Two-factor personal identification system and method

Abstract

A two-factor personal identification system (10) comprising a main computer (12) operatively connected to a respective storage unit (22), and at least one secondary computer (32) operatively connected to a respective palate scanner (40) and to a respective key reader (42); wherein the key reader (42) is configured to acquire an identification key held by a person to be identified; the palate scanner (40) is configured to acquire a 3D palate scan of the person to be identified; and the main computer (12) is configured to: – retrieve a reference 3D palate scan associated with the identification key, both the identification key and the reference 3D palate scan being registered in an identification memory unit (26) of the storage unit (22); – compare the reference 3D palate scan, associated with the identification key, with the 3D palate scan of the person to be identified; and – determine an outcome of the comparison, the outcome of the comparison being positive when the reference 3D palate scan and the 3D palate scan are identical, the outcome of the comparison being negative when the reference 3D palate scan and the 3D palate scan are different.

Description

[0001] TWO-FACTOR PERSONAL IDENTIFICATION SYSTEM AND

[0002] METHOD

[0003] The present invention relates to a two-factor personal identification system and method, wherein these two factors are an identification key held by a person, i.e., an individual, to be identified and a three-dimensional (in short 3D) digital scan of the palate of the same person to be identified.

[0004] The system and method according to the invention are particularly but not exclusively useful and practical in the context of controlling:

[0005] - physical accesses of visitors and staff to buildings, to improve the security of said buildings;

[0006] - digital accesses to IT systems, for example at the enterprise level, to improve the security of said IT systems and to eliminate the password reset operation (if any); and

[0007] - banking / financial operations, to reduce fraud by fraudsters.

[0008] In the context of the present invention, the term "personal identification" refers to the identification of the biographical identity of a person, i.e., an individual, who cannot be identified by traditional methods, for example because he or she lacks identification documents (ID card, driver's license, passport, and so on).

[0009] Currently, technologies for biometric identification, i.e., by means of at least one biometric parameter, are rapidly spreading as a way of preventing breaches in the security of buildings or corporate data, as well as of preventing fraud against banking / financial institutions.

[0010] Being able to use at least one body part, i.e., at least one biometric parameter, for this type of check is of great convenience since it eliminates the need to carry identification documents.

[0011] Some examples of biometric parameters used for biometric identification are: fingerprints, palate impression, iris, face, palm of the hand (or rather palm vein pattern).

[0012] Consequently, various solutions are currently known for biometric identification, for example fingerprint reading devices, palate impression scanning devices, facial recognition devices, and so on.

[0013] With reference to biometric identification by palate impression, it should be noted that the anatomical, pathological, and therapeutic characteristics of the oral cavity, in particular of the dental elements and palate, make them peculiar to each person. Moreover, the dental and palatal elements are the only skeletal structure that is directly observable in a human subject.

[0014] In particular, the palate forms the roof of the oral cavity; it is distinguished into hard palate, comprising a bony skeleton, and soft palate. The skeleton of the hard palate is formed by the palatine processes of the maxillary bones and by the horizontal laminae of the palatine bones. A narrow but rather sharp relief, called the palatine raphe, extends along the midline of the palate from the incisive papilla in a posterior direction for the entire length of the hard palate.

[0015] Irregular and sometimes branching pleiomorphic reliefs, called palatine rugae, extend from the incisive papilla and from the more anterior portions of the palatine raphe, crossing the hard palate in its anterior portion to fade laterally with variable length.

[0016] These palatine rugae are mucosal reliefs present on either side of the midline of the anterior hard palate and are composed of dense connective tissue covered by squamous epithelium.

[0017] The mucosa of the hard palate, as well as that of the gums, is known as masticatory mucosa. This mucosa is constituted by a highly keratinized multilayered epithelium; the most common cells of the mucosa are keratinocytes (about 95%), although melanocytes and Langerhans cells can also be found in a much smaller percentage.

[0018] Palatine rugae differ between the right palate and the left palate, and they have the characteristic of being morphologically peculiar in each person and particularly stable over time, even following upper maxillary surgery or orthodontic procedures. This characteristic of uniqueness makes palatine rugae, and thus the palate impression, usable for identification purposes.

[0019] Currently, solutions for biometric identification are known which are based on the analysis of the oral cavity of a person, i.e., an individual, to be identified, in particular on the comparison of the morphology of palatine rugae, and thus of the palate impression.

[0020] Typically, this comparison of the morphology of palatine rugae and therefore of palate impression is performed by superimposing, one at a time, a plurality of available logged models of palates with the three-dimensional (3D) digital scan of the palate of the person to be identified.

[0021] However, these known solutions are not without drawbacks, which include the fact that when a given person is to be identified within a group of people (one-to-many matching), the accuracy of identification can drop conspicuously if the reference group is composed of thousands, or even millions, of people. Indeed, in this case, known solutions make it substantially impossible to clearly distinguish among multiple potential matches.

[0022] For this reason, in one-to-many matching the level of accuracy required to identify one person in a million is a million times the accuracy required in one-to-one matching, also in view of the fact that the identification process provides for the analysis of all the data records stored within a system.

[0023] Moreover, to be able to ensure the identification of one person in a million, the process entails the processing of as many as one million data records, and this, with known solutions, can take a long time, even more than 20 to 30 minutes.

[0024] The aim of the present invention is to overcome the limitations of the background art described above by devising a two-factor personal identification system and method that allow to achieve better effects than those obtainable with known solutions and / or similar effects at a lower cost and with a higher performance.

[0025] Within this aim, an object of the present invention is to conceive a two-factor personal identification system and method that allow to identify, and consequently to authenticate the identity of, a person with high accuracy, within a large group of people, even on the order of millions or tens of millions.

[0026] Another object of the present invention is to devise a two-factor personal identification system and method that allow to identify, and consequently authenticate the identity of, a person with high versatility in application, in a manner that is adaptable with respect to the requirements of groups of people of different sizes, from small-scale access control to access control for social platforms on a large scale.

[0027] A further object of the present invention is to devise a two-factor personal identification system and method that allow to identify, and consequently authenticate the identity of, a person with reduced processing times.

[0028] Moreover, an object of the present invention is to devise a two-factor personal identification system and method that allow to identify, and consequently authenticate the identity of, a person with a high level of security.

[0029] Not least object of the present invention is to provide a two-factor personal identification system and method that are highly reliable, relatively easy to provide, and economically competitive if compared with the background art.

[0030] This aim, as well as these and other objects that will become better apparent hereinafter, are achieved by a two-factor personal identification system, comprising a main computer operatively connected to a respective storage unit, and at least one secondary computer operatively connected to a respective palate scanner and to a respective key reader, said main computer and said secondary computer being mutually connected via a telematic communication network, said storage unit comprising a personal data memory unit and an identification memory unit; wherein said key reader is configured to acquire an identification key held by a person to be identified; said palate scanner is configured to acquire a 3D palate scan of said person to be identified; and said main computer is configured to:

[0031] - retrieve a reference 3D palate scan associated with said identification key, both said identification key and said reference 3D palate scan being registered in said identification memory unit;

[0032] - compare said reference 3D palate scan, associated with said identification key, with said 3D palate scan of said person to be identified; and

[0033] - determine an outcome of said comparison, said outcome of said comparison being positive when said reference 3D palate scan and said 3D palate scan are identical, said outcome of said comparison being negative when said reference 3D palate scan and said 3D palate scan are different.

[0034] The aim and objects are also achieved by a two-factor personal identification method, by means of a main computer operatively connected to a respective storage unit, and at least one secondary computer operatively connected to a respective palate scanner and to a respective key reader, said main computer and said secondary computer being mutually connected via a telematic communication network, said storage unit comprising a personal data memory unit and an identification memory unit, comprising the steps of:

[0035] - acquiring an identification key held by a person to be identified, by means of said key reader;

[0036] - retrieving a reference 3D palate scan associated with said identification key, by means of said main computer, both said identification key and said reference 3D palate scan being registered in said identification memory unit;

[0037] - acquiring a 3D palate scan of said person to be identified, by means of said palate scanner;

[0038] - comparing said reference 3D palate scan, associated with said identification key, with said 3D palate scan of said person to be identified, by means of said main computer; and

[0039] - determining an outcome of said comparison, by means of said main computer, said outcome of said comparison being positive when said reference 3D palate scan and said 3D palate scan are identical, said outcome of said comparison being negative when said reference 3D palate scan and said 3D palate scan are different.

[0040] Further characteristics and advantages of the present invention will become better apparent from the description of a preferred but not exclusive embodiment of the two-factor personal identification system and method according to the invention, illustrated by way of non-limiting example with the aid of the accompanying drawings, wherein:

[0041] Figure 1 is a block diagram which shows schematically an embodiment of the two-factor personal identification system according to the present invention;

[0042] Figures 2 A and 2B are respectively a first portion and a second portion of a flow chart schematically showing an embodiment of the two- factor personal identification method according to the present invention.

[0043] With reference to Figure 1, the two-factor personal identification system according to the present invention, generally designated by the reference numeral 10, substantially comprises a main computing device 12, which is preferably remote, a storage unit 22, at least one secondary computing device 32, which is preferably local, at least one palate scanning device 40, and at least one key reading device 42.

[0044] The main computing device 12 is operatively connected to the respective storage unit 22. The secondary computing device 32 is operatively connected to the respective palate scanning device 40. The secondary computing device 32 is operatively connected to the respective key reading device 42.

[0045] The main computing device 12 and the secondary computing device 32 are mutually connected and in communication via a telematic communication network 48, such as for example the Internet. Preferably, the telematic communication network 48 is of an encrypted type.

[0046] The palate scanning device 40, in short palate scanner 40, of the system 10 according to the invention is an electronic device or apparatus adapted to directly acquire a three-dimensional (3D) digital scan of the palate, comprising the palatine rugae, of a person to be identified. In other words, the palate scanner 40 is adapted to optically acquire and develop a direct digital impression of a person's palate, obtaining a three-dimensional digital representation of said palate and therefore of the associated palatine rugae.

[0047] In one embodiment, the palate scanner 40 may comprise an autonomous servomobile computing device equipped with a monitor, and a tip provided with a light source at its apex, which can be handled by an operator and is connected to the computer. In another embodiment, the palate scanner 40 may comprise a stand-alone tip provided with a light source at its apex, which can be handled by an operator and can be connected to a computer, for example the secondary computing device 32, which is provided with an adapted application. In one embodiment, the use of the palate scanner 40 can be accompanied by the use of an appropriate intraoral contrast medium.

[0048] In practice, the palate scanner 40 projects a light source (structured light or laser) onto the surface of the palate to be analyzed; the deformation that this light source undergoes from the palate is "captured" by one or more sensors and used to calculate the 3D coordinates that define the point clouds, from which the meshes that make up the 3D palate scan, i.e., the three-dimensional digital representation of the analyzed palate, can be generated.

[0049] The palate scanner 40 is configured to output the 3D palate scan, which it has acquired, toward the secondary computing device 32.

[0050] The key reading device 42, in short key reader 42, of the system 10 according to the invention is an electronic device or apparatus adapted to directly acquire an identification key held by a person to be identified.

[0051] In one embodiment, the key reader 42 is a magnetic strip card reader. Consequently, the identification key is stored on a card with a magnetic strip, held by the person to be identified.

[0052] In one embodiment, similar to the preceding one, the key reader 42 is a smart card reader. Consequently, the identification key is stored on a smart card held by the person to be identified.

[0053] In one embodiment, the key reader 42 is a numeric keypad. Consequently, the identification key is memorized and entered by the person to be identified.

[0054] In a preferred embodiment, the key reader 42 is an RFID (Radio Frequency IDentification) reader. Consequently, the identification key is stored on an RFID tag or on a mobile device, provided with RFID capabilities, held by the person to be identified.

[0055] In a preferred embodiment, similar to the previous one, the key reader 42 is an NFC (Near Field Communication) reader. Consequently, the identification key is stored on a mobile device, provided with NFC functionality, held by the person to be identified.

[0056] In the embodiments in which the identification key is stored on a mobile device, for example a smartphone or tablet, said mobile device is appropriately configured through a mobile application compatible with the major operating systems, for example Android and iOS, and can be downloaded from the major stores, for example Google Play and Apple Store. Advantageously, the identification key is a unique and random token generated during the installation of the mobile application on the mobile device. Advantageously, this token is not visible and / or modifiable by the person who owns the mobile device.

[0057] The key reader 42 is configured to output the identification key, which it has acquired, toward the secondary computing device 32.

[0058] The secondary computing device 32, in short secondary computer 32, which is preferably local, of the system 10 according to the invention is a client-type device comprising an electronic control unit 34, transceiver means 36, and user interface means 38.

[0059] The electronic control unit 34 is the main functional element of the secondary computer 32, and for this reason it is connected to, and in communication with, the other elements comprised in the secondary computer 32.

[0060] The electronic control unit 34 of the secondary computer 32 is provided with appropriate capabilities for computing and interfacing with the other elements of the secondary computer 32, and is configured to actuate, control and coordinate the operation of the elements of the secondary computer 32 to which it is connected and with which it is in communication.

[0061] Moreover, the electronic control unit 34 of the secondary computer 32 is configured to interface with the palate scanner 40, so that the secondary computer 32 can receive in input the 3D palate scan, acquired by and originating from the palate scanner 40, and then output this 3D palate scan toward the main computing device 12.

[0062] Moreover, the electronic control unit 34 of the secondary computer 32 is configured to interface with the key reader 42, so that the secondary computer 32 can receive in input the identification key, acquired and originating from the same key reader 42, and subsequently output this identification key toward the main computing device 12. The transceiver means 36 of the secondary computer 32 are adapted to output the 3D palate scan, acquired by and originating from the palate scanner 40, toward the main computer 12, via the telematic communication network 48.

[0063] The transceiver means 36 of the secondary computer 32 are adapted to output the identification key, acquired and originating from the key reader 42, to the main computer 12, via the telematic communication network 48.

[0064] The transceiver means 36 of the secondary computer 32 are adapted to output a request for personal identification, for example following the input of an appropriate command, toward the main computer 12, preferably associated with a respective identification key of the person to be identified.

[0065] Moreover, the transceiver means 36 of the secondary computer 32 are adapted to receive in input the results of said personal identification request, originating from the main computer 12.

[0066] The user interface means 38 of the secondary computer 32 are adapted for input and output interaction between the person to be identified and said secondary computer 32. In practice, the user interface means 38 of the secondary computer 32 offer a plurality of information items in the form of screens that the person to be identified can in each instance select and / or view by means of the secondary computer 32.

[0067] By way of example, the user interface means 38 of the secondary computer 32 offer the person to be identified the possibility to: monitor and confirm the operation of acquiring a 3D palate scan by means of the palate scanner 40; monitor and confirm the operation of acquiring an identification key by means of the key reader 42; view the acquired 3D palate scan originating from the palate scanner 40; manage one or more 3D palate scans; manage one or more personal data items; configure the operating parameters (for example the thresholds) of the system 10, in particular of the main computer 12; request personal identification from the main computer 12; display the results of said personal identification request originating from the main computer 12; create and / or update the data stored in the storage unit 22.

[0068] In one embodiment, the secondary computer 32 is a personal computer, either a fixed one (desktop) or a portable one (laptop). In this embodiment, the user interface means 38 of the secondary computer 32 may comprise a web-like graphical user interface (web application), the secondary computer 32 being provided with a web browser, for example Mozilla Firefox, Google Chrome, or Microsoft Edge.

[0069] In one embodiment, the secondary computer 32, the palate scanner 40 and the key reader 42 are comprised in an identification kiosk or identification station.

[0070] The secondary computer 32 is in communication with the main computer 12 via the telematic communication network 48, such as for example the Internet.

[0071] The main computing device 12, in short main computer 12, which is preferably remote, of the system 10 according to the invention is a servertype device comprising transceiver means 14, an interface module 16, advantageously a management module 18, and a processing array 20.

[0072] The transceiver means 14 of the main computer 12 are adapted to receive in input the 3D palate scan, acquired by the palate scanner 40 and originating from the secondary computer 32, via the telematic communication network 48.

[0073] The transceiver means 36 of the main computer 12 are adapted to receive in input the request for personal identification, originating from the secondary computer 32, preferably associated with a respective identification key of the person to be identified. Moreover, the transceiver means 36 of the main computer 12 are adapted to output the results of said personal identification request toward the secondary computer 32.

[0074] Preferably, the main computer 12 is configured to send information regarding an outcome (positive or negative) of said personal identification request to the secondary computer 32, and consequently to the key reader 42 operatively connected to the latter.

[0075] The interface module 16 of the main computer 12 is adapted for the input and output interaction between the secondary computer 32 and said main computer 12. In particular, the interface module 16 provides public endpoint functionality, managing the passage of the request for personal identification in input, originating from the secondary computer 32, and the results in output of said request for personal identification, toward the secondary computer 32.

[0076] In one embodiment, the interface module 16 of the main computer 12 is configured to allow secure access to the secondary computer 32 that is requesting personal identification to the main computer 12. Thus, the interface module 16 of the main computer 12 offers not only public functionalities for requesting personal identification, and so on, but also public functionalities for authenticating the secondary computer 32 making the request and for verifying that this secondary computer 32 has the necessary authorization to perform the requested operation.

[0077] The processing array 20 is the main functional element of the main computer 12, and for this reason it is connected to, and in communication with, the other elements comprised in the main computer 12.

[0078] The processing array 20 of the main computer 12 is provided with appropriate capabilities for computing and interfacing with the other elements of the main computer 12, and is configured to command, control and coordinate the operation of the elements of the main computer 12 to which it is connected and with which it is in communication.

[0079] Advantageously, the processing array 20 comprises a plurality of electronic computing units or nodes 21, each individual electronic computing unit 21 being conveniently configured to perform unitary operations, without being aware of either the request for personal identification, coming from the secondary computer 32, or the data related to the acquired 3D palate scan to be compared with the stored 3D palate scans, including possibly a 3D palate scan of the person to be identified.

[0080] Therefore, the task of the electronic computing units 21 is to normalize and / or compare a single 3D palate scan at a time, ignoring the context and destination of the personal identification request that caused the generation of the assigned unitary operation.

[0081] The configuration, and thus the operation, of the processing array 20 of the main computer 12 will be described in detail in the continuation of the present description.

[0082] Advantageously, the management module 18 of the main computer 12 is adapted to manage, coordinate, and monitor the processing array 20. In particular, the management module 18 provides load-balancing functionalities by distributing the computational workload over the electronic computing units 21 of the processing array 20. Advantageously, a single personal identification request, originating from the secondary computer 32, is divided over the largest possible number of electronic computing units 21 of the processing array 20.

[0083] In one embodiment, the management module 18 of the main computer 12 is configured to apply failover rules in the event of problems that undermine the operation of a computing unit 21, such as for example restoring an operation onto a different computing unit 21, taking appropriate countermeasures to prevent the problematic computing unit 21 from receiving further operations, and / or sending a notification to the appropriate technical operators.

[0084] In one embodiment, the management module 18 of the main computer 12 is configured to convert the personal identification request, originating from the secondary computer 32, into parallel or sequential portions to be executed on the electronic computing units 21.

[0085] The main computer 12 is in communication with the secondary computer 32 via the telematic communication network 48, such as for example the Internet.

[0086] The storage unit 22 of the system 10 according to the invention comprises a personal data memory (or storage) unit 24 and an identification memory (or storage) unit 26.

[0087] The personal data memory unit 24 of the storage unit 22 is adapted to register or store the biographical data and / or personal information of any registered user (i.e., of all the persons registered in the system 10 according to the invention). In particular, the personal data memory unit 24 stores a respective biographical data record for each person registered in the system 10 according to the invention.

[0088] An identification code, for example of the numeric or alphanumeric type, which is unique and random and generated during the registration of the person in the system 10, is associated with each person registered in the system 10 according to the invention. Therefore, each biographical data record comprises the identification code of the respective person. In other words, the identification code of a person is associated with the biographical data and / or personal information of that person.

[0089] The biographical data and / or personal information that can be registered or stored in the personal data memory unit 24 are of the alphanumeric type.

[0090] For example, the biographical data and / or personal information may of a person may comprise: first name, last name, date of birth, place of birth, residential address, home address, telephone number, email address, taxpayer identification code, and so on.

[0091] The identification memory unit 26 of the storage unit 22 is adapted to register or store the identification data, i.e., the identification keys and the 3D palate scans, of all persons registered in the system 10 according to the invention. In particular, the identification memory unit 26 stores a respective identification data record for each person registered in the system 10 according to the invention.

[0092] As mentioned, an identification code, for example of the numeric or alphanumeric type, is associated with each person registered in the system 10 according to the invention. Therefore, each identification data record comprises the identification code of the respective person. In other words, the identification code of a person is associated with the identification data, i.e., the identification key and the 3D palate scan, of that person.

[0093] Advantageously, in the identification memory unit 26 the identification keys and the 3D palate scans are stored without any biographical data of the respective person, but are identified only by the identification code of that person.

[0094] By virtue of the combination of the biographical data contained in the personal data memory unit 24 and the identification data contained in the identification memory unit 26, and thus by virtue of the storage unit 22, the system 10 according to the invention has sufficient data to:

[0095] - retrieve the 3D palate scan of a person, given the identification key held by that person;

[0096] - retrieve the identification code of a person, given the identification data, i.e., the identification key and / or the 3D palate scan, of that person;

[0097] - retrieve the identification data, i.e., the identification key and / or 3D palate scan, of a person, given the identification code of that person;

[0098] - retrieve the biographical data and / or personal information of a person, given the identification code of that person; and

[0099] - retrieve the devices held by a person, given that person's identification code.

[0100] In one embodiment, the personal data memory unit 24 and / or the identification memory unit 26, or more generally the storage unit 22, comprise a database stored on conveniently sized storage media.

[0101] With reference to Figures 2A and 2B, the two-factor personal identification method according to the present invention, i.e., the operation of the two-factor personal identification system 10 according to the present invention, comprises the steps described below.

[0102] Initially, in step 50, the key reader 42 directly acquires an identification key held by a person to be identified, according to one of the methods described above. Again in step 50, the key reader 42 sends the identification key, which it has acquired, toward the secondary computer 32, and then said secondary computer 32 sends the same identification key, which it has received, toward the main computer 12.

[0103] In step 53, the main computer 12 automatically retrieves a reference 3D palate scan associated with the identification key, which it has received in the previous step 50, both the identification key and the reference 3D palate scan being registered or stored in the identification memory unit 26 of the storage unit 22.

[0104] In step 56, the palate scanner 40 directly acquires a 3D digital scan of the palate, i.e., a 3D palate scan, of the person to be identified. Again in step 56, the palate scanner 40 sends the 3D palate scan, which it has acquired, toward the secondary computer 32, and then the same secondary computer 32 sends the same 3D palate scan, which it has received, toward the main computer 12.

[0105] In step 57a, the main computer 12 compares the reference 3D palate scan, associated with the identification key, which it has retrieved in the previous step 53, with the 3D palate scan of the person to be identified, which it has received in the previous step 56.

[0106] The outcome of the comparison of step 57a is positive / ok when the reference 3D palate scan, associated with the identification key, and the 3D palate scan, received in the previous step 56, are identical. The outcome of the comparison of step 57a is instead negative / failed when the reference 3D palate scan, associated with the identification key, and the 3D palate scan, received in the previous step 56, are different.

[0107] Finally, in step 59, the main computer 12 determines the outcome (for example, positive or negative, ok or failed, and so on) of the comparison of step 57a. Again in step 59, the main computer 12 sends the outcome of the comparison, which it has determined, toward the secondary computer 32, and then said secondary computer 32 displays said outcome of the comparison, which it has received, via the user interface means 38.

[0108] Preferably, again in step 59, in case of a positive comparison outcome, i.e., in case of a positive identification, the main computer 12 retrieves the identification code of the identified person, the identification code being registered or stored in both the identification memory unit 26 and the personal data memory unit 24 of the storage unit 22. Preferably, again in step 59, in case of a positive comparison outcome, i.e., in case of a positive identification, the main computer 12 also retrieves the biographical data and / or personal information (or a portion thereof) of the identified person, registered or stored in the personal data memory unit 24 of the storage unit 22.

[0109] In one embodiment, again in step 59, in case of a positive comparison outcome, i.e., in case of a positive identification, the main computer 12 sends the comparison outcome and the identification code of the identified person, optionally accompanied by biographical data and / or personal information of the identified person, retrieved from the personal data memory unit 24 of the storage unit 22, to one or more devices or apparatuses of various types, which are external to the system 10 according to the invention, for example, automatic doors, turnstiles, and so on. These external devices or apparatuses then operate as a result of what is received, for example the automatic door opens, the turnstile unlocks, and so on.

[0110] In a preferred embodiment, in step 51, the main computer 12 verifies that the identification key, that it has received, is registered or stored in the identification memory unit 26 of the storage unit 22.

[0111] Preferably, again in step 51, the main computer 12 sends information regarding an outcome (positive or negative) of the verification of step 51 to the secondary computer 32, and consequently to the key reader 42 operatively connected to the latter.

[0112] If the verification of step 51 has a positive outcome, i.e., in case of an identification key registered in the identification memory unit 26, one proceeds to step 53 described above.

[0113] If instead the verification of step 51 has a negative outcome, i.e., in case of an identification key not registered in the identification memory unit 26, one proceeds to step 52 described below.

[0114] In one embodiment, in step 52, the main computer 12 provides a first option and a second option. Selection of the first option or second option can be made by the person to be identified, by a human operator, or automatically by the main computer 12. The first option consists in associating the unregistered identification key with an existing identification data record, i.e., that is registered or stored in the identification memory unit 26 of the storage unit 22. The second option consists in creating a new identification data record which comprises the identification key that is not registered, to be registered or stored in the identification memory unit 26, and a new biographical data record, to be registered or stored in the personal data memory unit 24.

[0115] In one embodiment, by selecting the first option in step 52 one proceeds at least to steps 54, 56, 57b and 60 described below.

[0116] In step 54, the main computer 12 requests another (secondary) identification key, registered in the identification memory unit 26, for example acquired by the key reader 42 similarly to step 50 described above, or manually selected by a human operator following a verification of the identification document of the person to be identified. Again in step 54, the main computer 12 automatically retrieves a 3D palate scan associated with the other (secondary) identification key, which it has received, both the other identification key and the 3D palate scan being registered or stored in the identification memory unit 26 of the storage unit 22. In step 56, the palate scanner 40 directly acquires a 3D digital scan of the palate, i.e., a 3D palate scan, of the person to be identified. Again in step 56, the palate scanner 40 sends the 3D palate scan, which it has acquired, toward the secondary computer 32, and then the same secondary computer 32 sends the same 3D palate scan, which it has received, toward the main computer 12.

[0117] In a manner similar to step 57a, in step 57b, the main computer 12 compares the reference 3D palate scan, associated with the other (secondary) identification key, which it has retrieved in the previous step 54, with the 3D palate scan of the person to be identified, which it has received in the previous step 56.

[0118] The outcome of the comparison of step 57b is positive / ok when the reference 3D palate scan, associated with the other (secondary) identification key, and the 3D palate scan, received in the previous step 56, are identical. The outcome of the comparison of step 57b is instead negative / failed when the reference 3D palate scan, associated with the other (secondary) identification key, and the 3D palate scan, received in the previous step 56, are different.

[0119] In step 60, the main computer 12 verifies that the outcome of the comparison of step 57b is positive. In case the outcome of the comparison is positive, the main computer 12 registers or stores the identification key together with the other (secondary) identification key and the reference 3D palate scan, i.e., in the same identification data record as the other (secondary) identification key and the reference 3D palate scan, in the identification memory unit 26.

[0120] Finally, preferably, in step 61, in case the outcome of the comparison of step 57b is positive, i.e., in case of a positive identification, the main computer 12 produces a confirmation of the association of the identification key with the other (secondary) identification key and the reference 3D palate scan, i.e., the registration of the identification key in the identification data record comprising the other (secondary) identification key and the reference 3D palate scan of the identified person. Again in step 61, the main computer 12 sends the confirmation of the association, which it has produced, toward the secondary computer 32, and then the same secondary computer 32 displays said confirmation of the association, which it has received, via the user interface means 38.

[0121] In one embodiment, by selecting the second option in step 52 one proceeds at least to steps 55, 56, 64 and 65 described hereinafter.

[0122] In step 55, the main computer 12 initiates the creation of a new identification data record, comprising the unregistered identification key, to be registered or stored in the identification memory unit 26, and of a new biographical data record, to be registered or stored in the personal data memory unit 24. Both of these new records share the identification code of the person to be registered.

[0123] In step 56, the palate scanner 40 directly acquires a 3D digital scan of the palate, i.e., a 3D palate scan, of the person to be identified. Again in step 56, the palate scanner 40 sends the 3D palate scan, which it has acquired, toward the secondary computer 32, and then the same secondary computer 32 sends said 3D palate scan, which it has received, toward the main computer 12.

[0124] Advantageously, in step 58, the main computer 12 compares the 3D palate scan of the person to be registered, which it has received in the previous step 56, with the plurality of reference 3D palate scans of the plurality of registered persons, registered or stored in the identification memory unit 26. In practice, in step 58, the main computer 12 compares the 3D palate scan of the person to be registered with all the 3D palate scans of all the persons registered in the system 10 according to the invention. The purpose of the comparison of step 58 is to identify any conflicts, i.e., potential duplicates and / or false positives.

[0125] The outcome of the comparison of step 58 is positive / ok (yes conflicts) when the plurality of reference 3D palate scans, registered in the identification memory unit 26, comprises the 3D palate scan of the person to be registered. The outcome of the comparison of step 58 is instead negative / failed (no conflicts) when the plurality of reference 3D palate scans, registered in the identification memory unit 26, does not comprise the 3D palate scan of the person to be registered.

[0126] Advantageously, in step 62, the main computer 12 verifies that the outcome of the comparison of step 58 is positive (yes conflicts).

[0127] If the verification of step 62 has a positive outcome, i.e., if there are conflicts, one proceeds to step 63 described below.

[0128] In one embodiment, in step 63, the main device 12 asks a human operator to assess whether or not the identified conflict is a false positive. In the first case (false positive) one proceeds to step 64 described below. In the second case (not false positive) one returns to step 52 described above.

[0129] If the verification of step 62 is instead negative, i.e., in case of no conflict, one proceeds to step 64 described below.

[0130] In step 64, the main computer 12 requests the entry of biographical data and / or personal information related to the person to be registered, who holds the identification key and who has undergone a palate scan. These biographical data and / or personal information entered by the person, together with said person's identification key, constitute a new personal data record to be registered or stored in the personal data memory unit 24.

[0131] In step 65, the main computer 12 saves or registers a new identification data record, comprising the unregistered identification key and the 3D palate scan of the person to be registered, in the identification memory unit 26, and a new biographical data record, comprising the biographical data and / or personal information entered in step 64, in the personal data memory unit 24. As mentioned, both of these new records comprise and share the identification code of the person to be registered.

[0132] Finally, preferably, in step 66, the main computer 12 produces a confirmation of the saving or registration of the new identification data record in the identification memory unit 26, and of the new biographical data record in the personal data memory unit 24. Again in step 66, the main computer 12 sends the confirmation of the save, which it has produced, toward the secondary computer 32, and then the same secondary computer 32 displays the same confirmation of the save, which it has received, via the user interface means 38.

[0133] It should be noted that the comparison of steps 57a, 57b, and 58 is performed by means of an appropriate algorithm that allows the accurate identification of a person by comparing a 3D palate scan of the person to be identified with another previously acquired 3D palate scan.

[0134] Advantageously, this identification algorithm is provided with optimization procedures from the point of view of both performance and error reduction. For example, the comparison is performed on progressive sampling levels. For example, at each comparison the two 3D palate scans are initially aligned by means of a feature recognition procedure, then they are better aligned by an ICP (Iterative Closest Point) algorithm, and finally a numerical score representing the match / difference between the two 3D palate scans is assigned to the comparison, excluding any outliers due to acquisition anomalies.

[0135] In practice it has been found that the present invention fully achieves the intended aim and objects. In particular, it has been shown that the two- factor personal identification system and method thus conceived allow to overcome the qualitative limitations of the background art, since they allow to obtain better effects than those obtainable with known solutions and / or similar effects at lower cost and with higher performance.

[0136] One advantage of the two-factor personal identification system and method according to the present invention resides in that they allow to identify, and consequently authenticate the identity of, a person with high accuracy, within a large group of people, even on the order of a million or tens of millions.

[0137] Another advantage of the two-factor personal identification system and method according to the present invention reside in that they allow to identify, and consequently to authenticate the identity of, a person with high application versatility, in a manner that is adaptable with respect to the needs of groups of people of different sizes, from small-scale access control to access control for social platforms on a large scale.

[0138] An additional advantage of the two-factor personal identification system and method according to the present invention resides in that they allow to identify, and consequently authenticate the identity of, a person with reduced processing times.

[0139] Moreover, an advantage of the two-factor personal identification system and method according to the present invention resides in that they allow to identify, and consequently authenticate the identity of, a person with a high level of security.

[0140] Although the two-factor personal identification system and method according to the invention have been conceived in particular for controlling physical accesses to buildings, digital accesses to IT systems, and banking / financial operations, they can still be used, more generally, for any activity where personal identification of a human subject is needed.

[0141] The invention thus conceived is susceptible of numerous modifications and variations, all of which are within the scope of the accompanying claims. All the details may furthermore be replaced with other technically equivalent elements.

[0142] Except where otherwise specified, the various embodiments described above may be combined to provide additional and / or alternative embodiment. In addition, the present description covers combinations of variations and preferred embodiment that are not described explicitly.

[0143] All the details may furthermore be replaced with other technically equivalent elements. In practice, the materials used, so long as they are compatible with the specific use, as well as the contingent shapes and dimensions, may be any according to the requirements and the state of the art.

[0144] To conclude, the scope of the protection of the claims must not be limited by the illustrations or preferred embodiments shown in the description by way of example, but rather the claims must comprise all the characteristics of patentable novelty that reside in the present invention, including all the characteristics that would be treated as equivalents by the person skilled in the art. The disclosures in Italian Patent Application No. 102023000008067 from which this application claims priority are incorporated herein by reference.

[0145] Where technical features mentioned in any claim are followed by reference signs, those reference signs have been included for the sole purpose of increasing the intelligibility of the claims and accordingly, such reference signs do not have any limiting effect on the interpretation of each element identified by way of example by such reference signs.

Claims

CLAIMS1. A two-factor personal identification system (10) comprising a main computer (12) operatively connected to a respective storage unit (22), and at least one secondary computer (32) operatively connected to a respective palate scanner (40) and to a respective key reader (42), said main computer (12) and said secondary computer (32) being mutually connected via a telematic communication network (48), said storage unit (22) comprising a personal data memory unit (24) and an identification memory unit (26); wherein said key reader (42) is configured to acquire an identification key held by a person to be identified; said palate scanner (40) is configured to acquire a 3D palate scan of said person to be identified; and said main computer (12) is configured to:- retrieve a reference 3D palate scan associated with said identification key, both said identification key and said reference 3D palate scan being registered in said identification memory unit (26);- compare said reference 3D palate scan, associated with said identification key, with said 3D palate scan of said person to be identified; and- determine an outcome of said comparison, said outcome of said comparison being positive when said reference 3D palate scan and said 3D palate scan are identical, said outcome of said comparison being negative when said reference 3D palate scan and said 3D palate scan are different.

2. The two-factor personal identification system (10) according to claim 1 , wherein, in case of said positive outcome of said comparison, said main computer (12) is further configured to retrieve an identification code of said identified person, said identification code being registered in both said identification memory unit (26) and said personal data memory unit (24).

3. The two-factor personal identification system (10) according to claim 1 or 2, wherein said main computer (12) is further configured to verify that said identification key is registered in said identification memory unit (26).

4. The two-factor personal identification system (10) according to claim 3, wherein, in case of said negative outcome of said verification, said key reader (42) is further configured to acquire another identification key held by said person to be identified; said main computer (12) is further configured to:- retrieve a reference 3D palate scan associated with said other identification key, both said other identification key and said reference 3D palate scan being registered in said identification memory unit (26);- compare said reference 3D palate scan, associated with said other identification key, with said 3D palate scan of said person to be identified; and- in case of said positive outcome of said comparison, register said identification key together with said other identification key and said reference 3D palate scan in said identification memory unit (26).

5. The two-factor personal identification system (10) according to claim 3, wherein, in case of said negative outcome of said verification, said main computer (12) is further configured to:- start a creation of a new identification data record comprising said identification key and said 3D palate scan, and a new personal data record;- request an input of personal data related to said person to be identified, in order to constitute said new personal data record; and- register said new identification data record, comprising said identification key and said 3D palate scan, in said identification memory unit (26), and said new personal data record, comprising said entered personal data, in said personal data memory unit (24).

6. The two-factor personal identification system (10) according toclaim 5, wherein said main computer (12) is further configured to compare said 3D palate scan of said person to be identified with a plurality of reference 3D palate scans registered in said identification memory unit (26), for the purpose of identifying any conflicts.

7. A method for two-factor personal identification by means of a main computer (12) operatively connected to a respective storage unit (22), and at least one secondary computer (32) operatively connected to a respective palate scanner (40) and to a respective key reader (42), said main computer (12) and said secondary computer (32) being mutually connected via a telematic communication network (48), said storage unit (22) comprising a personal data memory unit (24) and an identification memory unit (26), comprising the steps of:- acquiring (50) an identification key held by a person to be identified, by means of said key reader (42);- retrieving (53) a reference 3D palate scan associated with said identification key, by means of said main computer (12), both said identification key and said reference 3D palate scan being registered in said identification memory unit (26);- acquiring (56) a 3D palate scan of said person to be identified, by means of said palate scanner (40);- comparing (57a) said reference 3D palate scan, associated with said identification key, with said 3D palate scan of said person to be identified, by means of said main computer (12); and- determining (59) an outcome of said comparison, by means of said main computer (12), said outcome of said comparison being positive when said reference 3D palate scan and said 3D palate scan are identical, said outcome of said comparison being negative when said reference 3D palate scan and said 3D palate scan are different.

8. The method for two-factor personal identification according to claim 7, further comprising, in case of said positive outcome of saidcomparison of the comparison step (57a), the step of retrieving (59) an identification code of said person identified by means of said main computer (12), said identification code being registered in both said identification memory unit (26) and said personal data memory unit (24).

9. The method for two-factor personal identification according to claim 7 or 8, further comprising the step of verifying (51) that said identification key is registered in said identification memory unit (26), by means of said main computer (12).

10. The method for two-factor personal identification according to claim 9, further comprising, in case of said negative outcome of said verification of the verification step (51), the steps of:- acquiring (54) another identification key held by said person to be identified, by means of said key reader (42);- retrieving (54) a reference 3D palate scan associated with said other identification key, by means of said main computer (12), both said other identification key and said reference 3D palate scan being registered in said identification memory unit (26);- comparing (57b) said reference 3D palate scan, associated with said other identification key, with said 3D palate scan of said person to be identified, by means of said main computer (12); and- in case of said positive outcome of said comparison of the comparison step (57b), registering said identification key together with said other identification key and said reference 3D palate scan in said identification memory unit (26), by means of said main computer (12).

11. The method for two-factor personal identification according to claim 9, further comprising, in case of said negative outcome of said verification of the verification step (51), the steps of:- starting (55) a creation of a new identification data record comprising said identification key and said 3D palate scan, and a new personal data record, by means of said main computer (12);- requesting (64) an entry of personal data related to said person to be identified, in order to constitute said new personal data record, by means of said main computer (12); and- registering (65) said new identification data record, comprising said identification key and said 3D palate scan, in said identification memory unit (26), and said new personal data record, comprising said entered personal data, in said personal data memory unit (24), by means of said main computer (12).

12. The method for two-factor personal identification according to claim 11, further comprising the step of comparing (58) said 3D palate scan of said person to be identified with a plurality of reference 3D palate scans registered in said identification memory unit (26), by means of said main computer (12), for the purpose of identifying any conflicts.

Images