Person identification control method and system for implementing same

• US 20070194884A1
• Filed: 03/07/2005
• Published: 08/23/2007
• Est. Priority Date: 03/17/2004
• Status: Active Grant

• Current Assignee: IDEMIA Identity and Security France SAS (Advent International Corporation)
• Original Assignee: Sagem Defense Securite (Safran SA)
• Inventors: Rieul, Francois, Didier, Bernard
• Granted Patent: US 7,724,924 B2
• Time in Patent Office: Days
• US Class Current: 340/5.82
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints
• CPC Class Codes: G06V 40/197 Matching; Classification
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

The invention relates to a person identification control method and to a system for implementing same. The inventive method comprises the following steps consisting in: detecting biometric data (23, 48, 79, 94, 108) relating to at least one person; seeking a concordance between the biometric data relating to the person and biometric data that have been pre-stored in a biometric database (26, 51, 83, 97, 110), said pre-stored biometric data relating to persons for whom identification means have already been generated; and, when no concordance is found, generating an identification means (29, 56, 84, 98, 103, 111) that is associated with the person from the biometric data relating to the person and at least one identity (24, 49, 80, 95, 117) for said person.

Claims

1. A method of identification control of persons, comprising a phase of generating a unique means of identification associated with at least one person comprising the following steps:

/a/ detecting biometric data relating to said person;

/b/ searching for a match between the biometric data relating to said person and biometric data previously stored in a biometric database, the biometric database not containing identities of persons in association with the biometric data stored, said previously stored biometric data relating to persons for which means of identification have been previously generated; and

,

when no match has been found;

/c/ generating a means of identification associated with said person from biometric data relating to said person and at least one identity of said person.

2. The method as claimed in claim 1, comprising furthermore the step:

/d/ adding the biometric data relating to said person to the biometric database.

3. The method as claimed in claim 2, in which, during step /d/, the biometric data are added to the biometric database in association with a unique identifier of said means of identification associated with said person.

4. The method as claimed in claim 1, furthermore comprising a step of verification of the identity of said person.

5. The method as claimed in claim 4, in which the verification of the identity is reinforced for a person for which a match has been found in step /b/.

6. The method as claimed in claim 1, in which the generation, in step /c/, of a means of identification associated with said person is performed firstly from biometric data relating to said person, then supplemented with the addition of at least one identity of said person.

7. The method as claimed in claim 1, in which the phase of generating a unique means of identification associated with said person furthermore comprises the following steps:

calculating a key associated with said person, the key being able to take a much smaller number of values than the number of persons apt to require the generation of a unique means of identification, and high enough for any two persons to be associated with different keys, with a predetermined level of probability; and

storing said key in a database of the identities in association with an identity of said person.

8. The method as claimed in claim 7, in which the number of values of the key is chosen in such a way as to take account of the calculational power necessary to calculate all the combinations by brute force.

9. The method as claimed in claim 7, in which the number of values of the key lies substantially between a few tens and a few hundreds when the number of persons apt to require the generation of a unique means of identification is a few million or tens of millions.

10. The method as claimed in claim 7, in which the calculation of the key is performed from biometric data relating to said person.

11. The method as claimed in claim 10, in which the calculation of the key is performed from the general form of the prints of certain fingers at least of said person.

12. The method as claimed in claim 10, in which the calculation of the key is performed from information relating to the iris of the eye of said person.

13. The method as claimed in claim 10, comprising the following steps, when a match has been found in step /b/:

obtaining an identity of said person;

calculating the key associated with said person;

comparing the calculated key with the key stored in the database of identities in association with the identity obtained for said person; and

selectively implementing step /c/ as a function of the result of the comparison between said calculated and stored keys.

14. The method as claimed in claim 7, in which the calculation of the key is random.

15. The method as claimed in claim 14, in which moreover the key is stored in the biometric database in association with the biometric data relating to said person.

16. The method as claimed in claim 15, comprising the following steps, when a match has been found in step /b/:

obtaining an identity of said person;

obtaining the key stored in the biometric database in association with the biometric data relating to said person;

comparing the key obtained with the key stored in the database of identifies in association with the identity obtained for said person; and

selectively implementing step /c/ as a function of the result of the comparison between said keys.

17. The method as claimed in claim 1, furthermore comprising a second phase of granting at least one entitlement to said person, in which:

/e/ said person identifies themselves with the aid of the means of identification which has been previously associated therewith; and

/f/ said entitlement is granted to said person when said entitlement has not already been granted to said person a number of times equal to a predetermined number

18. The method as claimed in claim 17, in which step /e/ comprises a comparison between biometric data relating to said person and the biometric data from which the means of identification associated with said person has been generated.

19. The method as claimed in claim 17, in which step /f/ comprises the consultation, in a database of entitlements, of the entitlements already granted to persons, on the basis of an identifier.

20. The method as claimed in claim 19, in which said identifier is an identity of said person, obtained from the means of identification associated with said person.

21. The method as claimed in claim 19, in which said identifier is a unique identifier of the means of identification associated with said person, this identifier being incorporated into said means of identification associated with said person.

22. The method as claimed in claim 17, in which when a match has been found in step /b/, the unique identifier of the means of identification associated with said person which was stored in the biometric database in association with the biometric data relating to said person is added to a first list of the identifiers of the revoked means of identification, and, in which step /f/ is selectively implemented depending on whether the identifier of the means of identification with which said person is identified is or is not stored in a second list of the identifiers of the revoked means of identification.

23. The method as claimed in claim 22, in which the phases of generating a unique means of identification associated with said per son and of granting at least one entitlement to said person are implemented by a first and a second entity respectively, and in which the first list of the identifiers of the revoked means of identification is stored on a database of the identifiers of the revoked means of identification that can be consulted by the second entity, the second list of the identifiers of the revoked means of identification then being identical to the first list of the identifiers of the revoked means of identification.

24. The method as claimed in claim 22, in which the phases of generating a unique means of identification associated with said person and of granting at least one entitlement to said person are implemented by a first and a second entity respectively, and in which the identifiers added to the first list of the identifiers of the revoked means of identification are transmitted from the first entity to the second entity to update the second list of the identifiers of the revoked means of identification

25. The method as claimed in claim 24, in which the transmission of the identifiers from the first entity to the second entity is performed according to at least one of the following mechanisms:

by periodic transfer of said identifiers added to the first list of the identifiers of the revoked means of identification since the last transfer, or by periodic transfer of the whole set of identifiers stored in the first list of the identifiers of the revoked means of identification, or by instantaneous transfer of each identifier upon its addition to the first list of the identifiers of the revoked means of identification.

26. A system of identification control of persons, for generating a unique means of identification associated with at least one person, the system comprising:

/a/ means for detecting biometric data relating to said person;

/b/ means for searching for a match between the biometric data relating to said person and biometric data previously stored in a biometric database, the biometric database not containing identities of persons in association with the biometric data stored, said previously stored biometric data relating to persons for which means of identification have been previously generated; and

,

/d/ means for, when no match has been found, generating a means of identification associated with said person from biometric data relating to said person and at least one identity of said person.

28. The system as claimed in claim 26, furthermore comprising:

/d/ means for adding the biometric data relating to said person to the biometric database.

29. The system as claimed in claim 28, in which the means /d/ are such that the biometric data are added to the biometric database in association with a unique identifier of said means of identification associated with said person.

30. The system as claimed in claim 26, furthermore comprising means of verification of the identity of said person

31. The system as claimed in claim 30, in which the means of verification of the identity are such that the verification of the identity is reinforced for a person for which a match has been found by the means /b/.

32. The system as claimed in claim 30, in which the means for generating a means of identification associated with said person ale arranged such that the generation of a means of identification is performed firstly from biometric data relating to said person, then supplemented with the addition of at least one identity of said person.

33. The system as claimed in claim 30, furthermore comprising:

means for calculating a key associated with said person, the key being able to take a much smaller number of values than the number of persons apt to require the generation of a unique means of identification, and high enough for any two per sons to be associated with different keys, with a predetermined level of probability; and

means for storing said key in a database of the identities in association with an identity of said person.

34. The system as claimed in claim 33, in which the number of values of the key is chosen in such a way as to take account of the calculational power necessary to calculate all the combinations by brute force.

35. The system as claimed in claim 33, in which the number of values of the key lies substantially between a few tens and a few hundreds when the number of persons apt to requite the generation of a unique means of identification is a few million or tens of millions.

36. The system as claimed in claim 33, in which the means for calculating are such that the calculation of the key is performed from biometric data relating to said person

37. The system as claimed in claim 36, in which the means for calculating are such that the calculation of the key is pet formed from the general form of the prints of certain fingers at least of said person.

38. The system as claimed in claim 36, in which the means for calculating ate such that the calculation of the key is performed from information relating to the iris of the eye of said person.

39. The system as claimed in claim 36, comprising:

means for obtaining an identity of said person;

means for calculating the key associated with said person;

means for comparing the calculated key with the key stored in the database of identities in association with the identity obtained for said person; and

means for selectively implementing the means /c/ as a function of the result of the comparison between said calculated and stored keys,

when a match has been found by the means /b/.

40. The system as claimed in claim 33, in which the means for calculating ate such that the calculation of the key is random.

41. The system as claimed in claim 40, further comprising means for storing the key in the biometric database in association with the biometric data relating to said person.

42. The system as claimed in claim 41, comprising:

means for obtaining an identity of said person;

means for obtaining the key stored in the biometric database in association with the biometric data relating to said person;

means for comparing the key obtained with the key stored in the database of identifies in association with the identity obtained for said person; and

means for selectively implementing the means /c/ as a function of the result of the comparison between said keys,

when a match has been found by the means /b/.

43. The system as claimed in claim 26, furthermore comprising, for granting at least one entitlement to said person:

/e/ means for said person to identify themselves with the aid of the means of identification which has been previously associated therewith; and

/f/ means for granting said entitlement to said person when said entitlement has not already been granted to said person a number of times equal to a predetermined number

44. The system as claimed in claim 43, in which the means /e/ comprise means for comparing between biometric data relating to said person and the biometric data from which the means of identification associated with said per son has been generated.

45. The system as claimed in claim 43, in which the means /f/ comprise means for consulting, in a database of entitlements, the entitlements already granted to persons, on the basis of an identifier.

46. The system as claimed in claim 45, in which said identifier is an identity of said person, obtained from the means of identification associated with said person.

47. The system as claimed in claim 45, in which said identifier is a unique identifier of the means of identification associated with said person, this identifier being incorporated into said means of identification associated with said person

48. The system as claimed in claim 43, comprising means for adding the unique identifier of the means of identification associated with said person which was stored in the biometric database in association with the biometric data relating to said person to a first list of the identifiers of the revoked means of identification, and means for selectively implementing the means /f/ depending on whether the identifier of the means of identification with which said person is identified is or is not stored in a second list of the identifiers of the revoked means of identification, when a match has been found by the means /b/.

49. The system as claimed in claim 26, comprising a first entity designed to implement means for participating in generating a unique means of identification associated with at least one person, and a second entity designed to implement means for participating in granting at least one entitlement to at least one person.

27. (canceled)