Airport Security Check System and Method Therefor

• US 20130305059A1
• Filed: 03/14/2013
• Published: 11/14/2013
• Est. Priority Date: 04/10/2012
• Status: Active Grant

• Current Assignee: Sita Information Networking Computing Ireland Limited (Société Internationale de Télécom Aeronautiques (Switzerland))
• Original Assignee: Sita Information Networking Computing Ireland Limited (Société Internationale de Télécom Aeronautiques (Switzerland))
• Inventors: Gormley, Michael John, Irminger, Renaud
• Granted Patent: US 9,087,204 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06V 30/416 Extracting the logical structure, e.g. chapters, sections or page numbers; Identifying elements of the document, e.g. authors
• CPC Class Codes: G06V 40/167 using comparisons between temporally consecutive images
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A decryption system for decrypting user identification information encrypted on a storage device associated with a user identity document is disclosed. The system comprises: a server configured to collect user identity document data from the user and to construct a token including the user identity document data encoded in a machine readable form; a key construction unit communicatively coupled to a reader configured to read the data from the token and configured to read the data encoded on the storage device. The key construction unit uses the user identity document data read from the token to construct a key which enables the identity document reader to decrypt the user identification information stored on the storage device.

Claims

1. A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising:

a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data;

a key construction unit communicatively coupled to a reader configured to read the data from the token;

wherein the key construction unit uses the user identity document data read from the token to construct a key for decrypting the user information stored on the storage device.

2. A decryption system according to claim 1 wherein the key construction unit derives the key based on one or more of a user identity document number, an expiry date of the user identity document and preferably a user'"'"'s date of birth.

3. A decryption system according to claim 1 wherein the or a user manually enters the user identity document data prior to the reader reading the data encoded on the token.

4. A decryption system according to claim 1 in which the reader is configured to read the user information stored on the storage device.

5. A decryption system according to claim 1 in which the token further comprises user identification information and in particular in which the reader is further configured to read the user identification information from the token.

6. A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document.

7. A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document and further comprising authentication means for authenticating the user depending upon the result of the comparison.

8. A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token.

9. A decryption system according to claim 1 in which the token is a boarding pass having the user identity document data encoded in a specific region of the boarding pass.

10. A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token, wherein the mobile device comprises a near field communication, NFC, chip communicatively coupled with the mobile device for transmitting the token to the reader such as an airport check-in security desk.

11. A decryption system according to claim 1 in which the key construction unit is configured to construct the key in response to the reader reading the user identity document data encoded in machine readable form on or within the token.

12. A decryption system according to claim 1 in which the identity document reader is primed to decrypt the user identification information encrypted on or within the storage device in response to the reader reading the user identity document data from the token.

13. A decryption system according to claim 1 in which the reader is a wireless reading means preferably comprising a near field communication, NFC, reading means configured to communicate with a mobile device for storing the token storage device and further preferably comprising a radio frequency identification, RFID, reading means configured to communicate with the storage device.

14. A boarding pass for use with the decryption system of claim 1, the pass comprising:

user identity document data associated with a user identity document, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user'"'"'s date of birth.

15. A token generating system for generating a boarding pass and the like comprising:

a server configured to collect user identity document data from a user and to construct a token such as a boarding pass including the user identity document data encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user'"'"'s date of birth.

16. A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising:

a reader configured to read data from a token such as a boarding pass and the like, the token including user identity document data encoded in a machine readable form, the reader configured to read the data encoded on the storage device; and

a key construction unit configured to derive a key from the user identity document data encoded on or within the token which enables the reader to decrypt the user information stored on the storage device.

17. A decryption system according to claim 16 in which the reader is configured to read the user identity document data from a predetermined region of the token.

18. A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising:

a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data;

a reader configured to read the data from the token wherein the reader uses the user identity document data read from the token to decrypt the user information stored on the storage device.

19. A decryption system according to claim 18 wherein the reader is a portable reader or scanner such as a mobile telephone.

20. A decryption system according to claim 18 in which the user identity document is a passport and preferably in which the user identity document or passport is pre-stored on a mobile communication device, preferably in a secured manner.

21. The decryption system according to claim 18 further comprising the step of reading a user identity document biometric facial image using the user identity document data.

22. The decryption system according to claim 18 further comprising the step of capturing an image of the user with a camera and preferably the step of comparing the captured image with the passport biometric facial image read from the user identity document.