DEVICE AND METHOD FOR VERIFYING A PERSON'S IDENTITY

Description

[0001] The present invention relates to the field of identity verification.

[0002] The published patent application WO 2016 / 120826 A2 discloses a communication method in the field of cryptocurrency.

[0003] The published patent application US 2011 / 078779 A1 discloses a method for accessing an account.

[0004] The published patent application US 2011 / 057027 A1 discloses a payment method.

[0005] The published patent application US 2010 / 034376 A1 discloses the generation of hash values ​​based on personal data.

[0006] The published patent application JP 2003109053 A discloses the generation of hash values ​​based on personal data.

[0007] The provision of certain services, particularly electronic services on the Internet, requires prior verification of a person's identity. Such services include, for example, banking services or contract brokerage services. In particular, personal data, such as the person's date of birth, must be verified.

[0008] To date, such verifications have been carried out by service providers based on an identification document, such as an identity card, passport, or driver's license. Verifying different identification documents is typically not straightforward. Furthermore, fraud can occur due to the imitation or falsification of a person's identity or personal data. In particular, this can result in financial losses for the service providers.

[0009] It is therefore an object of the present invention to provide an efficient concept for verifying a person's identity.

[0010] This problem is solved by the features of the independent claims. Advantageous further developments are the subject of the dependent patent claims, the description, and the drawings.

[0011] The invention is based on and incorporates the finding that the above-mentioned problem can be solved by using anonymized hash values ​​pre-stored on a server, which can be used to verify the authenticity of data sets each containing personal data of a real person. This makes it possible to easily verify a person's identity and their personal data.

[0012] The central storage of anonymized hash values, each generated from a data set, especially an official or verified data set, of a real person, can be done, for example, by a server operated by a verification service for identity verification. This further ensures that only anonymized hash values ​​are stored centrally, and that it is not possible or traceable to the respective personal data from the server. In particular, central storage of sensitive personal data of individuals can be dispensed with.

[0013] According to a first aspect, the invention relates to a device for verifying the identity of a person, wherein at least one piece of personal data is assigned to the person. The device comprises a detection device which is designed to detect the at least one piece of personal data of the person and to generate a data record, wherein the data record comprises the at least one piece of personal data. The device further comprises a processor which is designed to determine a hash value of the data record using a hash function. The device also comprises a communication interface which is designed to send the hash value of the data record to a server via a communication network and to receive a verification indicator from the server via the communication network in order to verify the identity of the person.The verification indicator indicates whether the hash value corresponds to a pre-stored hash value from a set of pre-stored hash values ​​on the server. The verification indicator thus indicates the authenticity of the data set.

[0014] If the communication interface receives the verification indicator, the person's identity can be considered confirmed, for example. If the communication interface does not receive a verification indicator after a predetermined period of time, or if the communication interface receives a rejection indicator from the server via the communication network, the person's identity can be considered not confirmed, for example. The predetermined period of time can be, for example, 1 second, 2 seconds, 5 seconds, or 10 seconds.

[0015] According to one embodiment, the communication interface is configured not to transmit the data set to the server via the communication network. This provides the advantage that the data set containing the at least one piece of personal data remains locally on the device. Furthermore, the generated data set can be deleted immediately after the hash value is determined to prevent further processing or transmission of the data set via the communication network.

[0016] According to one embodiment, the at least one piece of personal data comprises at least one of the following personal data: a person's first name, a person's middle name, a person's last name, a person's address, a person's date of birth, a person's place of birth, and an age of the person. This provides the advantage that various personal data, which may be relevant for different services, can be included in the data set. The data set can, for example, comprise one piece of personal data or multiple pieces of personal data, which can be preselected in any combination from the above personal data.

[0017] According to one embodiment, the hash function is an MD5 hash function or an SHA hash function. This provides the advantage that efficient hash functions can be used to determine the hash value. In general, however, any other hash functions can be used as needed. Using a hash function, in particular, can prevent collisions caused by identical hash values ​​in different data sets.

[0018] According to one embodiment, the recording device comprises a keyboard for entering the at least one piece of personal data. This provides the advantage that the at least one piece of personal data can be recorded particularly easily. The keyboard can be arranged locally on the device and used, for example, by the person or by an employee, such as a bank employee, to enter the at least one piece of personal data.

[0019] According to one embodiment, an identification document is assigned to the person, wherein the at least one piece of personal data is stored electronically in the identification document, and wherein the capture device comprises a reader for reading the at least one piece of personal data from the identification document. This achieves the advantage that the at least one piece of personal data can be efficiently assigned to the person. Furthermore, the at least one piece of personal data of the person can be captured automatically, thereby increasing the convenience of capturing the at least one piece of personal data and preventing potential errors during manual entry.

[0020] According to one embodiment, an identification document is assigned to the person, wherein the at least one piece of personal data is printed on the identification document, and wherein the capture device comprises an image camera for optically capturing the at least one piece of personal data on the identification document. This achieves the advantage that the at least one piece of personal data can be efficiently assigned to the person. Furthermore, the at least one piece of personal data of the person can be captured automatically, thereby increasing the convenience of capturing the at least one piece of personal data and preventing potential errors during manual entry.

[0021] According to one embodiment, the recording device is designed to record an issue date of the identification document, an expiration date of the identification document, or an identification number of the identification document, wherein the data set further comprises the issue date of the identification document, the expiration date of the identification document, or the identification number of the identification document. This provides the advantage that the data set can also be uniquely assigned to the person's identification document.

[0022] The issue date, expiration date, and / or identification number can, for example, be stored electronically in the identification document or printed on the identification document. The issue date, expiration date, and / or identification number can therefore be captured by the keyboard, reader, or camera. The identification number of the identification document can, for example, be a serial number of the identification document.

[0023] According to one embodiment, the communication interface is configured to communicate with the server via an authenticated and / or encrypted communication connection. This provides the advantage that the hash value and the verification indicator can be securely transmitted over the communication network. Furthermore, the authenticity of the device and / or the server can be verified and ensured during communication over the communication network.

[0024] According to a second aspect, the invention relates to a server for verifying the authenticity of a data record, wherein the data record comprises at least one piece of personal data relating to a person, and wherein a hash value is assigned to the data record. The server comprises a communication interface configured to receive the hash value of the data record from a device via a communication network. The server further comprises a database in which a plurality of hash values ​​of a plurality of data records are stored, wherein each hash value of the plurality of hash values ​​is assigned a data record of the plurality of data records. The server further comprises a processor configured to compare the received hash value with the plurality of hash values ​​in the database and to generate a verification indicator if the received hash value corresponds to a hash value of the plurality of hash values.

[0025] The communication interface is designed to transmit the verification indicator to the device via the communication network.

[0026] In this context, the authenticity of the data set represents the authenticity or genuineness of the person. In particular, the authenticity of the data set represents the authenticity or genuineness of the personal data contained in the data set. By comparing the received hash value with the majority of hash values ​​in the database, the authenticity of the data set or the authenticity of the person is verified. This ensures that the personal data in the data set is assigned to a real person. For example, the received hash value corresponds to one hash value of the majority of hash values ​​if the received hash value is identical to one hash value of the majority of hash values.

[0027] According to one embodiment, the processor is configured not to generate a verification indicator if the received hash value does not correspond to any of the plurality of hash values. This provides the advantage that no verification indicator is sent to the device to confirm the person's identity. Consequently, the device can consider the person's identity as unconfirmed.

[0028] According to one embodiment, the processor is configured to generate a rejection indicator if the received hash value does not correspond to any of the plurality of hash values, wherein the communication interface is configured to transmit the rejection indicator to the device via the communication network. This provides the advantage that the device can be signaled that the hash value of the data set does not correspond to any of the plurality of hash values ​​in the database. Consequently, the device can consider the person's identity as unconfirmed.

[0029] According to one embodiment, the received hash value and the plurality of hash values ​​in the database are assigned a predetermined verification level. This provides the advantage that the quality of the verification of the person's identity can be taken into account. The predetermined verification level can, for example, indicate a number of personal data items and / or types of personal data included in the data set.

[0030] The predetermined verification level may, for example, depend on the service to be provided. For example, a first predetermined verification level may provide for the use of a large number of personal data items in the data set, and a second predetermined verification level may provide for the use of a small number of personal data items in the data set. The first predetermined verification level may, for example, be provided for comprehensive verification of the person's identity, and the second verification level may, for example, be provided for cursory verification of the person's identity.

[0031] According to one embodiment, the communication interface is configured to communicate with the device via an authenticated and / or encrypted communication connection. This provides the advantage that the hash value and the verification indicator can be securely transmitted over the communication network. Furthermore, the authenticity of the device and / or the server can be verified and ensured during communication over the communication network.

[0032] According to a third aspect, the invention relates to an arrangement for verifying a person's identity. The arrangement comprises a device according to the first aspect of the invention and a server according to the second aspect of the invention.

[0033] The device and the server can communicate with each other via a communication network, for example the Internet.

[0034] According to a fourth aspect, the invention relates to a method for verifying a person's identity using a device, wherein at least one piece of personal data is assigned to the person, and wherein the device comprises a capturing device, a processor, and a communication interface. The method comprises capturing the at least one piece of personal data of the person by the capturing device, generating a data record by the capturing device, wherein the data record comprises the at least one piece of personal data, determining a hash value of the data record using a hash function by the processor, sending the hash value of the data record via a communication network to a server via the communication interface, and receiving a verification indicator via the communication network from the server via the communication interface in order to verify the person's identity.

[0035] The method can be carried out by the device according to the invention. Further features of the method result directly from the features and / or functionality of the device.

[0036] According to a fifth aspect, the invention relates to a method for verifying an authenticity of a data record using a server, wherein the data record comprises at least one personal data item of a person, wherein a hash value is assigned to the data record, wherein the server comprises a communication interface, a database and a processor, wherein a plurality of hash values ​​of a plurality of data records are stored in the database, and wherein each hash value of the plurality of hash values ​​is assigned a data record of the plurality of data records.The method comprises receiving the hash value of the data set over a communication network from a device through the communication interface, comparing the received hash value with the plurality of hash values ​​in the database by the processor, generating a verification indicator by the processor if the received hash value corresponds to a hash value of the plurality of hash values, and transmitting the verification indicator over the communication network to the device through the communication interface.

[0037] The method can be executed by the server. Further features of the method result directly from the features and / or functionality of the server.

[0038] According to a sixth aspect, the invention relates to a computer program having a program code for carrying out the method according to the fourth aspect of the invention and / or the method according to the fifth aspect of the invention.

[0039] The device and / or the server may be programmed to execute the program code.

[0040] The invention can be implemented in hardware and / or software.

[0041] Further embodiments are explained in more detail with reference to the accompanying drawings. They show: Fig. 1 is a schematic diagram of a device for verifying a person's identity; Fig. 2 is a schematic diagram of a server for verifying an authenticity of a data set; Fig. 3 is a schematic diagram of an arrangement for verifying a person's identity; Fig. 4 is a schematic diagram of a method for verifying a person's identity using a device; Fig. 5 is a schematic diagram of a method for verifying an authenticity of a data set using a server; Fig. 6 is a schematic diagram of a verification of a person's identity; and Fig. 7 is a schematic diagram of a verification of a person's identity.

[0042] Fig. 1 shows a schematic diagram of a device 100 for verifying the identity of a person, wherein at least one piece of personal data is assigned to the person. The device 100 comprises a detection device 101, which is designed to detect the at least one piece of personal data of the person and to generate a data record, wherein the data record comprises the at least one piece of personal data. The device 100 further comprises a processor 103, which is designed to determine a hash value of the data record using a hash function. The device 100 also comprises a communication interface 105, which is designed to send the hash value of the data record to a server via a communication network and to receive a verification indicator from the server via the communication network in order to verify the identity of the person.

[0043] Fig. 2 shows a schematic diagram of a server 200 for verifying the authenticity of a data record, wherein the data record comprises at least one piece of personal data relating to a person, and wherein a hash value is assigned to the data record. The server 200 comprises a communication interface 201 configured to receive the hash value of the data record from a device via a communication network. The server 200 further comprises a database 203 in which a plurality of hash values ​​of a plurality of data records are stored, wherein each hash value of the plurality of hash values ​​is assigned a data record of the plurality of data records. The server 200 further comprises a processor 205 configured to compare the received hash value with the plurality of hash values ​​in the database and to generate a verification indicator if the received hash value corresponds to a hash value of the plurality of hash values.The communication interface 201 is configured to transmit the verification indicator to the device via the communication network.

[0044] Fig. 3 shows a schematic diagram of an arrangement 300 for verifying a person's identity, wherein at least one piece of personal data is assigned to the person. The arrangement 300 comprises a device 100 and a server 200, wherein the device 100 and the server 200 communicate with each other via a communications network 301, for example, the Internet.

[0045] The device 100 comprises a capture device 101 configured to capture the at least one piece of personal data of the person and to generate a data set, wherein the data set comprises the at least one piece of personal data. The device 100 further comprises a processor 103 configured to determine a hash value of the data set using a hash function. The device 100 also comprises a communication interface 105 configured to transmit the hash value of the data set to the server 200 via the communication network 301 and to receive a verification indicator from the server 200 via the communication network 301 in order to verify the identity of the person.

[0046] The server 200 comprises a communication interface 201, which is configured to receive the hash value of the data record from the device 100 via the communication network 301. The server 200 further comprises a database 203, in which a plurality of hash values ​​of a plurality of data records are stored, wherein each hash value of the plurality of hash values ​​is assigned a data record of the plurality of data records. The server 200 further comprises a processor 205, which is configured to compare the received hash value with the plurality of hash values ​​in the database and to generate the verification indicator if the received hash value corresponds to a hash value of the plurality of hash values. The communication interface 201 is configured to transmit the verification indicator to the device 100 via the communication network 301.

[0047] To verify the person's identity, the hash value is used as a digital fingerprint instead of the data record containing the at least one piece of personal data. A plurality of hash values ​​is therefore stored in the database 203 of the server 200. A request to verify the person's identity, in particular to confirm the person's identity, therefore does not include the data record of the person to be identified, but merely the hash value of the data record. The hash value is determined by the processor 103, for example, using a hash function according to established technical standards, such as MD5 or SHA, in particular SHA-512. In general, other hash functions can also be used, for example, an SHA-1024 or an SHA-2048 hash function or an SHA-3 hash function. Suitable hash functions are standardized, for example, by NIST (USA) or the BSI (Germany).

[0048] The technical standards used for the hash function can be published by a service provider with appropriate advance notice and selected according to the current security requirements for cryptographic procedures. The service provider can, for example, also provide a software application itself with which a request with a hash value can be generated from a data set and / or a query can be executed.

[0049] A data set can, for example, include a first and last name, a date of birth, and / or a place of birth. Using the exemplary hash function SHA-512, an anonymized hash value of the data set can be determined or calculated as a digital fingerprint. This hash value can be stored centrally in database 203 in advance. In particular, if an identification document has a fixed expiration date, which can represent the validity of the identification document, an identification number of the identification document can also be used, thereby further increasing the security of the process. When the validity of the identification document expires, the data set can be updated using a new identification document, for example, a new passport. The service provider can use its own signature, which can be used to verify the authenticity of the service.

[0050] The majority of hash values ​​can be stored tamper-proof and centrally in the database 203 of the server 200, whereby the server 200 can be operated by a verification service, for example, in the form of an accredited trust center. The majority of hash values ​​in the database 203 can be technically updated as needed; for example, longer cryptographic keys can be used in conjunction with new hash functions.

[0051] The communication between device 100 or the requesting party and server 200 or the service provider can be cryptographically secured to ensure the authenticity of the verification indicator for confirming identity. The respective request and the respective response can, for example, be digitally signed.

[0052] Furthermore, the server 200 can be protected from unauthorized requests using various standard procedures.

[0053] The person's at least one piece of personal data can first be securely verified, for example, by personally appearing with an identification document before a trained specialist and being verified by the trained specialist. Furthermore, during the identification process for the one-time inclusion of the person in database 203, proof of identity can be provided using an electronic ID card with the appropriate functionality. The identification processes used could also vary, for example, depending on the data set and personal data to be included, or depending on the service user and their requirements. A data set with a hash value can then be generated, with the hash value being stored in database 203. The identities of real persons can therefore be securely verified in advance before inclusion in the verification service.For example, a person's inclusion in the verification service can occur when applying for an identification document as part of the document production process. Depending on a country's legal regulations, the listing of individuals in database 203 may be mandatory or voluntary. The one-time inclusion of the person in database 203 serves as the basis for the authenticity of the identities stored in the identification service. The verification service can be financed, for example, by the service providers as users of the verification service, such as banks when opening an account.

[0054] Furthermore, a plurality of hash values ​​associated with known false identities can be stored in the database 203. In this case, feedback can be sent to the device 100 as the requesting party indicating that the identity to be verified is a false identity.

[0055] The approach therefore enables technically efficient verification of a multitude of different identities of different individuals through simple queries, without the need to centrally store or retain personal data. Furthermore, the verification of a person's identity, in particular the confirmation of the person's identity, can be carried out quickly, cost-effectively, and securely for private business and government applications.

[0056] Fig. 4 shows a schematic diagram of a method 400 for verifying a person's identity using a device, wherein at least one piece of personal data is assigned to the person, and wherein the device comprises a capturing device, a processor, and a communication interface. The method 400 comprises capturing 401 the at least one piece of personal data of the person by the capturing device, generating 403 a data record by the capturing device, wherein the data record comprises the at least one piece of personal data, determining 405 a hash value of the data record using a hash function by the processor, sending 407 the hash value of the data record via a communication network to a server via the communication interface, and receiving 409 a verification indicator via the communication network from the server via the communication interface in order to verify the person's identity.

[0057] Fig. 5 shows a schematic diagram of a method 500 for verifying an authenticity of a data record using a server, wherein the data record comprises at least one personal data item of a person, wherein a hash value is assigned to the data record, wherein the server comprises a communication interface, a database and a processor, wherein a plurality of hash values ​​of a plurality of data records are stored in the database, and wherein each hash value of the plurality of hash values ​​is assigned a data record of the plurality of data records.The method 500 includes receiving 501 the hash value of the data set over a communication network from a device through the communication interface, comparing 503 the received hash value with the plurality of hash values ​​in the database by the processor, generating 505 a verification indicator by the processor if the received hash value corresponds to a hash value of the plurality of hash values, and transmitting 507 the verification indicator over the communication network to the device through the communication interface.

[0058] Fig. 6 shows a schematic diagram of a person's identity verification. The person is an end customer requesting a service that requires identity verification.

[0059] Verification of the end customer's identity is requested from a verification service, which may, for example, operate a central server 200 (not shown). The central server or verification service manages a plurality of anonymous hash values ​​of a plurality of data sets, which may have been registered, collected, or produced in advance. The central server or verification service confirms the identity of the end customer or the validity of the end customer's identity using a verification indicator in response. Subsequently, the requested service can be provided to the end customer upon confirmation of the identity.

[0060] Fig. 7shows a schematic diagram of a person's identity verification. The person is an end customer requesting a service that requires verification of the end customer's identity. The service could, for example, be a banking service to be provided by a bank.

[0061] In a first step, the end customer presents an identification document, for example, at a bank. At least one of the end customer's personal data is stored electronically in the identification document or printed on it.

[0062] In a next step, an employee, for example a bank employee, records the at least one piece of personal data of the end customer. This can be done, for example, manually using a keyboard, automatically using a reader, or automatically using an image camera. Furthermore, a touch-sensitive screen can be used to record the at least one piece of personal data. According to one embodiment, the at least one piece of personal data is recorded using a voice input from the person and voice recognition. The at least one piece of personal data can also be recorded at a self-service kiosk. The device generates a data record from the at least one piece of personal data and determines a hash value of the data record as a digital fingerprint. The device then sends the hash value in a cryptographically secured manner to a verification service, which can, for example, operate a central server 200 (not shown).

[0063] In the next step, the verification service or the central server checks whether the hash value is listed or exists in a database and generates a verification indicator, through which the corresponding result is returned to the device.

[0064] If the end customer's identity is confirmed, the requested service is then provided, which can, for example, minimize the risk for the bank.

[0065] All features shown or described in connection with individual embodiments of the invention can be provided in any combination in the subject matter according to the invention in order to simultaneously realize their advantageous effects. LIST OF REFERENCE SYMBOLS

[0066] 100Device 101Detection device 103Processor 105Communication interface 200Server 201Communication interface 203Database 205Processor 300Arrangement 301Communication network 400Method for verifying a person's identity 401Capturing at least one piece of personal data 403Creating a data record 405Determining a hash value of the data record 407Sending the hash value of the data record 409Receiving a verification indicator 500Method for verifying the authenticity of a data set 501Receiving the hash value of the data set 503Comparing the received hash value 505Generating a verification indicator 507Sending the verification indicator

Claims

1. Device (100) for verifying an identity of a person, wherein at least personal data is assigned to the person, the device (100) comprising: a detection device (101), which is configured to detect various personal data of the person, which are relevant for different services, and to generate a data set, wherein the data set comprises a selected combination of the various personal data for a service to be provided; a processor (103), which is configured to determine a hash value of the data set using a hash function; and a communication interface (105), which is configured to send the hash value of the data set to a server (200) via a communication network (301), and to receive a verification indicator from the server (200) via the communication network (301) in order to verify the identity of the person and to provide the service, where an identification document is assigned to the person, wherein the various personal data are stored electronically in the identification document, and wherein the detection device (101) comprises a reading device for reading the various personal data from the identification document, or wherein an identification document is assigned to the person, wherein the various personal data are printed on the identification document, and wherein the detection device (101) comprises an image camera for optically detecting the various personal data on the identification document.

2. Device (100) according to claim 1, wherein the various personal data comprises at least one of the following personal data: a first name of the person, a middle name of the person, a last name of the person, an address of the person, a date of birth of the person, a place of birth of the person, an age of the person.

3. Device (100) according to claim 1 or 2, wherein the detection device (101) is configured to detect an issue date of the identification document, an expiration date of the identification document or an identification number of the identification document, wherein the data set further comprises the issue date of the identification document, the expiration date of the identification document or the identification number of the identification document.

4. Device (100) according to one of the preceding claims, wherein the communication interface (105) is configured to communicate with the server (200) via an authenticated and / or encrypted communication connection.

5. Server (200) for verifying an authenticity of a data set, wherein the data set comprises a combination of various personal data of a person for a service to be provided, wherein a hash value is assigned to the data set, the server (200) comprising: a communication interface (201), which is configured to receive the hash value of the data set from a device (100) via a communication network (301); a database (203), in which a plurality of hash values of a plurality of data sets are stored, wherein each stored data set comprises a number of various personal data of the person, which are relevant for different services to be provided, wherein each hash value of the plurality of hash values is assigned a data set of the plurality of data sets; and a processor (205), configured to compare the received hash value with the plurality of hash values in the database (203), and to generate a verification indicator for the service to be provided, if the received hash value corresponds to a hash value of the plurality of hash values; wherein the communication interface (201) is configured to send the verification indicator to the device (100) via the communication network (301).

6. Server (200) according to claim 5, wherein the processor (205) is configured to generate no verification indicator, if the received hash value does not correspond to a hash value of the plurality of hash values.

7. Server (200) according to one of claims 5 or 6, wherein the received hash value and the plurality of hash values in the database (203) are associated with a predetermined verification level.

8. Server (200) according to one of claims 5 to 7, wherein the communication interface (201) is configured to communicate with the device (100) via an authenticated and / or encrypted communication connection.

9. Arrangement (300) for verifying an identity of a person, comprising: a device (100) according to one of claims 1 to 4; and a server (200) according to one of claims 5 to 8.

10. Method (400) for verifying an identity of a person using a device (100), wherein personal data is associated with the person, wherein an identification document is associated with the person, wherein the device (100) comprises a detection device (101), a processor (103) and a communication interface (105), the method (400) comprising: detecting (401) various personal data of the person, which are relevant for different services, by the detection device (101); generating (403) a data set by the detection device (101), wherein the data set comprises a selected combination of the various personal data for a service to be provided; determining (405) a hash value of the data set using a hash function by the processor (103); sending (407) the hash value of the data set via a communication network (301) to a server (200) by the communication interface (105); and receiving (409) a verification indicator via the communication network (301) from the server (200) by the communication interface (105) in order to verify the identity of the person and provide the service, wherein the various personal data are stored electronically in the identification document, and wherein the detection device (101) comprises a reading device, wherein the various personal data are read from the identification document by means of the reading device, or wherein the various personal data are printed on the identification document, and wherein the detection device (101) comprises an image camera, wherein the various personal data on the identification document are optically detected by means of the image camera.

11. Method (500) for verifying an authenticity of a data set using a server (200), wherein the data set comprises a combination of various personal data of a person for a service to be provided, wherein a hash value is assigned to the data set, wherein the server (200) comprises a communication interface (201), a database (203) and a processor (205), wherein a plurality of hash values of a plurality of data sets are stored in the database (203), wherein each stored data set comprises a number of various personal data of the person, which are relevant for different services to be provided, wherein each hash value of the plurality of hash values is assigned a data set of the plurality of data sets, the method (500) comprising: receiving (501) the hash value of the data set via a communication network (301) from a device (100) by the communication interface (201); comparing (503) the received hash value with the plurality of hash values in the database (203) by the processor (205); generating (505) a verification indicator for the service to be provided by the processor (205), if the received hash value corresponds to a hash value of the plurality of hash values; and sending (507) the verification indicator via the communication network (301) to the device (100) by the communication interface (201).

12. Computer program comprising a program code for executing the method (400) according to claim 10 or the method (500) according to claim 11.