EP2820624A1

EP2820624A1 - Method for identifying a person

Info

Publication number: EP2820624A1
Application number: EP13705747.7A
Authority: EP
Inventors: Carsten Meinicke; Armin Schuster; Rüdiger STANKE; Thilo PFLÄGING; Joachim KÜTER; Christoph Maggioni
Original assignee: Bundesdruckerei GmbH
Current assignee: Bundesdruckerei GmbH
Priority date: 2012-03-02
Filing date: 2013-02-12
Publication date: 2015-01-07
Anticipated expiration: 2033-02-12
Also published as: EP2820624B1; WO2013127624A1; CN104169977A; DE102012203313A1; CN104169977B

Abstract

The invention relates to a method for identifying a person by means of an identification document in an identification system with a plurality of spatially distributed identification control points. The method has a step of detecting (601) an identification data unit by means of the identification document of the person using a first identification control point and a step of preparing (603) the detected identification data unit for a second identification control point according to a waiting line criterion.

Description

METHOD FOR IDENTIFYING A PERSON

In sovereign security-related areas, such as at airports, the identity of a person traveling has to be checked several times. For this purpose, usually spatially distributed identification control points of a control system, such as a border control system (Border Control System), are provided.

In order to collect identity data, each identification control point has a document reading device which reads out the identity data, for example a name of the person, on the basis of an identity document. For this purpose, the person himself or a border official can supply the identification document to the document reader.

However, the multiple detection of the identity data at or by the identification control points is associated with a high level of complexity and with a high level of personnel expenditure and also leads to an increase in throughput times for persons to be identified who have to pass a plurality of identification checkpoints.

It is therefore the object of the present invention to provide a concept for efficient

Identification of persons in an identification system with spatially distributed

To create identification control posts.

This object is solved by the features of the independent claims. Advantageous forms of further development are the subject of the dependent claims, the description and the drawings. The present invention is based on the finding that the above object can be achieved by a unique detection of identity data in an identification system of the aforementioned type. The captured identity data, such as a person's name and place of residence, may then be transmitted to a central server entity and one or more of the spatially distributed ones

Provide identification control points of the identification system such that the identity data are displayed by the respective identification control point, for example, when their ads are needed. This can be realized by providing the identity data for the respective identification control point according to a queue criterion. The queue criterion can for example, an arrangement of a person in a queue in front of the respective identification control point.

In addition, when acquiring the identity data, in particular when initially collecting the identity data in an identification system, a

Reference identifier and assigned to the identity data. The reference identifier is an individual identifier and may be, for example, a biometric feature of the person, such as a fingerprint or an image of the eye iris. By capturing a fingerprint of the respective person at one of the distributed identification control points, this can be compared with the reference identification features pre-stored as data records. at

In accordance with one of the stored reference identification features, another security mechanism may be implemented to ensure that each identity data associated with each person is displayed. According to one aspect, the invention relates to a method for identifying a person based on an identity document in an identification system having a plurality of spatially distributed identification control points, detecting an identity date based on the identification document of the person by a first identification control point; and providing the acquired identity date for a second one

Identification control point according to a queue criterion.

The spatially distributed identification control points can communicate with each other via a wireless or a wired communication network. For example, the first identification control point can use the detected identity data, which can include, for example, information from a MRZ, about the

Communication network of a second identification control point via the central server device, communicate with the spatially distributed identification control points over the communication network transmit. The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. One

For example, in the context of self-service, the traveler can place his identity document on a document window of the document reading device, whereby the

Identity date can be detected optically or electronically. The second identification control point may, for example, be a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard. According to one embodiment, the detected identity date is in the step of

Providing multiple identification control points of the plurality of spatially distributed identification control points simultaneously or sequentially, in particular depending on a location of the person provided. According to one embodiment, the location of the person is recorded. The detection can be done, for example, by a camera-assisted personal monitoring with biometric features or based on the whereabouts of a

Communication device of the person, such as a smartphone, or on the basis of a bar code, by means of which it can be determined to which

Identification control point the person is currently pending. For this purpose, the

Identification control points should be provided with bar code readers.

According to one embodiment, the step of providing comprises displaying the detected identity data by the second identification control point, which in particular comprises displaying the detected identity data in accordance with the queue criterion. The display can be effected for example by means of a display device, such as a screen.

To display the identity date, for example, a known graphical display can be used, with which the respective identification control point can be equipped.

According to one embodiment, the step of providing comprises selecting the second identification control location from the plurality of spatially distributed ones

Identification checkpoints.

According to one embodiment, the step of providing comprises associating the detected identity data with the second identification control point. According to one embodiment, the providing step comprises storing the acquired identity data in a memory area allocated to the second identification control point, in particular in a memory area of a database of a central server device. According to one embodiment, the detected identity data is stored in a table of the memory area according to the queue criterion.

According to one embodiment, for example when the person is forwarded to a third identification control point, the assignment of the detected identity date to the second identification checkpoint is resolved and the detected identity datum of the third identification checkpoint is provided according to another queue criterion.

According to one embodiment, the respective queue criterion is one of the following criteria:

Seniority of recording the recorded identity date,

Arrangement of the detected identity date in an order of detected

Identity data

Seniority of an assignment of the detected identity date to the second

Identification control authority, seniority of providing the acquired identity data for the second

Identification checkpoint,

Arrangement of the detected identity date in an order of detected

Identity data associated with the second identification control point

Arrangement of the detected identity date in an order of detected

Identity data to be displayed by the second identification control point Arrangement of the detected identity date in an order of detected

Identity data provided for the second identification control point.

According to one embodiment, the detected identity date of the second

Identification control point provided via a central server entity.

According to one embodiment, the identity date is a date of one

machine-readable zone of the identity document. The identity date can include, for example, a name of a person, their place of birth, their date of birth and / or their place of residence.

According to one embodiment, the method comprises creating a

Reference identifier of the person, and assigning the

Reference identifier to the detected identity date. According to one embodiment, the method comprises detecting a

Identification feature of the person by a second identification control point, and displaying the detected identity date by the second identification control point in accordance with the detected identification feature with the

Reference identifier.

The reference identifier can be automatically generated by means of the first

Identification control point, for example, by the inclusion of a biometric feature created. By associating the reference identifier with the acquired identity date, identifiers of persons, such as their biometric features, may be used to retrieve or display the acquired identity date.

According to one embodiment, the detected identification feature with the

Reference identifier, wherein upon coincidence of the detected identifier and the reference identifier the detected

Identity date of the second identification inspection body is provided.

According to one embodiment, the reference identifier and the detected identity datum are stored as mutually associated datasets. The each other Assigned records can for example be assigned to one another in a table in a database or stored together. The database can be provided, for example, by the central server entity.

According to one embodiment, the detected reference identifier and / or detected identity data are stored in a database.

According to one embodiment, the detected identification feature with the

Reference Identification feature is compared, and upon coincidence of the detected identification feature and the reference identification feature, the detected identity data of the second identification control point is provided. The comparison of the detected identification feature with the reference identification feature can be carried out, for example, feature-wise. If the detected identity date is stored, for example, in a database of a central server entity, the detected identity data can be sent to the second identification control center via a

Communication network are transmitted.

According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a face image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a creatable by the first identification control point

Document, in particular a ticket, a feature of the identity document, in particular a content of a machine-readable zone of the identity document.

According to one embodiment, the method comprises detecting a

Identification feature of the person by a third identification control body and the

Display the recorded identity date by the third identification control point

Compliance of the detected identifier with the

Reference identifier. The third identification control point can be connected to the first

Identification control point or communicate with the central server entity as stated above and below.

According to one embodiment, the first identification control point comprises a

Document reader for collecting the identity date on the basis of Identity document, wherein the identity date is detected by the document reader, in particular optically or electrically.

According to a further aspect, the invention relates to an identification control system with a plurality of spatially distributed identification control points, which are designed to communicate with each other via a communication network, with a server entity, a first identification control point for detecting a

Identity date of a person based on an identification document, wherein the first identification control point is formed, the detected identity date to the

Server identity is formed, the detected identity data for a second identification control point in accordance with a

Queue criterion, in particular according to the aforementioned,

To provide queue criteria.

The first identification control point can be, for example, a so-called kiosk or eGate, which can be equipped with a document reader. One

Identity date can be detected optically or electronically. The second identification control point may, for example, be a so-called primary, a secondary or a supervisor. The second identification control point may also be operated by an operator, such as a border guard.

According to one embodiment, the first identification control point comprises a

Document reader for collecting the identity date on the basis of

Identity document, wherein the identity date is detected by the document reader, in particular optically or electrically. The identification checkpoints can communicate with each other and / or with a central server entity via a

Communicate communication network. The central server entity can, for example, the collected identity data as well as the created or recorded

Store reference identifiers in a database and make them available.

According to one embodiment, the first identification control point comprises a

According to one embodiment, the identification control system comprises a

Reference detection means for establishing a reference identification feature of the person, a first identification control point for detecting a date of identity of a person based on an identification document, wherein the

Identification control point is further configured to assign the reference identifier to the detected identity date, and a second identification control point for detecting an identification feature of the person, the second

Identification control point is further configured to compare the detected identification feature with the reference identification feature and the detected identity data by the second identification control point in accordance with the detected

Identify feature with the reference identifier. According to one embodiment, the reference identification feature is one of the following features: a biometric feature, in particular a face image, a fingerprint, or an eye iris image, a barcode associated with the person or the identity document, a creatable by the first identification control point

The reference detection device may be formed, for example, a device for receiving a biometric feature or for communication with a communication device of the respective person.

According to one embodiment, the server entity comprises a database, wherein the first identification control point is configured to add the detected identity data to the database

Server entity, wherein the reference detection means is adapted to transmit the reference identifier to the server entity, wherein the

Server entity is formed, the detected identity date and the

Store reference identifier in the database and transmit to the second identification control point. According to one embodiment, the identification control system is designed or program-technically configured to carry out the method according to the invention for identifying a person.

According to a further aspect, the invention comprises a computer program with a program code for implementing a method according to the invention or for controlling the identification control points of the identification control system.

Further embodiments will be explained with reference to the accompanying drawings. Show it:

1 shows an identification control system with a plurality of spatially distributed

Identification checkpoints;

FIG. 2 shows an example of a display of identity data using a

graphical user interface;

3 is a graphical user interface with a spatial plan of

Identification control system; 4 is a graphical user interface with a spatial plan of

Identification control system;

FIG. 5 is a block diagram showing software components for executing the

Functionality of the identification system;

6 is a diagram of a method for identifying a person based on a

Identity document in an identification system;

7 shows a dynamic administration of persons in an identification system with a first identification control point; and a diagram of a method for identifying a person based on an identity document in an identification system. Fig. 1 shows an identification control system with a plurality of spatially distributed identification control points 101, 103, 105, 107, 109, 1 1 1 and 1 13. Die

Identification control stations are set up to communicate via a communication network 15. The identification control system comprises a central server entity 1 17, which is also set up, via the communication network 15

communicate. The central server entity 17 includes, for example, a server 123 with a database 125 and an optional GCS SW 127.

Further, an optional server entity 1 19 is provided, which may include, for example, a blacklist server 129, a database 131, and a blacklist SW device 133. In the database 131, for example, a blacklist with

be recorded.

Optionally, surveillance cameras 135, 137 may be provided, which may communicate via the communication network 15.

The identification system can be set up, for example, with

Communication devices 139, 141, for example via a wireless

Communication network 1 15 to communicate. This communication can

For example, information about the

Communication devices, such as a number of a SIM card, which can serve as reference identification features.

The identification checkpoints 101, 103 can be set up as first identification checkpoints, which can capture identity data of persons on the basis of identity documents. For this purpose, the first identification control points 101, 103

Document readers 143, 145, which are set up, the identity data, which are included for example in a MRZ of an identity document, for example, optically to capture and this via the communication network 1 15 to the central server entity 1 17 or to another identification control point 105, 107, 109th , 1 1 1, 1 13 to transfer.

The first identification checkpoints 101, 103 can be set up, for example, as so-called kiosks or eGates, which can be self-operated by the enable the person to identify. For example, the travelers can independently supply their identity documents to the document readers 143, 145.

The server entity 1 17 is preferably designed to provide the detected identity data for a second identification control point in accordance with a queue criterion.

The queue criterion is, for example, one of the following criteria: time of occurrence of the acquired identity date, location of the acquired identity date in an order of acquired identity data, priority of assignment of the acquired identity date to the second identification control point, priority of providing the acquired identity date for the second identification control point, location of the acquired identity date in an order of

Identity data associated with the second identification control point

Arrangement of the detected identity date in an order of detected

Identity data to be displayed by the second identification control point, arrangement of the detected identity data in an order of detected

Identity data provided for the second identification control point.

The first identification control points 101, 103 may be optional

Reference detection means 102, 104 comprise, which are formed

Include reference identification features of persons such as biometric features. The first identification control points 101, 103 may further comprise PC entities 147, 149 communicating with the

Effect communication network and control, for example, the document readers 143, 145.

The identification control points 105, 107, 109, 1 1 1 and 1 13 can each with

Display devices 151, 153, 155, 157 and 159 be equipped. The

Display devices 151, 153, 155, 157, and 159 may be provided to display, respectively, an identity data or identity data, for example, in a graphical viewing window. The identification checkpoints 105, 107, 109, 1131, and 13 may also be provided with feature detectors 161, 163, 165, 167, which are arranged to receive identification features of persons and to compare them with prestored reference identification features associated with the respective person and previously captured identity data. The Identification control stations 105, 107, 109, 1131, and 13 may each be provided with personal computers 169, 171, 173, 175, and 177 communicating over the network 15, for example, with the central server entity 11 to deliver the detected identification features thereto transmit or retrieve the acquired identity data. Furthermore, the identification control points 105, 107, 109, 11 1 1 and 13 1

Reference detection means for detecting reference identification features. However, the reference identification features could also be obtained by means of

Feature detection means 161, 163, 165, 167 are recorded.

The identification checkpoints 105, 107, 109, 1131 and 13 may be formed for example as so-called primary or secondary checkpoints with an administration functionality or without an administration functionality. The display devices 151, 153, 155, 157 and 159 may represent, for example, graphical user interfaces, wherein in a browser window identity data of the persons and / or their

Identification documents can be displayed.

If one of the identification control stations 105, 107, 109, 1 1 1 and 1 13 is designed as a so-called supervisor control point, this can, for example, all detected

Identity data of active traveler in a browser window of a graphical

User interface on the display device 151, 153, 155, 157 and 159 to

Make available.

If one of the identification control points is provided with an administration functionality, then there can be created, deleted or changed roles, rights or

Processes or rules are made.

The central server entity 1 17 is provided to store the identity data of the persons as well as their documents, such as document numbers. In addition, the central server entity 1 17 can be provided to store the results of a verification of persons and / or documents for authenticity and possibly status information.

The server entity 1 17 can be provided to compile the data to be displayed at the identification control points, to reprogram them graphically, for example, by entering them in a graphic window, and via the Communication network 1 15 to the server entities of the control points or to transmit to their browsers. This information can be displayed by the browsers.

In addition, the central server entity 1 17 may be provided to query internal or external databases, for example, to retrieve identity data associated with particular reference identifier features. The central

Server entity 1 17 can also be provided to manage login data as well

To store decisions at the identification control points, which may concern the identification or non-identification of persons.

The central server entity 1 17 can also be provided to run any applications of the identification system.

The components of database 125 may be configured to store all person identification data, monitoring or login data.

The central server entity 117 can also be provided for logging and storing the decisions made by, for example, a border official. According to an embodiment, the central server entity 1 17 may further be configured to perform document forgery detection. For this purpose, the

Document readers 143, 145 may be provided, for example, to record security features of identity documents optically or electronically and to transmit these to the central server entity 17. The central server entity 1 17 can compare the recorded security features with pre-stored patterns and thus perform a verification of the identity documents. All test results associated with the traveler's identity data may be stored in the database 125 and provided to the identification checkpoints. This eliminates the need to constantly check the authenticity of identity documents.

The central server entity 1 17 can also be designed to guide the persons to the respective identification checkpoints. For this purpose, the central server entity can decide based on predetermined rules, for example. The predetermined rules can be in the form of a rule engine or an executable, for example Computer program are provided. As a result, instructions can be made available, for example, to guide certain persons to lead identification control posts.

If one of the identification control points is equipped with the supervisor functionality, then identity data of all persons who are located within the

Identification system are located. In addition, for example, a status of a documentary check for authenticity, in particular passed, failed or incomplete, can be represented. The identification control point set up as a supervisor can be used, for example, with the primaries or

Secondaries established identification control points are linked to turn on the respective user interface. In addition, the identification control point set up as a supervisor can link the webcams shown in FIG.

The document readers can, for example, be set up as document testers. They can be stationary or mobile.

As mentioned above, the identity data, or the identity data if appropriate, together with a content of an identification document, such as an image of a person, can be displayed by means of a graphic user interface (GUI).

If one of the identification checkpoints shown in FIG. 1 is set up as a supervisor, it can display a picture of some identification checkpoints and, for example, travelers on a graphical user interface.

Fig. 2 shows an example of a display of identity data using a graphical user interface, with a map 201 of a person, which can be created for example by capturing a passport photo. In addition, for example, a window 203 can be arranged, in which identity data, in particular data of the machine-readable zone (MRZ: machine-readable zone) are combined. These data may include, for example, a first name, a last name, the gender of the respective person and the expiration date of an identification document, a date of birth, the issuing state, the nationality or the Include document number. In addition, for example, an entry date can be displayed in the identification control system.

The graphical user interface may further include controls, such as

Access denial field 205 or an admission permit field 207. By actuating the access rejection field 205, the access rejection is documented and, if necessary,

saved. By pressing the access permission field 207 access is granted and documented.

The graphical user interface may further include an area 209 in which mappings 209a, 209b, 209c of FIG

Persons in the order in which these persons are present at the respective identification control point in any queue.

Optionally, further selectable areas may be provided, such as for displaying a facial image of a person on a chip of a person

Identification document is stored 210, an area with a document display 21 1, in the white light, infrared (IR) and / or ultraviolet (UV) images of

Identification documents are displayed. These recordings can be made by means of

Document readers of the first identification control points 101, 103 recorded. In addition, an area 213 may be provided by, for example, displaying recorded biometric features such as fingerprints. Furthermore, an area 215 can be provided by the on the examination of a

Identification document-based test results that can be presented results of examinations of external systems, such as blacklist server and / or a status in the system of previous decisions by, for example, border officials, such as entry, rejection or delegation. If abnormalities or errors occur, the corresponding tabs, which are connected to the respective areas 210, 21 1, 213, 215, can be colored in a signal color, for example red. FIGS. 3 and 4 show a graphical user interface with a spatial plan of rooms in which the identification control system is installed. The graphical user interface can, for example, display first identification control points 301, 303, 305, which are provided, for example, for collecting identity data. The graphical user interface may further second Identification control points 307, 309 and 31 1 show. These can be set up, for example, as secondaries or as primaries. Furthermore, the graphic

Display user interface locks 317, 319. In addition, locations may be displayed with surveillance cameras 321, 323. The graphical user interface may also display pictograms of persons waiting, for example, in queues in front of the respective locks or in front of the respective identification control points 305, 309. The personal pictograms can be highlighted in color, for example. Thus, for example, person pictograms shown as green 325 may indicate that an examination of the

Identity documents of the pending persons and, if necessary, blacklist queries without errors. A red mark on person pictograms 327 indicates that abnormalities in the verification of the identity documents or

Blacklist queries have occurred. Gray-shaded personal pictograms 339 show, for example, that verification of the identity documents has not been completed.

The corresponding graphical user interfaces of these stations, as shown for example in FIG. 2, can be retrieved at the identification control points, for example by clicking on a field 305, 307, 309, 31 1. This allows the data displayed at the respective identification control points to be displayed.

The surveillance camera symbols 321, 323 can be connected, for example, to controlled cameras via a communication network or via a link, so that when the respective camera symbol 321, 323 is selected, a browser window is opened which displays a real-time image of the respective camera.

According to one embodiment, the color representation or highlighting of the person from a number of persons, for example, from five persons, are summarily presented.

The functionality of the identification system can be realized, for example, by means of a software program whose routines are centrally located on a

Server entity expires. FIG. 5 shows a block diagram with software components for executing the

Functionality of the identification system. The software architecture includes the

Monitoring and login functionality 501, the backend functionality 503, the

Administration functionality 505 as well as the functionality of the identification checkpoints 507. The software architecture further comprises a peripheral support 509,

Database components 51 1 and application server components 513, which run, for example, on the central server entity.

6 shows a flow diagram of a method for identifying a person based on an identity document in an identification system with a plurality of spatially distributed identification control points, with detection 601 of an identity date based on the identification document of the person by a first

Identification control point, and providing 603 the detected identity data for a second identification control point according to a queue criterion.

For detecting the identity date, a document reader can be used which, for example, can optically read out the data of the MRZ or electronically store the data stored on a chip of the identity document. According to one embodiment, the persons who are within the

Stop the identification control system. Fig. 7 illustrates dynamic management of persons in an identification system using a graphical user interface, with an image of a first one

Identification control point 701, which is set up, for example, as a kiosk, with an image of a second identification control point 703, which is set up, for example, as a primary, with an image of a third identification control point 705, which is set up, for example, as secondary, and with an image of a fourth identification check point 707 which is an eGate, for example. Further, states "access" 709 and "rejection" 71 1 are displayed. In addition, a ground state 713 is provided.

The persons may for example be continued by the second identification control point 703 to the third identification control point 705, if, for example, a automatic verification of identity data failed. Otherwise the persons are granted access. The third identification control point 705 may be the

Review identity data again and either grant or deny access. For example, suggests checking the identity data on the fourth

Identification control point 707 fails, the affected persons can be forwarded to the third identification control point 705.

8 shows a diagram of a method for identifying a person based on an identity document in an identification system, for example in the above-described identification system with spatially distributed identification control points. The method includes detecting 801 an identity date using the

An identification document by a first identification control point, optionally creating 803 a reference identifier of the person, assigning 804 the reference identifier to the detected identity date, for example by linking records, detecting 805 an identification feature of the person by a second identification control point and displaying 807 the detected identity date by the second identification control body, if the detected

Identifier matches the reference identifier.

An advantage of the concept according to the invention is the shortening of the throughput times for travelers, with the use of fewer personnel and, as a result, cost savings for the operator.

The throughput times consist of the following steps:

1 . Waiting in a queue in front of an identification control center, such as a control box or primary, which can be served by a border official in the event of high numbers of people,

2. duration of the reading and verification process for an identity document,

3. Assessment of the relevance of the test results and duration of the test and interview of a traveler by a border official

By a parallelization of steps 2 and 3 can shorten the

Throughput times are achieved. In the following an embodiment for the parallelization and the use of the waiting time in the queue is described:

The travelers are stopped, for example, at a first

Identification control point, which a second identification control point, such as a checkpoint, independently to put the identity document on a document reader, which may be a document tester. Thus, the identity data for the traveler are read in and checked, step 2, while the border guard serves another passenger for whom step 2 is already completed, step 3. The traveler assumes the task of document placement itself, which was previously undertaken by the border official. According to one embodiment, the document verification takes place automatically and can not be influenced by the traveler.

A traveler can always be uniquely connected and identified with his identity data in the identification system based on individual identification features.

For example, a traveler may be subject to registration of a document, active or passive, e.g. by placing a passport on a document tester in the

Identification system based on the MRZ data, an individual identity document and optional additional identity data clearly detected. From this point on, a traveler can use a single person linked to his / her identity data

Identification feature can be identified at any time in the identification system. Possible individual identification features are, for example: · facial image, which can be recorded by a video or camera identification system

• fingerprint that can be picked up by a fingerprint reader

• Identity documents of the travelers, e.g. Passports or smartcards from which e.g. the MRZ, fingerprints or facial images can be used

· Communication devices, such as mobile phones or smartphones, which can communicate via Bluetooth or NFC, for example, and

• Tickets with e.g. Barcodes, which are printed and at others

Identification control points can be read. The validity of an individual identifier may expire upon the final decision by a border official to allow passage.

If the traveler with the same identity document reappears in the identification system after the final decision, a new data record with a new individual identification feature is generated.

If, for example, a facial image is used as an individual identification feature, a traveler can place his identity document on a

Document verification device in the identification system and a facial image of the traveler are recorded.

The traveler is then found in the identification system by using the individual identifier in the identification system data. Thus, the traveler can be identified by comparing a real-time image of a video camera with the previously acquired reference identifier and the associated one

Identity data set is output or displayed.

An identification control system may, in one embodiment, be implemented by a

Linking two or more identification checkpoints, e.g. a kiosk system is created, realized. It will be at a first

Identification control point recorded the identity data and processed at the second, linked to the first identification control point. Such a link can be realized between kiosks with self-service and primary or between primary and secondary or e-gates with a slave station.

In the following, a kiosk system will be described by way of example.

In a simple kiosk mode with a 1: 1 relationship, for example, a first identification control point as a kiosk and a second identification control point as a primary are linked together. The travelers will arrive at Primary in the order in which they have their identity documents on the document reader of the first identification control point. At the Primary, the border guards receive the identity document from the traveler. The assignment of the traveler to his identity data can be based on the facial image and the order of the in the Queue waiting by the border official or automatically using one of the defined individual identification features.

Hereinafter, an embodiment will be described in consideration of the order of those waiting in line.

Two travelers A and B arrive at a first identification control station, e.g. to a kiosk, and sequentially place their identity documents on the document reader. Since the traveler A is in the queue in front of a second identification control point in front of the traveler B, his identity data is there automatically displayed first. If the traveler A passes the second identification control point, his identity data can be replaced by identity data of the traveler B.

In a multiple kiosk mode with an n: m relationship, one or more kiosks and primaries are linked together in a group. The travelers are forwarded from a kiosk to suitable Primarys.

When forwarded to the queue of a suitable primary, information is sent to the traveler and the primary assigned to him, for example, directly at the kiosk.

When forwarding to an end of a queue, at the beginning of which several Primarys are available, the first standing traveler can be forwarded to an appropriate Primary. The forwarding information (who, where and when) is automatically entered at the beginning of the queue based on the defined individual

Identification feature. At the Primary, a border official receives the identity document from the traveler. The assignment of the traveler to his identity data is done, for example, based on the facial image and the order of waiting in line by the border officials. For example, the order of the waiting travelers results either automatically from a time of their forwarding to a primary or from the use of one of the defined individual identification features.

Hereinafter, an embodiment using the dedicated assignment to a primary will be described. A traveler turns on after placing his identity document

Document tester recognized at a German airport as an English citizen. For example, the identification system is configured to take English-speaking travelers to a control point with an English-speaking

Be forwarded to border officials. At the kiosk, the traveler receives a message, in English, to which checkpoint he should go. Its identity data record is assigned to the queue of the corresponding control point. As soon as he arrives in front of the local border official, his identity data is automatically determined by e.g. his facial image displayed.

The following describes a dynamic wait management of travelers. By creating an individual identification feature when reading an identity document for the first time, which serves as a reference identification feature, the same data set can be repeatedly accessed at all other accesses at different identification control points, thereby avoiding the generation of duplicates. That also means that there are no virtual long ones

Queues in front of a second identification control point, for example a primary form, because even by Wiederholtes re-reading the identity data no

Duplicates are generated.

In the following, snake hopping, also called line hoping, is described:

A traveler whose identity data is already linked to an identification checkpoint A and subsequently registers at another identification checkpoint B is linked to this and automatically removed from the identification checkpoint A.

An exemplary embodiment is, for example, the laying on of an identity document by a traveler at a first identification checkpoint, for example at a kiosk, with an automatic forwarding to a second checkpoint

Identification control point, for example to an associated Primary. While waiting in line at the primary, the traveler spontaneously decides to leave to use an eGate. At eGate he is registered and in the same Moment automatically removed from the queue at the primary - his identity data is now linked to the eGate used.

If a traveler can not pass an eGate and, for example, subsequently registers to the reader of a first identification control point, for example a kiosk, it is sorted into the corresponding queue of a primary and is no longer linked to the eGate.

According to one embodiment, mobile terminals, such as smartphones, may replace or assist, for example, the identification control posts

Acquisition of reference identification features are used. Using one of the individual identifying features as reference identifying features of this traveler e.g. a fingerprint or a facial image or the data of an MRZ of the identity document, the traveler's identity data may be retrieved and assigned to that mobile checkpoint. At the same time, the identity data can be deleted from the original queue of the identification control point A. This can shorten the queue.

The exemplary embodiments described above by way of example can be used in any control, entry and ticket identification systems, for example for stadiums, exhibition centers or railways.

LIST OF REFERENCE NUMBERS

101 Identification Control Office

102 reference detection device

103 Identification Control Body

104 reference detection device

105 Identification Control Body

107 Identification Control Body

109 Identification Control Body

1 1 1 Identification control body

1 13 Identification Control Body

1 15 communication network

1 17 central server entity

1 19 server entity

123 servers

125 database

127 GCS-SW

129 blacklist servers

131 database

133 Blacklist SW facility

135 security camera

137 security camera

139 communication device

141 communication device

143 document reader

145 document reader

147 server entity

149 server entity

151 display device

153 display device

155 display device

157 display device

159 display device

161 feature detection device

163 feature detection device 165 feature detection device

167 feature detection device

169 servers

171 servers

173 servers

175 servers

177 servers

201 image

203 windows

205 admission rejection field

207 admission permit field

209 area

209a illustration

209b illustration

209c picture

210 area

21 1 area

213 area

215 area

301 Identification Control Body

303 Identification Control Body

305 Identification Control Body

307 Identification Control Body

309 Identification Control Body

31 1 Identification Control Body

317 lock

319 lock

321 surveillance camera

323 security camera

325 person pictogram

327 person pictogram

339 person pictogram

501 login functionality

503 backend functionality

505 administration functionality 507 Functionality of the identification control body

509 peripheral support

51 1 Database components

513 application server components

601 Capture

603 Deploy

701 Identification Control Body

703 Identification Control Body

705 Identification Control Body

707 Identification Control Office

709 access

71 1 rejection

713 ground state

801 Capture

803 Create

804 Assign

805 Capture

807 ads

Claims

1 . A method of identifying a person based on an identity document in an identification system having a plurality of spatially distributed ones

Identification checkpoints, with:

Detecting (601) an identity date based on the identification document of the person by a first identification control point; and

Providing (603) the acquired identity date for a second one

Identification control point according to a queue criterion.

2. The method of claim 1, wherein the detected identity data in the step of providing (603) a plurality of identification control points of the plurality of spatially distributed identification control points simultaneously or sequentially, in particular depending on a location of the person provided.

3. The method according to any one of the preceding claims, wherein the step of

Providing (603) displaying the acquired identity data by the second identification control point, in particular displaying the detected one

Identity date according to the queue criterion.

4. The method according to any one of the preceding claims, wherein the step of

Providing (603) comprises selecting the second identification control point from the plurality of spatially distributed identification control points.

5. The method according to any one of the preceding claims, wherein the step of

Providing (603) the mapping of the detected identity data to the second identification control point.

6. The method according to any one of the preceding claims, wherein the step of

Providing (603) comprises storing the detected identity data in a memory area associated with the second identification control point, in particular in a memory area of a database of a central server device.

The method of claim 6, wherein the detected identity data is stored in a table of the memory area according to the queue criterion.

The method of claim 5, 6 or 7, wherein the assignment of the detected identity data to the second identification control point is resolved and the detected identity data of the third identification control point is provided according to another queue criterion.

Method according to one of the preceding claims, wherein the respective queue criterion is one of the following criteria:

Seniority of recording the recorded identity date,

Arranging the acquired identity date in an order of acquired identity data,

Seniority of an assignment of the detected identity date to the second identification control point,

Seniority of providing the acquired identity date to the second identification control body,

Arranging the detected identity data in an order of detected identity data associated with the second identification control point,

Arranging the detected identity data in an order of detected identity data to be displayed by the second identification control point,

Arranging the detected identity data in an order of detected identity data provided to the second identification control point. Method according to one of the preceding claims, wherein the detected

Identity date to the second identification control point of the first

Identification control point or from a central server entity.

Method according to one of the preceding claims, comprising:

Creating (803) a reference identifier of the person; and

Associating (804) the reference identifier with the detected one

Identity date.

The method of claim 1 1, comprising:

Detecting (805) an identifier or

Reference identifier of the person through the second

Identification checks; and

Displaying (807) the acquired identity date by the second one

Identification control body if the detected

Identification feature or reference identifier with a reference identifier stored in the server entity.

The method of claim 11 or 12, wherein the detected identifier or reference identifier is compared to a reference identifier stored in the server entity, and wherein upon detection of the detected identifier or reference identifier and the reference identifier stored in the server entity, the detected identity data is provided to the second identifier.

Method according to one of the preceding claims, wherein the first

Identification control point a document reader for detecting the

Identity data based on the identity document includes, and wherein the identity date is detected by the document reader, in particular optically or electrically.

15. Identification control system with a plurality of spatially distributed

Identification control stations (101, 103, 105, 107, 109, 11 1 1, 13) arranged to communicate with each other via a communication network (15), comprising: a server entity (1 17); a first identification control point (101, 103) for detecting a

Identity date of a person based on an identification document, wherein the first identification control point (101, 103) is formed, which detected

Transmit identity date to server identity (1 17); and wherein the server entity (1 17) is adapted to provide the detected identity data for a second identification control point according to a queue criterion.