WO2013064210A1

WO2013064210A1 - Document checking

Info

Publication number: WO2013064210A1
Application number: PCT/EP2012/004296
Authority: WO
Inventors: Michael Fiedler; Oliver Paul; Birte BRÄUTIGAM; Axel Vonderhagen
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2011-11-02
Filing date: 2012-10-15
Publication date: 2013-05-10
Also published as: DE102011117467A1; EP2774125B1; EP2774125A1

Abstract

A method for verifying a personal document (10) unambiguously assigned to one person comprises conducting both an authenticity check (S6) and a plausibility check (S7) of the personal document (10). In order to check the authenticity of the personal document (10), an unambiguous identifier (11) is read out therefrom (S1), on the basis of which reference data (37) is determined in a database network (30, 32) (S3) and compared to comparison data (12) from the personal document (10) during the authenticity check (S6). The plausibility check is conducted by determining, on the basis of the identifier (11) and/or on the basis of the reference data (37) and/or on the basis of personal or objective data (13, 14, 15) specified on the personal document (10), plausibility data (33, 34) in the database network (30, 32) (S4), on the basis of which the plausibility of the personal document (10) is checked (S7).

Description

D o c u m e n t e r p u n d

The present invention relates to a method for verifying documents that are uniquely associated with a person, as well as a corresponding verification device and a verification system with such a verification device.

It is known in the context of a verification of individualized and a specific person clearly associated documents, such as electronic, card-shaped or paper ID card, access, authorization or security documents to check their authenticity on the basis of as difficult to falsify authenticity features, the can not be separated from the document at all or only by damaging the document.

However, the verification of a document based on a verification of given authenticity features may not be sufficient to reliably detect any types of counterfeits.

Accordingly, it is the object of the present invention to propose an improved verification of such documents.

This object is achieved by a method, a device and a system having the features of the independent patent claims. In the dependent claims advantageous refinements and developments of the invention are given. In a method for verifying a document of the abovementioned type which is uniquely assigned to a person - hereinafter referred to simply as a "personal document" - an unambiguous identification of the personal document is first read from or read from the latter, depending on whether it is a printed one For the sake of simplicity, the term "reading out of data" is understood to mean both read-out from an integrated circuit and reading from the surface of the document A database network determines reference data for performing an authenticity check, which are assigned to the personnel document to be checked, and compared with comparison data derived from the document itself, provided that the comparison and reference data match in the sense of a predetermined metric if the personal document is genuine in the sense of this authenticity check.

According to the invention, the authenticity check is supplemented by a plausibility check of the personal document based on plausibility data, which are related to the personal document to be verified or the person to whom the personnel document is uniquely assigned, and which are also determined in the database network.

While genuineness criteria and authenticity conditions, which are specified in the authenticity check, are generally checked numerically and quantitatively, the plausibility check checks whether there is a consistency in content between the plausibility data on the one hand and the personal document, personal data or factual data recorded thereon or the person himself, on the other hand. The personal data or property In this case, personal data relating to the person or pertinent data relate to an item which is assigned to the person by means of a property or ownership relationship, eg a vehicle or the like. The plausibility data in turn relate to personal / factual data of the person or an object associated with the person in other contexts, eg in the form of further personal documents stored in the database network or the like. The authenticity check is made safer and more reliable by the additional logical-qualitative plausibility check and thus significantly improved. Another advantage is that the plausibility check, unlike the authenticity check, can also take into account dynamic personnel / factual data, ie data that may change over time.

The personal document may, in principle, be any document associated with a person, e.g. Also, an electronic document such as a smart card, in which personal or pertinent data is stored in a memory of an embedded integrated circuit, or a paper or plastic document on which personal / factual data is printed or imprinted. Such personal documents may be, in particular, official documents issued by a public authority or an organization that provide personal or factual data of the subject for machine or visual examination, such as personal data. Badge, Travel, Access or

Authorization documents, certificates, invoices, application documents, tax documents, value or personal documents relating to goods, such as vehicle registration documents, in particular electronic vehicle registration documents ("electronic vehicles"). Registration Card "; eVRC), or other documents documenting ownership or ownership.

The verification method is implemented with a verification system according to the invention, which comprises at least one verification device and one database network with at least one, but preferably several databases. These databases may be operated by various agencies, organizations or companies that manage personal or factual records and documents that are potential sources of plausibility data. The authenticity check and plausibility check can be performed automatically or partially or entirely manually by an operator of the verification device.

The database network preferably includes a verification server, which the verification device responds to with requests for reference data, plausibility data or other personal / factual data, for example via a data communication connection via the Internet. The verification server executes the request by determining the requested data in the available databases and making it available to the verification device.

The verification device comprises suitable read-out devices in order to read out or read from the document the identification and / or the comparison data, for example a camera or scanning device or electronic readout means via contactless or contact-based data communication interfaces. The identifier may be a unique code applied to the personal document, eg the serial number coded as a bar code, or a unique code stored in an integrated circuit. The reference data are determined in the database network on the basis of the unique identification of the personal document, for example on a database of the manufacturer or publisher of the personal document, in which the reference data can be identified by the associated label. In contrast, the plausibility data can be determined on the basis of the identification or based on the already determined reference data in the database network. The comparison and reference data can be derivable from any authenticity features, for example from the optically variable elements known from the field of banknotes or securities, holograms, embossing structures, color imprints or printed patterns, watermarks or the like. Preferably, the reference data form a digital image of the original, unfalsified personal document, while the comparison data is a current digital image of the circulating personal document, which was made by the verification device specifically for authenticity testing.

The plausibility data can relate to any other personal / factual data not originating from the personnel document and ascertainable in the database network. Upon a corresponding request from the verification device, preferably the most recent available plausibility data is determined, e.g. the most recent digital image of the person or, as far as possible, current other documents relating to the person with further personal / factual data. In this way, the plausibility check is always carried out on the most up-to-date available personal / factual data.

During the subsequent plausibility check by the verification device or the verification server, it is determined whether logical-qualitative There are consistencies or substantive consistencies between the personal / factual data to be extracted from the personal document and the plausibility data determined. For example, it can be checked whether the plausibility data can be logically assigned to the personnel document or the person, for example by comparing a determined current image of the person with the current appearance of the person. Likewise, the examination of any other logical assignments is conceivable, eg the check as to whether an age resulting from the ascertained personal / factual data correlates with the current appearance of the person or whether the location of a vehicle registration agrees with the place of residence of the person. If such tests are negative, at least doubts are attached to any positive authenticity check.

It is also possible to check whether the plausibility data determined and the personal / factual data stated on the document are consistent in content, ie that they do not contradict one another, e.g. if personal / factual data specified on the document does not match the personal / factual data determined in the database network. In addition, the plausibility check can also be used to check whether the plausibility data can be derived from the personal / factual data specified on the personal document or whether the personal / factual data specified on the document can be derived at least in part from the plausibility data , This would be the case, for example, if the personal / factual data given on the personal document can be used to derive a marital status or a comparable private characteristic, which also results from an official document from which plausibility data were taken.

The plausibility check supplements the authenticity check with a second information channel and a different check. During the real In most cases, a purely mathematical or numerical-quantitative comparison operation is the basis of the assurance check. In the case of the plausibility check, logical deductions are made according to more qualitative standards. Consequently, the plausibility check can also use statistical methods, for example a regression analysis, or derivation and information acquisition methods from the field of data mining and information repair, such as classification and cluster analysis or the like. The further personal / factual data obtained within the scope of the determination of the plausibility data can also be made available to an operator of the verification device or an official for further verification of the personal document and / or the person, eg for checking the rightful owner in the case of a purchase of a motor vehicle.

For privacy or other reasons, confidential or personal personal / factual data can be specially protected by having to release them separately. In this case, a separate release by the person concerned may be necessary prior to the disclosure of the confidential personal / factual data to the verification device and / or the submission of a credential of the verification device to the database network or the verification server. Further features and advantages of the invention will become apparent from the following description of exemplary embodiments according to the invention and further alternative embodiments in conjunction with the drawings, which show: FIG. 1 shows a preferred embodiment of a verification arrangement according to the invention for verifying a personal identity document;

FIG. 2 an electronic personnel document; and

FIG. 3 shows a method sequence according to a preferred embodiment of the verification method according to the invention.

According to one embodiment of the invention, a document to be verified with a verification system 20, 30, 32 according to FIG. 1 in accordance with a verification method according to FIG. 3 is a readable, paper or card-form personal document 10 which has a barcode 11 Identification for unambiguous identification of the personal document 10 carries, and which is provided with authenticity features from which comparison data 12 (CMP) can be derived for an authenticity check. Further, personal / factual data 13, 14 are indicated on the personal document, which either relate to the person to whom the personal document 10 is associated, or provide information and information on objects and things owned or owned by that person, and the personal document 10, for example to a motor vehicle of the person. For example, a passport or portrait image 13 of the person and other personal or factual data 14 may be indicated on the personal document 10 concerning the name, address or date of birth of the person or type, technical specifications or registration of a motor vehicle or the like.

In addition, the verification system 20, 30, 32 is set up and equipped according to a further embodiment to check electronic personal documents 10. Fig. 2 shows a chip card-shaped personal document 10, which also printed on a barcode 11 as a unique identifier is. Also, personal / factual data are indicated on the card body of the personal document 10, namely a passport or portrait picture 13 as well as personal or factual information 14. The same personal / factual data 13, 14 are - in digital form - but also in one non-volatile memory of an integrated circuit 17 which is embedded in the electronic personnel document 10 and is accessible via contact surfaces 16 for the verification device 20. In the memory, comparison data 12 for checking the authenticity and other personal / factual data 15 are stored, which are not visible on the personal document 10 deposited.

In a preferred embodiment of the present invention, the personal document 10 relates to an electronic vehicle registration card (eVRC) according to ISO 7816, which allows contact-based data communication with the verification device 20 via a contact field 16 and a plurality of personal / Factual data 13, 14, 15 to the vehicle owner and the vehicle includes.

The comparison data 12, which are compared in the authenticity check with reference data 37 (REF) stored in a database 32, can relate to any authenticity features originating from the securities and value document area, for example microprint, complex graphic patterns and guilloches, optically variable imprints and elements, laser images , Holograms, laser or gravure engravings, temperature-dependent dyes, complex spectral distributions of printing inks or printing ink components or the like. Preferably, however, the comparison and reference data 12, 37 relate to a digital image of the entire personal document 10 which is currently recorded and which, upon production of the personal document 10, has a sufficiently high resolution digital image. The verification device 20 checks the personal document 10 for authenticity and plausibility (compare steps S6 and S7 in FIG. In this case, it can be any computer-aided device which has been set up in accordance with the software and is equipped with hardware, for example also a portable verification computer, a modern smartphone with a verification application or the like. The verification device 20 preferably includes a read-out device 21 which can read graphic or textual information on the personal document 10 or read out electronic data from an integrated circuit 17 of the personal document 10 in order to make it available to a control device 22.

The read-out device 21 is here in particular an optical sensor or scanning device, e.g. a digital camera, with the person / item data 13, 14, a unique identifier in the form of a barcode 11 or comparison data 12 (CMP) can be read from the personnel document 10. Alternatively, an electronic personnel document 10 can also be checked (see Fig. 2), for which the verification device 20 as a read-out device 21 comprises a suitable reading device for reading the relevant data 11, 12, 13, 14, 15 from the integrated circuit 17, for example contact-type or contactless access mechanisms according to the relevant communication protocols.

In addition, the verification device 20 also includes a display device 23, e.g. an LCD display or the display of a portable computer or smartphone running e.g. Plausibility data 33, 34 or item / person data 35, 36 can be displayed.

The verification device 20 is connected via a suitable data communication infrastructure, for example the Internet 40, with a verification server. Ver 30 is connected, which is equipped with a control device 31 and in turn is connected to various generally independent databases 32. For example, the databases 32 may be operated by various organizations, government agencies, or companies, and may also manage, for any purposes, the personal or factual data 33, 34, 35, 36 relating to the person or the personal document 10, which may include the personal / personal information provided on the personal document 10. Add or subtract data 12, 13, 14, 15. The databases 32 can be operated, for example, by various KfZ registration authorities, or by information service providers, such as information files for economic or personal data.

In addition to the referenced reference data 37, personal / factual data 33, 34, 35, 36 to the person are stored in databases 32 in various databases 32. These personal / factual data 33, 34, 35, 36 can be selected as plausibility data 33, 34 for the plausibility check or can be available as additional personal / factual data 35, 36 which can be accessed via the personal / factual data 13 to be taken from the document 10. 14, 15 go out and complete this. Although the latter are not used for the plausibility check, but can provide an operator of the verification device 20, for example in the context of a vehicle inspection, further information, for example about a vehicle owner and the vehicle. The personal / factual data 33, 34, 35, 36 present in the database network 30, 32 may, for example, relate to digital images 33 of the person or of objects or places that are acquired for other purposes by authorities or organizations in connection with the person and a database 32 have been deposited. The personal / factual data 33, 34, 35, 36 Any other official or other documents, texts or information which are suitable for the plausibility check of the personal document 10 can also be used, for example also certifications or translations of personal documents into other languages.

FIG. 3 outlines the sequence of a verification of the personal document 10 by the verification device 20 or the verification system 20, 30, 32 according to FIG. 1. In this case, the steps S1 to S10 can be executed in a different order, as far as possible and meaningful.

In a first step Sl, when a person submits a personal document 10 to be verified, for example an electronic vehicle registration or the like, first the uniquely identifying barcode 11 by means of a barcode reader

20 read (READ CODE) and forwards to the controller 22. The bar code reader may be a conventional or infrared camera 21 supplemented by a bar code evaluation software in the control device 22.

In step S2, which may also be integrated into step S1, the verification device 20 reads out the comparison data 12 with the camera 21 (READ CMP). The comparison data 12 is, for example, a digital image of the personal document 10 or its surface. Alternatively, the actual comparison data 12 can also be extracted by the control device 22 from an image of the entire personal document 10, if the comparison data 12 concerns only a section of the personal document 10 or an authenticity feature located thereon.

In a step S3, the control device 22 sends a request for the reference data 37 to the verification server 30 and for this purpose transfers the bar code to the verification server 30. code 11 as search criterion (GET REF). The verification server 30 or its control device 31 then carries out, starting from the barcode 11, a search in the connected databases 32 and in this way determines the reference data 37 associated with the barcode 11 in a database 32, for example from the manufacturer of the personal document 10 is provided for their authenticity. The verification server 30 finally delivers the determined reference data 37 to the verification device 20, whose control device finally performs the authenticity check of the personal document 10 in step S6 (CHECK AUTHENTICITY), for example by comparing the comparison data 12 with the reference data 37 (CMP = REF?). If the comparison according to a predetermined metric results in the correspondence of the comparison data 12 with the reference data 37, the personal document 10 is classified as genuine, subject to the plausibility check. Parallel to or after the steps S3 and S6, a request for plausibility data 33, 34 (PI, P2) is directed to the verification server 30 in step S4 (GET P-DATA). The verification device 20 again gives the server device 30 a suitable search criterion, for example the barcode 11 or the previously determined reference data 37. As a search criterion, additional personal / factual data 13, 14, 15 which exist and / or have been suitably read on / in the personnel document 10 can be sent to the Verification server 30 are passed.

Which of the personal / factual data 33, 34, 35, 36 ascertained in the connected databases 32 are finally forwarded as a plausibility data 33, 34 to the verification device 20 is decided by the verification server 30. In this case, it is also taken into account that the determined personal / Factual data 33, 34, 35, 36 may be confidential or personal in nature and not readily forwarded to the verification device 20 be allowed to. For this purpose, it is checked in step S5 whether there is authorization at all to issue the plausibility data 33, 34 (PD ATA AUTHORIZED?).

According to the present exemplary embodiment, this authorization consists in that the verification device 20 proves its authorization to the verification server 30 by means of an authorization signal to be able to receive and use confidential plausibility data 33, 34. The verification device 20 may have such an authorization, for example, because it belongs to a specific security class due to structural or organizational circumstances or is used by an authority that already has access to the relevant data. Likewise, the verification server 30 can forward the plausibility data 33, 34 to the verification device 20 only after explicit approval by the person. A corresponding release signal can be interrogated by the verification device 20 at the person, e.g. by displaying a release request on the display 23 and manual confirmation by the person. However, the release can also take place via a direct contact of the verification server 30 with the person, for example by telephone or by means of electronic data communication.

Finally, in step S7, the plausibility check takes place, partly by displaying the plausibility data 33 on the display 23 of the verification device 20 and partly by an automated logical derivation in the control device 22 (CHECK PLAUSIBILITY). The plausibility data 33 relates to a person's digital image (PI) as it exists in a database 32 which manages identity documents. If certain plausibility data 33 are present multiple times on one or more databases 32, such as a passport picture 33 of the person, the most recent plausibility data 33 is selected. As part of the plausibility check, the person's current digital image 33 is displayed on the display 23, where an operator of the verification device 20 can compare this with the actual appearance of the person.

The plausibility check can be carried out completely or partially automatically by the control device 22. In this case, it is determined whether plausibility data 34 in the form of textual and automatically evaluable personal / factual data can be logically assigned to the personal document 10 or to the person concerned. For this purpose, a check is made as to whether a link between the plausibility data 34 and the personal / factual data 13, 14, 15 (D1, D2, D3) to be taken from the personal document 10 is supplemented by additional personal / factual data 35, 36 (if applicable). D4, D5) from the database network 32, can be made (P2 <-> - Dl-D5). For this purpose, it is checked whether personal / factual data 14, 15 (D2, D3) can be derived from the plausibility data 34 or whether the plausibility data 34 can be inversely derived from the personal / factual data 14, 15 (D2, D3). For example, a date of birth or an address of the person or specific vehicle data, which are present as subject / personal data 13, 14, 15 in an integrated circuit 17 of the personal document 10, could result from the plausibility data 34. It could also be examined whether the occupation of the person correlated with the school or vocational qualification determined as plausibility data 34, or whether the place of residence of the person coincides with a place of approval of a vehicle determined as plausibility data 34. Tsar can successfully complete the authentication in step S6; However, the plausibility check in step S7 can give rise to doubts about the personal document 10 or the person due to a detected consistency of the data or substantive contradictions. If authenticity and plausibility checks have been successful, the personnel document 10 will be verified.

The further personal / factual data 35, 36 (D4, D5), which exceed the personal / factual data 13, 14, 15, 14 (D1, D2, D3) to be taken from the personal document 10, are transferred to the verification server 30 in step S8 requested (GET D-DATA) and in addition to the plausibility check by the operator of the verification device 20 in step S10 displayed on the display 23 (DISPLAY D-DATA).

However, similar to the request for the plausibility data 33, 34 in steps S4, S5, it is checked in step S9 before displaying the item / person data 35, 36 whether it is authorized (D-DATA AUTHORIZED?), For example by Examination of an authorization of the verification device 20 or a release by the person. The further personal / factual data 35, 36 (D4, D5) may also be readily available to the operator (or the person himself) as additional information, e.g. to determine the ownership of the vehicle in question when buying a car or driving license. Also, the person may be offered value added services based on the data 35, 36, for example, information about technical characteristics of a vehicle from a vehicle manufacturer or the like. Likewise, the additional personal / factual data 35, 36 can be automatically inserted into an application form, which the person receives by presenting the personal document 10 or wants to submit it to an authority.

Claims

Patent claims

A method of verifying a personal document (10) uniquely assigned to a person comprising the steps of:

- reading (Sl) a unique identifier (11) of the personal document 10) from the personal document (10);

Checking (S6) the personal document (10) for authenticity on the basis of the comparison data (12) and the reference data (37);

characterized by the further steps:

Determining (S4) plausibility data (33, 34) for the personnel document (10) in the database network (30, 32); and

Checking (ST) the plausibility of the personal document (10) on the basis of the plausibility data (33, 34).

2. The method according to claim 1, characterized in that the plausibility data (33, 34) in the database network (30, 32) based on the label (11) and / or reference data (37) and / or on the basis of Personnel document (10) specified personal and / or property data (13, 14, 15) are determined (S4).

3. The method according to claim 2, characterized in that is checked (S6), whether the plausibility data (33, 34)

the staff document (10) or the person logically assigned to the and / or do not contradict and / or contradict a person's physical appearance or personal and / or factual data (13, 14, 15) given on the personal document (10)

from personal and / or factual data (13, 14, 15) indicated on the personal document (10) or on the personal document

(10) specified personal and / or factual data at least partially from the plausibility data (33, 34) are derivable.

4. The method according to claim 2 or 3, characterized in that in the database network (30, 32) based on the label (11) and / or based on the reference data (37) and / or based on the personal document (10) specified person- and / or property data (13, 14, 15) additional personal and / or factual data (35, 36) are determined (S8), which the personal and / or property data (13, 14, 15 ) complete.

5. The method according to any one of claims 1 to 4, characterized in that in each case the most recent available plausibility data (33, 34) in over the database network (30, 32) associated databases (32) are determined (S4), in particular the most recent available digital Photo of the person.

6. The method according to any one of claims 1 to 5, characterized in that

the comparison data (12) are derived from at least one authenticity feature of the personal document (S2) and reference data (37) are determined (S3) relating to the at least one authenticity feature, the comparison data (12) and the reference data (37 ) (S6); or as reference data (37) a digital reference image (37) of the personal document (10) stored in the database network (30, 32) is determined (S4), which is compared with the real appearance of the personal document (10) for authenticity checking (S6) ,

7. Method according to one of the methods 1 to 6, characterized in that a verification device (20) connected to the database network (30, 32) is provided.

omitting the unique identifier (11) and the comparison data (12) from the personal document (10) (SI, S2);

requesting the reference data (37) and the plausibility data (33, 34) at the database network (30, 32) (S3, S4) by transmitting at least the tag (11) to the database network (30, 32); and

- the reference data (37) requested at the database network (30, 32) and plausibility data (33, 34) from the database network (30, 32).

8. The method according to claim 7, characterized in that the authenticity check and / or the plausibility check of the verification device (20) is automatically carried out (S6, S7) or manually performed by an operator of the verification device (20) (S6, S7 ) or by a verification server (30) of the database network (30, 32) (S6, S7) to which the verification device (20) is connected.

9. The method according to claim 7 or 8, characterized in that the verification device (20) from the database network (30, 32) the plausibility data (33, 34) and / or additional personal or factual data (35, 36), which supplement the personal and / or factual data (13, 14, 15) specified on the personal document (10), at least partially receive (S5, S9), if the database network (30, 32) a release message of the person and / or a credential of the Verificationern- direction (20) is present.

10. The method according to claim 4 or 9, characterized in that additional personal or factual data (35, 36) are determined (S8), which relate to the person uniquely associated documents.

11. The method according to any one of claims 1 to 10, characterized in that as the person clearly assigned to the person document (10) an electronic or paper document is verified (S6, S7), in particular an official or official document, which personal data, identification data and / or factual data relating to a thing associated with the person, preferably an identification document, a vehicle registration certificate, a birth certificate, a certificate or the like.

12. Verification device (20) for verifying a person uniquely assigned personal document (10), wherein the verification device (20) is connected to a database network (30, 32) and is adapted to carry out a method according to one of claims 7 to 9 ,

13. Verification system (20, 30, 32) for verifying a person's uniquely assigned personal document (10), comprising a verification device (20) according to claim 12 and connected to the verification device (20) database network (30, 32) which at least a database (32) is included and set up, on the basis of the identification (11) received by the verification device (20) to determine the reference data (37) of the personal document (10) in the at least one database (32) and to transmit it to the verification device (20), and

on the basis of the received identification (11) and / or on the basis of the ascertained reference data (37) and / or on the personal and / or factual data (13, 14, 15) indicated on the personal document (10) in the at least one database (32 ) to determine the plausibility data (33, 34) of the personal document (10) and to transmit it to the verification device (20).

14. Verification system (20, 30, 32) according to claim 13, characterized in that the database network (30, 32) comprises a verification server (30) connected to the verification device (20) and the at least one database (32) and is set up

the identification (11) of the personal document (10) and / or the personal or factual data (13, 14, 15) specified on the identity document (13, 14, 15) to be received by the verification device (20), the reference data (37) based on the identification ( 11) and / or the plausibility data (33, 34) on the basis of the identification (11) and / or on the basis of the reference data (37) and / or on the personal and / or property data (13, 14, 15) specified on the personal document (10) ) and

to transmit the determined reference data (37) and / or plausibility data (33, 34) to the verification device (20).

15. Verification system (20, 30, 32) according to claim 13 or 14, characterized in that the verification system (20, 30, 32) is arranged to perform a method according to one of claims 1 to 11.