RU76480U1 - AUTOMATED SYSTEM OF IDENTIFICATION OF PERSONALITY DATA OF PASSPORT AND VISA CONTROL OF CITIZENS - Google Patents

Abstract

The utility model relates to the field of computer technology, in particular, to an automated system of personal identification according to passport and visa control.

The technical result is to increase the reliability of the identification system by implementing procedures for automatic control of the biometric parameters of the person.

The technical result is achieved by the fact that the system comprises a module for managing the data processing mode, a module for selecting addresses of records in the data warehouse, a module for managing documentation of citizens 'data in the data warehouse, a module for identifying identity data, a module for addressing documentation data in the data warehouse, a module for issuing addresses of citizens' data records in the data warehouse.

Description

The utility model relates to the field of computer technology, in particular, to an automated system of personal identification according to passport and visa control.

The main purpose of an identity card for the purpose of ensuring security is a unique identification of the person, otherwise authentication is a confirmation that a person is who he claims to be.

Identification of citizens to be reliable, fast, unobtrusive and not expensive. Earlier, methods such as checking special passport documents (passports, badges, etc.), knowing classified information (password, personal code, signature, etc.) or personal identification by security guards were used for this purpose. But all these traditional approaches work only within the basic requirements.

A more promising approach to this task is biometrics, which provides a convenient, reliable and inexpensive way to identify or authenticate a person and can be used in uncontrolled and remote places.

Using biometrics, a person’s uniqueness is determined by measuring certain physical and behavioral properties and obtaining a measurement sample (also called a “living sample”) in a standard data format. This sample is compared with a standard (also called a signature), which is obtained by measuring the same parameters, recognized as a unique identifier of the person and stored in the database of the security system. The close similarity of the sample and the standard means confirmation of the authenticity of the person.

One of the main problems associated with the use of passport and visa documents in transport and when crossing state borders is the verification of the authenticity of the document and its compliance with the owner. It is no secret that the visual comparison with the photograph in the passport that is currently used can be effective only if the employees of these services have undergone special training. At the same time, fatigue and a decrease in employee attention with a dense flow of inspectors is very high. In addition, corruption or negligence among employees of passport control services is possible.

Known systems that could be used to solve the problem (1, 2).

The first of the known systems contains data reception and storage units connected to control and data processing units, search and selection units connected to data storage and display units, the synchronizing inputs of which are connected to the outputs of the control unit (1).

A significant drawback of this system is the impossibility of solving the problem of updating data stored in memory in the form of relevant documents at the same time as solving the problem of delivering the contents of these documents to users in real time.

Another system is known that contains data processing units, the information inputs of which are connected to the data reception and control units, and the outputs are connected to the first group of memory units, the central processor, the inputs of which are connected to the outputs of the memory units of the first group and data processing units, and the outputs are connected with the inputs of the memory blocks of the second group and data display blocks (2).

The last of the above technical solutions is closest to the described.

Its disadvantage lies in the low reliability of personal identification, due to the fact that the personality control procedure is carried out by visual viewing of passport data, and this inevitably leads to the fact that upon presentation of high quality forged documents, false identification is possible, and, as a result, the passage of potential terrorists through the border point.

The purpose of the invention is to increase the reliability of the identity system by implementing procedures for automatic control of biometric parameters and documentary data of the person.

This goal is achieved by the fact that in a known system containing a control module for data processing mode, the information and synchronizing inputs of which are the first information and synchronizing inputs of the system, and the first output of the control module for data processing mode is an information output of the system designed to provide data to the information input data storage, while the first information input of the system is designed to receive data from citizens

from workstations of passport and visa services, and the first synchronizing input of the system is designed to receive synchronization signals from workstations of passport and visa services for entering input data into the data processing mode control module, the documentation data addressing module in the data warehouse, the output of which is connected to one address input of the module for issuing addresses of citizens' data records in the data warehouse, the output of which is the address output of the system intended for issuing addresses write and read data to the address input of the data warehouse, characterized in that the system comprises a module for selecting addresses of records in the data warehouse, the information input of which is connected to the second output of the module for controlling the data processing mode, the synchronizing input of the module for selecting addresses of records in the data warehouse is connected to the first the synchronizing output of the data processing mode control module, and the output of the module for selecting addresses of records in the data warehouse is connected to another address input of the module for issuing addresses is the data of citizens in the data warehouse, the identity data identification module, one information input of which is connected to the third information output of the data processing mode control module, the other information input of the personality data identification module is the second information input of the system, and the synchronizing input of the personality data identification module is the second synchronizing system input, and one output of the personality data identification module is a system signal output intended for issuing clock pulse input of the third channel data storage server interrupts, wherein the second information input system for receiving the records data repository and the second system clock input for receiving

synchronization pulses of the data warehouse server for recording data storage records in the identity data identification module, and a citizen data documentation management module in the data warehouse, the installation input of which is connected to the second synchronizing output of the data processing mode control module, synchronizing the input of the citizens data documenting control module in the data warehouse connected to another output of the identity data identification module, information output of the document management module data of citizens in a data warehouse is connected to the information input of a module for addressing documentation of data in a data warehouse, the first synchronizing output of a module for managing documentation of data in a data warehouse is connected to a synchronizing input of a module for addressing documentation of data in a data warehouse, a second synchronizing output of a module for managing documentation of data of citizens in a data warehouse data is connected to the counting input of the documentation data addressing module in the data warehouse, the third synchronizer The output of the citizen data documentation control module in the data warehouse is the first synchronizing output of the system, intended for issuing synchronization signals to the input of the first channel of the data warehouse server interrupt, the fourth synchronizing output of the citizen data documentation control module in the data warehouse is the second synchronizing input of the system, intended for issuing a synchronizing signal on a data display board, a unit for receiving records of a server database, information minutes and clock inputs of which are the second inputs of the synchronizing information and the system, first and second control outputs of the control unit documenting citizens data in the data store connected to the first and second control inputs of the dispensing module addresses citizens data records in the repository

data, and the third clock output of the data processing mode control module is the third clock output of the system, intended for issuing clock pulses to the input of the second channel of the database server interrupt.

The invention is illustrated by drawings, in which Fig. 1 shows a structural diagram of a system, Fig. 2 is a structural diagram of a data processing mode control module, Fig. 3 is a structural diagram of a selection module for selecting addresses of records in a data warehouse, Fig. 4 is a structural diagram Fig. 3 is a structural diagram of a module for identifying personality data, Fig. 6 is a structural diagram of a module for issuing addresses of citizens' data records in a data warehouse.

The system (Fig. 1) contains a data processing mode control module 1, a record address selection module 2 in a data warehouse, a citizen data document management module 3 in a data warehouse, an identity data identification module 4, a documentation data addressing module 5 in a data warehouse, module 6 issuance of addresses of records of data of citizens in the data warehouse.

1 also shows the first 11 and second 12 information inputs of the system, the first 13 and second 14 synchronizing inputs of the system, as well as the information 15 and address 16 outputs of the system, the first 17, second 18 and third 19 synchronizing and signal 20 outputs of the system.

At the same time, the first information input 11 of the system is intended for receiving citizens' data from workstations of passport and visa services of the Ministry of Internal Affairs, and the first synchronizing input 13 is designed to receive synchronizing signals from workstations of passport and visa services of the Ministry of Internal Affairs for entering input data into module 1

The second information input 12 of the system is designed to receive records of the server data storage, and the second synchronization input 14 is designed to receive server synchronization signals for recording data storage records in module 1.

The information output 15 of the system is designed to issue the data received by the system to the information input of the data warehouse. Address output 16 of the system is designed to provide write addresses and read data to the address input of the data warehouse.

The first synchronizing output 17 is designed to issue synchronizing signals to the input of the first channel of the interruption of the data warehouse server. The second synchronizing output 18 is designed to issue synchronizing signals to the input of the display panel "Error in the code of biometric parameters." The third synchronizing output 19 is designed to issue synchronizing signals to the input of the second channel of the database server interrupt.

The signal output 30 of the system is designed to issue a synchronization signal to the third input of the interruption of the data warehouse server.

Module 1 (figure 2) control the data processing mode contains a register 21, a decoder 22, elements 23, 24 And, elements 25,26 delay. The drawing shows information 11 and synchronizing 13 inputs, as well as information 27-29, and synchronizing 30-32 outputs.

Module 2 (Fig. 3) of selecting addresses of records in the data warehouse contains read-only memory 40, a decoder 41, a register 42, elements 43-45 AND, a delay element 46. The drawing shows information 48 and synchronizing 49 inputs, as well as information 50 output.

Module 3 (Fig. 4) for managing the documentation of citizens' data in the data warehouse contains a memory unit 51, flip-flops 52, 53, AND elements 54, 55, OR elements 56, 57, and delay elements 58, 59. In the drawing

Installation 61 and synchronizing 62 inputs, as well as information 63 output, synchronizing 64-67 outputs and controlling 68, 69 outputs are shown.

Module 4 (Fig. 5) for identifying personal data includes a register 70 and a comparator 71. The drawing shows information 73, 74, and synchronizing 75 inputs, as well as 76, 77 outputs.

Module 5 (Fig. 1) of addressing the documentation data in the data warehouse is made in the form of a counter having an information 80, synchronizing 81 and counting 82 inputs, as well as an output connected to the input 94 of module 6.

Module 6 (Fig.6) issuing addresses of citizens' data records in the data warehouse contains groups 90, 91 AND elements, a group of OR elements 92. The drawing shows information 93, 94 and synchronizing 95-96 inputs, as well as address 16 system output.

The system operates as follows.

When applying for and issuing to each citizen of the Russian Federation a new generation passport with a microchip embedded in the passport - a crystal in which the owner’s biometric data is recorded, passport and visa services record the following indicators of the citizen who received the new generation passport in the database:

- identifier of persistent data;

- last name;

- name;

- patronymic;

- date of birth;

- Place of Birth;

- gender;

- biometric parameters of personality.

It should be borne in mind that the permanent data identifier (SDI) is issued to each citizen of the Russian Federation by the State Register of Population and is irremovable throughout a person’s life.

An IPD is assigned to the personal data of a citizen at the birth of a person, and during the transitional period when citizens of Russia apply to authorities, to other persons if they acquire citizenship, or if they register at a place of residence in Russia (taking into account the possibility of assigning an identifier for personal data to moment of crossing the state border of the Russian Federation).

The data of a citizen who has received a new generation passport is sent by the appropriate passport and visa services of the Ministry of Internal Affairs of the Russian Federation to the State Population Register in the form of codograms having the following structure:

THE CODE THE CODE THE CODE THE CODE Permanent Data Identifier (SDI) Citizen Sign of data processing Name, Date of birth, Place of birth, Gender Citizen Biometrics

In this codogram, the sign code of the processed data can take one of two values.

The first of them corresponds to the mode of updating data in the database of the state register of the population, and the second refers to the mode of control of the transmitted data for their compliance with the reference values of the IPD stored in the database of the state register of the population.

We begin to consider the operation of the system in the mode of updating the system database, which implements the procedure for recording received messages in the system database.

The input codogram is fed to the information input of the system 11 and then to the input of module 1, into which it is entered by a synchronizing pulse supplied to the input 23 of the system,

From the output 27 of module 1, the contents of the entire codogram is output to the output 15 of the system.

From the output 28 of module 1, the citizen’s permanent data identifier code goes to the information input 48 of module 2, from where it is issued to the input of the decoder 41.

The decoder 41 decodes the IPD code and prepares the signal path from the input 49 of module 2, opening one of the elements 43-45 I. For definiteness, we assume that a high potential is received at one input of the element 43 I.

In parallel with this, the synchronizing pulse from the input 13 of the system is delayed by the element 25 for the duration of entering the codogram into module 1 and the operation of the decoder 41, and then from the input 49 of module 2 it polls the states of the elements 43-45 I.

Considering the fact that only the AND element 43 will be open at one input, then passing through this AND element, the clock pulse is fed to the read input of a fixed memory cell of the permanent storage device 40, in which the write address code of the data having this SDI is stored.

The address code of the received SDI from the memory unit 40 is read into the information input of the register 42.

In parallel with the described process, the same read pulse with is delayed by the delay element 46 of module 2 for the duration of reading the contents of the fixed cell ROM 3 and is supplied to the synchronizing input of the register 42 by fixing in it the code of the address of the memory cell of the server database into which the input data of the IPD should be written .

The address code from the output 50 of module 2 is issued to the input 93 of module 6, and then it goes to one of the inputs of elements 90 And groups that are open at the other input with high potential from the inverse output 68 of trigger 53 of module 3, which is in its original state at this point in time. As a result of this, the address code passes through elements 90 AND groups and elements 92 OR groups to the output 16 of the system.

At the same time, from the output 36 of the register 21 of the module 1, a data attribute code is received at the input of the decoder 22, in this case corresponding to the database update mode.

The decoder 22 decodes the code of the sign of data and opens one input element 23 And, the other input of which receives a synchronizing pulse, delayed by the element 26 at the time of entering the code in the register 42.

The synchronizing pulse from the output 31 of module 1 is fed to the input 61 of module 3 and then, firstly, it goes to the installation input of the trigger 53, confirming its initial state, and secondly, it passes through the OR element 56, is delayed by the element 59 for the duration of the operation trigger 53, and through the output 17 of the system is issued to the input of the first channel interrupt server data warehouse.

By this signal, the data warehouse server switches to the subroutine for recording data of the input codogram from the output 15 of the system at the address indicated on output 26, after which the system is ready to receive the next message from the passport and visa services.

Thus, the system database is updated by writing the reference SDIs sent by the passport and visa services of the Ministry of Internal Affairs to the system database, as a result of which, in each memory cell of the system database, citizens data will be stored in the following structure:

THE CODE THE CODE THE CODE Citizen Permanent Data Identifier (SDI) Name, Date of birth, Place of birth, Gender Citizen Biometrics

The second mode of operation is designed to control the data transferred to the system for their compliance with the reference values of the IPD stored in the system data warehouse. This mode of operation allows passport and visa services to identify all violations associated with the falsification of an electronic passport by changing the data stored in its chip.

In this case, when receiving the input codogram, the code of the data processing flag at the output 36 of module 1 will have a different meaning and the decoder 22 will close the 23 And 23 element with low potential and open the 24 And high potential. As a result, the synchronizing pulse from the output of the delay element 26 passes through the element 24 And to the output 32 of module 1, and then from the output 19 of the system it enters the input of the second channel of the interruption of the data warehouse server.

With the arrival of this signal, the data warehouse server switches to a subroutine for reading the contents of the memory cell of the server data warehouse, the address of which is formed at the output of the system 26, and issuing a read record to the information input 12 of the system, from where it goes to the information input 74 of module 4, into which it is entered server synchronizing pulse received at the input 14 of the system.

The code of the biometric parameters of the person located in module 1, from the output 29 goes to the information input 73 of module 4, and the code of the biometric parameters of the person goes to another information input 74 of module 4.

In parallel with this process, the synchronizing pulse from input 14 enters the synchronizing input 75 of module 4, where it is delayed by element 72 for the time the code is entered in register 70, and then it goes to the synchronizing input of the comparator 71.

According to this clock pulse, the comparator 71 compares the input codes and if the code of the biological parameters of the personality, located in module 1, matches the code of the biological parameters of the personality, located in module 4, then a signal appears at the output 77 of module 4, which is fed to the input of the third through the output 20 of the system Data Warehouse Server Interrupt Channel.

By this signal, the data warehouse server switches to the subroutine for generating a response message about the correspondence of the code of biological parameters of the personality sent in the input codogram to the reference code of biological parameters of the personality stored in the reference database.

If the code of the biological parameters of the personality, located in module 1, does not coincide with the code of the biological parameters of the personality, located in module 4, then at the output 76 of module 4, a signal appears that through the input 62 of module 3 is fed to the input of elements 54, 55, control whose operation is carried out by trigger 52.

Given the fact that at this point in time the trigger 52 was in the initial state, then the high potential from the inverted output of the trigger 52 element 55 And will be open, and the element 54 And low potential from the inverse output of the trigger 52 will be closed.

As a result of this, the synchronizing pulse from input 62 passes through element 55 and is fed to the read input of memory block 51, which stores the starting address of the memory zone in the server data storage, in which all input codegrams in which the code of the biological parameters of the person did not match with a reference code of biological personality parameters.

In addition, the synchronizing pulse from the output of the 55 And element is delayed by the delay element 58 for the time of reading the start address code from the memory unit 51, and, firstly, it goes to the direct input of the trigger 52, setting it to a single state, in which the And element 55 will closed, and element 54 AND - open.

As a result of reading the start address code from block 51, the start address code from output 63 through input 80 of module 5 is fed to the counter information input, into which it is entered by the synchronizing pulse from input 64 of module 3. The start address code from the output of counter 5 is fed to information input 94 module 6.

In parallel with this process, the synchronizing pulse c enters the direct input of the trigger 53 and sets it to a single state, in which elements 91 And groups will be open, and elements 90 And groups will be closed. As a result of this, the code of the starting address for documenting data from input 94 of module 6 passes elements 91 AND groups, then elements 92 OR groups to address output 16 of the system.

At the same time, the synchronizing pulse 6 is supplied to the input of the OR element 56, as well as to the input of the OR element 57.

After passing the element 57 OR, the synchronizing pulse is sent to the output of the system 18 and then to the data display panel, which records the content of the received codogram from the output of the system 15 as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 56, is delayed by the element 59 for the duration of the trigger switching, and then from the output of the system 17 it is issued to the input of the first channel of the interruption of the data warehouse server.

By this signal, the data warehouse server switches to the subroutine for documenting the data of the input codogram from the output 15 of the system to the address indicated on the output 16, after which the system is ready to receive the next message from the passport and visa services.

If when checking the code of biometric personality parameters of the next input codogram, the mismatch of the biological code of the personality parameters with the reference code stored in the system data store is again revealed, then the signal from the input 62 of module 3 will now pass not through the 55 I element, but through the 54 I element, since the trigger 52 will be in a single state, in which it opens with a high potential from a direct output element 54 I.

In this case, the synchronizing pulse from the input 62 of the module 3 passes through the element 54 And to the output 64 of the module 3 and then goes to the counting input 81 of the module 5, increasing the documentation address by one.

In addition, the same clock pulse is supplied to the input of the OR element 56, as well as to the input of the OR element 57. After passing the OR element 57, the synchronizing pulse is fed to the system output 18 and then to the data display panel, which records the content of the received codogram from the system output 15 as not corresponding to its reference value in the system database.

In addition, the same synchronizing pulse passes through the OR element 56, is delayed by the element 59, and then from the output 17 of the system is issued to the input of the first channel of the database server interrupt.

By this signal, the database server switches to the subroutine for documenting the data of the input codogram from the output 15 of the system to the address indicated on the output 16, after which the system is ready to receive the next message from the passport and visa services.

Thus, the introduction of new modules has significantly improved the reliability of the data identification system by implementing procedures for automatic control of biometric parameters and authentication of personal data.

The introduction of the system into the practice of the work of checkpoints will significantly increase the efficiency and reliability of the work of checkpoints throughout the Russian Federation.

Sources of information taken into account when drawing up the description of the application:

1. US patent No. 5136708 M. cl. G06F 15/16, 1992

2. US Patent No. 5129083 M. cl. G06F 12/00, 15/40, 1992 (prototype).

Claims (1)

An automated system for identifying a person according to passport and visa control data, containing a data processing mode control module, the information and synchronizing inputs of which are the first information and synchronizing system inputs, and the first output of the data processing mode control module is the information output of the system, intended for issuing data to the information the input of the data warehouse, while the first information input of the system is designed to receive data from citizens automatically these workplaces of passport and visa services, and the first synchronizing input of the system is designed to receive synchronizing signals from automated workplaces of passport and visa services for entering input data into the data processing mode control module, the documentation data addressing module in the data warehouse, the output of which is connected to one the address input of the module for issuing addresses of records of citizens' data in the data warehouse, the output of which is the address output of the system, intended for the issuance of record addresses and count data is pushed to the address input of the data warehouse, characterized in that the system comprises a module for selecting addresses of records in the data warehouse, the information input of which is connected to the second output of the module for controlling the data processing mode, the synchronizing input of the module for selecting addresses of records in the data warehouse is connected to the first synchronizing output of the module control the data processing mode, and the output of the module for selecting addresses of records in the data warehouse is connected to another address input of the module for issuing addresses of data records waiting in the data warehouse, the identity data identification module, one information input of which is connected to the third information output of the data processing mode control module, the other information input of the personality data identification module is the second information input of the system, and the synchronizing input of the personality data identification module is the second synchronizing input of the system , and one output of the identity data identification module is a signal output of the system, designed to issue synchronize pulses to the input of the third channel of the interruption of the data warehouse server, while the second information input of the system is designed to receive data warehouse records, and the second synchronizing input of the system is designed to receive synchronizing pulses of the data warehouse server for recording data warehouse records in the identity data identification module, and the module management of documenting citizen data in a data warehouse, the installation input of which is connected to the second synchronizing output of the mode control module o data processing, the synchronizing input of the citizen data documentation control module in the data warehouse is connected to another output of the personal data identification module, the information output of the citizens data documentation management module in the data warehouse is connected to the information input of the documentation data addressing module in the data warehouse, the first synchronizing output of the documentation management module citizen data in the data warehouse is connected to the synchronizing input of the document data addressing module data in the data warehouse, the second synchronizing output of the citizen data documentation management module in the data warehouse is connected to the counting input of the documentation data addressing module in the data warehouse, the third synchronizing output of the citizens data documenting management module in the data warehouse is the first synchronizing output of the system for issuing synchronization signals to the input of the first channel of the data warehouse server interrupt, the fourth synchronizing output of the control module docum The editing of citizens' data into the data warehouse is the second synchronizing input of the system, designed to issue a synchronizing signal to the data display panel of the server database record receiving unit, the information and synchronizing inputs of which are the second information and synchronizing inputs of the system, the first and second control outputs of the data documentation control module citizens in the data warehouse are connected to the first and second control inputs of the module issuing addresses of data records citizens in the data store, wherein the third timing output module control processing mode is the third output of the synchronizing system, designed to issue timing pulses to the input of the second channel database server interrupt.