WO2003052717A2

WO2003052717A2 - System for identifying a person at a remote location

Info

Publication number: WO2003052717A2
Application number: PCT/GB2002/005786
Authority: WO
Inventors: David Gordon Blakeley; David Vernon Russell
Original assignee: Exam On Demand Limited
Priority date: 2001-12-19
Filing date: 2002-12-19
Publication date: 2003-06-26
Also published as: GB0130358D0; AU2002352460A1; WO2003052717A3; AU2002352460A8

Abstract

The present invention provides an apparatus for enabling the verification, at a first location (16), of a document produced at a second remote location. The apparatus comprises a data terminal (2) which is located at the second location and in data communication with the first location. The data terminal (2) at the second location records data (4, 8) relating to the identity of a person who is physically present at the second location. This data relating to the identification of the person present at the second location is then associated with the document. Both the document and the associated identification data are transmitted to the first location.

Description

Remote Document Verification

This invention relates to methods and apparatus for verifying the person responsible for documents produced remotely, i.e. to verify that they have been produced by a stated person. It relates particularly, but not exclusively to the application of such methods and apparatus to examinations which may be conducted remotely.

At present in order to conduct examinations of any significant importance, such as for professional qualifications and the like, it is necessary in general to distribute examination papers beforehand, and to have people at each examination centre conducting and invigilating the examination in order to reduce the possibility of cheating or fraud. There is clearly a significant use of resources and cost involved and this, in turn, can limit the number of opportunities for individuals to sit a particular examination.

Whilst there are many online tests and questionnaires available, e.g. over the Internet, these are not suitable for examinations of any significance as there currently exists no satisfactory way of controlling the conditions under which the test is sat.

There exists a need, therefore, for a way of enabling important examinations to be conducted online, whilst minimising the possibility of cheating and/or fraud.

When viewed from a first aspect, the present invention provides a method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal; and transmitting said document to said first location with said identification data. When viewed from a second aspect the invention provides apparatus enabling verification, at a first location, of a document produced at a second remote location, comprising: a data terminal at said second location capable of data communication with said first location; means provided at the second location for recording data relating to the identity of a person physically present at said second location; means for associating said identification data with a document produced at said second location; and means for transmitting said document to said first location with said identification data.

Thus it will be seen by those skilled in the art that in accordance with the present invention a document produced remotely may be verified by virtue associating it with identification data that can establish that a particular person was physically at the location at which the document was produced. This is beneficial for example where an examination candidate is sitting an examination distributed online and it is required to establish that the correct person actually produced the document containing answers to the questions .

The identification data recorded and thus the means for recording it may vary depending upon the circumstances, and any identification method that is capable of establishing the physical presence of a particular person may be suitable. Thus, fingerprint scanning, retinal scanning, voice print or DNA identification may be used, all of which are known per se.

Preferably the identification data comprises an image of the person at the data terminal, a camera being provided for this purpose. This allows for instant comparison at a later date with the person or another image thereof in order to verify identity. It therefore enables, in a preferred application, the operator of an exam to ascertain that the correct person is present at the remote location to sit the examination. This helps to prevent fraud arising from one person sitting an examination in place of another. In a particularly convenient embodiment, a standard digital camera provided with and mounted to a PC acting as the data terminal is utilised.

The data terminal may be permanently connected to the first location. Preferably, however, the connection is terminable, e.g. during an examination. This further enhances isolation of the candidate, particularly when the connection between the first location and the data network comprises a public network such as the Internet. In some preferred embodiments the first location is arranged to receive information identifying said data terminal, thereby enabling its authorisation to be verified. This could be transmitted directly from the data terminal but is preferably transmitted from a local server at the second location. The above-mentioned identifying information preferably comprises a registration number, e.g. associated with a particular computer or disk drive, which may be checked against a look-up table at the first location.

In at least preferred embodiments of the invention, improvement in the verifiability of documents, such as the answers to online examinations, is possible.

However, the applicants have devised further improvements to such processes and thus in preferred embodiments, the system is arranged to establish the continued presence of the person whose identification data was first recorded. Many possible ways of doing this are envisaged, and indeed it is envisaged that a combination of such methods may be employed. In one preferred embodiment, means for detecting movement in the vicinity of the data terminal is provided. Such motion detection means could be configured to trigger an alarm if movement above a threshold amount is detected. This could, for example, alert the operator to a potential change of individuals during an examination or to an individual leaving the terminal illegally.

Additionally or alternatively, means for detecting sound in the vicinity of the data terminal is provided. Similarly, such sound detection means could be configured to trigger an alarm if sound above a threshold level is detected. This could, for example, alert the operator to a candidate communicating with someone else illegally.

Preferably a series of images is taken, conveniently by the same camera, if provided, as is used to capture the original image. The images may be taken at predefined, e.g. regular, intervals, but preferably images are taken randomly - e.g. throughout a predetermined period such as the duration of an examination. Additionally or alternatively, an image may be triggered if one of the above-mentioned sound or motion thresholds is exceeded. Preferably all of the images captured are associated with the document and transmitted with it to the first location.

Preferably more than one camera is provided to enable images from different angles to be captured. For example, one camera may be positioned above a display screen to capture a 'front-on¹ image whilst another may be provided at the side of where a user sits at the data terminal to capture a side view. In some preferred embodiments, the second camera is concealed, thus making it even more likely that someone attempting to cheat would be caught.

Taking a series of images for establishing the continued presence of a particular person at a data terminal is novel and inventive in its own right, not necessarily just in the context of associating and transmitting identification data with a document. When viewed from a further aspect therefore, the present invention provides a method of establishing the continued presence of a person at a data terminal during a predetermined period, comprising capturing and recording a series of still images of the vicinity of said data terminal during said period. Preferably the images are captured by a camera in data communication with said data terminal and recorded by said data terminal .

When viewed from a yet further aspect the invention provides an apparatus comprising a data terminal, a camera in data communication therewith, and means for capturing and recording a series of still images of the vicinity of said data terminal using said camera.

It will be appreciated that by still images is meant a series of separate images which are not intended to be viewed contiguously and which would normally be expected to be at least say 5 seconds, and more usually of the order of minutes, apart. As above, the apparatus may be arranged to take the images at predefined, e.g. regular, intervals, but preferably it is arranged to take the images randomly e.g. throughout a predetermined period. Preferably means for detecting sound and/or means for detecting motion is additionally provided and an image capture is triggered if a sound/motion threshold is exceeded. Although, as mentioned above, not essential, preferably one or more - and most preferably all - of the images are associated with a document produced at said data terminal and transmitted with the document to another, remote, location. As will by now be apparent, in preferred embodiments, the document produced at the data terminal contains answers to an examination. The term 'document' is to be interpreted loosely and not so as to confer any particular form or structure on the data it contains . For example the 'document' may simply be a string of characters representing the given answers to multiple choice questions. The document may, of course, be the same as one containing the questions - i.e. although the final document is produced at the terminal (by the addition of answers) it is not created there originally. Alternatively it may be a separate document or block of data.

It will be appreciated by those skilled in the art that the methods and apparatus set out hereinabove facilitate the conduct of rigorous examinations remotely online. This, in turn, gives rise to several further benefits. For example, if examination answers are entered into a data terminal, they may be easily analysed in a variety of ways just like any other data. A specific example is rapid statistical analysis. Furthermore new types of analysis may be carried out - for example the time spent on answering individual questions and/or the average score obtained for a particular question. This could be useful, say, to establish the difficulty of questions when setting and reviewing them. The methods and apparatus of the invention may be implemented using pure hardware means such as discrete components or hard-wired logic gates . Alternatively, the invention may be implemented at least partially using software, e.g. computer programs. It will thus be seen that when viewed from a further aspect, the present invention provides computer software specifically adapted to carry out the methods hereinabove described when installed on data processing means comprising the data terminal . Furthermore it will be appreciated that the means specified in the apparatus of the invention may similarly comprise computer software specifically adapted to carry out the methods hereinabove described when installed on the data terminal, and a computer program element comprising computer software code portions for performing the methods hereinabove described when the program element is run on a computer. The invention also extends to a carrier comprising such software which when used to operate an apparatus for verifying, at a first location, a document produced at a data terminal in a second remote location, causes, in conjunction with said data terminal, said apparatus to carry out the steps of the method of the present invention. Such a carrier could be a physical storage medium such as a ROM chip, CD ROM or disk, or could be a signal such as an electronic signal over wires, an optical signal or a radio signal such as to a satellite or the like.

It will further be appreciated that not all steps of the invention need be carried out by computer software and thus from a further broad aspect the present invention provides computer software such software installed on a carrier for carrying out at least one of the steps of the methods set out hereinabove. Similarly, not all of the means specified in the apparatus of the invention need comprise computer software and thus in the general preferred case, it is at least one of such means which comprises computer software.

It will be appreciated that at least some of the aspects of the invention involve remote communication and therefore that, in general, software at both client and server ends will cooperate to give rise to the features of the present invention. Thus when viewed from another aspect, the invention provides server software which, when operated in conjunction with corresponding client software carries out a method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal ; and transmitting said document to said first location with said identification data.

Similarly when viewed from another aspect, the invention provides client software which, when operated in conjunction with corresponding server software carries out a method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal ; and transmitting said document to said first location with said identification data.

It should be appreciated that the client need not be the data terminal but may be provided by another machine in data communication with the data terminal - e.g. by means of a local area network. As well as the novel and inventive technical invention (s) disclosed herein, certain novel and inventive business methods and advances in the field of conduct of examinations are also disclosed. Thus when viewed from a yet further aspect the present invention provides a method of doing business comprising providing examination questions over a remote network connection; providing computer software adapted to associate data identifying a person giving answers to said examination questions with said answers and indicating whether said person has passed said examination on the basis of said answers .

When viewed from another aspect the invention provides a method of doing business comprising authorising an examination centre to conduct examinations; receiving identification data relating to an examination candidate supplied online by said examination centre; verifying that said candidate is allowed to sit said examination; transmitting one or more questions making up said examination online to said examination centre; receiving a results file from the examination centre; and giving a score on the basis of said results file. Preferably the results file comprises a digital image of the candidate. Also preferred is the step of identifying the exam centre e.g. by a registration number such as a computer or hard-drive registration number. When viewed from a further aspect, the invention provides a method of conducting an examination comprising taking a plurality of pictures of a person sitting said examination during the examination. Preferably said pictures are taken at random intervals throughout the examination.

When viewed from a further aspect, the invention provides a method of conducting an examination comprising downloading examination questions from a remote server and uploading answers to said questions after completion of the examination.

A preferred embodiment of the present invention will now be described, by way of example only, with reference to the accompanying Figure which is a schematic diagram of a system in accordance with the invention.

In Fig. 1, a personal computer (PC) 2 has ,a forward-facing digital camera 4 mounted to the PC's monitor 6 and a second, sideways-facing concealed digital camera 8 , connected to the PC 2 by a USB connection 10. The PC 2 is connected to a local server 12 via a Local Area Network (LAN) connection 14. The local server 12 is, in turn, connected to a host server 16 by means of the Internet 18. An administrator's terminal 20 is also connected to the local server 12 by the LAN 14.

Use of the system shown schematically in Fig. 1 will now be described. The PC 2, monitor 6, and cameras 4,8 are located in an individual cubicle in an examination centre. The examination centre being an establishment approved for the conduct of particular examinations. The local server 12 and administrator's terminal 20 are also at the examination centre.

An examination candidate enters an examination centre with a view to sitting a specific examination. He or she will be asked for traditional form(s) of identification, which the administrator will check. The administrator will ascertain the exact examination that the candidate wishes to sit and will enter the candidate's details into the administrator's terminal 20 from where it will be uploaded to the host server 16 via the LAN 14, local server 12 and the Internet 18. Unknown to the administrator, the administrator's terminal 20 will also upload its hard drive registration number. The host server 16 then checks the candidate's details against its database to ascertain the candidate's eligibility for the examination. It also checks that the examination centre has been authorised as such by checking the hard drive registration number against a look-up table. The host server 16 then provides authorisation to the administrator's terminal 20. Once eligibility has been checked, the administrator will take the candidate to the specially allotted area in which the candidate will take the examination. The details of the area will differ depending on the security level of the examination and by implication the level allowed at that specific centre, but would normally be a private cubicle that can be monitored by invigilators if necessary. All personal belongings will be taken from the candidate for the duration of the examination and the process of registering an exam request will start.

The exam request stage signifies the start of the time where 'exam conditions' prevail. After providing the examination centre's pass codes The administrator sends information about the candidate, such as full name, address etc. and any candidate number required by the specific examination that is allotted e.g. by either the examining body, to the host server 16 by means of the administrator's terminal 20 and the local server 12. This allows for a very good chance of positively identifying the candidate that should take the examination set and is similar to the situation as it presently stands. Before the examination commences, the candidate poses for an image captured by the forward-facing digital camera 4. The captured image is shown on the monitor 6 and may be retaken until the candidate is happy with it. It is this image which will be used to identify the candidate's answer document.

The full examination 'paper' is then downloaded from the host server 16 onto the data terminal PC 2 via the local server 12. Thereafter the online connection to the PC 2 is physically severed by removing the LAN connection 14.

The questions asked are chosen randomly from a large bank of questions held on the host server 16. This makes it highly improbable that two candidates sitting the examination at the same time will be able to help each other as their papers will normally be different.

The candidate starts to answer the questions by interacting with a graphical user interface shown on the monitor. A document containing the candidate's answers is produced. As soon as the answer document is created, it is linked to the digital image file containing the image posed for by the candidate. Unknown to the candidate or the examination centre, the software running on the PC 2 is arranged to continue to trigger the digital camera 4 to capture digital pictures of the candidate at random intervals throughout the examination in order to allow monitoring for the continued presence of the candidate. Each image is linked to the answer document just as the first, ' overt ' image is .

In addition, the output from the digital camera 4 is continuously monitored by another part of the software running on the PC 2 for the degree of movement - i.e. the amount by which the moving image changes from one frame to the next. If movement over a certain amount is detected, the software triggers an additional image capture and also flags the answer document for manual review of the associated images. This should enable an arbitrator to determine whether any illegal behaviour took place. For example, this will show instances where a second person takes over the completion of the examination for the examinee, by standing in their stead or where the centre abuses its position or fails in its duty and allows more than one candidate within the examination area.

As well as the overt digital camera 4, an additional covert digital camera 8 captures images at the same time. This camera 8 covers not only the candidate sitting in front of the PC 2, but also the surrounding area, using technology presently in use in (e.g. home) security systems. As far as the candidate is concerned, the examination continues as normal, with warnings for time allowed written into the programme. Once the allotted time has elapsed, the candidate will no longer be allowed to add any further input to the examination answers document. The connection to the LAN 14 is then re-established and the answer document is transmitted to the host server 16 with the image files via the local server 12. The host processor 16 will then process the answers and will, upon supply of the correct codeword from the administrator's terminal 20, download the results to the administrator's terminal 20. The administrator may then print a temporary hard copy certificate which has details of the examination completed, the date, the digital image of the candidate posed for at the start of the examination and contact details for a body able to give verification of the authenticity of the certificate at a later date.

If the answer document was flagged for manual review as a result of an excessive movement being detected, such a certificate may not be authorised until the manual review or other investigations have taken place.

The data that is generated during the above- mentioned process is captured by the host server 16 and stored on a secure database for future reference . For example, a record in the form of an 'educational passport', for use by the candidate and also potential future employers and the like, is kept. This will comprise details of all examinations and course-work that has been completed by that particular candidate and will have a sample picture of the candidate. Such a record may be available to download at a later date.

It will be appreciated by those skilled in the art that many variations and modifications are possible within the scope of the present invention. For example as well as or instead of digital image capture other means of identification could be used such as existing technology to integrate systems that capture details of the candidate's fingerprints or DNA or which conduct a retina scan. Also sound recordings could be made, as well as or instead of images. Furthermore, it is not essential for hard-wired links to be used to connect the various components together - some or all may be wireless - e.g. operating the Bluetooth (registered trade mark) protocol.

Claims

Claims :

1. An apparatus enabling verification, at a first location, of a document produced at a second remote location, comprising: a data terminal at said second location capable of data communication with said first location; means provided at the second location for recording data relating to the identity of a person physically present at said second location; means for associating said identification data with a document produced at said second location; and means for transmitting said document to said first location with said identification data.

2. An apparatus as claimed in claim 1 wherein the identification data comprises an image of the person at the data terminal .

3. An apparatus as claimed in claim 2 wherein a standard digital camera is provided in data communication with the data terminal for capturing the image .

4. An apparatus as claimed in any preceding claim wherein the connection between the data terminal and the first location is terminable.

5. An apparatus as claimed in any preceding claim arranged to transmit information identifying said terminal to said first location.

6. An apparatus as claimed in claim 5 comprising a local server at the second location arranged to transmit said identifying information therefrom.

7. An apparatus as claimed in claim 5 or 6 wherein the said identifying information comprises a registration number.

8. An apparatus as claimed in any preceding claim arranged to establish the continued presence of the person, whose identification data is first recorded.

9. An apparatus as claimed in any preceding claim comprising means for detecting movement in the vincinity of the data terminal.

10. An apparatus as claimed in claim 9 wherein said means for detecting movement is arranged to trigger an alarm when movement above a threshold is detected.

11. An apparatus as claimed in claim 9 or 10 comprising means for capturing an image if movement above a or the threshold is exceeded.

12. An apparatus as claimed in any preceding claim comprising means for detecting sound in the vincinity of the data terminal .

13. An apparatus as claimed in claim 12 wherein said means for detecting sound is arranged to trigger an alarm when sound above a threshold is detected.

14. An apparatus as claimed in claim 12 or 13 comprising means for capturing an image if a or the sound threshold is exceeded.

15. An apparatus as claimed in any preceding claim wherein said identification data comprises a series of images taken at predefined intervals .

16. An apparatus as claimed in any of claims 1 to 14 wherein said identification data comprises a series of images taken randomly throughout a predetermined period.

17. An apparatus as claimed in claim 15 or 16 comprising means for associating all of the images captured with the document and means for transmitting said images with said document to the first location.

18. An apparatus as claimed in any preceding claim comprising a plurality of cameras for enabling images from different angles to be captured.

19. An apparatus as claimed in any preceding claim comprising a first camera and a second camera wherein the second camera is concealed.

20. An apparatus comprising a data terminal, a camera in data communication therewith, and means for capturing and recording a series of still images of the vicinity of said data terminal using said camera.

21. An apparatus as claimed in claim 21 wherein said means for capturing and recording images is arranged to take the images randomly throughout a predetermined period.

22. An apparatus as claimed in claim 20 or 21 comprising means for detecting sound and/or means for detecting motion arranged to trigger an image capture if a sound/motion threshold is exceeded at the data terminal.

23. An apparatus as claimed in any of claims 20 to 22 comprising means for associating one or more the captured images with a document produced at said data terminal and means for transmitting said one or more images with the document to another, remote, location.

24. An apparatus as claimed in claim 23 arranged to associate all of the captured images with the document produced at said data terminal and to transmit said images the document to said, remote location.

25. A method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal ; and transmitting said document to said first location with said identification data.

26. A method as claimed in claim 26 wherein the identification data comprises an image of the person at the data terminal .

27. A method as claimed in claim 25 or 26 comprising terminating the connection between the data terminal and the first location.

28. A method as claimed in any of claims 25 to 27 comprising transmitting information identifying said data terminal to the first location.

29. A method as claimed in claim 28 comprising transmitting said identifying information from a local server at the second location.

30. A method as claimed in any of claims 25 to 29 comprising establishing the continued presence of the person whose identification data was first recorded.

31. A method as claimed in any of claims 25 to 30 comprising detecting movement in the vincinity of the data terminal .

32. A method as claimed in claim 31 comprising triggering an alarm when movement above a threshold is detected.

33. A method as claimed in claims 31 or 32 comprising capturing an image if a or the movement threshold is exceeded.

34. A method as claimed in any of claims 25 to 33 comprising detecting sound in the vincinity of the data terminal .

35. A method as claimed in claim 34 comprising triggering an alarm when sound above a threshold is detected.

36. A method as claimed in claim 34 or 35 comprising capturing an image if a or the said sound threshold is exceeded .

37. A method as claimed in any of claims 25 to 36 comprising taking a series of images at predefined intervals.

38. A method as claimed in any of claims 25 to 36 comprising taking a series of images randomly throughout a predetermined period.

39. A method as claimed in claim 37 or 38 comprising associating all of the images captured with the document and transmitting said images with said document to the first location.

40. A method as claimed in any of claims 25 to 39 comprising using a plurality of cameras to capture images from different angles.

41. A method of establishing the continued presence of a person at a data terminal during a predetermined period, comprising capturing and recording a series of still images of the vicinity of said data terminal during said period.

42. A method as claimed in claim 41 comprising taking the images randomly throughout a predetermined period.

43. A method as claimed in claim 41 or 42 comprising detecting sound and/or detecting motion and triggering an image capture if a sound/motion threshold is exceeded.

44. A method as claimed in any of claims 41 to 43 comprising associating one or more of the captured images with a document produced at said data terminal and transmitting said one or more images with the document to another, remote, location.

45. A method as claimed in claim 44 comprising associating all of the captured images with a document produced at said data terminal and transmitting said images with the document to the remote location.

46. Computer software specifically adapted to carry out the method as claimed in any of claims 25 to 45, when installed on data processing means comprising the data terminal .

47. Computer software as claimed in claim 46 installed on a carrier.

48. A computer program element comprising computer software code portions for performing a method as claimed in any of claims 25 to 45.

49. Server software which, when operated in conjunction with corresponding client software carries out a method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal ; and transmitting said document to said first location with said identification data.

50. Client software which, when operated in conjunction with corresponding server software carries out a method of verifying, at a first location, a document produced at a data terminal in a second remote location, comprising: recording data at the second location relating to the identity of a person physically present at said second location; associating said identification data with a document produced at said data terminal ; and transmitting said document to said first location with said identification data.

51. Software as claimed in claim 49 or 50 wherein the client is provided by a machine in data communication with the data terminal .

52. A method of doing business comprising providing examination questions over a remote network connection; providing computer software adapted to associate data identifying a person giving answers to said examination questions with said answers and indicating whether said person has passed said examination on the basis of said answers .

53. A method of doing business comprising authorising an examination centre to conduct examinations; receiving identification data relating to an examination candidate supplied online by said examination centre; verifying that said candidate is allowed to sit said examination; transmitting one or more questions making up said examination online to said examination centre; receiving a results file from the examination centre; and giving a score on the basis of said results file.

54. A method of doing business as claimed in claim 53 wherein the results file comprises a digital image of the candidate .

55. A method of doing business as claimed in claim 53 or 54 further comprising the step of identifying the exam centre.

56. A method of conducting an examination comprising taking a plurality of pictures of a person sitting said examination during the examination.

57. A method as claimed in claim 56 wherein said pictures are taken at random intervals throughout the examination.

58. A method of conducting an examination comprising downloading examination questions from a remote server and uploading answers to said questions after completion of the examination.