Global identification (ID) and age verification system and procedure

Abstract

A computer-implemented multi-process identity and / or age verification method for a user connected to a network, the method comprising: Verifying personal information entered by the user on a computing device; Verification of identification documents assigned to the user on the computer device, comprising the following steps: Analyzing an image of the identification document to determine whether any elements within the image of the identification document have been damaged, altered, or forged compared to elements contained in a standard for such identification documents, and Performing a numerical and algorithmic analysis on a document number assigned to the identity document to determine whether the identity document is correct, the analysis being adapted to determine whether elements of the document number exceed a certain threshold, in particular a date of birth requirement; and Performing a real-time online video face-to-face verification of the user over the network using the computing device, comparing an image of the user on the user's identification document with a video image of the user, Whereby, after successful verification of the personal information entered by the user, after successful verification of the user's identification document and after determining that the user's image on the identification document matches the user's video image, the identity or age of the user is verified.

Description

FIELD OF THE INVENTION

[0001] Embodiments of the present invention generally relate to the field of personal identification and age verification of a person connected to the Internet or other network accessing a network location or service. BACKGROUND

[0002] Currently, there is a need to verify the identity and age of individuals accessing certain websites or services that operate over the Internet or another network. For example, in the online gaming industry, site operators that provide online gaming services that are generally prohibited to users under a certain age must ensure that minors do not have access to the website or its services. These site operators must adhere to strict government regulations regarding how identification and age verification must be carried out. In Germany, for example, the requirement for gaming operators is difficult to implement because the age verification prescribed by the Commission for the Protection of Minors in the Media (KJM) requires "face-to-face" verification (e.g., personal contact) in addition to requesting verified documents.Until now, providers had the limited options of using PostIdent from Deutsche Post, mobile operators, banks and some limited service providers to meet these requirements.

[0003] Existing verification procedures using PostIdent or services like Verify-U are laborious and expensive, costing between €10 and approximately €3 each. "Closed User" methodologies are currently time-consuming and do not utilize the tools or resources available online. This is, for example, why closed user systems are rarely used in the pornography industry in Germany, and why most content lacking the necessary age verification comes from outside Germany. This situation is not limited to the pornography industry and is undesirable.

[0004] DE 10 2009 022 381 B4 discloses a method for web-based personal identification, for example, for opening an online bank account. Personal data is entered online by a user and transmitted to the identification service provider. The personal data is verified using databases. The user then transmits data from their identity card (place of birth, ID number, date of issue, check digit) to the identification service provider. The identification service provider then performs an electronic plausibility check to determine whether the ID number, date of issue, expiration date, and date of birth of the user indicate a valid German identity document.

[0005] US 2003 / 0 139 994 A1, for example, describes a method for remotely processing banking transactions that requires personal identification. During the plausibility check, a real-time image of the user is compared with a transmitted ID image and verified to determine whether the person to be identified and the person currently acting are identical.

[0006] US 2003 / 0 070 072 A1 describes a system having a terminal for financial institutions. The financial institution terminal includes a document imaging device that receives an image of a personal identification document showing a photograph of the individual. The terminal further includes an image capturing device that captures an image of a person who has presented the personal identification document to the financial institution terminal. The system further includes a processor that receives the document image and the individual image from the financial institution terminal for verification and further performs a financial institution function requested by the individual if it is determined that the photograph in the document image and the individual image appear to be of the same individual.

[0007] The JMStV (Interstate Treaty on the Protection of Minors in the Media) does not specify any procedure for certifying closed user groups or age verification systems. The KJM has therefore developed a positive assessment procedure and evaluates concepts upon request from a manufacturer or service provider. This can improve the protection of minors on the internet; at the same time, the service offers providers greater legal and planning certainty. Developing an online offering that complies with the requirements of the JMStV is the responsibility of the content provider, not the KJM. The provider can use technical concepts for the protection of minors that have already received a positive rating from the KHM.

[0008] The KJM assesses both complete package solutions and partial solutions (modules) for closed user groups. Assessing modules makes it easier for users to implement their concepts. For example, providers can combine modules that have been positively assessed by the KJM to create a modular, comprehensive solution that meets the requirements of the JMStV and the KJM. Modules can, for example, be procedures for identification, authentication, or other key components of an age verification system. The KJM only assesses concepts. The assessment of content-related topics depends on the practical implementation of the closed user groups.

[0009] Accordingly, there is a general need for a fast, reliable and cost-effective technical method for verifying the identity and age of an online or network user. SHORT DESCRIPTION OF THE DRAWING Fig. 1 is an exemplary process flow for an exemplary embodiment of the disclosed invention. Fig. 2 is an exemplary graphical interactive user interface accessed by a user who wishes to have his / her identity and / or age identified over a network such as the Internet. Fig. 3 is another exemplary graphical interactive user interface accessed by a user who wishes to have his / her identity and / or age identified over a network such as the Internet. Fig. 4 is a screen display presented to a user during the process of verifying his / her identity and / or age over a network such as the Internet, in accordance with the disclosed principles. Fig. Figure 5 is an example video confirmation console screen display used by the compliance team in accordance with the disclosed principles. Fig. Figure 6 is an exemplary graphical user interface used by the Compliance Team during the process of verifying the identity and / or age of a user over a network such as the Internet, in accordance with the disclosed principles. Fig. 7 is an exemplary system according to the disclosed principles. SUMMARY OF THE INVENTION

[0010] Embodiments disclosed herein provide a computer-implemented multi-process identity and / or age verification method and a system for implementing a multi-process identity and / or age verification method for users connected to a network, such as the Internet. The method verifies the user's identity by: verifying, at a computing device, personal information of the user entered by the user;Verifying identification documents associated with the user on the computing device, comprising the following steps: analyzing an image of the identification document to determine whether elements within the image of the identification document have been damaged, altered or forged compared to elements contained in a standard for such identification documents, and performing a numerical and algorithmic analysis on a document number associated with the identification document to determine whether the identification document is correct, wherein the analysis is adapted to determine whether elements of the document number exceed a certain threshold, in particular a date of birth requirement;and performing real-time online video face-to-face verification of the user over the network using the computing device, comparing an image of the user on the user's identification document with a video image of the user, wherein an identity or age of the user is verified upon successful verification of the personal information entered by the user, upon successful verification of the user's identification document, and upon determining that the image of the user on the identification document matches the video image of the user;

[0011] The system comprises a server computer, the server computer being adapted to: verify personal information of the user entered by the user; verify identification documents associated with the user by: analyzing an image of the identification document to determine whether elements within the image of the identification document have been damaged, altered or forged compared to elements included in a standard for such identification documents, and performing a numerical and algorithmic analysis on a document number associated with the identification document to determine whether the identification document is correct, the analysis being adapted to determine whether elements of the document number exceed a certain threshold, in particular a date of birth requirement;and performing real-time online video face-to-face verification of the user over the network, comparing an image of the user on the user's identification document with a video image of the user, wherein an identity or age of the user is verified after successful verification of the personal information entered by the user, after successful verification of the user's identification document, and after determining that the image of the user on the identification document matches the video image of the user; DETAILED DESCRIPTION

[0012] In the following detailed description, several specific details are set forth to provide a thorough understanding of the preferred embodiments discussed below. The details discussed in connection with the preferred embodiments should not be construed as limiting the present invention. Moreover, for ease of understanding, some method steps are described as separate steps; however, these steps should not necessarily be construed as discrete or sequential in their performance.

[0013] Embodiments of the present invention provide a system and method that implement a multi-process approach to meet and exceed identity and age verification requirements in a variety of industries. Although a standalone video verification or a standalone ID document review, when performed separately, are insufficient to meet the imposed (e.g., KJM) requirements, when these two processes are combined with a third identity verification process, embodiments of the present invention meet the imposed identity and age verification requirements (e.g., the KJM); particularly when the disclosed method compares submitted profile and payment information with government (e.g., US or German) identity databases, credit databases, and / or publicly available identity data.

[0014] It should be understood that online gaming and pornography websites are merely examples of sites and services for which the embodiments disclosed herein may be used. Furthermore, reference to government laws or regulations (e.g., Germany's KJM) is not intended to be limiting. It should be understood that the embodiments disclosed herein should not be limited to a specific online service or site or the regulations governing specific sites or services. The embodiments disclosed herein are suitable for any site or service that requires a user to be identified and / or age verified via a network, such as the Internet.

[0015] The method disclosed here combines three different identity processes into a comprehensive service offering. To ensure that certain online sites or services (e.g., games) can only be used by adults or meet certain Know Your Customer (KYC) requirements, the disclosed method and system provide identity and age verification in three steps: (1) Verifying profile information of the users / customers of the site / service by comparing their personal information with identity data or databases that the embodiments of the present invention acquire or obtain via gateway providers such as credit bureaus or government sources (i.e., a driver's license) (this step is referred to as Integrity IDV in the associated method 100). (2) The system / procedure checks images of identification documents (such as national ID cards, passports, or driving licenses) for compliance with the standard for such documents. Numerical analysis is applied using an algorithm, and compliance personnel confirm that the document does not appear to be damaged, altered, or forged in any way. The document number is also stored with a user-specific profile, and if an attempt to reuse this document occurs, it is flagged as a fraudulent attempt (this step is referred to as document integrity in the associated procedure 100). (3) A member of the Compliance Team verifies that the image on the ID document matches the image of the individual shown by a webcam or other video device. The webcam user must also confirm that they are the account holder by entering a PIN or password (described below). A photograph of the individual to whom the ID document belongs and another photograph of the ID document are taken to confirm the verification. A visual comparison is made between the initially presented ID document, the document presented during the video interview, and the photograph of the individual on the webcam (this step is referred to as face-to-face integrity in the associated procedure 100).

[0016] Combining these three separate verification processes into one service provides the best identity and age compliance service on the market. By combining the latest available technologies, a user could enter their profile information, take a photo of their passport, send the photo to a system implementing the disclosed method, and complete a verification interview via Skype, all from their mobile phone. The disclosed embodiments support all of the latest technologies in each of their processes, meaning site providers (e.g., gaming operators) can share this empowerment with their customers, creating a much more enjoyable experience while meeting the most stringent age compliance obligations.

[0017] Fig. 1 is an exemplary process 100 of an exemplary embodiment of the disclosed invention. The process 100 is shown as having three primary actors: (1) the user, (2) the site or service operator (referred to as the "client"), and (3) a compliance organization. In one embodiment, the user accesses the client's website or service using the Internet. Prior to this, the client has entered into an agreement with the compliance organization to access the compliance organization's age and / or identity verification services described herein. The user may access the client's site or service using a computer, mobile phone, tablet (e.g., iPad®), or any other device capable of communication over the Internet or other network. An exemplary interface 200 for "getting verified" is shown in Fig. 2. The surface 200 of Fig. 2 can be provided by the client or the compliance organization. The interface 200 provides the user with certain information 202 and options 204, 206 to proceed with the verification process or not.

[0018] In the Fig. 1, the user submits registration information to the client in step 102. This may be done using another interactive graphical user interface such as the one shown in Fig. 3. The interface 300 presents fields for a profile photo 302, first name 304, last name 306, date of birth 308, gender 310, and address 312. The client generates a user account (step 104) and presents verification options to the user device (step 106). In the illustrated example, the user has the option to select multi-use verification or single-use (or one-time) verification. It should be understood that government agencies may require different procedures for multi-use verification or single-use (or one-time) verification. As such, the disclosed process 100 has procedures for both. Accordingly, in step 108, it is determined whether or not the user has selected multi-use verification. If it is determined that the user has selected single-use verification (i.e.a No in step 108), the client submits the user information to the compliance organization in step 110. In step 112, the compliance organization determines whether the user has logged in using an approved electronic identification (eID) mechanism (this process is described in . Fig. 1 as "Integrity eID"). A known eID mechanism includes the Norwegian eID mechanism. It should be understood that the disclosed embodiments are not limited to eID and other technical methods may also be used. If, as in Fig. 1, the compliance organization has determined that the user has chosen one-time verification and logged in with an approved eID mechanism (i.e., a Yes in step 112), the client is informed, and the client marks the user with one-time verification (step 114). At this point, registration is complete (step 130), and process 100 ends. Although in Fig. 1, a message, window or other notification may be displayed on the user device indicating that the verification was successful.

[0019] If, as in Fig. 1, the compliance organization has determined that the user has chosen one-time verification but has not logged in using an approved eID mechanism (i.e., a No in step 112), the compliance organization does not verify the user and the process 100 may end or restart in step 102 to give the user another chance to be verified. Although in Fig. 1, a message, window or other notification may be displayed on the user device indicating that the verification was not successful.

[0020] If it is determined that the user has chosen multi-use verification (i.e., a yes in step 108), the client submits the user information to the compliance organization in step 116. The compliance organization then initiates the "Integrity IDV" process in step 118. During the Integrity IDV process, the user's profile information (e.g., name, address, zip code) is verified by comparing the user's personal information with identity data and databases that the organization acquires or receives through gateway providers such as credit bureaus. The compliance organization may use publicly available personal information to validate personal information provided by the user.Examples of databases used for validation include: electoral rolls, utility rolls, taxpayer rolls, land registers, credit reference registers, driver's license registers, motor vehicle registers and / or national ID registers.

[0021] In step 120, a check is performed to determine whether the user has passed the verification step. If the user information is not verified during the Integrity IDV process (i.e., a No in step 120), the compliance organization does not verify the user, and the process 100 may end or restart in step 102 to give the user another chance to be verified. Although in Fig. 1, a message, window or other notification may be displayed on the user device indicating that the verification was not successful.

[0022] If the user information is verified through the Integrity IDV process (i.e., a Yes in step 120), the compliance organization presents an interactive interface, menu, etc., through which the user can select a callback time for the face-to-face verification process in step 122. The user will also be able to upload an identification document (e.g., a passport or driver's license) to be used in a subsequent document verification process. Fig. Figure 4 illustrates an example of a window / screen 400 that is displayed for a user once the callback time / interview (block 402) is scheduled. In one embodiment, the window may also contain a password that the user will be required to provide during the interview. Personnel within the compliance organization, e.g., the compliance or identification specialist, will display a video confirmation console screen (such as the one shown in Fig. 5 (screen area 500 shown in Figure 5) to organize and structure the confirmation / verification interviews.

[0023] The Document Integrity process and the Face-to-Face Integrity process are executed in step 124. The Document Integrity process checks the image of the user's identification document (such as a national ID card, passport, or driver's license) to see if it conforms to the standard for such documents. A numerical analysis is applied using an algorithm, and compliance staff confirms that the document does not appear to have been damaged, altered, or forged in any way. The document number is also stored with a user-specific profile, and if an attempt to reuse this document occurs, it is flagged as a fraudulent attempt.A suitable mathematical algorithm is used that can validate information provided in a government-issued passport number, a national identity card number, or a driver's license number, where the government-issued number can be recognized as valid and / or certain elements of that number relate to other provided information or exceed a certain threshold, such as a date of birth requirement. If the document appears damaged, altered, etc., the document integrity test is censored as failed.

[0024] The face-to-face process uses an interactive graphical user interface such as the one in Fig. 6. The exemplary interface 600 includes windows 606, 608, 604 to display the user's webcam video images, his / her photo image, his / her identification document (in Fig. 6 shown as a passport) and menu selection fields 612 for conducting the video interview. A compliance team verifies that the image on the identification document matches the person on the webcam or video device. The webcam user must also confirm that they are the account owner by entering / confirming the PIN or password previously provided (block 404 of Fig. 4). During the process, a photo of the person to whom the ID document belongs and another photo of the ID document will be taken to confirm verification. A visual comparison will be made between the ID document initially presented, the document presented during the video interview, and the photo of the person on the webcam.

[0025] In step 126, a check is performed to determine whether the document integrity and face-to-face tests have passed or failed. If the user information is verified in both the document integrity process and the face-to-face process (i.e., a yes in step 126), the compliance organization reports it to the client, which marks the user as verified in step 128. At this point, registration is complete (step 130) and process 100 ends. Although in Fig. 1, a message, window or other notification may be displayed on the user device indicating that the verification was successful.

[0026] If, as in Fig. 1, the user information is not verified by both the Integrity Document process and the Face-to-Face process (i.e., a No in step 126), the compliance organization does not verify the user and the process can end or restart in step 102 to give the user another chance to be verified. Although in Fig. 1, a message, window or other notification may be displayed on the user device indicating that the verification was not successful.

[0027] Fig. 7 illustrates an example system 700 including a user device 702 that connects to the client server 710 and the compliance organization server 720 via a network 730 shown as the Internet. As mentioned above, the user device 702 may be a computer, a mobile phone, a tablet (e.g., iPad®), or any other device capable of communicating over the Internet or other network. The client server 710 may include input / output devices 714 such as displays, scanners, printers, etc., as well as internally or externally attached storage devices 714 used to store relevant databases, user information, and verification algorithms used during the processes described above. Similarly, the compliance organization server 720 may include input / output devices 724 such as displays, scanners, printers, etc.as well as internally or externally connected storage devices 722 used to store relevant databases, user information, and verification algorithms used during the processes described above. The database information could also include relevant government or other regulatory laws / rules for specific sites or services. The storage devices 712, 722 could be used to store computer programs or instructions that, when executed by the servers 710, 720 or another computing device, cause the server to perform the functions described herein.

[0028] In summary, the disclosed method 100 and system 700 can verify a user over the Internet or other network using a multi-process technical method, if desired (e.g., for multi-use verifications). To initiate the verification process, a user of the network client or client service simply clicks the "Be Verified" button (software button 210 in Fig. 2) on the Network Client's user profile page. The Client uses the global ID and age verification service provided by the compliance organization. The user is redirected to the compliance organization's identity verification form, where additional ID information is provided and a government-issued identification document is uploaded (see Fig. 3). The user provides the information requested in the form and is also asked to upload a previously scanned, photographed, or imaged copy of their government-issued ID document. Finally, the user selects an interview time and clicks the "SUBMIT" button. The user is presented with a confirmation screen, which also includes a password or PIN required for the webcam interview (see Fig. 4). An ID verification specialist from the compliance organization will then call the user at the scheduled time.

[0029] Video interviews are conducted by an ID verification specialist from the video verification console ( Fig. 5). All pending interviews are shown in the upper window 502, and all interviews assigned to a specific verification specialist are shown in the lower window 504. The video verification retrieval for the current user is displayed in the active queue area of ​​the console. Staff can click "OPEN" to view the user's verification retrieval. With reference to Fig.6, the compliance specialist is presented with the graphical user interface 600. The user's ID information is shown in section 602. The ID document image uploaded by the user is shown in a section 604 of this interface 600. The user's profile image from the network client is shown in another section 608 of the interface 600. During the video interview, the verification specialist will take a picture of the user, and this will be displayed in yet another section 610 of the interface 600. To call the user, the specialist clicks the "Call" button from selection field 612. The verification specialist then reviews the ID documents and associated information and, if correct, clicks "DETERMINED VERIFIED" (block 614). The user profile now displays the "verified" seal (not shown).

[0030] The disclosed method 100 and system 700 can be used for age and identity verification (as described above), brand protection, fraud prevention, screening for sex offenders, improving customer targeting, and creating child-safe spaces on the Internet or other network. Advantages of the disclosed method and system include its affordability, rapid deployment, rapid results, key demographics, global availability, and industry-leading features.

[0031] It should be noted that the disclosed system and method are not limited to the use of third-party sources of user identity data / information, and that the compliance organization (or even the client) may maintain user identity information such as, for example, social security numbers or driver's license data in its own database (i.e., an identity database as part of the system described above); moreover, this information could be accessed via a gateway from additional sources such as, for example, a credit reporting agency. For example, it is common in the US online gaming industry to have a credit, consumer, or government directory for users based on this type of user identity information. The credit, consumer, or government directory and the corresponding user identity information (e.g.,The user's identity information (e.g., the user's social security number and driver's license) can, if desired, be located at the compliance organization or the client system. Thus, the Integrity IDV process would use this locally accessible user identity information instead of or in addition to the other sources of identity information described above.

[0032] The foregoing examples have been provided for the purpose of illustration only and are not intended to be limiting in any way. While reference has been made to various embodiments, the words used herein are words of description and illustration rather than limitation. Furthermore, while references are made to specific means, materials, and embodiments, no limitation is intended to limit the details disclosed herein. Rather, the embodiments extend to all functionally equivalent structures, methods, and uses as fall within the scope of the appended claims.

[0033] Additionally, the purpose of the abstract is to enable the Patent Office and the public generally, and especially scientists, engineers, and practitioners in the field who are unfamiliar with patent or legal terms or phraseology, to quickly determine the nature of the application's technical disclosure from a cursory review. The abstract is in no way intended to limit the scope of the present inventions.

Claims

[1] A computer-implemented multi-process identity and / or age verification method for a user connected to a network, the method comprising: Verifying personal information entered by the user on a computing device; Verification of identification documents assigned to the user on the computer device, comprising the following steps: Analyzing an image of the identification document to determine whether any elements within the image of the identification document have been damaged, altered, or forged compared to elements contained in a standard for such identification documents, and Performing a numerical and algorithmic analysis on a document number assigned to the identity document to determine whether the identity document is correct, the analysis being adapted to determine whether elements of the document number exceed a certain threshold, in particular a date of birth requirement; and Performing a real-time online video face-to-face verification of the user over the network using the computing device, comparing an image of the user on the user's identification document with a video image of the user, Whereby, after successful verification of the personal information entered by the user, after successful verification of the user's identification document and after determining that the user's image on the identification document matches the user's video image, the identity or age of the user is verified. [2] The method of claim 1, wherein the step of verifying personal information is performed by comparing the user's personal information with identity data from a government source. [3] The method of claim 1 or 2, wherein the step of verifying personal information is performed by comparing the user’s personal information with data from a credit card reference agency, and / or by comparing the user's personal information with data from at least one source selected from the group consisting of: electoral rolls, utility rolls, taxpayer rolls, land registers, credit reference registers, driving licence registers, motor vehicle registers and national ID registers. [4] A method according to any one of the preceding claims, wherein the step of verifying identification documents comprises examining an image of the identification documents to determine whether the identification documents comply with the standard for such documents, the identification documents preferably comprising a national identity card, passport and / or driving license. [5] Method according to one of the preceding claims, further comprising: Storing a document number associated with the identification documents with a user profile; and If it is determined that the identification documents are being used by another user, preventing the other user from reusing the identification documents. [6] A method according to any one of the preceding claims, wherein the step of online face-to-face verification comprises: - Verify that an image on the identification documents is the same as a video image of the user, and / or - Confirm that the user has entered a predetermined personal identification number. [7] Method according to one of the preceding claims, further comprising: Determine whether the user has requested one-time verification; and If it is determined that the user has requested one-time verification, verifying the user's identity and / or age using an electronic identification process. [8] System for implementing a multi-process identity and / or age verification method, in particular according to one of the preceding claims, for a user connected to a network, the system comprising: a server computer, the server computer being adapted to: Verify personal information entered by the user; Verification of identification documents assigned to the user by: Analyzing an image of the identification document to determine whether any elements within the image of the identification document have been damaged, altered, or forged compared to elements contained in a standard for such identification documents, and Performing a numerical and algorithmic analysis on a document number assigned to the identity document to determine whether the identity document is correct, the analysis being adapted to determine whether elements of the document number exceed a certain threshold, in particular a date of birth requirement; and Performing a real-time online video face-to-face verification of the user over the network, comparing an image of the user on the user's identification document with a video image of the user, Whereby, after successful verification of the personal information entered by the user, after successful verification of the user's identification document and after determining that the user's image on the identification document matches the user's video image, the identity or age of the user is verified. [9] The system of claim 8, wherein the personal information is verified by comparing personal information of the user with identity data from a government source and / or identity data from a credit card reporting agency. [10] A system according to claim 8 or 9, wherein the personal information is verified by comparing the user's personal information with data from at least one source selected from the group comprising: electoral rolls, utility rolls, taxpayer rolls, land registers, credit reference registers, driving licence registers, motor vehicle registers and national ID registers. [11] A system according to any one of claims 8-10, wherein the identification documents are verified by examining an image of the identification documents to determine whether the identification documents comply with the standard for such documents, the identification documents preferably comprising a national identity card, passport and / or driving license. [12] The system of any of claims 8-11, wherein the server computer is further adapted to: Storing a document number associated with the identification documents with a user profile in a database; and If it is determined that the identification documents are being used by another user, preventing the other user from reusing the identification documents. [13] A system according to any one of claims 8-12, wherein the online verification is performed face-to-face by verifying that an image on the identification documents is the same as a video image of the user, wherein the server computer preferably confirms that the user has entered a predetermined personal identification number. [14] The system of any of claims 8-13, wherein the server computer is further adapted to: Determine whether the user has requested one-time verification; and If it is determined that the user has requested one-time verification, verifying the user's identity and / or age using an electronic identification process. [15] A computer-readable medium comprising instructions for, when executed, implementing the method of any one of claims 1-7.

Images