Method for identifying a person

Abstract

The invention relates to a method for identifying a person by means of an identification document in an identification system with spatially distributed identification control points. The method has the following steps: detecting (601) an identification data item by means of the identification document using a first identification control point; generating (603) a reference identification feature of the person; assigning (604) the reference identification feature to the detected identification data item; detecting (605) an identification feature of the person using a second identification control point; and displaying (607) the detected identification data item using the second identification control point if the detected identification feature matches the reference identification feature.

Description

[0001] The published patent application DE 10 2010 016 098 A1 shows an access control device.

[0002] The published patent application WO 2011 / 046556 A1 shows a screen of an identification device.

[0003] The published patent application WO 2008 / 055181 A2 discloses a passenger identification system and a corresponding method.

[0004] WO 03 / 052741 A1 concerns a border control system.

[0005] In areas critical to sovereign security, such as airports, a traveler's identity must be verified multiple times. This typically involves spatially distributed identification checkpoints within a control system, such as a border control system.

[0006] To capture identity data, each identification checkpoint has a document reader that reads the identity data, such as a person's name, from an identity document. The person themselves or a border guard can feed the identification document to the document reader.

[0007] However, the multiple recording of identity data at or by the identification control points is associated with a high level of complexity and high personnel expenditure and also leads to an increase in processing times for persons to be identified, who have to pass through a number of identification control points.

[0008] It is therefore the object of the present invention to create a concept for the efficient identification of persons in an identification system with spatially distributed identification control points.

[0009] This problem is solved by the features of the independent patent claims. Advantageous further developments are the subject of the dependent claims, the description, and the drawings.

[0010] The present invention is based on the finding that the above-mentioned object can be achieved by a one-time capture of identity data in an identification system of the aforementioned type. The captured identity data, such as information about a person's name and place of residence, can then be transmitted to a central server and made available there to the spatially distributed identification control points of the identification system. This eliminates the need to read the identity data at each identification control point.

[0011] To ensure that the identity data, once recorded and provided, can be clearly assigned to the respective person, at least one reference identifier is recorded when the identity data is recorded, especially when the identity data is recorded for the first time in an identification system. The reference identifier is an individual identifier and is a biometric characteristic of the person, such as a fingerprint or an image of the iris.

[0012] By capturing a fingerprint of the respective person at one of the distributed identification checkpoints, it can be compared with the reference identification features stored as data records. If it matches one of the stored reference identification features, a stored data record containing the identity date can be transferred to the respective identification checkpoint where the person in question is located and displayed there.

[0013] According to one aspect, the invention relates to a method for identifying a person using an identity document in an identification system having the features of claim 1.

[0014] The spatially distributed identification checkpoints can communicate with each other via a wireless or wired communications network. For example, the first identification checkpoint can transmit the recorded identity data, which may include information from an MRZ, via the communications network to the second identification checkpoint or to a central server with which the spatially distributed identification checkpoints communicate via the communications network.

[0015] For example, a known graphic display with which the respective identification control point may be equipped can be used to display the identity date.

[0016] The first identification checkpoint can, for example, be a so-called kiosk or eGate, which can be equipped with a document reader. A traveler can, for example, place their identity document on a document reader window during self-service, allowing the identity data to be captured optically or electronically. In this case, biometric features can also be recorded and stored as reference identification features or used for comparison with the reference identification process. The second identification checkpoint can, for example, be a so-called primary, secondary, or supervisor. The second identification checkpoint can also be operated by an operator, such as a border guard.

[0017] The reference identification feature can be created automatically by the first identification control point, for example, by recording a biometric feature. By assigning the reference identification feature to the recorded identity data, identifying features of individuals, such as their biometric features, can be used to retrieve or display the recorded identity data.

[0018] According to one embodiment, the first identification control point comprises a document reader for capturing the identity data based on the identity document, wherein the identity data is captured by the document reader, in particular optically or electrically. The identification control points can communicate with each other and / or with a central server entity via a communications network. The central server entity can store the captured identity data and the created or captured reference identification features in a database and make them available. According to one embodiment, the first identification control point comprises a document reader for capturing the identity data based on the identity document, wherein the identity data is captured by the document reader, in particular optically or electrically.

[0019] According to the invention, the reference identifier and the captured identity data are stored as associated data records. The associated data records can, for example, be associated with each other in a table in a database or stored together. The database is provided by the central server entity.

[0020] According to the invention, the recorded reference identification feature and recorded identity data are stored in a database.

[0021] According to the invention, the detected identification feature is compared with the reference identification feature, and if the detected identification feature and the reference identification feature match, the detected identity datum is provided to the second identification control point. The comparison of the detected identification feature with the reference identification feature can, for example, be performed feature by feature. If the detected identity datum is stored in a database of a central server entity, the detected identity datum can be transmitted to the second identification control point via a communications network.

[0022] According to one embodiment, the captured identity data item is stored in a queue assigned to the second identification checkpoint according to a queue rule, in particular in a database. The queue rule can be predefined.

[0023] According to one embodiment, the queuing rule is determined by the order in which the identity data is captured. This ensures that the captured identity data is stored in the database in sequence. In this way, a further control or security mechanism is implemented in addition to the comparison of the captured identification feature with the reference identification feature.

[0024] According to the invention, the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an iris image.

[0025] According to one embodiment, the captured identity data item is assigned to the second identification control point. The first identification control point can request or initiate the transmission of the reference identification feature from the communication device. The identification number can, for example, be a memory card number of the communication device, which can be a smartphone.

[0026] According to an alternative not according to the invention, the reference identification feature is created on the basis of an identification number of a communication device or a data set that can be transmitted electronically by a communication device.

[0027] According to one embodiment, the identity data is a date in a machine-readable zone of the identity document. The identity data can, for example, include a person's name, their place of birth, their date of birth, and / or their place of residence.

[0028] According to one embodiment, the method comprises capturing an identification feature of the person by a third identification control point and displaying the captured identity data by the third identification control point if the captured identification feature matches the reference identification feature. The third identification control point can communicate with the first identification control point or with the central server entity as described above and below.

[0029] According to one embodiment, the recorded identity data is used, for example evaluated, by the third identification control point if the recorded identification feature matches the reference identification feature.

[0030] According to a further aspect, the invention relates to an identification control system with a plurality of spatially distributed identification control points, with the features of claim 8.

[0031] The reference detection device can, for example, be a device for recording a biometric feature or for communicating with a communication device of the respective person.

[0032] Furthermore, the invention relates to the identification control system, which further comprises a server entity with a database, wherein the first identification control point or all identification control points are designed to transmit the detected identity data to the server entity, wherein the reference detection device is designed to transmit the reference identification feature to the server entity, wherein the server entity is designed to store the detected identity data and the reference identification feature in the database and to make it available to the second or any other identification control point.

[0033] The identification control system is designed, preferably programmed, to carry out the method according to the invention for identifying a person.

[0034] According to one embodiment, the second identification checkpoint has the functionality of the first identification checkpoint. In addition, the identification document is compared with the data of the server entity and / or the reference identification feature is compared with the data of the server entity. This ensures that individuals can be registered at any checkpoint, even if they are ignored by the upstream, first checkpoints 101, 103.

[0035] According to a further aspect, the description comprises a computer program with a program code for implementing a method according to the invention or for controlling the identification control points of the identification control system.

[0036] Further embodiments are explained with reference to the accompanying drawings. They show: Fig. 1 shows an identification control system with a plurality of spatially distributed identification control points; Fig. 2 shows an example of a display of identity data using a graphical user interface; Fig. 3 shows a graphical user interface with a spatial floor plan of the identification control system; Fig. 4 shows a graphical user interface with a spatial floor plan of the identification control system; Fig. 5 shows a block diagram with software components for implementing the functionality of the identification system; Fig. 6 shows a diagram of a method for identifying a person using an identity document in an identification system; and Fig. 7 shows a dynamic management of persons in an identification system with a first identification control point.

[0037] Fig. 1 shows an identification control system with a plurality of spatially distributed identification control points 101, 103, 105, 107, 109, 111, and 113. The identification control points are configured to communicate via a communication network 115. The identification control system comprises a central server entity 117, which is also configured to communicate via the communication network 115. The central server entity 117 comprises a server 123 with a database 125 and an optional GCS software 127.

[0038] Furthermore, an optional server entity 119 is provided, which may, for example, comprise a blacklist server 129, a database 131, and a blacklist software device 133. For example, a blacklist of registered persons may be stored in the database 131.

[0039] Optionally, surveillance cameras 135, 137 can be provided, which can communicate via the communication network 115.

[0040] The identification system can, for example, be configured to communicate with communication devices 139, 141, for example, via a wireless communication network 115. This communication can, for example, be initiated to obtain identification information about the communication devices, such as a SIM card number, which can serve as reference identification features.

[0041] The identification control points 101, 103 can be configured as first identification control points that can capture identity data of individuals based on identity documents. For this purpose, the first identification control points 101, 103 can comprise document readers 143, 145 that are configured to capture the identity data, for example, contained in an MRZ of an identity document, for example, optically, and transmit this data via the communication network 115 to the central server entity 117 and display it on further identification control points 105, 107, 109, 111, 113, which can also additionally comprise document readers 161, 163, 165, 167 for capturing identity data.

[0042] The first identification checkpoints 101, 103 can, for example, be configured as so-called kiosks or eGates, which allow self-service by the person to be identified. For example, travelers can independently feed their identity documents to the document readers 143, 145.

[0043] The first identification control points 101, 103 further comprise reference detection devices 102, 104, which are designed

[0044] To record reference identification features of individuals, such as biometric features. The first identification control points 101, 103 may further include PC entities 147, 149, which effect communication with the communications network and, for example, control the document readers 143, 145.

[0045] The identification checkpoints 105, 107, 109, 111, and 113 can each be equipped with display devices 151, 153, 155, 157, and 159. The display devices 151, 153, 155, 157, and 159 can each be provided to display an identity datum or identity data, for example, in a graphical viewing window. The identification checkpoints 105, 107, 109, 111, and 113 can further be equipped with feature detection devices 161, 163, 165, and 167, which are provided to record identification features of persons and compare them with pre-stored reference identification features in order to display the previously recorded identity data assigned to the respective person. In addition, the identification control points 105, 107, 109, 111 and 113 can be equipped with reference detection devices which can have the features of the reference detection devices 102, 104 of the first identification control points 101, 103.However, according to one embodiment, the feature detection devices 161, 163, 165, 167 can also be designed to record reference identification features.

[0046] The identification control points 105, 107, 109, 111 and 113 can each be provided with PCs 169, 171, 173, 175 and 177, which communicate via the network 115, for example, with the central server entity 117 in order to transmit the recorded identification features thereto or to retrieve the recorded identity data.

[0047] The identification checkpoints 105, 107, 109, 111, and 113 can, for example, be configured as so-called primary or secondary checkpoints with or without administration functionality. The display devices 151, 153, 155, 157, and 159 can, for example, represent graphical user interfaces, wherein the individuals' identity data and / or their identification documents can be displayed in a browser window.

[0048] If one of the identification control points 105, 107, 109, 111 and 113 is designed as a so-called supervisor control point, it can, for example, make all recorded identity data of active travelers available in a browser window of a graphical user interface on the display device 151, 153, 155, 157 and 159.

[0049] If one of the identification control points is provided with an administration functionality, roles, rights or process flows or rules can be created, deleted or modified there.

[0050] The central server entity 117 is intended to store the identity data of the individuals and their documents, such as document numbers. Furthermore, the central server entity 117 can be intended to store the results of a verification of individuals and / or documents for authenticity, as well as any status information.

[0051] Server entity 117 can be configured to compile the data to be displayed at the identification checkpoints, process it graphically, for example, by entering it into a graphical window, and transmit it via the communications network 115 to the server entities of the checkpoints or to their browsers. This information can be displayed by the browsers.

[0052] Furthermore, the central server entity 117 can be configured to query internal or external databases, for example, to retrieve identity data associated with specific reference identification features. The central server entity 117 can also be configured to manage login data and store decisions at the identification checkpoints that may concern the identification or non-identification of individuals.

[0053] The central server entity 117 may further be provided to run any applications of the identification system.

[0054] The components of the database 125 can be configured to store all identification data of persons, monitoring or login data.

[0055] The central server entity 117 may further be provided to log and store the decisions made by, for example, a border guard.

[0056] According to one embodiment, the central server entity 117 can further be configured to detect document forgery. For this purpose, the document readers 143, 145 can, for example, be provided to optically or electronically record security features of identity documents and transmit them to the central server entity 117. The central server entity 117 can compare the recorded security features with pre-stored patterns and thus perform a verification of the identity documents. All verification results linked to the travelers' identity data can be stored in the database 125 and provided to the identification control points. This eliminates the need to continuously verify the authenticity of identity documents.

[0057] The central server entity 117 can further be configured to direct individuals to the respective identification checkpoints. For this purpose, the central server entity can, for example, make decisions based on predefined rules. The predefined rules can, for example, be provided in the form of a rule engine or through an executable computer program. This makes it possible to provide instructions for action, for example, to direct specific individuals to specific identification checkpoints.

[0058] If one of the identification control points is equipped with supervisor functionality, it can, for example, display the identity data of all persons within the identification system. Furthermore, the status of a document check for authenticity, in particular whether it has been passed, failed, or is incomplete, can be displayed. The identification control point configured as supervisor can, for example, be linked to the identification control points configured as primaries or secondaries in order to access the respective user interfaces. Furthermore, the identification control point configured as supervisor can Fig. 1 link to the webcams shown.

[0059] The document readers can be configured as document verification devices, for example. They can be stationary or mobile.

[0060] As mentioned above, the identity data or identity data, possibly together with the content of an identification document, such as an image of a person, can be displayed by means of a graphical user interface (GUI).

[0061] Is one of the Fig. 1 If the system is set up as a supervisor for one of the identification control points shown, it can display an image of some identification control points and, for example, travelers on a graphical user interface.

[0062] Fig. 2 shows an example of a display of identity data using a graphical user interface, with an image 201 of a person, which can be created, for example, by capturing a passport photo. Next to it, for example, a window 203 can be arranged in which identity data, in particular data from the machine-readable zone (MRZ), is summarized. This data can include, for example, a first name, a last name, the gender of the respective person and the expiration date of an identification document, a date of birth, the issuing country, the nationality or the document number. In addition, for example, a date of entry into the identification control system can be displayed.

[0063] The graphical user interface may further include control elements, such as an access denial field 205 or an access permission field 207. By activating the access denial field 205, the access denial is documented and, if applicable, saved. By activating the access permission field 207, access is granted and documented.

[0064] The graphical user interface may further comprise an area 209 in which images 209a, 209b, 209c of persons captured on the basis of identification documents are displayed in the order in which these persons are in a queue at the respective identification control point.

[0065] Optionally, additional selectable areas can be provided, such as an area with a document display 211 for displaying a facial image of a person stored on a chip of an identification document (210). These images can be recorded using the document readers of the first identification checkpoints 101, 103, 161, 163, 165, 167. Furthermore, an area 213 can be provided in which, for example, recorded biometric features, such as fingerprints, are displayed.Furthermore, an area 215 can be provided in which the test results based on the verification of an identification document, the results of checks from external systems, such as blacklist servers, and / or a status in the system of previous decisions by border officials, such as entry, rejection, or delegation, can be displayed. If anomalies or errors occur, the corresponding tabs associated with the respective areas 210, 211, 213, 215 can be colored in a signal color, for example, red.

[0066] Fig. 3 and Fig. 4 show a graphical user interface with a spatial floor plan of rooms in which the identification control system is installed. The graphical user interface can, for example, display first identification control points 301, 303, 305, which are intended, for example, for capturing identity data. The graphical user interface can further display second identification control points 307, 309, or 311. These can, for example, be configured as secondaries or as primaries. Furthermore, the graphical user interface can display locks 317, 319. In addition, locations with surveillance cameras 321, 323 can be displayed.

[0067] The graphical user interface can also display pictograms of people who are, for example, waiting in queues at the respective gates or at the respective identification checkpoints 305, 309. The person pictograms can be highlighted in color, for example. For example, person pictograms 325 displayed in green can indicate that a check of the identity documents of the waiting persons and, if applicable, blacklist queries are without errors. A red marking of person pictograms 327 indicates that anomalies occurred during the check of the identity documents or blacklist queries. Person pictograms 339 with a gray background show, for example, that a check of the identity documents has not been completed.

[0068] The corresponding graphical user interfaces of these stations, such as those in Fig. 2 can be retrieved at the identification checkpoints, for example, by clicking on a field 305, 307, 309, 311. This allows the data displayed at the respective identification checkpoints to be displayed.

[0069] The surveillance camera symbols 321, 323 can, for example, be connected to controlled cameras via a communication network or via a link, so that when the respective camera symbol 321, 323 is selected, a browser window is opened which displays a real-time image of the respective camera.

[0070] According to one embodiment, the colored representation or highlighting of the person can be displayed summarily from a certain number of people, for example from five people.

[0071] The functionality of the identification system can be implemented, for example, by means of a software program whose routines run centrally on a server entity.

[0072] Fig. 5 shows a block diagram with software components for implementing the functionality of the identification system. The software architecture includes the monitoring and login functionality 501, the backend functionality 503, the administration functionality 505, and the functionality of the identification checkpoints 507. The software architecture also includes peripheral support 509, database components 511, and application server components 513, which run, for example, on the central server entity.

[0073] Fig. 6 shows a diagram of a method for identifying a person using an identity document in an identification system, for example, in the above-described identification system with spatially distributed identification control points. The method comprises capturing 601 an identity datum using the identification document by a first identification control point, creating 603 at least one reference identification feature of the person, assigning 604 the reference identification feature to the captured identity datum, for example, by linking data records, capturing 605 an identification feature of the person by a second identification control point, and displaying 607 the captured identity datum by the second identification control point if the captured identification feature matches the reference identification feature.

[0074] According to one embodiment, the persons who are within the identification control system can be managed. Fig. 7 illustrates a dynamic management of persons in an identification system using a graphical user interface, with an image of a first identification control point 701, which is set up, for example, as a kiosk, with an image of a second identification control point 703, which is set up, for example, as a primary, with an image of a third identification control point 705, which is set up, for example, as a secondary, and with an image of a fourth identification control point 707, which is, for example, an eGate.

[0075] Furthermore, the states "Access" 709 and "Rejection" 711 are displayed. In addition, a basic state 713 is provided.

[0076] For example, the individuals can be forwarded from the second identification checkpoint 703 to the third identification checkpoint 705 if, for example, an automatic verification of the identity data fails. Otherwise, the individuals are granted access. The third identification checkpoint 705 can verify the identity data again and either grant or deny access. If, for example, the verification of the identity data at the fourth identification checkpoint 707 fails, the individuals concerned can be forwarded to the third identification checkpoint 705.

[0077] One advantage of the inventive concept is the reduction of processing times for travelers, using fewer personnel and consequently cost savings for the operator.

[0078] The processing times are made up of the following steps: 1. Waiting time in a queue in front of an identification checkpoint such as a checkbox or primary checkpoint, which can be operated by a border guard in case of high passenger volume, 2. Duration of the reading and verification process for an identity document, 3. Assessment of the relevance of the verification results and duration of the examination and questioning of a traveler by a border guard

[0079] By parallelizing steps 2 and 3, processing times can be reduced.

[0080] The following describes an example of parallelization and the use of waiting time in the queue: For example, travelers are required to independently place their identity document on a document reader, which may be a document verification device, at a first identification checkpoint, which is connected to a second identification checkpoint, such as a checkpoint. The identity data for the traveler is thus read and verified (step 2), while the border guard serves another traveler for whom step 2 has already been completed (step 3).

[0081] The traveler takes over the task of presenting documents, which was previously performed by the border guard. According to one embodiment, the document verification is carried out automatically and cannot be influenced by the traveler.

[0082] A traveller can be clearly linked and identified at any time with his or her identity data in the identification system using individual identification features.

[0083] For example, when registering a document, actively or passively, e.g., by placing a passport on a document verification device, a traveler can be uniquely recorded in the identification system using the MRZ data, an individual identity document, and optionally additional identity data. From this point on, a traveler can be identified at any time in the identification system using individual identification features linked to their identity data. Possible individual identification features include: Facial image that can be captured by a video or camera identification system Fingerprint that can be captured by a fingerprint reader, Travellers' identity documents, e.g. passports or smart cards, from which e.g. the MRZ, fingerprints or facial images can be used, Communication devices, such as mobile phones or smartphones, which can communicate via Bluetooth or NFC, and Tickets with e.g. barcodes, which can be printed and read at other identification control points.

[0084] The validity of an individual identifier may expire upon the final decision by a border official to permit passage.

[0085] If the traveler reappears in the identification system with the same identity document after the final decision, a new data record with a new individual identification feature is generated.

[0086] For example, if a facial image is used as an individual identification feature, a traveler can be recorded by placing his or her identity document on a document verification device in the identification system and a facial image of the traveler can be recorded.

[0087] The traveler can then be found in the identification system using the individual identifier in the identification system data. This allows the traveler to be identified by comparing a real-time image from a video camera with the previously recorded reference identifier, and the corresponding identity data record can be output or displayed.

[0088] According to one embodiment, an identification control system can be implemented by linking two or more identification control points, creating, for example, a kiosk system. The identity data is recorded at a first identification control point and processed at the second identification control point linked to the first. Such a link can be implemented between self-service kiosks and primary kiosks, or between primary kiosks and secondary kiosks, or between eGates with a follow-up station.

[0089] The following describes an example of a kiosk system.

[0090] In a simple kiosk mode with a 1:1 relationship, for example, a first identification checkpoint (kiosk) and a second identification checkpoint (primary) are linked. Travelers will arrive at the primary in the order in which they presented their identity documents to the document reader of the first identification checkpoint. At the primary, the border official receives the traveler's identity document. The border official can match the traveler's identity data based on the facial image and the order of those waiting in line, or automatically using one of the defined individual identification features.

[0091] The following describes an example of implementation taking into account the order of those waiting in the queue.

[0092] Two travelers, A and B, arrive at a first identification checkpoint, e.g., a kiosk, and place their identity documents on the document reader one after the other. Since traveler A is ahead of traveler B in the queue at a second identification checkpoint, their identity data is automatically displayed first. Once traveler A passes the second identification checkpoint, their identity data can be replaced with the identity data of traveler B.

[0093] In a multiple kiosk mode with an n:m relationship, one or more kiosks and primaries are connected in a group. Travelers are routed from a kiosk to appropriate primaries.

[0094] If the passenger is forwarded to the queue of a suitable primary, information is provided to the traveler and the primary assigned to him, for example directly at the kiosk.

[0095] When forwarding a traveler to the end of a queue with several primaries at the front, the traveler at the front can be forwarded to a suitable primary. Information about forwarding (who, when, where, etc.) is provided automatically at the front of the queue based on the defined individual identification feature. At the primary, a border official receives the traveler's identity document. The border official assigns the traveler to their identity data based, for example, on their facial image and the order of the travelers waiting in the queue. The order of the waiting travelers is determined, for example, either automatically based on the time of their forwarding to a primary or from the use of one of the defined individual identification features.

[0096] The following describes an embodiment using dedicated assignment to a primary.

[0097] A traveler is identified as a British citizen after placing their identity document on a document verification device at a German airport. The identification system, for example, is configured to direct English-speaking travelers to a checkpoint with an English-speaking border guard. At the kiosk, the traveler receives instructions in English about which checkpoint to proceed to. Their identity data record is assigned to the queue at the corresponding checkpoint. As soon as they arrive in front of the border guard, their identity data is automatically displayed, for example, based on their facial image.

[0098] The following describes a dynamic traveler queue management system. By creating a unique identifier when an identity document is first scanned, which serves as a reference identifier, the same data set can be accessed repeatedly for all subsequent accesses at different identification checkpoints, thus avoiding the generation of duplicates. This also means that long virtual queues do not form in front of a second identification checkpoint, such as a primary checkpoint, because repeated re-scanning of the identity data does not create duplicates.

[0099] The following describes queue hopping, also called line hopping: A traveler whose identity data is already linked to an identification checkpoint A and then registers at another identification checkpoint B is linked to that person and automatically removed from the identification checkpoint A.

[0100] One example is a traveler presenting an identity document at a first identification checkpoint, such as a kiosk, with automatic forwarding to a second identification checkpoint, such as a corresponding primary gate. While waiting in line at the primary gate, the traveler spontaneously decides to leave the queue to use an eGate. They are registered at the eGate and automatically removed from the queue at the primary gate at the same time – their identity data is now linked to the eGate used.

[0101] If a traveler cannot pass through an eGate and then registers at the reader of a first identification checkpoint, such as a kiosk, he or she will be placed in the corresponding queue of a primary gate and will no longer be linked to the eGate.

[0102] According to one embodiment, mobile devices such as smartphones can be used as a replacement for identification checkpoints or to support, for example, the capture of reference identification features. Using one of the individual identification features as the reference identification features of this traveler, e.g., a fingerprint or a facial image or the data of an MRZ of the identity document, the traveler's identity data can be retrieved and assigned to this mobile checkpoint. At the same time, the identity data can be deleted from the original queue at identification checkpoint A. This can shorten the queue.

[0103] The exemplary embodiments described above can be used in any control, admission and ticket identification systems, for example for stadiums, exhibition grounds or railways. List of reference symbols

[0104] 101 Identification check point 102 Reference capture device 103 Identification check point 104 Reference capture device 105 Identification check point 107 Identification check point 109 Identification check point 111 Identification check point 113 Identification check point 115 Communication network 117 Central server entity 119 Server entity 123 Server 125 Database 127 GCS-SW 129 Blacklist server 131 Database 133 Blacklist-SW device 135 Surveillance camera 137 Surveillance camera 139 Communication device 141 Communication device 143 Document reader 145 Document reader 147 PC entity 149 PC entity 151 Display device 153 Display device 155 Display device 157 Display device 159 Display device 161Feature capture device 163Feature capture device 165Feature capture device 167Feature capture device 169Server 171Server 173Server 175Server 177Server 201Image 203Window 205Access denial field 207Access permission field 209Area209aFigure 209bFigure 209cFigure 210Area 211Area 213Area 215Area 301Identification check point 303Identification check point 305Identification check point 307Identification check point 309Identification check point 311Identification check point 317Lock 319Lock 321Surveillance camera 323Surveillance camera 325Person pictogram 327Person pictogram 339Person pictogram 501Login functionality 503Backend functionality 505Administration functionality 507Identification check point functionality 509Peripheral support 511Database components 513Application server components 601Capture 603Create 604Assign 605Capture 607Display 701Identification checkpoint 703Identification checkpoint 705Identification checkpoint 707Identification checkpoint 709Access 711Rejection 713Basic state

Claims

1. Computer-implemented method for identifying a person using an identity document in an identification system with spatially distributed identification control points, comprising: capturing (601) identity data based on the identification document by a first identification control point; generating (603) at least one reference identification feature of the person by the first identification control point; assigning (604) the reference identification features to the captured identity data by the first identification control point; capturing (605) an identification feature of the person by a second identification control point; and displaying (607) the captured identity data by the second identification control point when the captured identification feature matches the reference identification feature, wherein the captured identification feature is compared with the reference identification feature and wherein, when the captured identification feature and the reference identification feature match, the captured identity data is provided to the second identification control point via a communication network, wherein the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an iris image, wherein the reference identification feature and the captured identity data are stored as associated data records in a database, wherein the captured identity data is transmitted to the second identification control point by a central server entity comprising the database, wherein the first identification control point transmits the captured identity data to the server entity, wherein the reference identification feature is transmitted by the first identification control point to the server entity, wherein the server entity stores the captured identity data and the reference identification feature in the database and provides it to the second identification control point.

2. Method according to claim 1, wherein the first identification control point comprises a document reading device for capturing the identity data based on the identity document, and wherein the identity data is captured by means of the document reading device, in particular optically or electrically.

3. Method according to one of the preceding claims, wherein the captured identity data is stored in a queue assigned to the second identification control point according to a queue rule, in particular in a database.

4. Method according to claim 3, wherein the queue rule is determined by a capturing sequence of the identity data.

5. Method according to one of the preceding claims, wherein the identity data is data of a machine-readable zone of the identity document.

6. Method according to one of the preceding claims, comprising: capturing an identification feature of the person by a third identification control point; displaying the captured identity data by a third identification control point when the captured identification feature matches the reference identification feature.

7. Method according to claim 6, wherein the captured identity data is processed by the third identification control point when the captured identification feature matches the reference identification feature.

8. Identification control system with a plurality of spatially distributed identification control points (101, 103, 105, 107, 109, 111, 113) which are configured to communicate with each other via a communication network (115), comprising: a reference capture device (102, 104) for generating a reference identification feature of the person; a first identification control point (101, 103) for capturing identity data of a person based on an identification document, wherein the first identification control point (101, 103) is further configured to assign the reference identification feature to the captured identity data; wherein the first identification control point (101, 103) comprises the reference capture device (102, 104), and a second identification control point (105, 107, 109, 111) for capturing an identification feature of the person, wherein the second identification control point (105, 107, 109, 111) is further configured to perform a comparison of the captured identification feature with the reference identification feature and display the captured identity data when the captured identification feature matches the reference identification feature, wherein the captured identification feature is compared with the reference identification feature and wherein, when the captured identification feature and the reference identification feature match, the captured identity data is provided to the second identification control point via a communication network, wherein the reference identification feature is one of the following features: a biometric feature, in particular a facial image, a fingerprint, or an iris image, wherein the reference identification feature and the captured identity data are stored as associated data records in a database, wherein the identification control system further comprises a server entity (117) comprising the database (125), wherein the first or all identification control points (101, 103, 105, 107, 109, 111) are configured to transmit the captured identity data to the server entity (117), wherein the reference capture device (102, 104) is configured to transmit the reference identification feature to the server entity (117), wherein the server entity (117) is configured to store the captured identity data and the reference identification feature in the database (125) and provide it to the second identification control point (101, 103).

9. Identification control system according to claim 8, which is programmed to execute the method according to any one of claims 1 to 7.

Images