EP1997080B1 - Mobile verification device for checking the authenticity of identification documents - Google Patents

Description

The invention relates to a mobile verification device for authenticating identity documents, in particular travel documents, according to the preamble of claim 1.

A generic verification device is for example off EP 0 891 608 B1 known. In this device, two housing parts are connected to each other via a hinge. They form a gap into which a security document to be checked is to be inserted. The two housing parts contain irradiation devices, sensors and processing means which generate a signal upon detection of the authenticity of the document. The device is dimensioned so that it can be handled in mobile use. A largely similar verification device is also available in US 5,918,960 described.

Out WO 2004/013822 A1 It is known for securing mobile devices, such as a mobile phone, to connect the device by means of a releasable connecting element with the operator. The release of the connector in an attempt to steal the device generates a signal that serves to render the stolen device at least partially unusable. In WO 03 / 007275A1 A system is described that triggers an alarm when a portable device is lost or stolen. The alarm is generated when the communication between the device in question and another device is interrupted because the distance between them exceeds a predetermined limit. A similar system is also in WO 01/69557 A2 where a one-person base station can communicate with multiple mobile devices. Again, it is possible to generate a signal when a distance between the base station and the mobile device becomes too large.

In DE 198 32 671 A1 a bracelet is shown, which contains a data carrier that can be read without contact in order to prove authorization of the carrier for a service. Opening the wristband causes the permission to expire because the volume becomes unusable.

In the course of increased security efforts, identity documents, in particular passports and other identity cards, are increasingly being equipped with security features which permit a machine identification of the owner, prevent the misuse of such documents and increase their security against counterfeiting. Such machine-readable ID cards are summarized below under the term travel documents. They have at least the standardized ICAO line, which is machine-readable with an OCR reading system. However, the invention is not limited to the verification of ICAO-compliant travel documents, but also extends to the examination of other identification documents.

Future machine-readable travel documents contain, according to ICAO standard ISO 9303, for example, in the personalization page or in the book cover, a memory element which can be read contactlessly via a transponder in the form of a radio chip, an RFID (Radio Frequency Identification) memory element. According to ISO 14443A and B, the RFID system used is a system at 13.56 MHz with an EPROM storage volume greater than 32 kbit, in particular greater than 72 kbit, whereby a plurality of biometric personal data, such as the face and / or fingerprints, up to ten Finger-rolled impressions and / or iris-related data in JPEG format can be saved.

In stationary verification systems, as installed or integrated in access control points, the power consumption, contactless communication with a superordinate data network and dimensions, weight and ease of handling, stealing and / or user safety play no significant role, because they are stationary on a fixed , mostly sheltered space.

The situation for outpatient care is completely different, where weight and dimensions are a very important criterion and at the same time energy supply poses particular problems. Finally, there are also special aesthetic requirements. In order to prevent conflicts with the control persons, the device should have an unaggressive effect, that is, for example, it should avoid any appeal to a weapon in its design. At the same time, it should be designed so that the user is not forced into close contact with the control person, in particular to any physical contact. It should rather allow him, for reasons of his own safety, to maintain a proper physical distance to the control person. In addition, it must be easy to use in order to leave the user, also for the sake of his personal safety, room for an observation of his counterpart, for example, to be able to respond to any attacks. Finally, in the case of assaults, it must not hinder its defense and, in particular, may not itself be used as a means of such attacks.

At the same time it should enable the user, by virtue of their special design, to counteract a violent removal of the greatest possible resistance. It should therefore be particularly handy in the games in which the user holds it, so that it can be difficult to wrest from him. For the same reason, the device should be protected against forcible removal by additional mechanical restraints, such as a strap, strap, or lanyard, and the device or its restraint should have a predetermined breaking point to protect the user against violent removal injuries. Finally, in order to prevent improper use of the device by unauthorized persons after removal, the device at the moment of removal must lose its functionality. It should also be warned by warnings about his theft. In addition, it would be desirable that the device remains locatable even after removal, so that it can be easily recovered.

With the invention, a mobile verification device according to claim 1 is provided, which particularly accommodates these requirements, by making the violent removal difficult, their re-procurement after violent deprivation if possible promotes, but at least prevents improper use of the device by the stunner.

The device thus takes into account the equipment of modern, in particular machine-readable identity documents and can be used by authorized persons in mobile use, for example at border points in the entry and exit control and in the verification of persons at any location. The verification device is provided in particular for checking the authenticity of travel documents for mobile use. "Mobile" means that the device can be worn on the body and therefore should be small and light.

It should weigh in particular less than 1000 g, in particular less than 700 g and should move in its dimensions in the order of length 19 cm, width 11.5 cm height 7.5 cm.

In addition, it must be easy to hold in the hand and, for example outdoors, even with gloves, to be kept well and be as easy to operate as possible. This requires that it is designed handy. It has been shown that this can best be achieved if the lower part of the device merges into a handle. The device lays itself particularly well in the hand when the lower part of the device merges into the handle in a stepwise tapering manner. If the handle is additionally provided with the grip improving recoveries and appropriate surface profiling, it is ensured that the device can be kept well. In particular, the tilting moment is then reduced. Also, the device can not easily be snatched from the user (the person holding it).

To better secure the device against falling down, but especially against the violent removal by unauthorized third parties, a belt, such as a strap or a strap can be provided. On the belt or loop, the user (the person holding the device) can carry the device when not in use. The holding person then has his hands free for other activities. At the same time the belt secures the device in its use against the violent removal.

In order to prevent injury to the user by the belt in a violent removal, the belt and / or the device has a predetermined breaking point, which dissolves in violent action of the user.

The mechanical predetermined breaking point can be provided in the verification device itself or in its belt, carrying strap or the retaining loop. Preferably, however, it can be arranged as part of the fastening device for the belt on this or on the verification device.

The predetermined breaking point can be integrated into a safety clip, which in turn can be integrated, for example, in the carrying strap and at the same time can have a slot for inserting the electronic identification means of the authorized user.

If the connection between the user and the device is forcibly lifted, then the subsequent misuse of the device by the staggers should be made impossible by the fact that with the breakage of the predetermined breaking point at the same time the function of the verification device is blocked, the device finally or until re-release becomes inoperable by an authorized user.

Instead of a mechanical predetermined breaking point, whose breakage blocks the function of the verification device, the predetermined breaking point can also be arranged in an electronic connection between the verification device and the holding person, in the event of breakage of which the function of the verification device is blocked. This can be, for example, an RFID tag in the device communicating with an RFID tag on the user's body. The device can only be operated if both RFID tags can communicate with each other, ie in a field of 1.5 square meters. If the device is snatched and removed from this area, it will be locked. Access to the device is impossible for an unauthorized user, because this requires the RFID tag of the authorized user.

In order to further complicate the theft of the device, the breakage of the predetermined breaking point at the same time trigger an audible signal, which is referred to the theft. Finally, the device may be in contact with a database that registers the theft and further locates the device after removal so as to prepare for its recovery.

The verification device additionally comprises in its basic structure an identification device for identifying an authorized user, a release device which releases the use of the mobile verification device for use on the basis of a signal of the identification device, an optical reading unit for reading imagewise contained on the sides of the identification or travel document and / or alphanumeric information, in particular also UV-readable symbols and identigrams, a data processing unit for processing the signals supplied by the optical reading unit according to a predetermined algorithm, a graphical display unit for displaying the read-out image and / or alphanumeric data and the data determined by the data processing unit Verification result and a communication unit for unencrypted or encrypted transmission of the read data and / or of the Da tenverarbeitungseinheit determined verification result to at least one central point and to receive relevant data from the at least one central point via a communication network, in particular also GSM.

In a preferred embodiment of the invention, the mobile verification device contains a contactless RFID reading unit which reads out personal data of the travel document holder from an RFID storage element contained in the travel document on the basis of the alphanumeric data determined by the optical reading unit. The RFID reading unit can be permanently installed in the verification device, but it can also be provided as a modular extension of a simpler device, which manages in the simple basic configuration without RFID.

For example, the read module will only perform a read if certain given ICAO data has been read on the personalization page and these match certain data of the electronic memory of the RFID system. Through the use of special cryptographic measures, modifications and forgeries of the electronically stored data as well as the replica are extremely difficult; A possible misuse can be quickly visualized and localized by means of appropriate security measures during read-out.

Preferably, the verification device comprises a mobile telephone and / or PDA (personal digital assistant) and a modulatable, in particular pulse-operated illumination device and as an optical reading unit, a camera module, with a personalization page and / or machine-readable characters are recorded, which are then subjected to the verification , On the screen of the mobile phone / PDA, for example, the image from the memory of the RFID element and / or the scanned or taken with the camera module image of the travel document holder is displayed. Two or three of these images are displayed side by side for visual comparison or superimposed to detect any deviations. In addition, these images can be transmitted immediately to a competent body via a communications and data network. It is particularly advantageous for the graphical display unit, data processing unit and communication unit to be formed by a mobile telephone in which these functional units are already combined.

The RFID reader module is preferably integrated in the mobile phone. It can be attached to the mobile phone but also an RFID reader module as an adapter or replacement part. It is supplemented by a security-supported wireless communication module with which the communication to an external data network is possible. Depending on the field of application, the wireless communication module has a range of a maximum of 100 m, in particular a maximum of 30 m, in particular a maximum of 10 m. It can be designed as a blue-tooth, wireless LAN or IR module. It is particularly advantageous if the wireless communication module is constructed on the basis of a mobile telephone module and provided with encryption devices for secure data transmission via public mobile radio networks or the police radio network or via the digital radio.

The optical reading unit preferably comprises an OCR module for reading the standardized ICAO line in passports and ID cards, for example a small field scanner of at least the length and / or height of an ICAO line of a passport. In further embodiments, the optical reading unit includes a scanner constructed in line form raster elements, preferably based on a contact image sensor line (CIS) with CMOS or CCD elements, with which very small-sized scanners can be realized. Optionally, a relative movement between device parts and the passport will be required to scan the ICAO line, which can be done in principle in either direction, but for cost reasons and because of the space requirements preferably the shorter route is selected. It is particularly advantageous if the optical reading unit of the mobile verification device is formed by the camera module of a mobile communication device, in particular a mobile telephone or PDA. Here, a variety, for example, eight cameras can be provided and can then completely replace the scanner.

Mobile phones and PDAs with integrated camera module in the form of matrix-type CCD or CMOS elements belong to the state of the art. At the moment, building blocks with up to 3 million pixels and are already being built Color resolution offered, which can also be used for verification tasks. Mobile phones and PDAs with camera systems usually operate without a flash unit, but in comparison with digital cameras already have a relatively high-security wireless data transmission device in the form of a mobile radio network. In this embodiment, therefore, a low-cost mobile phone or a cost-effective PDA with camera module can be used not only to record the personalization page of travel documents but also with a suitable illumination device for recognizing coded or hidden information.

Preferably, the optical reading unit is provided with a lighting device comprising modulatable, in particular pulsable light sources, in particular LEDs and / or laser diodes. Since, on the one hand, LED elements in the UV and in the IR range are available at very low cost and with high power, in particular high pulse power, and on the other hand flash lamps also have a relatively high proportion of non-visible light, the integration of such illumination systems into pigments of printing inks contained security elements, eg Stokes or Antistokes security elements of the printed image are excited. With appropriate timing then the respective response signals are recorded, which may be in the visible but also in the non-visible wavelength range, for example. In the NIR range. The matrix-type photoelements of camera modules of modern mobile phones as well as the sensors of a grid-like structure are based entirely on circuits on silicon substrates; their wavelength sensitivity extends from the UV to the NIR range at about 1100 nm. Depending on the design of the security elements, it is possible to use a broadband or several narrowband emissions. However, instead of or additionally, the temporal behavior of the security element can be used for verification. Since conventional Stokes and Antistokes elements have a relatively different attack and decay behavior, this temporal behavior can be used by excitation with a temporally correspondingly modulated or pulsed light system with advantage for authenticity verification.

In a specific embodiment of the invention, the transparency of printing inks and opaque plastic films for the NIR region can be used for the authenticity verification of hidden information. For example. For example, NIR-active pigments can be incorporated below a print layer or below an opaque film. These security elements can then be activated by means of NIR irradiation. The start signal is detected by means of the integrated camera. It can then be forwarded wirelessly to the superordinate data processing system and evaluated or pre-evaluated in the device.

According to the invention, the data processing unit of the verification device can be designed so that it autonomously and off-line verifies the travel documents without having to communicate with an external data network, but it can also be designed so that the verification of the travel documents on-line or partially on-line in communication with an external data network. In particular, the verification of the travel documents is first carried out off-line, without communication with an external data network, switching to on-line operation in the presence of an unclear verification result for a limited time.

Preferably, in the verification device according to the invention, a device is provided which receives verification-relevant data via the communication device at predetermined intervals and carries out a data comparison. This can in particular also take place by means of a docking station with which the mobile verification device can be connected at least temporarily. The docking station in turn receives verification-relevant data at predetermined intervals and carries out the data synchronization. In this way, the mobile verification device is constantly kept up to date with relevant information, and can, for example, verify the data of the travel document in comparison with an updated wanted list.

Preferably, the verification device is equipped with a biometric sensor, which can be realized, for example, by the camera module. With Such a biometric sensor can be iris-scanned with the iris data fed to the verification process. It is particularly advantageous if the biometric sensor is designed as a fingerprint sensor. The data processing device is designed for comparison and verification of a biometric feature recorded on the move with a biometric feature stored on the travel document or identity card, in particular in an RFID chip. Alternatively or additionally, the verification of a biometric feature recorded on the move can also be carried out on-line via the communication device at a central location. In one development of the invention, the data processing device is designed for comparison and verification of a facial image recorded on the move with a face image stored on the travel document or identity card, in particular in an RFID chip.

The biometric sensor of the verification device according to the invention can advantageously be used in a number of functions, namely to enable the device for the authorized user, to encrypt and secure the data transmission via the communication network and to the aforementioned verification.

In a development of the invention, a camera module is provided with which the current facial image of the document holder can be picked up from two different viewing angles. This allows a visual comparison to be made with much greater certainty. For this purpose, the verification device can be equipped in particular with two camera modules.

In order to compensate for possible different magnifications and scale distortions when taking pictures in mobile use, in the case of camera modules which are designed to receive the entire personalization page of the travel document, a distortion correction on the basis of the ICAO line is provided in the data processing device.

To prevent unauthorized operation or unauthorized use, the operator of a mobile verification device must identify himself before startup. According to the invention, this can be done not only by means of a biometric sensor but also by the user logging in with an electronic identification element, that is, for example, with a chip card, a USB token or with a contactless RFID element. But also comes a combination of such identification means, such. B. smart card and fingerprint.

Further features and advantages of the invention will become apparent from the following description of exemplary embodiments.

Fig. 1a:

Eine bevorzugte Ausführungsform einer erfindungsgemäßen mobilen Verifikationseinrichtung in ergonomischer Gestaltung.

Fig. 1b:

Die Ausführungsform nach Figur 1 a mit eingelegtem Reisedokument.

Fig. 1c:

Die Ausführungsform nach Figur 1a mit eingelegtem Reisedokument geschlossen und in rückwärtiger Ansicht.

Fig. 2:

Eine bevorzugte Ausführungsform der erfindungsgemäßen mobilen Verifikationseinrichtung mit Schultergurt, Schulterpolster und Sicherheitsclip.

Fig. 3a:

Den Sicherheitsclip der bevorzugten Ausführungsform in geschlossenem Zustand

Fig. 3b:

Den Sicherheitsclip der bevorzugten Ausführungsform in geöffnetem Zustand mit Sollbruchstelle.

Fig. 3c:

Den Sicherheitsclip der bevorzugten Ausführungsform in geöffnetem Zustand mit elektronischem Sicherheitsmodul

Fig. 4a:

Eine bevorzugte Ausführungsform mit Sollbruchstelle im Bereich der Befestigungsvorrichtung des Tragegurts an der Verifikationseinrichtung mit zwei Verbindungsstellen

Fig. 4b:

Eine weitere bevorzugte Ausführungsform mit Sollbruchstelle im Bereich der Befestigungsvorrichtung des Tragegurts an der Verifikationseinrichtung mit einer Verbindungsstellen

Fig. 4c:

Eine weitere bevorzugte Ausführungsform mit Sollbruchstelle im Bereich der Befestigungsvorrichtung des Tragegurts an der Verifikationseinrichtung mit zwei Verbindungsstellen

Show it:

Fig. 1a:

A preferred embodiment of a mobile verification device according to the invention in an ergonomic design.

Fig. 1b:

The embodiment according to FIG. 1 a with inserted travel document.

Fig. 1c:

The embodiment according to FIG. 1a closed with inserted travel document and in backward view.

Fig. 2:

A preferred embodiment of the mobile verification device according to the invention with shoulder strap, shoulder pad and safety clip.

Fig. 3a:

The safety clip of the preferred embodiment in the closed state

3b:

The safety clip of the preferred embodiment in the open state with predetermined breaking point.

3c:

The safety clip of the preferred embodiment in the open state with electronic security module

Fig. 4a:

A preferred embodiment with predetermined breaking point in the region of the fastening device of the carrying strap to the verification device with two connection points

Fig. 4b:

A further preferred embodiment with predetermined breaking point in the region of the fastening device of the carrying strap to the verification device with a connection points

4c:

A further preferred embodiment with predetermined breaking point in the region of the fastening device of the carrying strap to the verification device with two connection points

FIG. 1 a shows a preferred embodiment of a mobile verification device 1 according to the invention in its external appearance and ergonomic design approximately in front view, ie, for example, from the viewing direction of a control person.

It consists of an upper device part 3 and a lower device part 4, which are hinged together and form a gap for inserting a travel document 2 to be read.

1. 1 oberes Geräteteil 3 aufstellen
2. 2 oberes Geräteteil 3 (für dickere Dokumente) höherstellen

versieht, die beide an beiden Bedienknöpfen, also rechts- und linkshändig, ausgelöst werden können.There is provided a mechanical erection device, with the aid of which the upper device part 3 can be unfolded relative to the lower device part 4 or the gap for inserting the travel document 2 can be widened. For this purpose, the upper device part 3 is rotatably mounted on the lower device part 4 via a hinge. The axis of the swivel joint carries at both ends a control button, which in two pressure points the operating functions

1. Set up 1 upper unit part 3
2. 2 raise the upper part of the unit 3 (for thicker documents)

Both can be triggered on both control buttons, ie right- and left-handed.

The lower device part goes down stepwise tapered into a handle 5 over. The handle has on both sides of the grip improving recoveries and surface profiling such as grooves, ridges or the like.

FIG. 1b shows the embodiment according to FIG. 1 a with inserted travel document 2 and open upper device part. 3

Figure 1c shows the embodiment according to FIG. 1 a with inserted travel document 2 and closed upper device part 3, in rear view, ie from the viewing direction of the user.

The device is cuboid in its corpus overall, with rounded edges and corners designed to take him any aggressive look. Therefore, the handle is preferably not designed as a pistol grip, but molded into the device base in the manner of a handle bar, resulting in a balanced weight distribution.

Fig. 2 shows a preferred embodiment of the mobile verification device 1 according to the invention with shoulder strap 6 as a shoulder belt nd security clip 10. In a shoulder pad - not shown - speakers or headphone jack and microphone or microphone port for the telecommunication device can be integrated. To protect against eavesdropping, they are preferably connected to the appliance unit by cables which are integrated in the carrying belt 6. Alternatively, the microphone and loudspeaker may also be provided elsewhere in the device.

Figure 3 Figures a-c show the safety clip 10 of the preferred embodiment in its various operating states.

The security clip preferably combines several security-relevant functions. First, he may include the breaking point 7, but also provided elsewhere in the device can be, for example, at the verification device 1 itself or at the attachment point 9 between it and the strap 6.

The predetermined breaking point 7 is intended to ensure that the belt 6 opens in the event of a physical attack, for example when the control person tugs at it, so that injuries to the user 8 are avoided. Since the attacker in this case can come into the possession of the device 1, it is important that the device is secured in this case against misuse. Therefore, a circuit is integrated into the belt, which also breaks when breaking the predetermined breaking point 7 and turns off the device. The recording of the electronic identification means 11, for example a security chip for identifying the authorized user, is usefully integrated in the security clip 10 at the same time. In this case, the legitimacy of the authorized user can be additionally made dependent on reading biometric features, so as to prevent misuse even in the case of the theft of device and electronic identification means 11.

Fig. 3a shows the security clip 10 in the closed state. The head strap 6 passing through conductor is closed. The electronic identification means 11 (not shown) is inserted into the receptacle provided therefor. The possibly additional required biometric identification of the authorized user is performed. The device is ready for operation.

Fig. 3b shows the safety clip 10 of the preferred embodiment in the open state with breakage of the predetermined breaking point 7. The device has switched off.

Fig. 3c shows the safety clip 10 of the preferred embodiment in the open state with electronic identification means 11 before its introduction into its receptacle and before the closing of the strap and the circuit integrated therein.

Fig. 4a shows a preferred embodiment of a verification device 1 with carrying strap 6 with predetermined breaking point 7 in the region of the fastening device 9 of the carrying strap 6 to the verification device 1 with two closely spaced joints.

Fig. 4b shows a further preferred embodiment of a verification device 1 with carrying strap 6 with predetermined breaking point 7 in the region of the fastening device 9 of the carrying strap 6 on the verification device 1 with a single connection point.

Fig. 4c shows a further preferred embodiment of a verification device 1 with carrying strap 6 with predetermined breaking point 7 in the region of the fastening device 9 of the carrying strap to the verification device 1 with two connection points.

Reference numerals:

1

mobile verification device

2

ID document / travel document

3

Upper part of the device

4

Lower part of the device

5

handle

6

Strap, carrying strap, hand strap

7

Breaking point

8th

Holding person / authorized user

9

fastening device

10

safety clip

11

Electronic identification means

Claims (7)

1. Mobile verification device (1) for checking the authenticity of identification documents (2), in particular travel documents, comprising an upper device part (3) and a lower device part (4) which are connected together in an articulated manner and which form a gap for the insertion of an identification document to be read,
   characterized

   - in that the lower device part (3), tapering downwards in steps, merges into a handle (5), and

   - in that, in the event of breakage of an intended breakage point, which is arranged in a mechanical or electronic connection between the verification device and a holding person, the verification device (1) is designed to block the function of the verification device and at the same time to trigger an acoustic alarm signal and/or location of the device.
2. Mobile verification device (1) according to Claim 1, characterized in that the verification device (1) has a belt, a shoulder strap or a holding loop (6).
3. Mobile verification device (1) according to Claim 2, in which the intended breakage point (7) is arranged in the verification device (1) and/or in its belt, shoulder strap or holding loop (6).
4. Mobile verification device (1) according to Claim 3, in which the intended breakage point (7) is part of a fixing device (9) between the verification device (1) and the belt, shoulder strap or holding loop (6).
5. Mobile verification device (1) according to one of Claims 2 to 4, in which the intended breakage point (7) is integrated into a safety clip (10).
6. Mobile verification device (1) according to Claim 5, in which a drawer is provided in the safety clip (10) for the insertion of an electronic identification means (11) to prove the identity of the authorised user (8).
7. Mobile verification device (1) according to one of Claims 1 to 6, characterized in that the verification device has an RFID tag and, in the event of breakage of the electronic connection between the RFID tag on the verification device (1) and an RFID tag on the body of the holding person, which communicate with each other, is designed to block the function of the verification device (1).

Images