Airport security check system and method therefor

• US 9,087,204 B2
• Filed: 03/14/2013
• Issued: 07/21/2015
• Est. Priority Date: 04/10/2012
• Status: Active Grant

• Current Assignee: Sita Information Networking Computing Ireland Limited (Société Internationale de Télécom Aeronautiques (Switzerland))
• Original Assignee: Sita Information Networking Computing Ireland Limited (Société Internationale de Télécom Aeronautiques (Switzerland))
• Inventors: Gormley, Michael John, Irminger, Renaud
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US13/829,185
• Publication Number:
  US 20130305059A1
• Time in Patent Office: 859 Days
• Field of Search: 713/189
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06V 30/416 Extracting the logical structure, e.g. chapters, sections or page numbers; Identifying elements of the document, e.g. authors
• CPC Class Codes: G06V 40/167 using comparisons between temporally consecutive images
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A decryption system for decrypting user identification information encrypted on a storage device associated with a user identity document is disclosed. The system comprises: a server configured to collect user identity document data from the user and to construct a token including the user identity document data encoded in a machine readable form; a key construction unit communicatively coupled to a reader configured to read the data from the token and configured to read the data encoded on the storage device. The key construction unit uses the user identity document data read from the token to construct a key which enables the identity document reader to decrypt the user identification information stored on the storage device.

Claims

1. A decryption system for decrypting user information encrypted on a storage device associated with an identity document of a user, the system comprising:

a server configured to collect user identity document data from the user and to construct a token comprising the user identity document data, wherein the server is further configured to send the token to a mobile device associated with the user for storing the token at the mobile device and wherein the mobile device is physically separate from said storage device;

a key construction unit communicatively coupled to a machine reader configured to read the data from the token by radio frequency identification communication with the mobile device,

wherein the token further comprises user identification information and in particular in which the reader is further configured to read the user identification information from the token and wherein the key construction unit uses the user identity document data read from the token, stored on the mobile device, to construct a key for decrypting the user information stored on said storage device;

a comparator for comparing the user identification information read from the token stored on the mobile device and the user information decrypted from said storage device associated with the user identity document; and

authentication means for authenticating the user depending upon the result of the comparison.

2. A decryption system according to claim 1 wherein the key construction unit derives the key based on one or more of a user identity document number, an expiry date of the user identity document and a user'"'"'s date of birth.

3. A decryption system according to claim 1 wherein the user manually enters the user identity document data prior to the reader reading the data encoded on the token.

4. A decryption system according to claim 1 in which the reader is configured to read the user information stored on the storage device.

5. A decryption system according to claim 1 in which the token is a boarding pass having the user identity document data encoded in a specific region of the boarding pass.

6. A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token, wherein the mobile device comprises a near field communication, NFC, chip communicatively coupled with the mobile device for transmitting the token to the reader.

7. A decryption system according to claim 1 in which the key construction unit is configured to construct the key in response to the reader reading the user identity document data encoded in machine readable form on or within the token.

8. A decryption system according to claim 1 in which the identity document reader is primed to decrypt the user identification information encrypted on or within the storage device in response to the reader reading the user identity document data from the token.

9. A boarding pass for use with the decryption system of claim 1, the pass comprising:

user identity document data associated with a user identity document and user identification information, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and the user'"'"'s date of birth.

10. A decryption system according to claim 1 in which the reader is a wireless reading means.

11. A decryption system according to claim 10 in which the reader is a wireless reading means comprising a near field communication, NFC, reading means configured to communicate with a mobile device for storing the token storage device and further comprising a radio frequency identification, RFID, reading means configured to communicate with the storage device.

12. A token generating system for generating a boarding pass and comprising:

a server configured to collect user identity document data and user identification information from a user and to construct a boarding pass token including the user identity document data and user identification information encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user'"'"'s date of birth, wherein the system is further configured to send the token to a mobile device associated with a user for storing the token on the mobile device; and

wherein;

a storage device, separate from the mobile device, configured to store encrypted user information associated with the user identity document;

a key construction unit communicatively coupled to a machine reader configured to read data from the token stored on the mobile device associated with the user by radio frequency identification communication with the mobile device and wherein the key construction unit further uses the user identity document data read from the token to construct a key for decrypting the user information encrypted on said storage device;

a comparator for comparing the user identification information read from the token stored on the mobile device and the user information decrypted from said storage device associated with the user identity document; and

authentication means for authenticating the user depending upon the result of the comparison.

13. A decryption system for decrypting user information encrypted on a storage device associated with an identity document of a user, the system comprising:

a machine reader configured to read data from a token stored on a mobile device associated with the user by radio frequency identification communication with the mobile device, the token including user identity document data encoded in a machine readable form, and the reader configured to read the data encoded on the storage device, wherein the mobile device is physically separate from said storage device and wherein a server is first configured to collect the user identity document data and user identification information from the user and to construct the token comprising the user identity document data and subsequently send the token to the mobile device for storing the token on the mobile device;

a key construction unit configured to derive a key from the user identity document data encoded on or within the token, stored on the mobile device, which enables the reader to decrypt the user information stored on the storage device;

a comparator for comparing the data read from the token stored on the mobile device and the user information decrypted from said storage device associated with the user identity document; and

authentication means for authenticating the user depending upon the result of the comparison.

14. A decryption system according to claim 13 in which the reader is configured to read the user identity document data from a predetermined region of the token.

15. A decryption system for decrypting user information encrypted on a storage device associated with an identity document of a user, the system comprising:

a server configured to collect user identity document data and user identification information from the user and to construct a token comprising the user identity document data, wherein the server is further configured to send the token to a mobile device associated with the user for storing the token at the mobile device and wherein the mobile device is physically separate from said storage device;

a machine reader configured to read the data from the token by radio frequency identification communication with the mobile device, wherein the reader uses the user identity document data read from the token, stored on the mobile device, to decrypt the user information stored on said storage device;

a comparator for comparing the data read from the token stored on the mobile device and the user information decrypted from said storage device associated with the user identity document; and

authentication means for authenticating the user depending upon the result of the comparison.

16. A decryption system according to claim 15 wherein the reader is a portable reader or scanner or a mobile telephone.

17. A decryption system according to claim 15 in which the user identity document is a passport and in which the user identity document or passport is pre-stored on a mobile communication device, in a secured manner.

18. The decryption system according to claim 15 further comprising the step of reading a user identity document biometric facial image using the user identity document data.

19. The decryption system according to claim 15 further comprising the step of capturing an image of the user with a camera and preferably the step of comparing the captured image with the passport biometric facial image read from the user identity document.