WO2017055695A1 - Platform and method for securing the verification of personal identity without physical presence - Google Patents

Abstract

The invention relates to a platform for securing the verification of personal identity comprising a server for recording in a secure memory, for each terminal Ti, at least one unique digital identifier INi of said terminal Ti associated with at least one unique identifier IDUi of an identity document of the user of said terminal Ti, each terminal executing an application controlling the acquisition and transmission of an image acquired by the terminal, and the transmission to said server by a communication session associated with said unique digital identifier INi, as well as a processor for carrying out a processing comprising: - extracting, from an image of an identity document acquired from said terminal Ti, at least one unique identifier IDIi and recording in relation to the unique digital identifier INi of said terminal Ti used for the acquisition of said image IMi - intrinsically analysing the image by application of at least one conformity model - comparing a photograph extracted from said image IMi of the identity document with a photograph Pi of a person acquired by the same terminal Ti, and, in the case where said analysis and comparison steps are positives, recording, in relation with the digital identifier INi, said digital image IMi of the identity document and said digital photograph Pi.

Description

 Platform and method for securing the verification of personal identity without physical presence

Field of the invention

The present invention relates to the field of securing digital exchanges and more particularly solutions and technical platforms for verifying the identity of a person without physical presence.

State of the art

In the state of the art, various solutions are known for securing the verification of a personal identity.

For example, the French patent application FR3007929 describes a method for authenticating a user of several terminals connected to a server of an operator connected to an operator database comprising personal identity data associated with data. terminal, said terminals and / or said server of an operator being connected to a server of an administrative trusted third party connected to an administrative database comprising personal identity data associated with administrative identity data, in which, during an enrollment phase, a derived digital identity is generated from user authentication data including personal identity data of the user, administrative identity data of the user terminal data specific to said mobile terminal, transmitted by a terminal of the user, then the digital identity of is transmitted to a mobile terminal of the user for storage, said generation being conditioned by a comparison by at least one of the servers of the trusted administrative third party and the operator of said authentication data with the data stored in the administrative and operator databases, and wherein during a verification phase, the server of the operator authenticates the from said derived digital identity transmitted by said mobile terminal.

Also known is the patent application US2015026478 describing a solution providing a server receiving a data packet comprising:

 - a document designated for legalization,

 identification information including a photograph, a photograph of a user, and a signature of the user.

 The server compares the user's photograph on the included photograph with the credentials. Then, the server verifies the identity of the user based on the identification information and the photograph by comparing the signatory's photograph for the included photograph with the identification information. The server then applies the signature and an indication of the legalization of the document designated for legalization to create a notarized version of the document. The server stores the notarized version of the document, the photograph, and the identification document in a secure data packet, and provides the notarized version of the document to the user. Disadvantage of the prior art

The solution presented in the French patent FR3007929 does not provide a certified digital identification protocol and transfer of the digital identity between two mobile terminals. By elsewhere this solution does not provide a response to the risk of fraud by attacking the server.

 The patent application US2015026478 has the same disadvantages.

Purpose of the invention

The object of the invention is to propose a method for delivering a certified digital identity from a mobile terminal, a method for transferring the certified digital identity of a mobile terminal to another mobile terminal, a method for setting alert a certified digital identifier, a method for interrogating a mobile terminal with a certified digital identifier from any third party system.

Solution provided by the invention

The invention relates, in its most general sense, to a platform for securing the verification of personal identity, comprising:

 a server for recording in a secure memory, for each terminal Ti, at least one digital unique identifier INi of said terminal Ti associated with at least one unique identifier IDUi of an identity document of a user of said terminal Ti, each terminal executing an application controlling the acquisition and transmission of image acquired by the terminal, and transmission to said server by a communication session associated with said digital unique identifier INi

 a processor for carrying out a treatment:

extracting, from an image of an identity document acquired from said terminal Ti, at least one unique identifier IDIi and registration in relationship with digital unique identifier INi of said terminal Ti used for acquisition of said IMi image

 intrinsic image analysis by applying at least one compliance model

 comparing a photograph taken from said image IM i of the identity document with a photograph Pi of a person acquired by the same terminal Ti,

 in the case where said analysis and comparison steps are positive, of recording, in relation with the digital identifier INi, said digital image IMi of the identity document and said digital photograph Pi.

Advantageously, said processing further comprises, in case of analysis or negative comparison, a step of recording the digital identifier INi in a specific memory of suspicious terminals.

Preferably, said processing further comprises, in case of analysis or negative comparison, a step of transmitting a digital report comprising said digital image IMi of the identity document and said digital photograph Pi to a third terminal, said terminal comprising means for conditionally transmitting secure information controlling the recording, in relation to the digital identifier INi, said digital image IMi of the identity document and said digital photograph Pi.

According to a particular embodiment, the platform also comprises at least one third terminal Cj comprising means for acquiring digital information INj constituted by at least a part of the digital identifier INi and / or said digital image IMi of the identity document and transmitting said digital information INj, to the server carrying out a processing consisting of searching in the memory containing the table constituted by the N-tuples comprising the digital identifier INi, said digital image IMi of the identity document, for calculating the identifier INi corresponding to the information INi, and transmitting to the corresponding terminal Ti a digital message Mij.

 According to a particular variant, said digital message Mij furthermore comprises an acceptance code whose activation controls the transmission by the terminal Ti of a digital message controlling the transmission by the platform of a digital message comprising digital data associated with said INi and / or acceptance information.

According to a particular embodiment, said processor also executes a processing for recording the substitution of a terminal Tii for the terminal Ti of a user, consisting of:

 transmit a digital message from the terminal Ti controlling the dissociation, in the memory of the server, of the digital identifier INi on the one hand, and of said digital image IMi of the identity document and said digital photograph Pi on the other hand

 recording in a buffer memory said digital image IMi of the identity document and said digital photograph Pi, in association with a temporary unique transfer identifier IUT for single use

 transmitting by the server to said terminal Ti an encrypted message MIUT with said IUT code associated with an activation code associated with the terminal Ti

 transmitting said coded message MIUT from said terminal Ti to said terminal Tii

 transmitting said coded message MIUT from said

Tii audit server to control the association of the digital identifier INii on the one hand, and said digital image IMi of the identity document and said digital photograph Pi on the other hand. According to a variant, said processor also executes a processing for recording the substitution of a terminal Tii at the terminal Ti of a user, consisting of:

 transmitting a coded digital message according to the secret code of the user, from a computer equipment of the user controlling the dissociation, in the memory of the server, of the digital identifier INi on the one hand, and said digital image IMi of the identity document and said digital photograph Pi of the other part

 recording in a buffer memory said digital image IMi of the identity document and said digital photograph Pi, in association with a temporary unique transfer identifier IUT for single use

 transmitting by the server to said user's terminal a coded MIUT message with said IUT code associated with an activation code associated with said user's computer equipment

 transmitting said MIUT coded message from said user's computer equipment to said terminal Tii

 transmitting said MIUT coded message from said TII to said server to control the association of the digital identifier INi on the one hand, and of said digital image IMi of the identity document and said digital photograph Pi on the other hand.

Detailed description of a non-limiting example of

 The invention

The present invention will be better understood on reading the description which follows, referring to a non-limiting example of embodiment illustrated in Figure 1 shows a schematic functional view of the invention. The purpose of the invention is to allow a person to certify his identity from a dedicated mobile application on his mobile terminal, without face to face.

 For this, she photographs her identity document, then takes her face in photography using the camera of her mobile terminal via the dedicated mobile application. The photographs of his identity document and his photograph are transmitted to the dedicated server which carries out an automatic technical verification and / or a human verification assisted by anti-fraud experts. Once the verification is done and the identity document is compliant, the identity data of the individual is associated with the individual's mobile terminal, and a certified digital identity is assigned to him, which allows him to access services, while by justifying his identity and protecting himself against identity theft.

Definition of terms A certified digital identity is understood to mean an N-plet (in English "tuple") of unique identifiers protected by a secret and connected to a mobile terminal.

This tuple consists of a set of unique identifiers whose acquisition has been obtained from the application installed on the mobile terminal.

The application installed on the mobile terminal includes a communication channel with a server enabling it to send or receive secure messages, a photographic module, a geolocation module and a dating module.

The certified digital identity is composed of at least: -a unique identifier generated by the server during the installation of the application on the mobile terminal

 a unique identifier extracted from the mobile terminal (IMEI code, Mac address, reference and version provided by the manufacturer of the mobile phone, version of the installed OS or a combination thereof)

 - the identity of the owner of the mobile terminal consisting of his name, first names, date and place of birth, nationality and gender.

 - the number of the identity document from which the identity of the owner of the mobile terminal has been extracted

 the image of the identity document and the portrait of the owner of the mobile terminal acquired by the photographic module of the application installed on the mobile terminal and the results of the corresponding authentication processes.

 A secret provided by the user from the application installed on the mobile terminal and known only to him.

Identity document means a secure document issued by a regal administration comprising a Machine Readable Zone (MRZ): national identity card, passport, residence permit, seafarer's permit, driving license, hunting permit, including a unique document number, a photograph of the bearer and his civil status information: name, first names, date and place of birth, nationality, gender. A unique identifier can only be attached to one and only one certified digital identifier.

The secret provided by the owner of the mobile terminal secures the certified digital identifier on the server. No modification of the certified digital identifier is possible without the secret.

First process: deliyrance of a digital identity

 certified

When the application is installed on the mobile terminal, a unique digital identifier is generated on the server and connected to this instance of the mobile application. Each reinstallation of the application on the same mobile terminal causes the generation of a new unique identifier, different from the previous one.

 Upon installation, the application installed on the mobile terminal extracts from the mobile terminal a unique identifier of the terminal (IMEI code, Mac address, reference and version provided by the manufacturer of the mobile phone, version of the installed OS or a combination of 'between them).

 During each exchange between the mobile application and the server, the identifier of the terminal is recalculated and transmitted to the server to check that there has been no change in the mobile terminal.

 The user defines a secret that secures the certified digital ID.

Advantageously, the secret can secure access to the application located on the mobile terminal. When the user enters his secret, it is transmitted via a secure message to the server for verification.

With the photographic module of the application installed on the mobile terminal, the user takes a photo of the front and back of his identity document which are transmitted to the server by secure message for control, as well as the photograph of his portrait (in English "Selfie"). Each photograph is geolocated by the localization module and timestamped by the dating module before being transmitted to the server. On receipt of the images on the platform, the images are transmitted to the processing processor which is responsible for verifying their authenticity and extracting the document number and the identity data contained therein. image data is transmitted to another processing process which is at the expense of complementary operation. This ensures that the identity data is valid and that the photograph of the owner of the mobile terminal corresponds to the portrait on the image of the identity document.

If authentication is confirmed, the identity document number and the identity data are added to the certified digital identifier protected by the user's secret, and the certified digital identifier is activated.

The certified digital identifier, once activated, can be extended, after verifying the secret of the user, by other unique identifiers extracted from images acquired by the photographic module of the application installed on the mobile terminal and after checking that the identity data are in conformity with those registered in the certified active digital identity: number of the other identity documents in the possession of the user, RIB / IBAN, credit card number, tax identifier, social security number, the postal address extracted from a proof of address, etc.

Second process: mobile terminal change The following method makes it possible to transfer the certified digital identifier from one terminal to another.

 From the mobile application installed on his mobile terminal and after his secret has been verified on the server, the user declares that he is carrying out a mobile terminal transfer. The mobile application transmits a secure message to the server that will place the certified digital identifier in a temporary secure memory waiting for change of the identifier of the terminal and the numerical identifier of the application instance, which identifier will be generated during the installation of the application on the new mobile terminal. In return, the mobile application receives a secure single-use code protected by the secret of the certified digital identifier that the user can insert into his new mobile terminal, along with the old secret.

When he installs the mobile application on his new mobile terminal, the server saves it with a new unique digital identifier, records the unique identifier of the mobile terminal and a new secret.

On its new mobile terminal, the user informs the secure single use code that was provided to him in the previous step and provided his old secret. These two pieces of information are transmitted by the mobile application to the new mobile terminal via a secure message to the server. If the one-time secure code has not been consumed and the secret is valid, the certified digital identifier is modified by the unique identifier of the mobile terminal, the unique identifier of the mobile application and is found protected by the new secret.

If the user lost or had their mobile device stolen or uninstalled / reinstalled the app mobile, it must make a prior request for transfer of mobile terminal on a web console made available. For this, he must download the double-sided image of his identity document, the image of his portrait and provide his secret.

Upon receipt of the request by the server, it sends to the processor the document verification operations and extraction of the document number and personal data from image to find the certified digital identity in its secure memory. If an active certified digital identifier is identified, the personal data checked, the secret of the user is verified. If everything is confirmed, the certified digital identifier is placed in a temporary secure memory waiting for the change of the digital identifier of the application and / or the identifier of the terminal and will present to the user a secure code to single use protected by the user's secret on his old mobile terminal.

 If the transfer is refused because the information does not match, the certified digital identifier is removed from the secure temporary memory of the server and put on the alert for attempted spoofing. It is then obligatory to restart the procedure since its beginning.

Third process: Alerting the digital identity

 certified

The method allows the user to alert his certified digital identity from his mobile terminal or from a web console provided for this purpose in the case of theft / loss of his identity documents without or with his mobile terminal or temporarily put his digital identity certified dormant. If the user lost or was stolen his identity documents, he can in the application of his mobile terminal to alert his digital identity certified after his secret has been verified.

If the user lost or was stolen his identity documents together with his mobile terminal, he can via a web console provided for this purpose, declare the theft of his terminal and his personal data, declining his marital status: name, first names, date and place of birth, nationality, gender, and provide his secret.

 The certified digital ID will then be directly alerted. Similarly, he may wish to put his identity temporarily dormant in order to prevent any access to his digital identity certified by third parties, after verification of his secret. Fourth method: third-party verification of identity

The method allows a third party to query the active certified digital identifier to verify the identity of the user.

The requesting party transmits to the server, one of the unique identifiers registered in the active certified digital identifier or the image of the original part making it possible to extract it. If this identifier exists, a notification is transmitted to the application of the mobile terminal to request, after verification of the secret, downloading from the server of the secure message asking the user if he is the author of the request and / or if he accepts the transmission of all or part of his personal data stored in the certified digital identifier. If the user agrees, a secure message is transmitted by the mobile application to the server so that its response is transmitted to the applicant, possibly supplemented by the personal data or part thereof, or by providing a pseudonym, authorized by the user and stored in the active digital ID.

 If the user does not agree, a secure message is transmitted by the mobile application to the server so that his response is transmitted to the applicant with his refusal.

If the certified digital identifier is on alert, following a declaration of loss / theft for example or the sleep requested by the user through its mobile application, or any other action causing the alerting of the identifier digital certificate, the applicant is then notified immediately.

Claims

claims 1 - Platform for securing the verification of personal identity, comprising a server for recording in a secure memory, for each terminal Ti, at least one digital unique identifier INi of said terminal Ti associated with at least one unique identifier IDUi of an identity document of a user of said terminal Ti, each terminal executing an application controlling the acquisition and transmission of image acquired by the terminal, and transmission to said server by a communication session associated with said unique identifier digital INi and a processor to perform a treatment:  extracting, from an image of an identity document acquired from said terminal Ti, at least one unique identifier IDIi and registration in relation to a digital unique identifier INi of said terminal Ti used for acquisition of said IMi image  - intrinsic image analysis by applying at least one conformance model  comparing a photograph taken from said image IM i of the identity document with a photograph Pi of a person acquired by the same terminal Ti,  and, in the case where said analysis and comparison steps are positive, of recording, in relation to the digital identifier INi, said digital image IMi of the identity document and said digital photograph Pi. 2 - Platform for securing the verification of personal identity according to the claim 1 characterized in that said processing further comprises, in case of analysis or negative comparison, a step of recording the digital identifier INi in a specific memory of suspicious terminals. 3 - Platform for securing the verification of personal identity according to claim 1 characterized in that said processing further comprises, in case of analysis or negative comparison, a step of transmitting a digital report comprising said image digital IMi of the identity document and said digital photograph Pi to a third-party terminal, said terminal comprising means for conditionally transmitting secure information controlling the recording, in relation with the digital identifier INi, said digital image IMi of the document of identity and said digital photograph Pi. 4 - platform for securing the verification of personal identity according to claim 1 characterized in that it further comprises at least one third terminal Cj comprising means for acquiring digital information INj constituted by at least a part of the digital identifier INi and / or said digital image IMi of the identity document and transmit said digital information INj, to the server carrying out a processing consisting of searching in the memory containing the table constituted by the N-tuplets comprising the digital identifier INi, said digital image IMi of the identity document, to calculate the identifier INi corresponding to the information INi, and to transmit to the corresponding terminal Ti a digital message Mij. 5 - Platform for securing the verification of personal identity according to claim 4 characterized in that said digital message Mij further comprising an acceptance code whose activation controls the transmission by the terminal Ti of a digital message controlling the transmission by the platform of a digital message comprising digital data associated with said INi and / or acceptance information. 6 - Platform for securing the verification of personal identity according to claim 1 characterized in that said processor also executes a processing for recording the substitution of a terminal Tii to the terminal Ti of a user, consisting of at :  transmit a digital message from the terminal Ti controlling the dissociation, in the memory of the server, of the digital identifier INi on the one hand, and of said digital image IMi of the identity document and said digital photograph Pi on the other hand  recording in a buffer memory said digital image IMi of the identity document and said digital photograph Pi, in association with a temporary unique transfer identifier IUT for single use  transmitting by the server to said terminal Ti an encrypted message MIUT with said IUT code associated with an activation code associated with the terminal Ti  transmitting said coded message MIUT from said terminal Ti to said terminal Tii  transmitting said coded message MIUT from said Tii audit server to control the association of the digital identifier INii on the one hand, and said digital image IMi of the identity document and said digital photograph Pi on the other hand. 7 - Platform for securing the verification of personal identity according to claim 1 characterized in that said processor also executes a processing for recording the substitution of a terminal Tii to the terminal Ti of a user, consisting of at : transmitting a coded digital message according to the secret code of the user, from a computer equipment of the user controlling the dissociation, in the memory of the server, of the digital identifier INi of a part, and of said digital image IMi of the identity document and said digital photograph Pi of the other part  recording in a buffer memory said digital image IMi of the identity document and said digital photograph Pi, in association with a temporary unique transfer identifier IUT for single use  transmitting by the server to said user's terminal a coded message MIUT with said IUT code associated with an activation code associated with said user's computer equipment  transmitting said MIUT coded message from said user's computer equipment to said terminal Tii  transmitting said MIUT coded message from said TII to said server to control the association of the digital identifier INi on the one hand, and of said digital image IMi of the identity document and said digital photograph Pi on the other hand.