System for identifying an individual carrying a personal document and a smart card.
A system for verifying identity using automatic reading devices and smart cards with integrated character recognition and PIN verification addresses the security gap in unofficial documents by ensuring accurate personal information matching and PIN validation, enhancing identity authentication.
Patent Information
- Application Number
- FR2023000782
- Authority / Receiving Office
- FR · FR
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2023-01-27
- Publication Date
- 2025-05-02
- Estimated Expiration
- 2043-01-27
AI Technical Summary
Unofficial personal documents, such as smart cards, lack the stringent security measures found in official identity documents, making it easy for individuals to impersonate others by presenting these documents for identity verification, especially when controlled by unauthorized personnel.
A system that combines automatic reading devices for both nominative documents and smart cards, utilizing character recognition software to compare names and PIN codes, and optionally includes date validation, to enhance identity verification by integrating the smart card's security features into the verification process.
Enhances the security of identity verification by ensuring the matching of personal information across both documents and requiring PIN verification, thereby reducing impersonation and increasing confidence in identity authentication.
Smart Images
Figure 00000012_0000 
Figure 00000012_0001 
Figure 00000013_0000
Abstract
Description
Title of the invention: System for identifying an individual carrying a nominative document and carrying a smart card.
[0001] The present invention relates to the field of smart cards.
[0002] To date, several types of documents containing personal information are known: - on the one hand, identity documents, which are official, that is to say, which come from States, governments or official services, and - unofficial documents which include personal information relating to the bearer but which originate from private services, for example subscription cards, transport cards, bank cards, health cards, etc., particularly in the form of smart cards; or which originate from State services but which are not identity documents.
[0003] For obvious reasons, the security measures provided for official identity documents are different, and generally more restrictive, than those provided for unofficial documents.
[0004] However, it may be interesting in certain circumstances, particularly security or health-related, to be able to use a smart card as an identity element, even if this “proof” of identity would be degraded in comparison with proof of identity provided with an official identity document.
[0005] Indeed, for example, to access public or private places, it may be necessary to present a nominative document authorizing its bearer to enter a place whose access is regulated, whether the place is physical (building) or virtual (website).
[0006] As an illustrative and non-limiting example of a nominative document, we can cite the example of the Health Pass, unique and nominative, which the applicant may have to present to access a place. This procedure is supposed to prove that the person has complied with the mandatory vaccination schedule.
[0007] However, it is possible that access to the place is dependent at least on an identity statement, which is carried out by a person authorized to take said statement but not authorized to check the identity of the individual carrying said nominative document.
[0008] By "identifying" is meant asking an individual to present a document establishing their identity. Identity verification is limited to reading the document(s) presented.
[0009] “Identity checks” are governed by Article 78-2 of the French Code of Criminal Procedure and are carried out by police or customs officers.
[0010] It is therefore relatively easy for an individual to circumvent such a level of security.
[0011] And since there is information common to official identity documents and to unofficial documents, in particular the name and first name of the holder of the smart card, for example a bank card, the present invention cleverly aims to take advantage of this common characteristic.
[0012] In this context, the present invention relates to a system for identifying an individual carrying a nominative document and carrying a smart card, the system comprising:
[0013] • A device for automatically reading the nominative document, comprising a character recognition software, configured to record in a temporary memory the first and last name entered on the nominative document.
[0014] It is essentially characterized in that it further comprises:
[0015] • An automatic smart card reading device, comprising software for character recognition, configured to record in a temporary memory the name and first name entered on the smart card;
[0016] • A comparison device configured to compare the entered name and first name on the nominative document with the name and first name entered on the smart card and to emit a signal representing the result of the comparison.
[0017] In one embodiment, the comparison device is integrated into the automatic reading device of the smart card or into the automatic reading device of the nominative document.
[0018] It is also possible to provide a device for verifying the PIN code of the smart card, the signal representing the result of the comparison being furthermore controlled by the verification of the PIN code or concomitant with the verification of the PIN code.
[0019] In one embodiment, the smart card PIN code verification device is configured to be able to establish contact or contactless communication with the smart card.
[0020] In one embodiment, the device for verifying the PIN code of the smart card is:
[0021] • Either a payment terminal,
[0022] • Either an ad hoc reader comprising: i. a power source for the smart card, ii. a keypad for entering the PIN code, iii. iii. a display device, and iv. iv. optionally a communication device.
[0023] In one embodiment, the name and first name entered on the nominative document are entered thereon:
[0024] • Either in clear,
[0025] • Either in a coded manner,
[0026] • Either in clear and coded form;
[0027] the automatic reading device for the nominative document comprising, where appropriate, decoding software, configured to decode the name and first name coded in the nominative document.
[0028] In one embodiment, the smart card is a bank card.
[0029] A smartphone can be provided in which at least one of:
[0030] • the automatic reading device for the nominative document and
[0031] • the automatic reading device for the smart card.
[0032] In one embodiment, at least one of the nominative document and the smart card includes a validity date, the system being configured to:
[0033] • carry out at least one of the comparisons among: i. Compare the current date and the validity date of the nominative document, ii. Compare the current date and the validity date of the smart card, iii. Compare the validity date of the nominative document and the validity date of the smart card, and
[0034] • Emit a signal representative of the result of the comparison.
[0035] In one embodiment, the personal data relating to the name and first name, recorded in the automatic reading device of the nominative document or in the automatic reading device of the smart card are erased at the end of the comparison step or after a predetermined time.
[0036] Other characteristics and advantages of the present invention will appear more clearly on reading the following description given by way of illustrative and non-limiting example and made with reference to the appended figures.
[0037] Figures are not to scale.
[0038] DESCRIPTION OF THE DRAWINGS
[0039] [Fig. 1] illustrates a standard smart card,
[0040] [Fig.2] illustrates a smartphone equipped with data display software no of a nominative document and a smart card, and display of the result of the comparison of said data,
[0041] [Fig.3] illustrates a nominative document within the meaning of the present invention,
[0042] [Fig.4] illustrates a standard payment terminal,
[0043] [Fig.5] illustrates an ad hoc device according to the invention for verifying the PIN code. Detailed description
[0044] A nominative document 300 within the meaning of the present invention is illustrated in [Fig.3]
[0045] Obviously, the nominative document 300 includes a text 330. Since the document is nominative, it includes nominative information, in this case at least the name BBB and the first name AAA of the recipient or bearer of said nominative document 300. We understand indistinctly "information" and "data".
[0046] In certain cases, it may be provided that the nominative document 300 includes an expiry date 310, or indistinctly a validity date, beyond which the nominative document 300 is considered invalid.
[0047] Preferably, it is provided that the nominative document 300 comprises a two-dimensional barcode 320, indistinctly called a 2D code, for example a QR code. The barcode 320 of the nominative document 300 encodes a set of information, including the nominative data 340 of the document 300.
[0048] Thus, the nominative document 300 is unique.
[0049] In a first variant, the personal information of the personal document 300 is written in clear text. It can therefore be read by an automatic reading device, comprising character recognition software.
[0050] In a second variant, the personal information of the personal document 300 is entered in a coded manner, in this case in a two-dimensional barcode 320.
[0051] They can therefore be decoded by decoding software, configured to decode the name and first name coded in the two-dimensional barcode 320.
[0052] In a third variant, the first variant and the second variant are combined, so that the personal information of the personal document 300 is written in clear and coded form.
[0053] The automatic reading device for the nominative document 300 therefore comprises at least one of: - character recognition software, and - two-dimensional 320 barcode decoding software.
[0054] However, as explained at the beginning of the description, such a nominative document 300 is not considered an identity document. Indeed, an official identity document includes a set of additional data and security features.
[0055] However, it may be useful to use such a nominative document 300 as an element allowing one to establish one's identity. However, in the event of loan or theft of such a nominative document 300, it is easy for the fraudulent user to pass themselves off as the authentic bearer.
[0056] It is therefore desirable to increase the level of confidence relating to the identity of the bearer of the nominative document 300, in particular when it is not possible to check the identity.
[0057] For this purpose, it is advantageous to use a chip card 100, for example a bank card.
[0058] A smart card 100 meets standards and includes in this case, for example by embossing, individual data 140 of the card holder, at least the name 142 and first name 141 of the holder of the smart card 100.
[0059] A smart card 100 is illustrated in [Fig. 1]. It comprises a module 110, allowing secure transactions to be established. The module 110 notably comprises a secure element. A secret code (PIN code) is stored in a memory of the secure element, or online, and in a manner known per se, the completion of a transaction can be dependent on the entry of the PIN code.
[0060] The smart card 100 includes a card number 120. In general, the number 120 is a 16-digit number, unique, generally standardized and typically implementing the Luhn algorithm (modlO).
[0061] For security reasons, the smart card 100 also includes an expiration date 130.
[0062] The present invention aims to cleverly use all or part of this standard information.
[0063] In a first embodiment, a “what I have” authentication factor is provided, in this case a nominative document 300 and a smart card 100.
[0064] For this purpose, a device for automatically reading the smart card 100 is provided, comprising character recognition software, configured to record in a temporary memory at least the name and first name written on the smart card 100.
[0065] The name and first name entered on the smart card 100 can then be compared with the name and first name entered on the nominative document 300.
[0066] For this purpose, a comparison device is provided, configured to compare the name and first name entered on the nominative document 300 with the name and first name entered on the smart card 100 and to emit a signal representative of the result of the comparison.
[0067] It can be provided that the comparison device is integrated into the automatic reading device of the smart card 100 or integrated into the automatic reading device of the nominative document 300.
[0068] In this case, as illustrated in [Fig.2], the comparison device and the automatic reading device of the nominative document 300 are integrated into a smartphone 200.
[0069] The smartphone 200 comprises a display screen 210. It can be provided that the comparison device comprises an instruction for displaying the nominative information of the nominative document 300 in a field 211 of the display screen.
[0070] Similarly, it can be provided that the comparison device comprises an instruction for displaying the personal information of the smart card 100 in a field 212 of the display screen.
[0071] It is also possible to provide that the comparison device comprises an instruction for displaying the result of the comparison in a field 213 of the display screen. The result of the comparison in the field 213 may comprise text, in this case “OK” if the personal information is identical. It is also possible to provide a color display, the color of which symbolizes the result of the comparison, typically green for OK and red otherwise.
[0072] It is also possible to provide a display signifying that the name and first name entered on the nominative document 300 do not correspond completely with the name and first name entered on the smart card 100, for example because at least one letter has not been recognized correctly, or differs. In this case, a color display is advantageously provided, the color of which symbolizes the result of the comparison, typically orange. This can lead to an additional check.
[0073] In a second embodiment, combinable with the first embodiment, a second authentication factor is also provided: “what I know”, in this case the PIN code.
[0074] In this case, it is possible to provide for sending a PIN request script to the smart card 100.
[0075] The exchanges with the smart card 100 are generally standardized. In this case, it is planned to send the “PIN verify” command to the smart card 100.
[0076] In a manner known per se, a display device displays an invitation to enter the PIN code.
[0077] The display device may be that of an existing, standard, therefore contact-based payment terminal 400, as illustrated in [Fig. 4], or that of a specific, portable, contactless device, in this case a smartphone 200, or even that of an ad hoc device 500 illustrated in [Fig. 5], comprising a power source for the smart card 100, a display screen and an input device 510 comprising a numeric keypad.
[0078] With an existing 400 payment terminal, the “PIN verify” command is executed with a transaction amount equal to 0 ([Fig.4]).
[0079] It can be provided that the ad hoc device is capable of establishing wireless communication with a smartphone 200, for example via Bluetooth.
[0080] It can be provided that the display device is a smartphone 200 of the bearer of the nominative document 300, and that the smartphone 200 is equipped with software for wireless communication with a second smartphone 200, for example via Bluetooth. Typically, the second smartphone 200 is that of a person in charge of filtering access to a place whose access is regulated. Thus, for example, the bearer of the nominative document 300 will not be able to call into question the system if the device comparison emits a signal that the name and surname of the nominative document 300 do not correspond to the name and surname of the smart card 100, or if the PIN code is incorrect.
[0081] In a known manner, after the invitation to enter the PIN code and the entry of said PIN code, the secure element of the smart card 100 verifies said PIN code and returns an output data item called “PIN OK” according to which the PIN code entered is equal to the recorded secret PIN code.
[0082] Preferably, all personal data is deleted at the end of the comparison step, so as to comply with the so-called GDPR legislation in Europe.
[0083] The present invention is not limited to the embodiments previously described.
[0084] For example, it is also possible to provide a step consisting of comparing the clear name and first name of the nominative document 300 with the coded name and first name of the nominative document 300.
[0085] It is also possible to use at least one of the dates among the expiry date 310 of the nominative document 300 and the expiry date 130 of the smart card 100.
[0086] For this purpose, it is possible to compare the current date and the expiry date 310 of the nominative document 300, and to emit a signal depending on the result of the comparison.
[0087] It is also possible to provide for comparing the current date and the expiry date 130 of the smart card 100, and to emit a signal depending on the result of the comparison.
[0088] Finally, it is also possible to provide the expiry date 310 of the nominative document 300 and the expiry date 130 of the smart card 100, and to emit a signal depending on the result of the comparison.
[0089] It is thus possible to detect whether the validity of the nominative document 300 or the smart card 100 has expired, which further reinforces the degree of confidence in the system according to the invention. Nomenclature
[0090] 100 smart card
[0091] 110 module
[0092] 120 smart card number
[0093] 130 smart card expiration date
[0094] 140 individual data of the smart card
[0095] 141 first name of the smart card holder
[0096] 142 name of the smart card holder
[0097] 200 smartphones
[0098] 210 smartphone display screen
[0099] 211 field for displaying nominative information of the nominative document
[0100] 212 field for displaying personal information on the smart card
[0101] 213 field to display the comparison between the personal information of the nominative document and the nominative information of the smart card
[0102] 300 nominative document
[0103] 310 expiry date of the nominative document
[0104] 320 barcode of the nominative document
[0105] 330 text of the nominative document
[0106] 340 personal data of the personal document
[0107] 400 standard payment terminal
[0108] 500 ad hoc PIN verification device
[0109] 510 input device
Claims
Claims
1. System for identifying an individual carrying a nominative document and carrying a smart card, the system comprising: • A device for automatically reading the nominative document, comprising character recognition software, configured to record in a temporary memory the name and first name written on the nominative document; • A device for automatically reading the smart card, comprising character recognition software, configured to record in a temporary memory the name and first name written on the smart card;• A comparison device configured to compare the name and first name written on the nominative document with the name and first name written on the smart card and to emit a signal representative of the result of the comparison, in which the comparison device is integrated into the automatic reading device of the smart card or into the automatic reading device of the nominative document, characterized in that it further comprises: the smart card (100) comprises a module (110), making it possible to establish secure transactions and comprising in particular a secure element, a secret code (PIN) being stored in a memory of the secure element, the system further comprising a device for verifying the PIN code of the smart card, the signal representative of the result of the comparison being further controlled by the verification of the PIN code or concomitant with the verification of the PIN code.;
2. The system of claim 1, wherein the smart card PIN verification device is configured to be able to establish contact or contactless communication with the smart card.
3. System according to claim 2, in which the device for verifying the PIN code of the chip card is: • Either a payment terminal, • Or an ad hoc reader comprising: i. a power source for the smart card, ii. a keypad for entering the PIN code, iii. a display device, and iv. optionally a communication device.
4. System according to any one of the preceding claims, in which the name and first name written on the nominative document are written thereon: • Either in clear text, • Or in coded form, • Or in clear text and in coded form; the device for automatically reading the nominative document comprising, where appropriate, decoding software, configured to decode the name and first name coded in the nominative document.
5. System according to any one of the preceding claims, in which the smart card is a bank card.
6. System according to any one of the preceding claims, comprising a smartphone in which is integrated at least one of: • the device for automatic reading of the nominative document and • the device for automatic reading of the smart card.
7. System according to any one of the preceding claims, in which at least one of the nominative document and the smart card comprises an expiry date, the system being configured to: • carry out at least one of the comparisons among: i. Compare the current date and the expiry date of the nominative document, ii. Compare the current date and the expiry date of the smart card, iii. Compare the expiry date of the nominative document and the expiry date of the smart card, and • Emit a signal representative of the result of the comparison.
8. A system according to any preceding claim, in in which the personal data, relating to the name and first name, recorded in the automatic reading device of the nominative document or in the automatic reading device of the smart card are erased at the end of the comparison step or after a predetermined time.