EP1924974A1

EP1924974A1 - Terminal and method for determining biometric data of a person and a terminal system

Info

Publication number: EP1924974A1
Application number: EP06791361A
Authority: EP
Inventors: Dirk Dragon
Original assignee: Individual
Current assignee: Grohmann Technologies GmbH
Priority date: 2005-09-08
Filing date: 2006-09-07
Publication date: 2008-05-28
Also published as: DE112006002388A5; WO2007028374A1; US20090128287A1

Abstract

The invention relates to a terminal for determining a person data, in particular for an access control or authorisation comprising a housing and several devices for detecting biometric data and the person body height sensor, wherein the terminal is provided with devices for adjusting the height of the several operating detection devices.

Description

Terminal and method for collecting biometric data of a person and terminal system

[01] The invention relates to a terminal for acquiring biometric data of a person, a method for acquiring biometric data of a person and a terminal system having a plurality of terminals. In particular, the invention relates to such terminals, terminal systems and methods which are used as access control (Physical Access Control) or as access authorization (Logical Access Control).

[02] In addition, the invention can also be used for border control or for other security-related areas.

[03] Terminals of this kind are known, for example, from WO 2004/075097 A1. The local terminal is equipped with a camera and a fingerprint sensor. The biometric data of a person can be recorded via the camera and the fingerprint sensor. In addition, a size sensor for the person is arranged on the housing of the terminal. With the size sensor, the approximate size of the person is visually recognized, and the camera lens is pivoted up or down about an axis.

[04] In WO 03/067389 A2, a registration process is described, via which the passengers can be detected at an airport. At a detection station, a size sensor is provided, which operates on sound waves. The height sensor attached to the station allows a camera unit to be moved up in height.

[02] WO 02/33664 A1 shows a portable device with a box-shaped base area into which a chip card can be inserted. At one in the Vertika- The foldable arm can be adjusted with a knurled wheel, a camera in height to achieve the best angle for different users.

In WO 99/06928 Al a cabin is presented in which size sensors are provided for the person at the entrance of the cabin. A camera is mounted on the front wall of the cab, which can be moved vertically depending on the measured height. This camera can capture biometric data of the person's face or eyes.

[07] In EP 1 280 094 A2, a method for detecting a fingerprint is presented, in which initially a rough orientation of the lines of the fingerprint takes place, while subsequently a fine adjustment takes place.

[08] In US 5,892,838 a two-step method of biometric recognition is presented in which the person is identified in the first stage, the biometric data are acquired in the second stage.

[09] In WO 2004/068 283 A2, a biometric identification system is presented in which a user accesses a server via a network with a decentralized biometric detection device.

[10] WO 2004/034236 A2 likewise presents a two-stage identification method based on facial photographs and fingerprints.

The invention has for its object to improve the detection of biometric data with a terminal.

[12] According to a first aspect of the invention, this object is achieved by a terminal for acquiring biometric data of a person, in particular access control or access authorization, comprising a housing and a plurality of biometric data acquisition devices, and a person size sensor, the ter - Having minal means for height displacement of multiple detection devices in an operating condition.

Conceptually, it should first be explained that as biometric data, in particular the facial proportions, a fingerprint, the Ms and the retina can be considered as data to be acquired. It should also be explained conceptually that the means for height displacement should be set up to change several of the detection devices in the geodetic height. In the simplest case, this is realized by a linear vertical displacement possibility. However, numerous variants are conceivable, in particular a helical movement around the potential location of the person around or a linear displacement path, which is not exactly aligned vertically. The operating state is considered because the presented aspect of the invention should not be limited to, for example, that a motor for height displacement is provided directly at the terminal. It is conceivable, for example, that the terminal as such has only one motor control, while a motor is provided outside the terminal, for example in a wall on which the terminal is mounted.

[14] Of the biometric data collection devices, at least two should be able to be displaced by the means at an altitude. The fact that the detection devices can be displaced in the majority in height, the user can be offered a greater ease of use. This also makes it possible to read the different biometric data faster because, for example, a fingerprint sensor has gone directly to an ergonomic height for the person.

[15] The detection process is greatly accelerated by the presented aspect of the invention. As a result, a higher number of people on a limited area can be biometrically detected from a small number of terminals and controlled in a terminal system. According to a second aspect of the invention, the stated object solves a terminal for acquiring biometric data of a person, in particular for access control or access authorization, with a housing and a detection device for biometric data, and with a size sensor for the person and with means for Height displacement of the detection device, wherein a control is provided, which lowers the detection means for starting a detection process from the top to an operating level, in particular from a rest height, which corresponds at least substantially to a maximum height of the vertical displacement.

[17] Conceptually, this is explained first that the operating altitude is the geodetic height of the detection device, which is specified by the controller as the ideal operating height for the person. When programming the controller, a calculation or a table is stored in it, on the basis of which the controller assigns each person size of the person to be detected an ideal operating height of the detection device. The quiescent height is the altitude at which the controller restores the detector before a detection routine begins.

[18] The presented aspect of the invention is based on the finding that particularly good measurement results can be achieved if the detection device or the detection devices are moved from top to bottom to the operating level. The reason for this is that the person to be detected usually has the head as the highest point, which can be well recognized by a graphic recognition program. On the other hand, in the case of a device that initiates detection more, there is a risk that other objects, such as, for example, worn pockets or arms, distort the correct alignment.

[19] Preferably, the means for height displacement are adapted to displace the housing in height together with the plurality of detection devices. It is particularly economical, the means for height displacement via a drive of the Ge represent housing, wherein the detection means are arranged in or on the housing and are moved together with the housing.

It is particularly compact and economical, if in this case the housing can be displaced together with all detection devices in height.

According to a third aspect of the invention, the stated object solves a terminal for capturing biometric data of a person, in particular for access control or access authorization, with a housing and a detection device for biometric data, and with a mounted on or in the housing size sensor for the Person, wherein the terminal has means for height displacement in an operating condition.

[22] Such a terminal is particularly compact and inexpensive, since both the detection device for biometric data and the size sensor are arranged in only one housing and can be moved together to the ideal height. It's also pretty easy to build.

[23] When a camera is provided as a biometric data acquirer, it is proposed that it be installed at a fixed angle, that is, at least not swing up or down, and preferably not right or left. Such a movement possibility of a camera would be redundant in a terminal of the type described above due to the existing means for height displacement and would make the terminal thus larger and more expensive than necessary.

[24] It has already been explained that detection devices for biometric data are, in particular, image capture, facial proportion detection, fingerprint detection, iris detection and retinal detection. [25] If more than one detection device exists and collects data from the person during a detection process, the safest detection mode can be used. Thus, for example, an evaluation of the detected facial proportions can usually be omitted if one or more fingerprints of the person, the iris of the person or the retina of the person have been detected and the person can also be checked thereon.

[26] Alternatively, the different biometric data collected can be evaluated side by side. In particular, all recorded data can always be evaluated in order to achieve the greatest possible security in the identification of the person.

[27] For this purpose, a multi-stage method is considered as an alternative, in which first the recognition probability is calculated on the basis of a recorded date. If this is not high enough, the remaining data can be consulted for evaluation.

[28] The means for height displacement preferably have a stationarily arranged motor drive. A stationary motor drive is integrated, for example, in a vertical rail on a wall for holding the terminal housing or in an erection wall. An engine is usually quite heavy, so it saves mass and space when the engine is located outside the height-displaceable housing. In addition, the operating heat of the engine can be better dissipated and does not lead to an impairment of the electronic components in the housing of the terminal.

[29] According to a fourth aspect of the invention, the stated object solves a terminal for acquiring biometric data of a person, in particular for access control or access authorization, with a housing and a recording device for biometric data. metric data, as well as means for height displacement of the detection device and with a round or pointed top of the housing.

Although a terminal of the type treated in the present application preferably has an image acquisition and can also be able to record and evaluate a video image as a size sensor, these are preferably all integrated in the housing of the terminal. As a result, beyond the front surface of the terminal housing towards its rear side, there is a space not covered by the video equipment. In addition, the housing can preferably be moved into a very high rest height. It may therefore be possible for an object placed on the terminal housing to be scarcely recognizable at rest from the eye level of a person. With a round or pointed top, it is more difficult to deposit an article such as a detonator on the top of the case.

[31] According to a fifth aspect of the invention, this object solves a terminal for acquiring biometric data of a person, in particular for access control or access authorization, with a housing and a biometric data acquisition device and with a vandalism-proof, for example, bullet-proof glass , Display, wherein the display is designed as a touch screen.

[32] Usually, touchscreens are only used with thin protective covers. Extensive tests have shown, however, that a touchscreen with a suitable optics inside the device is also possible with solid, vandalism- or shot-proof glass. The combination of touchscreen and vandalism-proof or bullet-proof glass enables comfortable user guidance with high vandalism security at the same time.

[33] According to a sixth aspect of the invention, the stated object solves a terminal for acquiring biometric data of a person, in particular for access control or for access authorization, with a housing and with a plurality of biometric data acquisition devices, wherein an electronic arithmetic unit essentially or exclusively comprises a controller, in particular a microprocessor, which is set up to record the acquired biometric data with regard to a camera image, a fingerprint image Iris image and / or Retinabildes as graphic data to a separately arranged control server for evaluation forward.

[34] This aspect of the invention contributes to the data security for the collected data of the person. The terminal itself is constructed in this way as a "stupid" terminal, which does not store or evaluate the data.

Instead, only the controller is provided as a translator, which converts the graphical data ready to be sent to the control server for transmission. In this way, preferably no date of the user is more stored in the terminal immediately after the end of the capture process. Even if a manipulation is performed on the device immediately after the end of a capture operation, or even during a capture process, and the terminal is completely stolen, for example, no personal data is recognizable there. These would only be taken from the server, which is kept inaccessible and protected.

[36] The controller in the terminal can at best be provided with an algorithm for converting the data into data-capable formats, for example an algorithm for transmitting the image data in TCP / ff data packets.

[37] It is proposed that a terminal has an identification document reader. Such can be set up, in particular, to evaluate a personal identity card, a passport, a driver's license or a similar identification document. The data obtained on the alleged identity of the person to be tested may be used to compare the biometric data collected at the terminal Data with records stored in a database about the identity can be used.

[38] As an advantageous method, it is considered that an identification input is made first, for example, via the identification document reader, and that a language of a voice guidance is selected based on the identification input.

[39] Security-related areas are conceivable in numerous applications, especially at airports. Here you can expect passengers of different nationalities. If the guidance of the person to be recorded is supported by the next necessary steps in the collection of the biometric data via a voice output, this is not only comfortable for the person to be recorded, but also accelerates the process in the best possible way. If an official language of the issuing country is preset based on the identification document, which can preferably be changed manually, the probability that the person understands the speech output in this language is extremely large. Manual selection of the device language will not be required in most cases.

[40] According to a further aspect of the invention, the stated object solves a terminal system with a plurality of terminals, of which the terminals are each set up for acquiring biometric data of a person, in particular for access control or access authorization, and wherein the terminals each have a plurality of detection devices for biometric data of the person, and further wherein a control server is provided, which can communicate with the terminals, wherein the control server remotely controls the terminals and wherein the terminals capture data only encrypted and forwarded to the control server, without storing and / or otherwise to process, in particular to evaluate.

In simple terms, this aspect of the invention also provides for a "stupid" terminal, with the intelligent controller sitting in the control server Control server is arranged separately and therefore protected against vandalism and theft, or at least not arranged in public space such as the terminals. The terminals only provide encryption, which theoretically could even be dispensed with, but which increases the security of the entire system, and the terminals forward the data to the control server. It has already been explained that this can be done in particular in the form of graphical data.

[42] The invention will be explained in more detail below with reference to an embodiment with reference to the drawing. Show it:

1 shows a schematic side view of a detection terminal with a height-adjustable housing on a wall mount,

FIG. 2 shows a frontal view of an exemplified housing of a detection terminal,

FIG. 3 schematically shows the structure of a network architecture with terminals in a public space and further building blocks of the architecture in a closed area and FIG. 4 shows schematically the data transport within a terminal.

The terminal 1 in Figure 1 consists essentially of a housing 2 and an elongated wall mounting 3 with a rail (not shown) for the housing. 2

The wall mount 3 is intended to be fixed with a back 4 to a wall, for example via a plurality of screwed connections. In the wall mounting 3, a rail guide for the movable housing in the rail 2 is provided. The wall mount 3 is a fairly flat housing made of a metal material. In a free space of the wall bracket 3, a motor is arranged, for example, at a position of the fifth [45] The motor is connected to the housing and, for example, a chain drive or a similar drive, so that the housing 2 can be displaced as desired along a travel direction 6 via the motor. In the intended vertically upright mounting of the wall bracket 3, the housing 2 can thus be moved vertically upwards or downwards.

[46] The electronic movement possibility between an upper limit switch 7 and a lower limit switch 8 of the height adjustment, the housing 2 can be moved to an ergonomically suitable operating height for the person to be detected.

[47] In the operation of the terminal 1, the height of an approaching person is detected via size sensors 9. With the help of this information, which can be present, for example, as graphic data or simply indicate via a yes / no recognition, whether a person is in front of the terminal, the person after the automatic height adjustment of the housing 2, the biometric sensors very much easy to use. These are, in particular, a person camera 10 with which, for example, the entire proportions of a person's physique can be detected

Ms camera 11 and a fingerprint sensor 12 in an obliquely in the housing 2 lying

Loading.

[48] One entry procedure for one person is as follows:

[49] When a person approaches the terminal 1, it is detected by the digital camera 10. Image recognition software makes a decision based on the graphically perceived data as to whether a person is approaching the terminal.

If this is affirmative, a height adjustment of the housing 2 is automatically made to the person to be detected. For this purpose, the size sensors 9 lead the housing 2 to the desired height. [51] The person is first asked to insert a passport or other identification document in a tray 13 of an identification document reader. A digital camera installed there clears the identification document, and an image processing software recognizes the personal data. In an alternative embodiment, data from memory elements within the identification documents can also be read out by radio, for example by means of RFDD chip technology.

[52] The personal data are stored and checked, then a language is automatically selected according to the recognizable nationality of the person according to the data from the identification document. The software sets by default a national language for speech output and text output.

[53] In the next step, the terminal prompts the person to place their fingers on the fingerprint sensors 12. The fingerprints are read in quick succession by a person's left and right fingers. Alternatively, only one finger or more than two fingers, in particular also all ten fingers or one or both hands (palm prints) can be read. Depending on the specific embodiment, this can be controlled by a suitable user guidance by means of the output of suitable instructions or implemented by the choice of suitable sensors, in particular for several fingers at the same time or for whole hands.

[54] Based on the detected data, a fingerprint encoding is created, stored and compared, if necessary, with a database.

[55] Subsequently, the terminal prompts the person to look into the ms camera 11. As the person moves his head toward the iris camera 11, a digital image of the person's face is taken. The image of the face is saved and, if necessary, compared with a database. [56] In addition, a picture of the eye is taken with the help of the iris camera. This can for example be done simultaneously for both eyes or for the two eyes.

[57] The software first checks for plausibility, whether it is two different irises. The created Mscodierungen are stored and compared if necessary with a data base.

[58] Based on the biometrically recorded data, the software requests a release of the person in a decision software. This usually relies on a database in which either persons are stored, which access or access does not grant, or which access or access is to be granted.

[59] The obtained decision passes on the terminal in the national language to the person. Subsequently, access is granted or denied.

[60] Especially in the case where access is denied, a device for holding the identification document in the reading tray 13 may be provided. For example, a passport may be clamped with such a force that it is not possible to remove it from the drawer 13 without destroying it.

[61] It should be noted that the numerous biometric data acquisition devices in the terminal box can be provided as modules, so that the terminal can be equipped with biometric detection devices, depending on the technical requirements. If more than one module is provided, either the most secure identification can be used depending on the requirements, or multiple identification variants can be used simultaneously. [62] If an entry action has not been successful, this is preferably repeated. The number of repetitions for each step can be predetermined in software.

[63] Error messages and explanations during operation are output via voice output as well as on the graphic display.

[64] In the case of unsuccessful entry attempts, service personnel are automatically requested.

[65] In the frontal view of an exemplary terminal housing 20 in FIG. 2, the operating and biometric detection means known from the terminal 1 from FIG. 1 are likewise provided. Thus, a large Ms camera 21 is centrally located. About this two size sensors 22, 23 are arranged. In addition, directly above the iris camera 21 is a lighting 24 for the face of the person to be detected.

The guidance of the person with regard to the correct use is made via a graphical display 25, which is preferably designed as a touchscreen.

[67] In a lower portion of the housing, an opening 26 for the passport reader with a lighting installed therein for the digital camera and a larger load 27 with fingerprint sensors are provided at the edge. Lighting means (not shown) are also provided in the drawer 27 in the upper area in order to support the intuitive guidance of the user.

[68] In a terminal system as shown in FIG. 3, a plurality of terminals 30, 31, 32 are each equipped such that they do not store the recorded data of persons, but only encrypt them and forward them to a central server 33. Only this takes an evaluation of the data and compares them with data from a database server 34. The central terminal server 33 and the database server 34 are together with workstations 35, 36, 37 for operating and / or evaluating the data and / or for remotely controlling the terminals 30, 31, 32 in an encrypted network in a security area.

The data flow shown schematically in FIG. 4 within a terminal 40 captures only the biometric data with detection devices 41, 42 of any type as well as any further operating measures of operating means 43. All these data are stored in the terminal 40 via an encryption unit 44 and a wired or wireless Data connection 45 forwarded to the central terminal server 46. The encryption device 44 consists essentially or exclusively of a microcontroller, which can not store data.

As a specific embodiment, it has proved in attempts by the inventor to integrate the fingerprint sensors, the passport reader, the face camera and the controller for inputs and outputs via USB ports in the housing. The iris camera can be integrated via a BNC connection, the display and a possibly required iris camera controller via an RS232 interface.

[71] All internal connections are preferably combined via a common interface for external data transmission. This is preferably a network interface, in particular an Ethernet interface, for example via a TCP / IP protocol.

[72] The entire terminal usually has a conventional power supply connection and an additional network connection. The connection of the network connection is encrypted via the controller.

[73] The central terminal server preferably has one network interface per connected terminal.

[74] In a preferred embodiment, different terminal servers can even communicate with each other, for example, at an airport already at the Handling of an international flight, a record of the passengers boarding is collected and evaluated by a first server and forwarded to a server of one entry authority in another. This is not only beneficial for the security authorities, because the immigration office receives the data about the passengers arriving very early and reliably, but also leads to a faster entry clearance of the passengers.

[75] It is understood that such procedures can also be performed with portable devices.

Claims

claims:

1. Terminal for collecting biometric data of a person, in particular for access control or access authorization, with a housing and a plurality of detection devices for the biometric data, and with a size sensor for the person, characterized in that the terminal means for

Height displacement of multiple detection devices in an operating state.

2. Terminal for capturing biometric data of a person, in particular for access control or access authorization, with a housing and a detection device for biometric data, as well as a size sensor for the person and means for height displacement of the detection device, in particular according to claim 1, characterized by a controller, which lowers the detection device from the top to the beginning of a detection process to an operating altitude, in particular from a rest height, which at least substantially corresponds to a maximum height of the altitude displacement.

3. Terminal according to one of the preceding claims, characterized in that the means for height displacement are adapted to move the housing together with a plurality of detection devices in height.

4. Terminal according to claim 3, characterized in that the means for height displacement are adapted to move the housing together with all the detection devices in height.

5. A terminal for collecting biometric data of a person, in particular for access control or for access authorization, with a housing and a recording device for biometric data, as well as with an on or in the housing installed size sensor for the person, in particular according to one of the preceding claims, characterized in that the terminal comprises means for height displacement in an operating condition.

6. Terminal according to one of the preceding claims, characterized in that a camera is installed in a fixed angle.

7. Terminal according to one of the preceding claims, characterized by an image capture.

8. Terminal according to one of the preceding claims, characterized by a face proportion detection.

9. Terminal according to one of the preceding claims, characterized by a fingerprint capture.

10. Terminal according to one of the preceding claims, characterized by a Mserfassung.

11. Terminal according to one of the preceding claims, characterized by a retina detection.

12. Terminal according to one of the preceding claims, characterized in that the means for height displacement comprise a stationarily arranged motor drive.

13. Terminal for capturing biometric data of a person, in particular for access control or access authorization, with a housing and a detection device for biometric data, and with means for height displacement of the detection device, in particular according to one of the preceding claims, characterized by a round or pointed housing top.

14. Terminal for capturing biometric data of a person, in particular for access control or access authorization, with a housing and a detection device for biometric data and with a vandalism-proof display, in particular according to one of the preceding claims, characterized in that the display is designed as a touch screen is.

15. Terminal for collecting biometric data of a person, in particular for access control or access authorization, with a housing and with a plurality of detection devices for biometric data, in particular according to one of the preceding claims, characterized in that an electronic computing unit comprises a controller, in particular one Microprocessor, which is adapted to forward the acquired biometric data regarding a camera image, a fingerprint image, an iris image and / or a retinal image as graphical data to a separately arranged control server for evaluation.

16. Terminal according to one of the preceding claims, characterized by an identification document reader.

17. terminal system with a plurality of terminals, each for capturing biometric data of a person, in particular for access control or access authorization, with a plurality of detection devices for biometric data, in particular with a plurality of terminals according to one of the preceding claims, characterized in that a Control server is provided which can communicate with the terminals, wherein the control server remotely controls the terminals and wherein the terminals only encrypted data and forward to the control server, without storing them and / or otherwise process, in particular to evaluate.

18. A method for collecting biometric data of a person, in particular for access control or access authorization, with a terminal according to one of claims 1 to 15 and / or with a terminal system according to claim 16, characterized in that first an identification input is made and based on the identification input a Language of a voice guide is selected.