RU59283U1 - SYSTEM OF AUTHENTICATION OF DATA OF CITIZENS BY THE BIOMETRIC PARAMETERS OF THE STATE POPULATION REGISTER - Google Patents

Abstract

The invention relates to the field of computer technology, in particular, to a system for authenticating citizens' data by biometric parameters of the state population register.

The technical result is to increase the reliability of the identity verification system by implementing procedures for automatic control of biometric personality parameters.

The technical result is achieved by the fact that the system comprises an input data receiving unit, a permanent address identifier recording address identification unit in the server database, memory blocks, a data recording and reading address receiving unit, a data processing mode selection unit, an integration unit for writing and reading data signals, unit for receiving records of the server database, unit for identifying biological personality parameters, control unit for documenting blacklisted data, unit for generating current documentation addresses yes GOVERNMENTAL risk.

Description

The invention relates to the field of computer technology, in particular, to a system for authenticating citizens' data by biometric parameters of the state population register.

In today's world, the need for security is obvious. Without effective security, many everyday activities lose their meaning. Among the specific applications of security systems it is worth noting:

- protection of computer systems, handheld computers, mobile phones, Internet applications and other similar systems from unauthorized access or use;

- protection of vehicles and other valuable property from unauthorized access or use;

- prevention of theft and forgery in financial transactions, especially in electronic transactions, including payment by credit cards and payment via the Internet;

- restricting access by unauthorized persons to production facilities, warehouses and closed areas, such as military installations;

- control of passenger traffic in public transport, especially during air transportation;

- confirmation of the authenticity of the owners of a driver’s license, medical policies, identification cards and the like of administrative documents.

The main purpose of an identity card for the purpose of ensuring security is a unique identification of the person, otherwise authentication is a confirmation that a person is who he claims to be.

This operation must be reliable, fast, unobtrusive and not expensive. Previously, methods such as checking special passport documents (passports, badges, etc.), knowledge of classified information (password, personal code, signature, etc.) or personal identification by security guards were used for this purpose. But all these traditional approaches work only within the basic requirements.

A more promising approach to this task is biometrics, which provides a convenient, reliable and inexpensive way to identify or authenticate a person and can be used in uncontrolled and remote places.

Using biometrics, a person’s uniqueness is determined by measuring certain physical and behavioral properties and obtaining a measurement sample (also called a “living sample”) in a standard data format. This sample is compared with a standard (also called a signature), which is obtained by measuring the same parameters, recognized as a unique identifier of the person and stored in the database of the security system. The close similarity of the sample and the standard means confirmation of the authenticity of the person.

The main focus in this process is on a small number of physical characteristics, the uniqueness of which can be used to identify a person, especially the voice, gait, face, iris and retina, handprints and fingerprints. DNA is not on this list because DNA analysis is very long and requires sampling from the physical body.

One of the main problems associated with the use of passport and visa documents in transport and when crossing state borders is the verification of the authenticity of the document and its compliance with the owner. It is no secret that the visual comparison with the photograph in the passport that is currently used can be effective only if the employees of these services have undergone special training. At the same time, fatigue and a decrease in employee attention with a dense flow of inspectors is very high. In addition, corruption or negligence among employees of passport control services is possible.

Known systems that could be used to solve the problem (1, 2).

The first of the known systems contains data reception and storage units connected to control and data processing units, search and selection units connected to data storage and display units, the synchronizing inputs of which are connected to the outputs of the control unit (1).

A significant drawback of this system is the impossibility of solving the problem of updating data stored in memory in the form of relevant documents at the same time as solving the problem of delivering the contents of these documents to users in real time.

Another system is known that contains data processing units, the information inputs of which are connected to the data reception and control units, and the outputs are connected to the first group of memory units, the central processor, the inputs of which are connected to the outputs of the memory units of the first group and data processing units, and the outputs are connected with the inputs of the memory blocks of the second group and data display blocks (2).

The last of the above technical solutions is closest to the described.

Its disadvantage lies in the low reliability of personal identification, due to the fact that the personality control procedure is carried out by visual viewing of passport data, and this inevitably leads to the fact that upon presentation of high quality forged documents, false identification is possible, and, as a result, the passage of potential terrorists through the border point.

The purpose of the invention is to increase the reliability of the identity verification system by implementing procedures for automatic control of biometric parameters and documented identity data.

This goal is achieved by the fact that in a known system containing an input data receiving unit, the information and synchronizing inputs of which are the first information and synchronizing inputs of the system, and the first output is the information output of the system, designed to provide data to the information input of the database server, while the first information input of the system is designed to receive citizens' data from workstations of passport and visa services, and

the first synchronizing input of the system is designed to receive a synchronizing signal from workstations of passport and visa services for entering the input data into the input data receiving unit, the data recording and reading address receiving unit, the information input of which is connected to the output of the first memory unit, and the information output of the receiving unit write and read addresses are connected to one information input, the information output of which is the address output of the system, designed to issue addresses from recording and reading data to the address input of the database server, the first synchronizing output of the unit for integrating data recording and reading signals is the first synchronizing output for issuing synchronizing signals to the input of the first interrupt channel of the database server, and the second synchronizing output of the unit for integrating write and read signals of data is intended for issuing a synchronizing signal on the data display panel “Error in the code of biometric parameters”, the unit for receiving database records server, the information and synchronizing inputs of which are the second information and synchronizing inputs of the system, while the second information input of the system is designed to receive server database records, and the second synchronizing input is used to receive server synchronizing pulses for recording server database records in the database record receiving unit server data, a record address identification block has been introduced in the server database, the information input of which is connected to the second output of the input block s data, a clock input connected to the first clock input system clock output write address identification unit in the server database connected to the synchronization input of the receiving write addresses and read data, and outputs the control identification block write address in the server database

connected to the corresponding control inputs of the first memory block, a data processing mode selection unit, the information input of which is connected to the third output of the input data receiving unit, the synchronizing input is connected to the synchronizing output of the recording address identification unit in the server database, and one output of the processing mode selection block data is connected to the first synchronizing input of the unit for integrating data recording and reading signals, and the other output of the data processing mode selection unit is one third m synchronizing output of the system, intended for issuing synchronizing pulses to the input of the second channel of the database server interrupt, an identification block of biological parameters of the person, one information input of which is connected to the fourth output of the input data receiving unit, the other information input of the identification block of biological personality parameters is connected to the second synchronizing the input of the system, while one output of the unit for identifying the biological parameters of the personality is a signal output of the system we are designed to issue synchronizing pulses to the input of the third channel of the server interrupt, the unit for generating the current data documentation addresses, the output of which is connected to another information input of the unit for integrating data recording and reading signals, the second memory unit, the output of which is connected to the information input of the unit for generating current addresses documentation of data, and a control unit for documenting data of the black list, the input of which is connected to the other output of the identification unit of biological pairs personal meters, while the first output of the black list data document control unit is connected to the read input of the second memory unit, the second output of the black list data document control unit is connected to one clock input of the current address generation unit

documenting data and with a second synchronizing input of the data recording and reading signal integration unit, and the third output of the blacklist data recording control unit is connected to another synchronizing input of the current data documentation addresses generation unit and to the third synchronizing input of the data recording and reading signal integration unit.

The invention is illustrated by drawings, in which Fig. 1 is a structural diagram of a system, Fig. 2 is a structural diagram of a unit for identifying a write address of a permanent data identifier in a server database, Fig. 3 is a structural diagram of a block for selecting data processing modes, Fig. 4 is a structural diagram of a unit for integrating recording and reading data signals; FIG. 5 is a structural diagram of a risk data documenting management system; FIG. 6 is a structural diagram of a unit for identifying biological personality parameters.

The system (Fig. 1) contains a block 1 for receiving input data, a block 2 for identifying a recording address of a constant data identifier in a server database, a first memory block 3, a block 4 for receiving data write and read addresses, a block 5 for selecting data processing modes, an integration block 6 data recording and reading signals, a server database record receiving unit 7, a biological personality identification unit 8, a blacklist data management unit 9, a second memory unit, a current documentation address generation unit 11 is given ny risk.

1 also shows the first 21 and second 22 information inputs of the system, the first 23 and second 24 synchronizing inputs of the system, as well as the information 25 and address 26 outputs of the system, the first 27, second 28 and third 29 synchronizing and signal 30 outputs of the system.

In this case, the first information input 21 of the system is designed to receive citizens' data from workstations of passport and visa services of the Ministry of Internal Affairs, and the first synchronization input 23 is designed to receive a synchronization signal from workstations of passport and visa services of the Ministry of Internal Affairs for entering input data into input data receiving unit.

The second information input 22 of the system is intended for receiving server database records, and the second synchronizing input 24 is for receiving server synchronization signals for recording server database records in the server database record receiving unit.

The information output 25 of the system is intended for the delivery of data received by the system to the information input of the server.

Address output 26 of the system is designed to provide write addresses and read data to the address input of the database server.

The first synchronizing output 27 is designed to issue synchronizing signals to the input of the first channel of the database server interrupt.

The second synchronizing output 28 is intended for issuing synchronizing signals to the input of the display panel "Error in the code of biometric parameters."

The third synchronizing output 29 is intended for issuing synchronizing signals to the input of the second channel of the database server interrupt.

The signal output 30 of the system is designed to issue a synchronizing signal to the third input of the database server interrupt.

Block 1 (figure 1) receiving input data is made in the form of a register having information 21 and synchronizing 23 inputs, as well as 15-18 outputs.

Block 2 (figure 2) identifying the write address in the server database contains a decoder 32, elements 33-35 AND, the first 36 and second 37 delay elements. The drawing shows information 40 and synchronizing 41 inputs, as well as synchronizing 42 and control 43-45 outputs.

Block 3 (figure 1) of memory is made in the form of a permanent storage device having inputs 46-48 and output 49.

Block 4 (Fig. 1) of receiving write and read addresses is made in the form of a register having information 50 and synchronizing 51 inputs, as well as output 52.

Block 5 (figure 3) selection of data processing modes contains a decoder 55, elements 56, 57 And, element 58 delay. The drawing shows information 59 and clock 60 inputs, as well as outputs 61, 62.

Block 6 (Fig. 4) of the integration of the write and read signals contains a trigger 65, an OR element 66, a group of 67, 68 AND elements, a group of OR elements 69, and a delay element 70. The drawing shows information 71, 72 and synchronizing 73-75 inputs, as well as address 26 and synchronizing 27 outputs.

Block 7 (figure 1) receiving records of the server database is made in the form of a register having information 22 and synchronizing 24 inputs, as well as output 19.

Block 8 (Fig.6) identification of the biological parameters of the person contains a comparator 53 and a delay element 54. The drawing shows information 77, 78 and synchronizing 79 inputs, as well as the first 80 and second 81 outputs.

Block 9 (figure 5) of the documentation management of blacklist data contains a trigger 85, elements 86, 87 And, and a delay element 88. The drawing shows the input 89, and outputs 90-92.

Block 10 (figure 1) of the memory is made in the form of a permanent storage device having an input 93 and an output 94.

Block 11 (Fig. 1) of forming current addresses for documenting risk data is made in the form of a counter having information 95, synchronizing 74 and counting 97 inputs, as well as output 98.

All nodes and elements of the system are made on standard potential-impulse elements.

The system operates as follows.

When applying for and issuing to each citizen of the Russian Federation a new generation passport with a microchip embedded in the passport - a crystal in which the owner’s biometric data is recorded, passport and visa services record the following indicators of the citizen who received the new generation passport in the database:

- identifier of persistent data;

- last name;

- name;

- patronymic;

- date of birth;

- Place of Birth;

- gender;

- biometric parameters of personality.

It should be borne in mind that the permanent data identifier (SDI) is issued to each citizen of the Russian Federation by the State Register of Population and is irremovable throughout a person’s life. An IPD is assigned to the personal data of a citizen at the birth of a person, and during the transitional period when citizens of Russia apply to authorities, to other persons if they acquire citizenship, or if they register at a place of residence in Russia (taking into account the possibility of assigning an identifier for personal data to moment of crossing the state border of the Russian Federation).

The data of a citizen who received a new generation passport is sent by the appropriate passport and visa services

The Ministry of Internal Affairs of the Russian Federation to the State Register of Population in the form of codograms having the following structure:

THE CODE THE CODE THE CODE THE CODE Identifier Sign FULL NAME, Biometric of permanent processing Date of Birth, data data (SDI) data Place of Birth, citizen Citizen Floor

In this codogram, the sign code of the processed data can take one of two values.

The first of them corresponds to the mode of updating data in the database of the state register of the population, and the second refers to the mode of control of the transmitted data for their compliance with the reference values of the IPD stored in the database of the state register of the population.

We begin to consider the operation of the system in the mode of updating the system database, which implements the procedure for recording received messages in the system database.

The input codogram is fed to the information input of the system 21 and then to the input of block 1, into which it is entered by a synchronizing pulse supplied to the input 23 of the system.

From the output 15 of block 1, the contents of the entire codogram is output to the output 25 of the system.

From the output 16 of block 1, the citizen’s permanent identifier code goes to the information input 40 of block 2, from where it is issued to the input of the decoder 32.

The decoder 32 decodes the IPD code and prepares the signal path from the input 41 of block 2, opening one of the elements 33-35 I. For definiteness, we assume that a high potential is received at one input of the element 33 I.

In parallel with this, the synchronizing pulse from the input 23 of the system enters the input 41 of block 2, where it is delayed by element 36 for the duration of entering the codogram into block 1 and the operation of decoder 32, and then polls the states of elements 33-35 I.

Considering the fact that only the And element 33 will be open at one input, then passing this And element, the clock pulse from the output 43 of block 2 is fed to the read input of a fixed memory cell of the permanent storage device 3, in which the write address code of the data having this SDI is stored .

The address code of the received SDI from the block 3 of the memory is read to the output 49 and then through the input 50 of the block 4 is fed to the information input of the register.

In parallel with the described process, the same read pulse from the output of element 36 of block 2 is delayed by the delay element 37 for the duration of reading the contents of the fixed cell ROM 3 and then from the output 42 it goes to the synchronizing input 51 of register 4 fixing the code of the address of the memory cell of the server database, in which the input data of the SDI should be written.

The address code from the output 52 of register 4 is issued to the input 71 of block 6, and then goes to one of the inputs of elements 68 And groups that are open at the other input with high potential from the inverse output of trigger 65, which is in its original state at this point in time. As a result of this, the address code passes through elements 68 AND groups and elements 69 OR groups to the output 26 of the system.

At the same time, the synchronizing pulse from the output 42 of block 2 goes to the input 60 of block 5, the other input 59 of which from the output 17 of block 1 receives a data sign code, in this case, corresponding to the database update mode.

The decoder 55 of block 5 decrypts the code of the sign of data and opens one input element 56 And, the other input of which receives a synchronizing pulse from input 60, delayed by element 58 for the time the code is entered in register 4.

The synchronizing pulse from the output 61 of block 5 goes to the input 73 of block 6 and then, firstly, it goes to the installation input of the trigger 65, confirming its initial state, and secondly, it passes through the element 66 OR, is delayed by the element 70 for the duration of the operation trigger 65, and through the output 27 of the system is issued to the input of the first channel of the interruption of the database server.

By this signal, the database server goes to the subroutine for recording data of the input codogram from the output 25 of the system at the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

Thus, the system database is updated by writing the reference SDIs sent by the passport and visa services of the Ministry of Internal Affairs to the system database, as a result of which, in each memory cell of the system database, citizens data will be stored in the following structure:

THE CODE THE CODE THE CODE Citizen Permanent Data Identifier (SDI) FULL NAME, Citizen Biometrics Place of Birth, Date of Birth, Floor

The second mode of operation is designed to control the data transmitted to the system for their compliance with the reference values of the IPD stored in the system database. This mode of operation allows passport and visa services to identify all violations associated with the falsification of an electronic passport by changing the data stored in its chip.

In this case, when receiving the input codogram, the code of the data processing flag at the output 17 of block 1 will have a different meaning and the decoder 55 of block 5 will close the And element 56 with a low potential and open the And element 57. As a result, the synchronizing pulse from the output of the delay element 56 passes through the element 57 And to the output 62 of block 5, and then from the output 28 of the system it enters the input of the second channel of the database server interrupt.

With the arrival of this signal, the database server goes to the subroutine for reading the contents of the memory cell of the server database, the address of which is generated at the output of the system 26, and issuing the read record to the information input 22 of the system, from where it goes to the information input of block 7, which is entered into the synchronizing the server pulse entering input 24 of the system.

The code of the biometric parameters of the person located in block 1, from the output 18 of the block 1 goes to the information input 77 of the block 8, and the code of the biometric parameters of the person located in the block 7, from the output 19 of the block 7 goes to another information input 78 of the block 8.

In parallel with this process, the synchronizing pulse from input 24 enters the synchronizing input 79 of block 8, where it is delayed by the element 54 for the time the code is entered in block 7, and then it goes to the synchronizing input of the comparator 53.

According to this sync pulse, the comparator 53 compares the input codes and if the code of the biological parameters of the personality located in block 1 matches the code of the biological parameters of the personality located in block 7, then a signal appears at the output 81 of the block 8, which is fed to the input of the third through the output 30 of the system database server interrupt channel.

By this signal, the database server switches to the subroutine for generating a response message about the correspondence of the code of biological parameters of the personality sent in the input codogram to the reference code of biological parameters of the personality stored in the reference database.

If the code of the biological parameters of the personality, located in block 1, does not coincide with the code of the biological parameters of the personality, located in block 7, then a signal appears at the output 80 of block 8, which, through the input 89 of block 9, enters the input of elements 86, 87, and block 9 controlled by trigger 85.

Given the fact that at this point in time the trigger 85 was in the initial state, then with the high potential from the inverse output of the trigger 85, the element 87 will be open, and the element 86 And with the low potential from the inverse output of the trigger 85 will be closed. As a result of this, the synchronizing pulse from input 89 passes through element 87 to output 90 of block 9 and then goes to the read input of memory block 10, to which the starting address of the memory zone is stored in the server database, into which all input codegrams in which the code of biological parameters of personality did not coincide with the reference code of biological parameters of personality.

In addition, the synchronizing pulse from the output of the element 87 And is delayed by the delay element 88 for the time of reading the code of the starting address from the memory unit 10, and, firstly, it goes to the direct input of the trigger 85, setting it to a single state, in which the element And 87 will closed, and element 86 AND - open.

Secondly, the same synchronizing pulse through the output 91 of block 9 is supplied to both input 74 of block 6 and input 96 of block 11.

As a result of reading the start address code from block 10, the start address code from output 94 through the input 95 of block 11 is fed to the counter information input, into which it is entered by the synchronizing pulse from the input 96 of block 11. The start address code from the output 98 of the counter 11 goes to the information input 72 blocks 6.

In parallel with this process, the synchronizing pulse from the input 74 of block 6 is supplied to the direct input of the trigger 65 and sets it to a single state, in which elements 67 And groups will be open, and elements 68 And groups will be closed. As a result of this, the code of the starting address for documenting data from the input 72 of block 6 passes the elements 67 AND groups, then the elements 69 OR groups to the address output 26 of the system.

At the same time, the synchronizing pulse from the input 74 of the block 6 is supplied both to the input of the OR element 64, and to the input of the OR element 66.

Having passed the element 64 OR, the synchronizing pulse is fed to the output of the system 28 and then to the data display panel, which records the content of the received codogram from the output 25 of the system as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 66, is delayed by the element 70 for the duration of the switching of the trigger 65, and then from the output of the system 27 is issued to the input of the first channel of the database server interrupt.

By this signal, the database server switches to the subroutine for documenting the data of the input codogram from the output 25 of the system to the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

If, when checking the code of biometric personality parameters of the next input codogram, the mismatch of the biological code of the personality parameters with the reference code stored in the system database is again revealed, then the signal from the output 80 of block 8 through the input 89 of block 9 will now pass not through the 87 And element, but through the element 86 And, since the trigger 85 will be in a single state, in which it opens with a high potential from a direct output element 86 I.

In this case, the synchronizing pulse from the input 89 of the block 9 passes through the element 86 AND to the output 92 of the block 9 and then goes to the counting input 97 of the block 11, increasing the documentation address by one.

In addition, the same clock pulse through the input 75 of block 6 is supplied both to the input of the OR element 64 and to the input of the OR element 66.

After passing the element 64 OR, the synchronizing pulse is fed to the output 28 of the system and then to the data display panel, which records the content of the received codogram from the output 25 of the system as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 66, is delayed by the element 70 for the switching time of the trigger 65, and then from the output of the system 27 is issued to the input of the first channel of the database server interrupt.

By this signal, the database server switches to the subroutine for documenting the data of the input codogram from the output 25 of the system to the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

Thus, the introduction of new nodes and blocks has significantly improved the reliability of the system by implementing procedures for automatic control of biometric parameters and authentication of personal data.

The introduction of the system into the practice of the work of checkpoints will significantly increase the efficiency and reliability of the work of checkpoints throughout the Russian Federation.

Sources of information taken into account when drawing up the description of the application:

1. US Patent No. 5136708 M.C. G 06 F 15/16, 1992

2. US Patent No. 5129083 M.C. G 06 F 12/00, 15/40, 1992 (prototype).

Claims (1)

The system of authentication of citizen data by biometric parameters of the state population register, containing an input data receiving unit, the information and synchronizing inputs of which are the first information and synchronizing inputs of the system, and the first output of the input data receiving unit is the information output of the system, intended for data output to the server information input database, while the first information input of the system is designed to receive citizens' data from automated work x places of passport and visa services, and the first synchronizing input of the system is designed to receive a synchronizing signal from automated workstations of passport and visa services for entering input data into the input data receiving unit, the data recording and reading address receiving unit, the information input of which is connected to the output of the first a memory unit, and the information output of the unit for receiving write and read addresses is connected to one information input of the unit for integrating write and read signals, the information the output of which is the address output of the system intended for issuing write and read addresses to the address input of the database server, the first clock output of the unit for integrating data write and read signals is the first clock output intended for issuing synchronization signals to the input of the first channel of the database server interrupt and the second synchronizing output of the unit for integrating data recording and reading signals is intended for issuing a synchronizing signal on the display panel data "Error in the code of biometric parameters", the receiving unit of the server database records, the information and synchronizing inputs of which are the second information and synchronizing inputs of the system, while the second information input of the system is designed to receive server database records, and the second synchronizing input is intended for receiving synchronizing server pulses for recording server database records in a server database record receiving block, characterized in that the system comprises an identifier block recording the address of the record in the server database, the information input of which is connected to the second output of the input data receiving unit, the synchronization input is connected to the first synchronizing input of the system, the synchronizing output of the recording address identification block in the server database is connected to the synchronizing input of the recording and reading address receiving unit and the control outputs of the recording address identification block in the server database are connected to the corresponding control inputs of the first memory block, the mode selection block for Data processing, the information input of which is connected to the third output of the input data receiving unit, the synchronizing input is connected to the synchronizing output of the recording address identification unit in the server database, while one output of the data processing mode selection unit is connected to the first synchronizing input of the write and read signal integration unit data, and the other output of the data processing mode selection unit is the third synchronizing output of the system, intended for issuing synchronizing pulses to the course of the second channel of interruption of the database server, the unit for identifying the biological parameters of the personality, one information input of which is connected to the fourth output of the unit for receiving input data, the other information input of the unit for identifying biological parameters of the personality is connected to the second synchronizing input of the system, while one output of the unit for identifying biological parameters personality is the signal output of the system, designed to issue synchronizing pulses to the input of the third interrupt channel with a rver, a unit for generating current addresses for documenting data, the output of which is connected to another information input of a unit for integrating data recording and reading signals, a second block for memory, whose output is connected to an information input for a unit for generating current addresses for documenting data, and a control unit for documenting data from a black list, input which is connected to the other output of the identification block of the biological parameters of the personality, while the first output of the control unit for documenting the data of the black list and it is connected to the read input of the second memory block, the second output of the black list data documentation control unit is connected to one synchronization input of the current data documentation addresses generation unit and to the second synchronization input of the data write and read signal integration unit, and the third output of the black list data management unit connected to another synchronizing input of the block forming the current addresses of data documentation and to the third synchronizing input of the block and Integration of data write and read signals.