Encrypted biometric encoded security documents

• US 20030117262A1
• Filed: 06/10/2002
• Published: 06/26/2003
• Est. Priority Date: 12/21/2001
• Status: Abandoned Application

• Current Assignee: KBA - Giori SA (Koenig & Bauer AG)
• Original Assignee: KBA - Giori SA (Koenig & Bauer AG)
• Inventors: Anderegg, Pierre-Yves, Hirsch, Hans-Jorg
• Application Number:
  US10/166,208
• Publication Number:
  US 20030117262A1
• Time in Patent Office: Days
• US Class Current: 340/5.53
• CPC Class Codes: G06K 19/06046 Constructional details
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A travel permissions communication interface system is provided, having a scanner, a identifying characteristic reader, a computer, a comparator, a connection device, and a display, all of which being managed by a computer operably connected therebetween. The scanner (a) reads a portable identification carrier onto which is encoded identifying characteristic data of at least one person; (b) sends such identification data to the computer for verification of authenticity of the carrier and (c) extracts a identifying characteristic of a certain identifying characteristic parameter from the identifying characteristic data encoded on the carrier. The identifying characteristic reader reads a same identifying characteristic parameter of the person purported to be identified by the carrier. The comparator compares the encoded identifying characteristic with the extracted identifying characteristic to authenticate the person associated with the carrier. The connection means, if the carrier and at least one person are authenticated, enables the computer to connect to a data storage device of travel permissions associated with that person or type of person. The display displays the travel permissions to an authority to aid the authority in determining a disposition with regard to the person. A method of using a travel permissions communication interface system is also disclosed.

Claims

1. A travel permissions communication interface system comprising a scanner, a identifying characteristic reader, a computer, a comparator, a connection means, and a disposition device,

wherein the connection means operably connects the computer to the scanner, the reader and disposition device,

wherein the scanner reads a portable identification carrier on which is encoded machine-readable, digital identifying characteristic data of at least one person, the carrier comprising layers of binary information, each represented in a different color from either the visible or invisible part of the spectrum;

wherein the computer has;

(a) transmission means to transmit such scanned identifying characteristic data from the scanner to the computer for verification of the authenticity of the carrier, and

(b) logical extraction means to extract an identifying characteristic of a certain identifying characteristic parameter from the identifying characteristic data encoded on the carrier,

wherein the identifying characteristic reader is adapted to read a same identifying characteristic parameter of the at least one person purported to be identified by the carrier,

wherein the comparator compares the encoded identifying characteristic with the extracted identifying characteristic to authenticate the at least one person associated with the carrier;

wherein the connection means, if the carrier and at least one person are authenticated, enables the computer to connect to a data storage device of permissions associated with that person or type of person; and

wherein the disposition device dispositions the at least one person in a prescribed manner.

2. The system of claim 1, wherein the identifying characteristic reader is chosen from a group of identifying characteristic readers consisting of biometric readers, license readers, travel authorization readers, and custody document readers.

3. The system of claim 1, wherein the type of person is determined based on the nationality of the person.

4. The system of claim 1, wherein the encoded identifying characteristic data is encrypted prior to being encoded onto the carrier.

5. The system of claim 1, wherein the data storage device is integrated into the carrier.

6. The system of claim 5, wherein the data storage device is a printed graphical representation of the associated identifying characteristic readable by the scanner.

7. The system of claim 6, wherein the carrier is a printable substrate.

8. The system of claim 7, wherein the substrate is printed with security ink.

9. The system of claim 6, wherein the graphical representation is of an encrypted identifying characteristic.

10. The system of claim 6, wherein the graphical representation is a two dimensional barcode.

11. The system of claim 1, wherein the storage device is a remote database storing permissions in association with persons in a secure manner.

12. The system of claim 1, wherein part of or all of the variable information on the identification carrier is encoded and encrypted in a data storage device on the same carrier.

13. The system of claim 1, wherein identifying characteristic data of at least two persons of which at least one has a legal responsibility for the other, are encoded on the carrier.

14. The system of claim 13, wherein a function is applied to the identifying characteristic data of the at least two persons to define a combined graphical representation of the at least two persons.

15. The system of claim 14, wherein the graphical representation is a two dimensional barcode.

16. The system of claim 15, wherein the two dimensional bar code comprises combinations of primary colors cyan, magenta, and yellow.

17. The system of claim 15, wherein the two dimensional bar code is multi-colored and thus capable of storing the data of a number of persons corresponding to the number of colors in the barcode.

18. The system of claim 14 wherein the identifying characteristic data of each of the at least two persons is encoded on a 2D barcode of only a single primary color.

19. The system of claim 14, wherein the combined graphical representation is comprised of the superposition of the 2D, primary color barcodes of at most three individuals.

20. The system of claim 1, wherein the accessed permissions of the at least two persons relate to responsibilities of one person with respect to another.

21. The system of any one of the above claims wherein the identifying characteristic data is selected from one of a group of identifying characteristic data consisting of iris scan data, retina scan data, fingerprint data, facial form data, hand form data, and individual DNA data.

22. The system of any one of claims 1-20, wherein the permissions may be printed by a method selected from one of a group of methods consisting of offset digital, inkjet, bubble jet, laser printing and laser etching.

23. A method of using a travel permissions communication interface system, wherein the method comprises the steps of:

reading a portable identification carrier onto which is encoded identifying characteristic data of at least one person;

sending such identification data to the computer for verification of authenticity of the carrier;

extracting a identifying characteristic of a certain identifying characteristic parameter from the identifying characteristic data encoded on the carrier;

reading a same identifying characteristic parameter of the at least one person purported to be identified by the carrier,

comparing the encoded identifying characteristic with the extracted identifying characteristic to authenticate the at least one person associated with the carrier;

if the carrier and at least one person are authenticated, enabling the computer to connect to a data storage device of permissions associated with that person or type of person; and

displaying the permissions to an authority to aid the authority in determining a disposition with regard to the at least one person.

24. A computer-readable medium encoded with a method of using a travel permissions communication interface system, the method comprising the steps of:

reading a portable identification carrier onto which is encoded identifying characteristic data of at least one person;

sending such identification data to the computer for verification of authenticity of the carrier;

extracting a identifying characteristic of a certain identifying characteristic parameter from the identifying characteristic data encoded on the carrier;

reading a same identifying characteristic parameter of the at least one person purported to be identified by the carrier,

comparing the encoded identifying characteristic with the extracted identifying characteristic to authenticate the at least one person associated with the carrier;

if the carrier and at least one person are authenticated, enabling the computer to connect to a data storage device of permissions associated with that person or type of person; and

displaying the permissions to an authority to aid the authority in determining a disposition with regard to the at least one person.

25. An identification carrier reading and decoding device which reads and decodes an encoded, encrypted identifying characteristic on a portable identification carrier, the device including a scanner, a processor, and a comparator, wherein the scanner reads the encrypted identifying characteristic and transmits the read data to the processor for processing, the processor decrypts the identifying characteristic and transmits the decrypted identifying characteristic on to the comparator, and the comparator compares this data with identifying characteristic data of the same type read by an identification characteristic reader from a person purported to be associated with the carrier, in order to verify the person'"'"'s identity and subsequently, if identity is verified, to permit access to corresponding permission data.

26. The device of claim 25, wherein the identifying characteristic reader is chosen from a group of identifying characteristic readers consisting of biometric readers, license readers, travel authorization readers, and custody document readers.

27. An enhanced data storage device for machine-readable, digital data, for use in a portable identification carrier having at least one application surface onto which at least one layer is applied, the layer comprising encoded binary machine-readable, digital identifying characteristic data of at least one person, the data of each person being represented in a different color in the at least one layer.

28. The device of claim 27, wherein the encoded identifying characteristic data is encrypted prior to being encoded onto the carrier.

29. The device of claim 27, wherein the data storage device is integrated in the carrier.

30. The device of claim 29, wherein the data storage device is a printed graphical representation of the associated identifying characteristic readable by the scanner.

31. The device of claim 30, wherein the carrier is a printable substrate.

32. The device of claim 31, wherein the substrate is printed with security ink.

33. The device of claim 30, wherein the graphical representation is of an encrypted identifying characteristic.

34. The device of claim 30, wherein the graphical representation is a two dimensional barcode.

35. The device of claim 27, wherein the storage device is a remote database storing permissions in association with persons in a secure manner.

36. The device of claim 27, wherein part of or all of the variable information on the identification carrier is encoded and encrypted in a digital storage device on the same carrier.

37. The device of claim 27, wherein identifying characteristic data of at least two persons of which at least one has a legal responsibility for the other, is encoded on the carrier.

38. The device of claim 27, wherein a function is applied to the identifying characteristic data of the at least two persons to define a single graphical representation of the at least two persons.

39. The device of claim 38, wherein the graphical representation is a two dimensional barcode.

40. The device of claim 39, wherein the two dimensional bar code is comprised of combinations of primary colors cyan, magenta, and yellow.

41. The device of claim 39, wherein the two dimensional bar code is multi-colored and thus capable of storing the data of a number of persons corresponding to the number of colors in the bar code.

42. The device of claim 38 wherein the identifying characteristic data of each of the at least two persons is encoded on a 2D barcode of only a single primary color.

43. The device of claim 40, wherein the combination is comprised of the superposition of the 2D, primary color barcodes of at most three individuals.

44. The device of claim 35, wherein the accessed permissions of the at least two persons relate to responsibilities of one person with respect to another.

45. The system of claim 27 wherein the identifying characteristic data is selected from one of a group of identifying characteristic data consisting of iris scan data, retina scan data, fingerprint data, facial form data, hand form data, and individual DNA data.

46. The device of claim 35, wherein the permissions may be printed by a method selected from one of a group of methods consisting of offset digital, inkjet, bubble jet, laser printing, laser machining, and laser etching.

47. The device of claim 27 wherein the color is selected from either the visible or invisible part of the spectrum.

48. The device of claim 28 wherein any invisible layer extends over portions of the application surface of the carrier which may be printed with visible, non-encoded identifying characteristic data such as a digital photograph.

49. The data storage device of claim 27 wherein at least two persons are defined in a corresponding number of layers and superimposed digitally to create a single multicolor image which is applied to a substrate.

50. A logical security verification method, the method establishing the coherence of information contained within a data storage device in which open data is also encoded and encrypted on the storage device in binary, machine readable data layers, the method having the following steps:

(a) scanning data zones on the storage device,

(b) reading both the open data and the encoded encrypted data in the data zones of the storage device;

(c) decrypting the encoded, encrypted data read from one or more of the data layers;

(d) decoding the decrypted data; and

(e) comparing the information applied to the storage device in the open to that portion of the encrypted, encoded data in which the open data is also stored; and

(f) if the open data does not match the formerly encoded, encrypted open data, the storage device is flagged as counterfeit, and if the data do match, the storage device is flagged as genuine.