears in the identification system after the final decision, a new data record with a new individual identification feature is generated.

If, for example, a facial image is used as an individual identification feature, a traveler can place his identity document on a

Document verification device in the identification system and a facial image of the traveler are recorded.

The traveler is then found in the identification system by using the individual identifier in the identification system data. Thus, the traveler can be identified by comparing a real-time image of a video camera with the previously acquired reference identifier and the associated one

Identity data set is output or displayed.

An identification control system may, in one embodiment, be implemented by a

Linking two or more identification checkpoints, e.g. a kiosk system is created, realized. It will be at a first

Identification control point recorded the identity data and processed at the second, linked to the first identification control point. Such a link can be realized between kiosks with self-service and primary or between primary and secondary or e-gates with a slave station. In the following, a kiosk system will be described by way of example.

In a simple kiosk mode with a 1: 1 relationship, for example, a first identification control point as a kiosk and a second identification control point as a primary are linked together. The travelers will arrive at Primary in the order in which they have their identity documents on the document reader of the first identification control point. At the Primary, the border guards receive the identity document from the traveler. The assignment of the traveler to his identity data may be based on the facial image and the order of those waiting in line by the border official or automatically using one of the defined individual identification features.

Hereinafter, an embodiment will be described in consideration of the order of those waiting in line.

Two travelers A and B arrive at a first identification control station, e.g. to a kiosk, and sequentially place their identity documents on the document reader. Since the traveler A is in the queue in front of a second identification control point in front of the traveler B, his identity data is there automatically displayed first. If the traveler A passes the second identification control point, his identity data can be replaced by identity data of the traveler B.

In a multiple kiosk mode with an n: m relationship, one or more kiosks and primaries are linked together in a group. The travelers are forwarded from a kiosk to suitable Primarys.

When forwarded to the queue of a suitable primary, information is sent to the traveler and the primary assigned to him, for example, directly at the kiosk.

When forwarding to an end of a queue, at the beginning of which several Primarys are available, the first standing traveler can be forwarded to an appropriate Primary. The forwarding information (who, where and when) is automatically entered at the beginning of the queue based on the defined individual Identification feature. At the Primary, a border official receives the identity document from the traveler. The assignment of the traveler to his identity data is done, for example, based on the facial image and the order of waiting in line by the border officials. For example, the order of the waiting travelers results either automatically from a time of their forwarding to a primary or from the use of one of the defined individual identification features.

Hereinafter, an embodiment using the dedicated assignment to a primary will be described.

A traveler turns on after placing his identity document

Document tester recognized at a German airport as an English citizen. For example, the identification system is configured to take English-speaking travelers to a control point with an English-speaking

Be forwarded to border officials. At the kiosk, the traveler receives a message, in English, to which checkpoint he should go. Its identity data record is assigned to the queue of the corresponding control point. As soon as he arrives in front of the local border official, his identity data is automatically determined by e.g. his facial image displayed.

The following describes a dynamic wait management of travelers. By creating an individual identification feature when reading an identity document for the first time, which serves as a reference identification feature, the same data set can be repeatedly accessed at all other accesses at different identification control points, thereby avoiding the generation of duplicates. That also means that there are no virtual long ones

Queues in front of a second identification control point, for example a primary form, because even by repeatedly reading the identity data again no

Duplicates are generated.

In the following, snake hopping, also called line hoping, is described:

A traveler whose identity data is already linked to an identification checkpoint A and subsequently to another identification checkpoint B registered, is linked to this and automatically removed from the identification control point A.

An exemplary embodiment is, for example, the laying on of an identity document by a traveler at a first identification checkpoint, for example at a kiosk, with an automatic forwarding to a second checkpoint

Identification control point, for example to an associated Primary. While waiting in line at the primary, the traveler spontaneously decides to leave to use an eGate. At the eGate, it is registered and automatically removed from the queue at the Primary at the same time - its identity data is now linked to the eGate used.

If a traveler can not pass an eGate and, for example, subsequently registers to the reader of a first identification control point, for example a kiosk, it is sorted into the corresponding queue of a primary and is no longer linked to the eGate.

According to one embodiment, mobile terminals, such as smartphones, may replace or assist, for example, the identification control posts

Acquisition of reference identification features are used. Using one of the individual identifying features as reference identifying features of this traveler e.g. a fingerprint or a facial image or the data of an MRZ of the identity document, the traveler's identity data may be retrieved and assigned to that mobile checkpoint. At the same time, the identity data can be deleted from the original queue of the identification control point A. This can shorten the queue.

The exemplary embodiments described above by way of example can be used in any control, entry and ticket identification systems, for example for stadiums, exhibition centers or railways. LIST OF REFERENCE NUMBERS

101 Identification Control Office

102 reference detection device

103 Identification Control Body

104 reference detection device

105 Identification Control Body

107 Identification Control Body

109 Identification Control Body

1 1 1 Identification control body

1 13 Identification Control Body

1 15 communication network

1 17 central server entity

1 19 server entity

123 servers

125 database

127 GCS-SW

129 blacklist servers

131 database

133 Blacklist SW facility

135 security camera

137 security camera

139 communication device

141 communication device

143 document reader

145 document reader

147 PC entity

149 PC entity

151 display device

153 display device

155 display device

157 display device

159 display device

161 feature detection device

163 feature detection device 165 feature detection device

167 feature detection device

169 servers

171 servers

173 servers

175 servers

177 servers

201 image

203 windows

205 admission rejection field

207 admission permit field

209 area

209a illustration

209b illustration

209c picture

210 area

21 1 area

213 area

215 area

301 Identification Control Body

303 Identification Control Body

305 Identification Control Body

307 Identification Control Body

309 Identification Control Body

31 1 Identification Control Body

317 lock

319 lock

321 surveillance camera

323 security camera

325 person pictogram

327 person pictogram

339 person pictogram

501 login functionality

503 backend functionality

505 administration functionality 507 Functionality of the identification control body

509 peripheral support

51 1 Database components

513 application server components

601 Capture

603 Create

604 Assign

605 Capture

607 ads

701 Identification Control Body

703 Identification Control Body

705 Identification Control Body

707 Identification Control Office

709 access

71 1 rejection

713 ground state

Claims

A method for identifying a person based on an identity document in an identification system with spatially distributed identification control points, comprising:

Detecting (601) an identity date based on the identification document by a first identification control point;

Creating (603) at least one reference identifier of the person;

Associating (604) the reference identifying features with the detected one

Identity date;

Detecting (605) an identification feature of the person by a second identification control point; and

Displaying (607) the acquired identity date by the second one

Identification control body if the detected

Identification feature with the reference identifier.

The method of claim 1, wherein the detected identity data is transmitted to the second identification control point from a central server entity.

The method of claim 1 or 2, wherein the first identification control point, a document reader for detecting the identity date on the basis of

Identity document includes, and wherein the identity date is detected by the document reader, in particular optically or electrically.

Method according to one of the preceding claims, wherein the

Reference identifier and the detected identity date are stored as mutually associated data records, in particular in a database.

5. The method according to any one of the preceding claims, wherein the detected

Identification feature is compared with the reference identifier and wherein if the detected identification feature and the reference identification feature match, the detected identity data is provided to the second identification control point.

Method according to one of the preceding claims, wherein the detected

Identity data is stored in a queue associated with the second identification control point according to a queue rule, in particular in a database.

The method of claim 6, wherein the queue rule is replaced by a

Order of detection of the identity date is determined.

Method according to one of the preceding claims, wherein the

Reference identifier of one of the following features is: a biometric feature, in particular a facial image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a document that can be created by the first identification control point,

in particular a ticket, a feature of the identity document, in particular a content of a

machine-readable zone of the identity document.

Method according to one of the preceding claims, wherein the

Reference identification feature is created on the basis of an identification number of a communication device or a recordable by a communication device electronically record.

Method according to one of the preceding claims, wherein the identity date is a date of a machine-readable zone of the identity document.

Method according to one of the preceding claims, comprising: Detecting an identification feature of the person by a third

Identification checks;

Display the recorded identity date by a third

Identification control body if the detected

Identification feature with the reference identifier.

The method of claim 1 1, wherein the detected identity date by the third identification control point in accordance with the detected

Identification feature is exploited with the reference identifier.

Identification control system with a plurality of spatially distributed

Identification control stations (101, 103, 105, 107, 109, 1 1 1, 1 13) which

are configured to communicate with each other via a communication network (1 15), comprising: reference detection means (102, 104) for creating a

Reference identifier of the person; a first identification control point (101, 103) for detecting a

Identity date of a person based on an identification document, wherein the first identification control point (101, 103) is further formed, the

Assign reference identifier to the detected identity date; and a second identification control point (105, 107, 109, 1 1 1) for checking or detecting an identification feature or a

Reference identifier of the person, the second

Identification control point (105, 107, 109, 1 1 1) is further formed, a comparison of the detected identification feature with the

Perform reference identifier or with the data stored in the server entity and display the detected identity date in accordance with the detected identifier with the reference identifier.

The identification control system of claim 13, further comprising a server entity (1 17) having a database (125), the first or all

Identification control stations (101, 103, 105, 107, 109, 1 1 1) are adapted to transmit the detected identity data to the server entity (1 17), wherein the reference detection device (102, 104) is formed, the

To transmit the reference identifier to the server entity (1 17), wherein the server entity (1 17) is adapted to store the detected identity data and the reference identifier in the database (125) and to provide the second identification controller (101, 103).

15. An identification control system according to claim 13 or 14, which is program-technically configured to carry out the method according to one of claims 1 to 12.