Method and associated equipment for authorizing or prohibiting an individual's access to a sensitive, secure site such as a construction site

Abstract

The invention relates to a method for authorizing or denying an individual access to a secure sensitive site, such as a construction site, comprising digitizing an official identity document belonging to the individual to extract at least their surname, first name, and photograph; verifying by an operator that the received surname and first name are present in a database of already accredited persons; allowing the individual to enter an accreditation airlock if the surname and first name are in the database; taking a photograph of the individual's face using first means of capturing images in the accreditation airlock; comparing this photograph with the digitized photograph of the official identity document; allowing the individual to enter an access airlock if the photographs match; taking a photograph of the individual's face using second means of capturing images in the access airlock; and comparing this photograph with the one acquired by the first means of capturing images.and the opening of an exit door from the access airlock to allow the individual physical access to the secure sensitive site if the photos match. Figure for the summary: Fig. 5,

Description

Title of the invention: Method and associated equipment for authorizing or prohibiting an individual's access to a secure sensitive site such as a construction site Technical field of the invention

[0001] The present invention relates to a method and equipment for authorizing or prohibiting access of an individual (employee, subcontractor, visitor) to a secure sensitive site.

[0002] The invention finds a particularly relevant application in access to sensitive construction sites and sites into which only authorized persons should be able to enter, particularly for reasons of safety of persons and equipment (damage and theft in particular). Previous technique

[0003] The invention falls within the field of access for people to secure sensitive sites, for example construction sites, but more broadly to sites for which identity control at the entrance is necessary.

[0004] There are currently many devices and systems for accessing secure sites.

[0005] A first type concerns "pedestrian" airlocks, which are designed as airlocks that can integrate badge-based access control solutions. This type of equipment is not standalone and requires prior access programming. Its primary purpose is to control uniqueness and count the number of people entering and exiting. They generally include a mechanical system (a more or less complex gate) that prohibits / authorizes the physical passage of the person wishing to access the secure sensitive site (office, administrative building, military or industrial site, etc.).

[0006] Other systems use facial recognition, such as airport boarding, but without prior enrollment. The purpose of this equipment is to verify the validity of identity documents and their correspondence with the bearer. There is no upstream authorization / accreditation process.

[0007] In the specific context of construction sites, it is common to use a turnstile-type gate of the "chopper" type (a set of solid bars grouped together forming a vertically rotating "comb"). This type of security device gives rise to various drawbacks, such as insufficient or poorly executed verification of identity documents by a security guard. There is a lack of rigor in the system (two people passing at a time, lending a badge to someone who looks like them or to a family member, loss of a badge), which leads to an approximate headcount of personnel, of risks of potentially dangerous unexpected intrusion or sources of theft, and an agent is required at all times.

[0008] Prior art solutions are therefore not entirely satisfactory, especially since the issue of securing people and equipment is increasingly important and complex to manage, particularly to prevent industrial espionage (unauthorized persons gaining access to the site to obtain sensitive information on behalf of third parties), accidents (people being in a potentially dangerous location), or damage to and theft of equipment on the site, which can lead to significant financial losses. Presentation of the invention

[0009] The present invention aims to remedy these drawbacks with a totally innovative approach, in particular by remotely dematerializing accreditation or pre-accreditation (no local presence of an agent at an access station).

[0010] To this end, according to a first aspect, the present invention relates to a method for authorizing or prohibiting an individual's access to a secure sensitive site, such as a construction site, comprising the following steps: a) digitization of an official identity document belonging to the individual wishing to access the secure sensitive site using digital acquisition means to extract at least their surname, first name and identity photograph, b) transfer, using digital means of transmission, at least of the individual's first and last name to a remote computer terminal on which a database of already accredited persons is stored, c) automatic verification by the computer terminal that the name and surname received are present in the database of already accredited persons d) entry of the individual into a freely accessible accreditation airlock of the secure sensitive site, said accreditation airlock being devoid of physical access to said secure sensitive site, (e) if the result of the accreditation verification in the computer terminal's database is positive, the individual is asked to position their face in front of the first camera equipment integrated into the accreditation airlock so that it can acquire at least one photograph of said face and, if the result of the accreditation verification in the computer terminal's database is negative, the access authorization process is temporarily interrupted and an invitation is sent to the individual to contact an operator at a supervisory station using the communication equipment integrated into the accreditation airlock for assistance, f) if, during step e), the result of the accreditation verification in the computer terminal database is positive, the photo acquired by the first means of taking pictures of the accreditation gate is compared, using a biometric facial recognition reader integrated into said accreditation gate, to the identity photo extracted during step b), (g) if the photograph extracted from the identity document in step (b) matches the facial photograph acquired in step (e), said facial photograph is recorded locally and transmitted to at least one access airlock with an entry door and an exit door opening onto the secure sensitive site, and the individual is asked to present themselves at said entry door of the access airlock, the access authorization process being permanently interrupted otherwise and the individual is then informed, (h) opening of the entry door of the access airlock and entry of the individual into it, the exit door being initially closed preventing the individual from physically accessing the secure sensitive site, (i) closing the entrance door and inviting the individual to present their face to secondary camera equipment integrated into the access vestibule in order to acquire a photograph of said face, and j) if the face photo acquired in step i) corresponds to the face photo acquired in step e), the exit door of the access airlock goes into a second open state to allow the individual to physically access the secure sensitive site, then goes back into its first closed state once the individual is in the secure sensitive site, the access authorization process being permanently interrupted otherwise and the individual is then informed.

[0011] The invention is implemented according to the embodiments and variants set out below, which are to be considered individually or according to any technically operative combination.

[0012] Advantageously, in step a), the digitization of the official identity document belonging to the individual is carried out on a personal digital device of the individual chosen from a mobile phone, a tablet or a computer and, in step c) and before step e), a QR code is automatically sent to said device by the computer terminal if the result of the accreditation check in the database of the computer terminal is positive, said QR code attesting that the individual is indeed accredited.

[0013] In this particular case, during step c), if the result of the verification that the received first and last name are present in the database of already accredited persons is negative, the individual is asked by the operator to manually enter their first and last name on their personal digital device, and the operator consults a manager of the secure sensitive site to determine whether the individual should be accredited in order to proceed step d) and subsequent steps, or to refuse this accreditation to the individual and permanently interrupt the access authorization process otherwise and then inform said individual.

[0014] According to an alternative, step a) of digitizing the official identity document belonging to the individual to extract at least his name, first name and identity photo is carried out using digital acquisition means directly integrated into the accreditation airlock after the said individual has entered the latter.

[0015] In this particular case, during step e), if the result of the verification that the name and surname received are present in the database of already accredited persons is negative, the individual is invited by the operator to manually enter his name and surname using a human / machine interface integrated into the accreditation airlock, in particular of the keyboard and / or touch screen type, and the operator asks a manager of the secure sensitive site whether the individual should be accredited in order to continue step f) and the following steps, or to refuse this accreditation to the individual and definitively interrupt the access authorization process in the opposite case and then inform said individual.

[0016] More specifically, during step e), if the result of the accreditation verification in the computer terminal database is negative, the individual is then asked to orally communicate their first and last name to the supervisory station operator using the accreditation airlock communication means, and the operator asks a manager of the secure sensitive site whether the individual should be accredited in order to continue step f) and the following steps, or to refuse this accreditation to the individual and permanently interrupt the access authorization process in the opposite case and then inform said individual.

[0017] Advantageously, if the name and / or first name extracted from the official identity document in step a) does not correspond to the name and / or first name given to the operator in step e), but said individual is accredited by the site manager, said operator modifies the database and corrects the incorrect name and / or first name on his terminal in order to proceed to step f) and the following steps.

[0018] Preferably, the biometric data extracted from step b) are transmitted to the computer terminal in an encrypted and / or anonymized manner.

[0019] In particular, the portrait photo of the scanned identity document is temporarily stored in the biometric reader of the access airlock and transformed into a digital template before being erased.

[0020] Similarly, during step e), the photograph of the individual's face acquired by the shooting means is recorded locally for comparison with the photograph of the official identity document during step f), and then deleted after comparison.

[0021] In particular, the photograph of the individual's face acquired by the first means of taking pictures is temporarily stored in the biometric reader of the accreditation gate and transformed into the form of a digital template before being erased (only the digital template is retained).

[0022] Thus, no photograph of the individual's face is recorded outside of the initial comparison process. The photograph of the face acquired by the first means of capturing images in the accreditation airlock is recorded on a temporary file and then systematically destroyed at the end of the process, whether accreditation is granted or not.

[0023] Similarly, during step i), the photograph of the individual's face acquired by second means of shooting is temporarily stored in the biometric reader of the access airlock and transformed into the form of a digital template before being erased.

[0024] Thus, if accreditation is accepted, the digital template recorded in the biometric reader of the accreditation airlock is transmitted to the biometric reader of the access airlock and takes over to serve as a reference for comparison. The photograph acquired by the second means of capturing images in the access airlock is temporarily recorded and transformed into a digital template in order to be compared to the digital template of the photograph acquired by the first means of capturing images in the accreditation airlock, and then destroyed after comparison, whether or not physical access to the secure sensitive site is granted.

[0025] According to a particular embodiment of the present invention, step j) and subsequent steps are triggered only if the presence of a single person is detected inside the access airlock by video analysis during an intermediate step ij) of uniqueness of presence verification.

[0026] In addition, step i) is triggered only if the presence of a single person is detected inside the access airlock during the intermediate verification step ij).

[0027] According to a preferred embodiment of the present invention, during step j), a passage counting step is triggered to count the number of individuals who have physically accessed the secure sensitive site after the exit door has passed from its first open state to its second closed state.

[0028] According to a particularly interesting aspect of the present invention, during step j), if the face photo acquired in step i) does not correspond to the face photo acquired in step e), access to the secure sensitive site is temporarily refused, the entrance door of the access airlock is reopened and an invitation is sent to the individual to contact the supervisory station operator for assistance using communication means integrated into the access airlock.

[0029] According to another feature of the invention, when an individual leaves the secure sensitive site by entering the access airlock through the exit door, he is invited to take another photo of his face during an additional step k), then said photo is compared with the database of face photos of people who have accessed the secure sensitive site in a step 1) and the entrance door of the access airlock opens if the two photos match, otherwise the individual is asked to contact the supervisory station operator for assistance using the communication means integrated into the access airlock.

[0030] The present invention also relates to equipment for implementing the method of authorizing or prohibiting an individual's access to a secure sensitive site as described above, said equipment comprising for this purpose at least: - a remote computer terminal on which a database of accredited individuals is stored, - an accreditation airlock without physical access to the secure sensitive site and including, in particular, means for digitally acquiring an individual's identity document to extract at least their surname, first name and photo, means of communication with the remote computer terminal, initial means for taking a photograph of the individual's face, and a biometric facial recognition reader to compare the image acquired by the photography means with the image extracted by the acquisition means, - an access airlock including an entrance door, secondary means of taking a photograph of the individual's face and an exit door allowing or preventing at least physical access to said secure sensitive site, and incidentally the exit from said secure sensitive site.

[0031] Advantageously, the accreditation airlock also includes a human / machine interface, in particular of the keyboard and / or touch screen type, for the manual entry of personal identification data relating to the individual including at least his or her first and last name.

[0032] Preferably, the communication means of the accreditation airlock include a sound and / or visual diffusion device of the loudspeaker type and / or screen for the exchange of information with the operator of the supervisory station.

[0033] According to a complementary aspect, the access airlock also includes video analysis means to detect in real time the presence or not of more than one individual in said access airlock.

[0034] Similarly, the access airlock also includes means for real-time counting of the number of individuals who have been given physical access to the secure sensitive site within a predetermined period of time, for example, one day.

[0035] According to a particular feature of the present invention, the equipment comprises a single accreditation airlock connected to several access airlocks to the secure sensitive site.

[0036] Preferably, the accreditation and access airlocks are connected to each other and remotely controlled by the operator of the supervisory station.

[0037] According to an alternative, the accreditation airlock and the physical access airlock to the secure sensitive site are combined into a single airlock. Brief description of the figures

[0038] Other advantages, purposes and features of the present invention will become apparent from the following description, given for explanatory purposes and in no way as a limitation, with reference to the accompanying drawings, in which:

[0039] [Fig. 1] [Fig. 1] is a front perspective view of equipment for authorizing or prohibiting an individual's access to a secure sensitive site such as a construction site,

[0040] [Fig.2] [Fig.2] is a perspective view of the equipment during its use,

[0041] [Fig.3] [Fig.3] is a front view of an accreditation airlock for the equipment of Figures 1 and 2,

[0042] [Fig.4] [Fig.4] is a rear perspective view of a physical access airlock of Figures 1 and 2 with a closed exit door,

[0043] [Fig.5] [Fig.5] is a diagram illustrating the different accreditation steps for an individual wishing to access the secure sensitive site,

[0044] [Fig.6] [Fig.6] is a view of a diagram illustrating the different stages of using the access airlock to enter the secure sensitive site;

[0045] [Fig.7] [Fig.7] is a variant of [Fig.5] for accrediting and granting access to the secure sensitive site to a visitor,

[0046] [Fig.8] [Fig.8] is a variant of [Fig.5] for remote pre-accreditation, and

[0047] [Fig.9] [Fig.9] is a view of a diagram illustrating the different steps of using the physical access airlock to leave the secure sensitive site. Description of the implementation methods

[0048] Figures 1 to 4 represent a physical device 1 allowing to authorise or prohibit the physical access of an individual 5 to a secure sensitive site (not shown), for example a construction / renovation site.

[0049] This description is given by way of non-limiting attribution, each feature of one embodiment being able to be combined with any other feature of any other embodiment.

[0050] It is noted from the outset that the figures are not necessarily to scale, without this affecting their understanding.

[0051] The equipment 1 according to the present invention comprises an accreditation airlock 10 typically in the form of a cabin whose internal dimensions are designed to accommodate an individual 5, and a double-closing (entry / exit) physical access airlock 20 also in the form of a cabin, for example in the format of a telephone booth, also adapted to accommodate said individual 5 after his passage through the accreditation airlock 10.

[0052] These two airlocks 10 and 20 are, for example, adjacent or very close together. A single accreditation airlock 10 can be associated with several access airlocks 20 to improve the flow of people entering and exiting. All these airlocks 10 and 20 are connected by means of communication (wired or wireless, such as Wi-Fi, Bluetooth, or 4G / 5G / 6G) and maintenance to a remote security station 30 for secure (encrypted) data exchange. The security station is, for example, designed to accommodate at least one terminal 32 operated by an operator and equipped for this purpose with a database of accredited persons who can access the secure sensitive site; this terminal can also be completely relocated outside the security station 30 if necessary.

[0053] The accreditation airlock 10 has a front face 11, for example open, like a security booth, or closed by a door of any type, for example a single-leaf door. This accreditation airlock 10 has a digital human-machine interface 13 typically comprising: - a display and exchange screen 14 (for example touchscreen), - a biometric sensor 15 equipped with a scanning device, a keyboard and data transfer means, - initial digital image capture means 16 such as a camera, and - a central unit (not shown) equipped on the one hand with a digital storage and execution medium for software and on the other hand with means of communication with the remote supervision station 30.

[0054] A communication device 17 with the supervisory station 30 is also provided near the human-machine interface 13, materialized, for example, in this case by a call button and a microphone / speaker assembly (a solution for visually and / or hearing impaired persons is also possible) and remote communication means. The top of the accreditation airlock also includes a camera 18 overlooking the front face 11, which can be used for counting individuals.

[0055] The access vestibule 20 has a front face 21a closed by an entrance door 22 (of the sliding, curtain, accordion or preferably double pivoting type), and a rear face 21b closed by a similar exit door 23 or identical to the entrance gate 22. The entrance gate 22 and exit gate 23 form mechanical means enabling or preventing (physical obstacle) individual 5 from accessing said secure sensitive site, as well as the physical exit from said site when he wishes to leave it.

[0056] The access airlock 20 also includes means 25 for accreditation confirmation, typically digital image capture means (camera or video camera) and a biometric reader optionally accompanied by a control screen (not shown), the usefulness of which will be explained later in relation to the various operating diagrams of the equipment 1.

[0057] The front faces 21a and rear faces 21b of the access vestibule 20 are also respectively equipped with an external signage 26 indicating an authorization or a prohibition to enter into contact with the open or closed position of the entrance door 22, a device 27 for oral exchange with the supervision station 30 comprising for example a call button 27a and a microphone / speaker assembly 27b (a solution for visually impaired and / or hearing impaired persons is also possible), and a counting camera 28 overlooking respectively the entrance and the exit.

[0058] It should be noted from the outset that the accreditation airlock 10 cannot under any circumstances allow physical access to the secure sensitive site (except when it is integrated into the access airlock 20), this access can only be made, when the accreditation and identification procedure allows it, through the access airlock 20, via the exit door 23 which then acts as the last obstacle to entry into said site.

[0059] Accreditation and access procedure to the secure sensitive site;

[0060] Figures 5 to 8 illustrate an operating mode of the equipment 1 according to the present invention so that an individual 5 can, during a first phase, obtain accreditation and then, during a second phase, physically access the secure sensitive site, several situations / scenarios being possible depending on the type of individual (employee, temporary worker, visitor, delivery person, fraudster / malicious person, etc.) who wishes to access the secure sensitive site and the type of accreditation process corresponding to it.

[0061] First of all, it is assumed that the entrance door 22 of the access airlock 20 is normally closed so that if the individual 5 presents himself in front of it without having previously carried out the accreditation procedure described below, he will not be able to enter said access airlock 20 and will therefore not have physical access to the secure sensitive site.

[0062] For this purpose, the sign 26 placed on the front face 21a of the access airlock 20 displays, for example, a red cross indicating to the individual 5 that he cannot enter and that the entrance door 22 will remain closed. He then normally understands that he must first go to the accreditation airlock 10 adjoining the access airlock 20.

[0063] In the event that individual 5 does not immediately understand what he has to do, especially if it is his first time on the secure sensitive site, he can then press the call button 27a of the communication means 27 and start a dialogue with an operator at the supervision station 30 using the microphone / speaker assembly 27b in order to be advised on the procedure to follow.

[0064] Once this issue is settled, individual 5 enters the accreditation airlock 10, which in this case has no entrance door (it is a simple guardhouse ensuring the protection of the equipment and the individual and ensuring the latter's security from the outside).

[0065] The individual 5 is then in front of the human-machine interface 13 and is invited, for example by a message displayed on the screen 14 and / or a speech synthesis message broadcast in the exchange and communication device 17, to scan his official identity document (national identity card, passport or residence permit), using the biometric sensor 15.

[0066] In the event that individual 5 does not immediately understand what he has to do, especially if it is his first time on the secure sensitive site, he can then press the call button of the means of communication 17 and start a dialogue with an operator of the supervision station 30 using the microphone / speaker set in order to be advised on the procedure to follow.

[0067] The digital interface 13 of the accreditation gate 10 then extracts the individual's surname, first name, and portrait photograph displayed on their official identity document. The portrait photograph from the scanned identity document is temporarily stored in the biometric reader 15 before being destroyed after the accreditation phase. In particular, the portrait photograph can be encrypted during its storage and represented by a certificate allowing for its unique and tamper-proof authentication, for example, through the use of blockchain.

[0068] Initially, the name and surname of individual 5 are transmitted to the computer terminal 32 which automatically queries its internal database of already accredited persons.

[0069] At least two situations are possible:

[0070] - If the first and last name correspond to a person in the database of computer terminal 32, individual 5 is then invited, for example by a pre-recorded speech synthesis message, to take a picture of his face using the first means of taking pictures 16 of the accreditation airlock 10, according to the procedure indicated later. - If the first and last name do not match a person in the database of computer terminal 32, the accreditation process is temporarily interrupted and individual 5 is put in contact with an operator at the supervisory station 30. using the communication means 17 in order to be advised on the procedure to follow. Individual 5 is then asked by the operator of the supervisory station 30 to manually enter their first and last name using the keyboard 15 of the human / machine interface 13 integrated into the accreditation airlock 10. Alternatively, individual 5 may be asked to orally communicate their first and last name to the operator of the supervisory station 30 using the communication means 17 of the accreditation airlock 10, and the operator enters this information into the computer terminal 32 for comparison with the database.

[0071] If the modified name and / or first name(s) do not correspond to any person in the database of the computer terminal 32, the access accreditation process ends definitively, the individual 5 is asked to leave the accreditation airlock 10 and the portrait photo extracted from the digitized identity document is destroyed.

[0072] If the modified name and / or first name(s) ultimately correspond(s) to an accredited person (for example the name and / or first name had been misspelled in the database of the computer terminal 32), the operator of the supervisory station 30 then modifies the database and corrects the incorrect name and / or first name(s) so that the accreditation procedure can continue.

[0073] Individual 5 is then invited, for example by a pre-recorded speech synthesis message, to take a photograph of their face using the first imaging device 16 of the accreditation gate 10. In reality, the first imaging device 16 takes several consecutive facial photographs very quickly as a security measure. The facial photographs are temporarily recorded in the biometric reader 15 of the accreditation gate 10, and a digital template of said photographs is generated and stored in said biometric reader 15. In particular, these photographs can be encrypted during their recording and represented by certificates allowing them to be authenticated in a unique and tamper-proof manner, for example by using blockchain.

[0074] The face photo acquired by the first shooting means 16 of the accreditation airlock 10 is then compared by the biometric sensor 15 to the portrait photo extracted from the identity document scanned during the previous step.

[0075] At least two situations are possible:

[0076] - If, after comparison by the biometric sensor 15, the acquired face photo The first means of image capture 16 corresponds to the portrait photograph extracted from the digitized identity document. The digital template of the facial photograph(s) and authorization to access the secure sensitive site are transmitted to the access airlock 20 (closed by its entrance door 22). Individual 5 is invited to go there, and the portrait photograph from the digitized identity document, as well as the facial photographs acquired by the first means of image capture 16 of the accreditation airlock 10, are permanently destroyed. The digital template of the facial photographs is, for its part, it is kept for the entire "lifespan" assigned to it in the database (information which is generally updated daily, most often at night).

[0077] - If, after comparison by the biometric sensor 15, the acquired face photo If the image captured by the initial imaging device 16 does not correspond to the portrait photograph extracted from the scanned identity document, for example, if the acquired photograph is of poor quality (blurry), or if someone other than the person in the portrait photograph extracted from the scanned identity document presents themselves at the initial imaging device 16 with the aim, for example, of deceiving the system in order to fraudulently access the secure sensitive site, individual 5 is asked to contact the operator at the monitoring station 30 using the call button and the microphone / speaker unit 17 provided for this purpose in order to obtain more information or assistance, for example, to be accompanied during the photographing of their face. A new photograph of individual 5's face can then be acquired by the initial imaging device 16 in order to be compared, using the same process, to the photograph extracted from the scanned identity document.

[0078] If there is still no match between the facial photograph acquired by the initial camera 16 in the accreditation airlock and the portrait photograph extracted from the scanned identity document, the accreditation procedure is definitively interrupted, the individual is asked to leave the accreditation airlock 10, and the portrait photograph from the scanned identity document, as well as the facial photographs acquired by the initial camera 16, are permanently destroyed. The digital template of the facial photographs is retained for its entire "lifespan" in the database (information that is generally updated daily, most often overnight).

[0079] If the newly acquired facial photograph obtained by the initial imaging means 16 matches the photograph extracted from the scanned identity document, the digital template of said new facial photograph and authorization to access the secure sensitive site are transmitted to the access control point 20 (closed by its entrance door 22). Individual 5 is invited to enter the access control point, and the portrait photograph from the scanned identity document, as well as the new facial photograph obtained by the initial imaging means 16 of the accreditation control point 10, are permanently destroyed. The digital template of this new facial photograph is retained for its entire "lifespan" as assigned to it in the database (information which is generally updated daily, most often overnight).

[0080] In summary, once this second step of the accreditation phase has been completed, individual 5 exits the accreditation airlock 10 and is either not authorized to enter the secure sensitive site, or has been invited to proceed to the adjacent access airlock 20 the accreditation airlock 10 so that the access phase in accordance with [Fig.6] can start.

[0081] Either the door 22 has already been opened remotely (for example by the operator of the supervision station 30), or a sign 26 placed on the front face 21 of the access airlock indicates to the individual 5 to press a button provided for this purpose (green arrow) in order to open the entrance door 22. In case of a problem, the individual 5 can contact the operator of the supervision station 30 using the call button 27a and the microphone / speaker assembly 27b provided for this purpose on the front face 21 of the access airlock 20.

[0082] When the entrance door 22 of the access vestibule 20 opens, a counting process is triggered to verify that only one person enters the vestibule. For this purpose, the camera 28 positioned above the entrance door 22 performs a count, for example, by automatic silhouette recognition (using artificial intelligence, among other methods) or another method (thermal sensor, infrared motion sensor, etc.). This count can also be performed by another camera located inside the access vestibule 20 (not shown) and mounted, for example, on its ceiling.

[0083] After a certain delay, the entrance door 22 closes after its opening only if ultimately no person has entered, or if only one person has been detected in the access vestibule 20.

[0084] If more than one person is detected, the entrance door 22 remains open and a message (for example, a pre-recorded oral message or one from the operator at the supervisory station 30) of the type "please enter one person at a time into the access airlock" is broadcast through the loudspeaker 27 to inform the individual 5 that the exit door 23 will remain closed and that he must present himself alone.

[0085] Alternatively, this step of verifying the uniqueness of the person by the overhead camera 28 can be carried out before the opening of the entrance door 22, which will therefore only open if a single person is detected in front of said access vestibule 20.

[0086] Once the entrance door 22 has been closed with only one person present in the access airlock 20, the next step of "accreditation confirmation" and physical access to the secure sensitive site can be carried out.

[0087] For this purpose, individual 5 is again invited, for example by speech synthesis, to take a second photo of his face using the second means of taking pictures integrated into the accreditation confirmation means 25 of the access gate 20. This second photo of face is temporarily recorded in the biometric reader 15 of the accreditation gate 10 and a digital template of said photo is generated and stored in said biometric reader 15. In particular, this photo can be encrypted during its recording and represented by a certificate allowing it to be authenticated in a unique and unforgeable way, for example by the use of the blockchain.

[0088] The digital template of the face photo acquired by the second means of shooting in the access airlock 20 is compared with the digital template of the photo acquired previously in the accreditation airlock 10 by the first means of shooting 16.

[0089] If the two digital templates of the two face photos match, the exit door 23 opens and individual 5 can then enter the secure sensitive site. A person counter, the result of which will be used in the exit procedure described later, is then activated, for example, using the camera 28 overlooking the rear face 21b of the access airlock 20. The face photos acquired by the first imaging means 16 and by the second imaging means 25 are permanently destroyed. The digital template of the face photo acquired by the second imaging means of the access airlock 20 is, however, retained for the entire "lifespan" allocated to it in the database (information which is generally updated daily, most often overnight).

[0090] If there is no confirmation of accreditation because the two templates do not match, for example if another individual other than the one previously authorized in the accreditation phase tries to enter the secure sensitive site (NB: this may be, for example, a malicious person who has noticed that an individual leaving the accreditation airlock 10 has the possibility of going to the access airlock 20 and presents himself in his place in the latter without his knowledge, or a fraud "organized" by the authorized individual who wants to deliberately let in an unaccredited person), then the accreditation / access confirmation procedure is temporarily interrupted and the exit door 23 of the access airlock 20 remains closed.Individual 5 is informed, for example, by a voice synthesis message, that he can contact the supervision station 30 using a call button and a microphone / speaker set provided for this purpose in order to obtain more information or assistance, for example to be accompanied during the taking of his face for a new comparison and verification.

[0091] A new photo of the individual's face can then be acquired by the second means of taking pictures of the access airlock and recorded in an anonymized manner in the biometric reader 25 of the access airlock 20 (as described previously) and its digital template is compared to that of the face photo acquired previously in the accreditation airlock 10.

[0092] If there is still no match, the accreditation confirmation procedure is permanently interrupted and the individual is asked, for example by a voice synthesized message, to leave the access airlock 20, with the exit door 23 remaining closed. The facial photographs acquired by the first imaging means 16 and by the second imaging means 25 are permanently deleted (the digital templates are also deleted).

[0093] If the two digital templates of the two face photos match, the exit door 23 opens and individual 5 can then enter the secure sensitive site. A person counter, the result of which will be used in the exit procedure described later, is then activated, for example, using the camera 28 overlooking the rear face 21b of the access airlock 20. The face photos acquired by the first imaging means 16 and by the second imaging means 25 are permanently deleted. The digital template of this new face photo acquired by the second imaging means of the access airlock 20 is, however, retained for the entire "lifespan" allocated to it in the database (information which is generally updated daily, most often overnight).

[0094] Accreditation of an individual who has never been accredited before;

[0095] Figure 7 illustrates a different case used for example to give access to an individual 5 who is not normally authorized to enter the secure sensitive site (for example a delivery person, a subcontractor, a visitor, etc.)

[0096] Initially, the visitor wishing to access the secure sensitive site enters the accreditation airlock 10 and is invited directly to contact an operator at the supervision station 30 using the appropriate communication means 17. The visitor enters (or gives orally) their first and last name to the operator who then questions a manager of the secure sensitive site (head of security for example) to find out if the person can be authorized to enter, for example if they are registered on a list of visitors expected by an employee present at the secure sensitive site.

[0097] If the visitor is not accredited by the site manager for various reasons (individual blacklisted by the security manager, individual unknown to the person he is supposed to see, appointment which was not scheduled for that date, etc.), the access accreditation procedure is permanently interrupted and the visitor is asked to leave the accreditation airlock 10.

[0098] If the person in charge of the secure sensitive site gives their authorization, the visitor is asked to scan their official identity document according to the procedure already described above ([Fig.5]) until it is concluded that they can go to the access airlock 20 or that they must leave the accreditation airlock 10.

[0099] Assuming that the visitor has successfully passed the accreditation phase, the access phase is triggered in the same way as before ([Fig.6]) and either he can enter the secure sensitive site, or he must leave the access airlock 20.

[0100] Remote pre-accreditation procedure.

[0101] According to an alternative embodiment of the accreditation process illustrated in [Fig. 8], individual 5 may have remotely "registered" prior to the facial photograph being taken in the accreditation booth 10. This solution may allow For example, a delivery driver or temporary worker can anticipate their arrival at the secure sensitive site to save time, without needing to call on an on-site security officer.

[0102] To this end, an "external / remote" procedure is provided. According to the upper part of the diagram in [Fig. 8], it consists of performing pre-accreditation using, for example, a digital device located outside the accreditation area, such as a smartphone, personal computer, or tablet.

[0103] To this end, individual 5 connects, for example, to a pre-accreditation application web platform which guides them through a specific procedure. Individual 5 is then asked to scan their official identity document with their digital device. Their first and last name are first extracted from this scan and then securely sent to terminal 32, which queries its internal database of already accredited individuals.

[0104] At least two situations are conceivable: - If the first and last name match a person in the database of computer terminal 32, the portrait photograph from the identity document is then extracted from the scan and stored anonymously for the next step. A unique pre-accreditation code, for example a QR code, is then generated and sent to the individual 5 on their digital device. - If the first and last name do not match any person in the database of computer terminal 32, the pre-accreditation process is temporarily interrupted, and individual 5 can then contact support, for example, to be assisted in restarting the pre-accreditation phase via the web platform. This new information is then compared again with the data in the database of computer terminal 32 in the same way as before.

[0105] If this new information does not match the data of an already accredited individual, the pre-accreditation procedure stops permanently. Individual 5 can then, if necessary, physically go to the accreditation checkpoint 10 and complete the "in-person" procedure described above.

[0106] If this new information matches the data of an already accredited individual, the portrait photograph of the identity document is then extracted from the scan for the next step and stored anonymously as explained previously. A unique pre-accreditation code, for example a QR code, is then generated and sent to the individual 5 on their digital device.

[0107] In accordance with the lower part of the diagram in [Fig. 8], the pre-accredited individual then presents himself in the accreditation vestibule 10. He then presents his pre-accreditation QR code to the means provided for this purpose in said vestibule (the digital imaging device 16 can, for example, be configured for this purpose). Once the Once the QR code is validated, individual 5 is asked to take a photo of their face using the initial camera capture device 16. As explained previously, this photo is compared with the scanned image on their ID card during the pre-accreditation phase. If the information matches, individual 5 is asked to proceed to the access control room 20 to complete the subsequent access procedure to the secure sensitive site, as described earlier. If the information does not match, access is temporarily denied, and individual 5 can then contact the monitoring station using the call button and the microphone / speaker unit provided for this purpose to obtain further information or assistance, such as being accompanied during the photo capture process.

[0108] Procedure for exiting the secure sensitive site:

[0109] The procedure for exiting the secure sensitive site, illustrated by the diagram in [Fig. 9], is carried out as follows: An individual 5 (employee, visitor) who has been authorized to enter the secure sensitive site presents themselves at the exit door 23 of the access airlock 20, which is normally closed. They can, for example, press an external button to open it, or it may open automatically.

[0110] The camera 28 positioned above the exit door 23 counts the number of people present in front of the exit, according to the method described above (silhouette recognition, thermal imaging, ultrasound, or other known method). If more than one person is detected, the exit door 23 remains open (while the entrance door 22 remains closed), and a voice message such as "Please enter one person at a time in the access vestibule" and / or a visual sign 26 (red cross) indicates to individuals that the entrance door 22 will remain closed.

[0111] Individual 5 then enters the access airlock 20. Once inside, the exit door 23 closes behind individual 5 while the entrance door 22 remains closed.

[0112] A unique identification procedure is then carried out in which individual 5 is asked to take a new photo of his face using the camera of the accreditation confirmation means 25 of the access airlock 20. This face photo is stored temporarily and anonymously in the form of a digital template in the biometric reader of the access airlock 20, then this template is compared to the digital template of the face photo acquired previously during the access phase to verify if individual 5 corresponds to a person who previously entered a sensitive secure site (a priori on the same day).

[0113] The digital template created during the accreditation phase has a validity period that corresponds to the one entered in the database. For visitors / delivery personnel, the duration is set by default to one day, for example.

[0114] If, after comparison of the templates by the biometric reader of the access airlock 20, the photo corresponds to that of an individual 5 who previously entered the site Once the sensitive area is secured, the entrance door 22 opens, and individual 5 can exit the access airlock 20. A new people count is then performed by the camera 28 on the front face 21a of the access airlock 20 to determine the number of individuals who have exited compared to the number who have entered. This allows, in particular, for knowing how many people are still on the sensitive secured site at any given time (a security measure, especially in the event of an accident on the site or an emergency evacuation). The facial image acquired by the secondary camera 25 of the access airlock 20 during the exit phase is then destroyed. The digital template is destroyed after its assigned lifespan in the database (information that can be updated daily).

[0115] If the photo acquired by the second means of taking pictures of the accreditation confirmation means 25 does not correspond to that of an individual 5 who previously entered the secure sensitive site, the exit door 23 opens (the entry door 22 obviously remains), the unique identification procedure is temporarily interrupted and the individual 5 is invited to contact the assistance of the supervision station 30 for assistance, in particular to help him to correctly take the photo of his face (for example if he is badly positioned, if the photo was blurry, if the individual is wearing a hat / helmet, if the transmitted photo was not transmitted correctly or could not be compared to the database of accredited persons of the supervision station 30, etc.).

[0116] If the new photograph acquired by the second imaging means 26 corresponds to that of an individual 5 who previously entered the secure sensitive site, the entrance door 22 opens and individual 5 can exit the access airlock 20. A new people count is then performed by the camera 28 on the front face 21a of the access airlock 20 to determine the number of individuals who have exited compared to the number of individuals who have entered. The new facial photograph acquired by the second imaging means 25 of the access airlock 20 during the exit phase is then destroyed, as is its digital template.

[0117] If the new photo still does not match, individual 5 is again asked to contact the operator at the supervisory station 30 to resolve the situation so that he can explain his presence on the secure sensitive site and leave (he may have entered fraudulently in various ways, for example by climbing a barrier or fence).

[0118] Thus, in addition to counting people who have entered / exited / still present on site, this unique identification phase carried out at the exit makes it possible to only allow individuals who were able to enter legally to leave the secure sensitive site (except in the case of fraudsters who would have entered illegally and who would like to use the access airlock to leave legally, which would therefore be impossible according to the procedure put in place), while having very precise knowledge of the name and surname of these people.

[0119] This verification procedure prevents, for example, the number of people leaving from being different from the number of people who entered on a given day.

[0120] The uses can extend to all secure access points to sites, factories, and businesses. This applies to both temporary projects such as construction sites or events, and permanent, long-term projects such as those for companies or local authorities.

[0121] The initial objectives of the invention are: - Secure access to sites from the outside, - Verify staff authorization via a chain of real-time authorizations and queries, - Improve the ergonomics of passage for site personnel (adapting dimensions to allow the passage of tools), - Reduce fraud through identity theft and the transmission / loss of badges, - Control the uniqueness of passage using video detection. - Ensure accurate counting of entries / exits to guarantee maximum safety of site personnel

[0122] It must be clearly understood that the detailed description of the object of the Invention, given solely by way of illustration, does not in any way constitute a limitation, technical equivalents also being included in the scope of the present invention.

[0123] Thus, in addition to not requiring a security guard on site permanently to perform verification tasks, each airlock of the equipment of the present invention can be remotely manipulated by an operator for remote maintenance, remote manipulation of screens, opening / closing of doors, etc.

[0124] The equipment incorporates "connected" electronics for this purpose, allowing control by a remote monitoring center capable of providing the following real-time services: - User assistance via intercom - Remote access to the accreditation software, if necessary, for identity document verification - Real-time reporting and processing of the following technical malfunction alerts: * Functional / non-functional equipment * Position of metal doors / curtains * Active security defects * Operating status of video equipment - Remote controls * Opening of access * Equipment reset * Hands-on training with the accreditation software and assisted registration if needed * Fully secure opening * Modification of operating data (speed settings, factory reset) * history of passages

[0125] Each physical access airlock also includes a fire safety interconnection module, which allows automatic opening of the doors in the event of a fire alarm.

Claims

1. Demands A method for authorizing or denying an individual access to a secure sensitive site, such as a construction site, comprising the following steps: a) digitizing an official identity document belonging to the individual wishing to access the secure sensitive site using digital acquisition means to extract at least their surname, first name, and photograph; b) transferring, using digital transmission means, at least the individual's surname and first name to a remote computer terminal on which a database of already accredited persons is stored; c) automatic verification by the computer terminal that the received surname and first name are present in the database of already accredited persons; d) the individual's entry into a freely accessible accreditation vestibule of the secure sensitive site, said vestibule being devoid of physical access to said secure sensitive site.(e) if the result of the accreditation verification in the computer terminal's database is positive, the individual is asked to position their face in front of the first camera system integrated into the accreditation gate so that it can acquire at least one photograph of said face; and if the result of the accreditation verification in the computer terminal's database is negative, the access authorization process is temporarily interrupted and the individual is invited to contact an operator at a supervisory station using the communication means integrated into the accreditation gate for assistance; (f) if, during step (e), the result of the accreditation verification in the computer terminal's database is positive, the photograph acquired by the first camera system of the accreditation gate is compared,using a biometric facial recognition reader integrated into the accreditation gate, the identity photograph extracted during step b), g) if the photograph extracted from the identity document during step b) corresponds to the facial photograph acquired during step e), said facial photograph is recorded locally and transmitted to at least one, an access airlock closed by an entry door and an exit door opening onto the secure sensitive site, and the individual is asked to present themselves in front of said entry door of the access airlock, the access authorization process being permanently interrupted otherwise and the individual is then informed, h) opening of the entry door of the access airlock and entry of the individual into it, the exit door being in an initial closed state preventing the individual from physically accessing the secure sensitive site, (i) closing the entrance door and inviting the individual to present their face to secondary camera equipment integrated into the access vestibule in order to acquire a photograph of said face, and j) if the face photo acquired in step i) corresponds to the face photo acquired in step e), the exit door of the access airlock goes into a second open state to allow the individual to physically access the secure sensitive site, then goes back into its first closed state once the individual is in the secure sensitive site, the access authorization process being permanently interrupted otherwise and the individual is then informed.

2. A method according to claim 1, characterized in that, during step a), the digitization of the official identity document belonging to the individual is carried out on a personal digital device of the individual chosen from a mobile phone, a tablet or a computer and, during step c) and before step e), a QR code is automatically sent to said device by the computer terminal if the result of the accreditation verification in the database of the computer terminal is positive, said QR code attesting that the individual is indeed accredited.

3. The method according to claim 2, characterized in that, during step c), if the result of the verification that the received first and last name are present in the database of already accredited persons is negative, the individual is asked by the operator to manually enter their first and last name on their personal digital device, and the operator consults a manager of the secure sensitive site to determine whether the individual should be accredited in order to proceed to step d) and subsequent steps, or to refuse accreditation to the individual and permanently terminate the access authorization procedure otherwise then inform said individual.

4. Method according to claim 1, characterized in that step a) of digitizing the official identity document belonging to the individual to extract at least his name, first name and identity photo is carried out using digital acquisition means directly integrated into the accreditation airlock after said individual has entered the latter.

5. A method according to claim 4, characterized in that, during step e), if the result of the verification that the name and surname received are present in the database of already accredited persons is negative, the individual is invited by the operator to manually enter their name and surname using a human / machine interface integrated into the accreditation gate, in particular of the keyboard and / or touch screen type, and the operator consults a manager of the secure sensitive site to find out whether the individual should be accredited in order to continue step f) and the following steps, or to refuse this accreditation to the individual and permanently interrupt the access authorization process in the opposite case and then inform said individual.

6. A method according to claim 4, characterized in that, during step e), if the result of the accreditation verification in the computer terminal database is negative, the individual is then asked to orally communicate their first and last name to the supervisory station operator using the accreditation airlock communication means, and the operator asks a manager of the secure sensitive site whether the individual should be accredited in order to proceed to step f) and the following steps, or to refuse this accreditation to the individual and permanently interrupt the access authorization process in the opposite case and then inform said individual.

7. A method according to claim 5 or 6, characterized in that, if the name and / or first name extracted from the official identity document in step a) does not correspond to the name and / or first name given to the operator in step e), but said individual is accredited by the site manager, said operator modifies the database and corrects the incorrect name and / or first name on his terminal in order to proceed to step f) and the following steps.

8.

9.

10.

11.

12.

13.

14.

15. A method according to any one of the preceding claims, characterized in that the biometric data extracted at least during step b) are transmitted to the computer terminal in an encrypted and / or anonymized manner. Method according to claim 8, characterized in that the portrait photo of the digitized identity document is temporarily stored in the biometric reader of the access airlock and transformed into the form of a digital template before being erased. A method according to any one of the preceding claims, characterized in that, during step e), the photograph of the individual's face acquired by the photographic means is recorded locally for comparison with the photograph on the official identity document during step f), and then deleted after comparison. A method according to claim 10, characterized in that the photograph of the individual's face acquired by the first photographic means is stored locally in the biometric reader of the security checkpoint and transformed into a digital template before being erased. Method according to the preceding claim, characterized in that, during step i), the photo of the individual's face acquired by second means of shooting is temporarily stored in the biometric reader of the access airlock and transformed into the form of a digital template before being erased. A method according to any one of the preceding claims, characterized in that step j) and subsequent steps are triggered only if the presence of a single person is detected inside the access airlock by video analysis during an intermediate step ij) of uniqueness of presence verification. Method according to claim 13, characterized in that step i) is triggered only if the presence of a single person is detected inside the access airlock during the intermediate verification step ij). A method according to any one of the preceding claims, characterized in that, during step j), a passage counting step is triggered to count the number of individuals who have physically accessed the secure sensitive site after the exit door has passed from its first open state to its second closed state.

16. A method according to any one of the preceding claims, characterized in that, at step j), if the face photo acquired in step i) does not correspond to the face photo acquired in step e), access to the secure sensitive site is temporarily denied, the entrance door of the access airlock is reopened and an invitation is sent to the individual to contact the supervisory station operator for assistance using communication means integrated into the access airlock.

17. A method according to any one of the preceding claims, characterized in that, when an individual leaves the secure sensitive site by entering the access airlock through the exit door, he is asked to take another picture of his face during an additional step k), then said picture is compared with the database of face pictures of persons who have accessed the secure sensitive site in a step 1) and the entrance door of the access airlock opens if the two pictures match, otherwise the individual is asked to contact the operator of the supervisory station for assistance using the communication means integrated into the access airlock.

18. Equipment for implementing the process of authorizing or prohibiting an individual's access to a secure sensitive site according to any one of the preceding claims, said equipment comprising for this purpose at least: - a remote computer terminal on which a database of accredited individuals is stored, - an accreditation airlock without physical access to the secure sensitive site and comprising in particular means for digitally acquiring an identity document of the individual in order to extract at least the surname, first name and photograph, means of communication with the remote computer terminal, initial means for taking a photograph of the individual's face, and a biometric facial recognition reader for comparing the image acquired by the photographic means with the image extracted by the acquisition means, - an access airlock comprising in particular an entrance door,second means of capturing a photograph of the individual's face and an exit point allowing or preventing at least physical access to said secure sensitive site, and incidentally, exit from said secure sensitive site.

19. Equipment according to claim 18, characterized in that the accreditation airlock further comprises a human / machine interface, in particular of the keyboard and / or touch screen type, for the manual entry of personal identification data relating to the individual including at least his or her surname and first name.

20. Equipment according to any one of claims 18 to 19, characterized in that the communication means of the accreditation airlock include a sound and / or visual diffusion device of the loudspeaker and / or screen type for the exchange of information with the operator of the supervisory station.

21. Equipment according to any one of claims 18 to 20, characterized in that the access airlock also includes video analysis means to detect in real time the presence or not of more than one individual in said access airlock.

22. Equipment according to any one of claims 18 to 21, characterized in that the access airlock further comprises means for real-time counting of the number of individuals to whom physical access to the secure sensitive site has been given in a predetermined period of time, for example one day.

23. Equipment according to any one of claims 18 to 22, characterized in that it comprises a single accreditation airlock connected to several access airlocks to the secure sensitive site.

24. Equipment according to any one of claims 18 to 23, characterized in that the accreditation and access airlocks are connected to each other and remotely controllable by the operator of the supervisory station.

25. Equipment according to any one of claims 18 to 24, characterized in that the accreditation airlock and the physical access airlock to the secure sensitive site are combined into a single airlock.

Images