The present disclosure generally relates to identity verification systems. More particularly, but not exclusively, the present disclosure relates to a modular identity verification system and method.
Global air transport is projected to increase over 4% annually for the next 20 years, resulting in a doubling of passenger volume by 2036. This rapid growth creates major challenges for government security agencies that face diverse threats, impatient passengers, and a limited pool of skilled recruits.
The United States Transportation Security Agency reflect on these concerns by noting several key trends in its publication TSA Strategy 2018-2026, including that a) Adversaries remain committed to causing physical and economic harm to transportation networks with low cost and sophisticated tactics; b) Interconnected technologies enable an agile security model and effective operations; c) Risk of intrusion or disruption from state and non-state actors to critical transportation infrastructure remains high; d) Passengers are demanding customized and seamless travel experiences with on-demand and convenient services; e) The ability to recruit and retain talent with advanced technical skills, critical thinking and adaptability is increasingly difficult in a competitive labor market; and f) Passenger and cargo volumes are increasing with demand for new travel departure points and destinations in growing global regions.
Given the need to increase capacity with limited human resources, security agencies seek means to automate and accelerate the passenger screening process while preserving a high level of security. Shared security watchlists and standardized vetting procedures have enabled highly efficient background screening in advance of travel, but confirmation of a physical traveler's identity remains a critical but time-consuming step.
Current systems typically require a security officer to manually scan each traveler's identification documents to confirm their authenticity, while observing the traveler's face to confirm that it matches the credential. This process is slow, serial, and requires a human operator trained to detect a variety of security compromises. It is often the limiting factor in passenger throughput, creating “bottlenecks” during peak hours that result in frustration and costly delays.
In one existing attempt at a solution, Credential Authentication Technology (CAT) by IDEMIA Identity & Security North America is utilized by the Transportation Security Administration (TSA) to ensure ID authentication, and to display reservation verification and Secure Flight pre-screening status at the airport security checkpoint. CAT is an effective tool for TSA officers, providing enhanced fraudulent ID detection capabilities while confirming the identity and flight information of travelers, and is currently being utilized at approximately 120 airport locations in the U.S.
When a CAT unit is in use, a TSA officer will ask travelers to provide their photo identification documents. It can be operated by having the TSA Officer scan these documents or by having the traveler insert their own documents. The latter is preferred for reducing both physical contact and the workload on the officer.
CAT is linked electronically to the Secure Flight database, which confirms travelers' flight details, ensuring they have an airline reservation for travel that day from that airport. CAT also displays the pre-screening status (such as TSA PreCheck® expedited screening).
While CAT and existing proposals for next generations of CAT improve throughput to a certain extent, they remain insufficient to handle the anticipated growth in travel while maintaining throughput, safety and convenience.
All of the subject matter discussed in the Background section is not necessarily prior art and should not be assumed to be prior art merely as a result of its discussion in the Background section. Along these lines, any recognition of problems in the prior art discussed in the Background section or associated with such subject matter should not be treated as prior art unless expressly stated to be prior art. Instead, the discussion of any subject matter in the Background section should be treated as part of the inventor's approach to the particular problem, which, in and of itself, may also be inventive.
In some embodiments, a modular identity verification system includes an agent interface module (AIM) that interacts with at least one traveler interface module (TIM) and one or more processors operatively coupled to memory having computer instructions which when executed by the one or more processors causes the one or more processors to perform certain functions. In some embodiments, the function can include arrayed parallel processing of (different) traveler biometric inputs and credential inputs from more than one TIM or from at least one TIM and from a second TIM. In some embodiments, the arrayed parallel processing can be of inputs from two, three or more TIMs. In other words, an independent AIM can process both biometric inputs and credential inputs from a traveler at a single independent TIM and can also process both biometric inputs and credential inputs from different travelers entering inputs at any number of separate independent TIMs where the AIM performs parallel processing of the different traveler inputs.
The AIM and TIM or TIMs can interface or communicate with each other over a wired communication link or a wireless communication link. In some embodiments, the AIM and TIM or TIMs can communicate over a secure wireless communication network. In some embodiments, the TIM or TIMs can have a dedicated wired or wireless link to an AIM or a set of AIM units. In some embodiments, the AIM or AIMs can have electronic links to a Secure Flight database, which confirms travelers' flight details, ensuring they have an airline reservation for travel that day and other electronic links to databases that may include blacklists or other vital information for security.
In some embodiments, the function (performed by the AIM or TIM or both) includes indicating a status to an agent and/or a waiting passenger using visual signaling indicating system.
In some embodiments, the visual signaling indicating system is an elevated light producing a green light (or other visual cue) indicating to the waiting passenger to proceed towards the TIM (or towards an AIM or towards a combined AIM and TIM unit) or a red light indicating to the waiting passenger to continue to wait.
In some embodiments, the agent interface module further includes a transparent or translucent shield separating the agent interface module from the traveler interface module. The shield can be made of glass or plexiglass or other transparent or translucent material (such as Lucite plastic sheets by Lucite International, Inc.). The shield can address safety issues for both agents and travelers and reduce the transmission of airborne viruses and bacteria while still allowing the agents to visually verify and vet passengers.
In some embodiments, the agent interface module further includes a display presenting processed inputs in parallel from two or more traveler interface modules. Thus, the display at the AIM can present the results from scanning faces and scanning credentials from different travelers processed at different TIMs. The arrayed parallel processing of the different travelers processed at different TIMs can maintain a high level of security while vastly improving throughput without additional headcount for labor.
In some embodiments, the display can be mounted on an extensible and adjustable arm allowing the agent to adjust the positioning of the display. The adjustable display enables different sized agents to ideally accommodate for their different body heights or dimensions and further allows the agent to adjust and maneuver around the periphery of the AIM as they process one or more travelers/passengers.
In some embodiments, the travel interface module includes a single document-scanning surface for scanning multiple forms of credentials including phone displays, identity cards, and passports. Existing scanning devices are typically purpose-built to scan only specific documents. The presence of multiple, document-specific devices may create confusion for the traveler in terms of presenting their credentials for scanning. The single document-scanning surface is intended to serve as a universal scanning device that enables a traveler to present their credential with greater flexibility (through software) with easier presentation, acceptance and processing of credentials of different formats from different travelers. Again, this universal or single document-scanning surface improves throughput by giving travelers ease of use and creating less confusion at the time of presentation of credentials at the TIM.
In some embodiments, the agent interface module further includes a hot-swappable battery system enabling continued usage without wired power. The battery system enables continued usage of the AIM even under conditions of power outages while still providing the flexibility of a modular architecture.
In some embodiments, the agent interface module further includes a dedicated agent-facing document scanner that scans multiple forms of credentials. The agent-facing document scanner can be similar to the universal scanner referenced above with respect to the TIM. In some embodiments, the agent interface module can further include a separate identity scanner accessible only to the agent. As the agent will be more familiar with the functions of separate scanning devices, the confusion experienced by travelers in scanning credentials is not as much of an issue for agents. In certain instances, having a dedicated identity scanner of a certain format may provide a more efficient processing flow for the agent.
In some embodiments, the agent interface module is co-located in modular fashion with one, two, three or more traveler interface modules. In some embodiments, the co-located AIM and TIM units are considered a combined unit, yet the AIM and TIM units are in essence independent and modular. In some embodiments, the agent interface module is co-located in modular fashion with just one traveler interface module. In some embodiments, the agent interface module is a standalone unit that interfaces with one, two, three or more traveler interface modules in in proximity to (or not co-located with) the agent interface module.
In some embodiments, the agent interface module has its own processor or processors and the traveler interface module or modules has or have its own respective processor or processors for at least face tracking, capture, and recognition and for document scanning. The agent interface module can have its own processor or processor that can handle bus intensive functions independent of the processor or processors at the agent interface module. If the AIM were to perform some of the bus intensive functions on a regular basis such as facial scanning (tracking, capture, matching, recognition, etc.) for multiple TIMs concurrently, then the throughput for the overall system may suffer. Thus, independent processors at the AIM and TIMs increases the overall throughput and flow for the system.
In some embodiments, the agent interface module physically resides separate from one or more traveler interface modules and yet is enabled to process inputs in parallel from two or more traveler interface modules. Accordingly, parallel processing of travelers at different TIMs by an AIM is not limited to co-located units.
In some embodiments, a modular identity verification system can include at least one traveler interface module (TIM) having one or more processors operatively coupled to memory having computer instructions for at least biometric capture and recognition and for document scanning and the system can further include an agent interface module (AIM) having one or more processors independent of the one or more processors of the TIM, where the one or more processors are operatively coupled to memory having computer instructions which when executed by the one or more processors causes the one or more processors to perform the functions of arrayed parallel processing of traveler biometric inputs and credential inputs from the at least one TIM and (optionally) from a second TIM.
In some embodiments, the system above further includes a visual signaling indicating system that indicates a status to an agent and at least a waiting traveler. In some embodiments, the indicating system can be a portion of the AIM. In some other embodiments, the indicating system can be a portion of the TIM. In yet other embodiments, the indicating system can be a portion of both the AIM and the TIM.
In some embodiments, the agent interface module further includes a transparent or translucent shield separating the agent interface module from the traveler interface module. In some embodiments, the shield can be curved to surround or substantially envelop the agent and protect the agent from airborne viruses, germs, and contaminants from multiple travelers being processed around the AIM.
In some embodiments, the traveler interface module includes a single document-scanning surface for scanning multiple forms of credentials including phone displays, identity cards, and passports and the agent interface module separately includes a single document-scanning surface for scanning multiple forms of credentials including phone displays, identity cards, and passports. In some embodiments, the AIM can further include additional scanners that are dedicated for a particular format such as an identity card scanner.
Non-limiting and non-exhaustive embodiments are described with reference to the following drawings, wherein like labels refer to like parts throughout the various views unless otherwise specified. The sizes and relative positions of elements in the drawings are not necessarily drawn to scale. For example, the shapes of various elements are selected, enlarged, and positioned to improve drawing legibility. The particular shapes of the elements as drawn have been selected for ease of recognition in the drawings. One or more embodiments are described hereinafter with reference to the accompanying drawings in which:
In the following description, certain specific details are set forth in order to provide a thorough understanding of various disclosed embodiments. However, one skilled in the relevant art will recognize that embodiments may be practiced without one or more of these specific details, or with other methods, components, materials, etc. Also in these instances, well-known structures may be omitted or shown and described in reduced detail to avoid unnecessarily obscuring descriptions of the embodiments.
Current systems typically require a security officer to manually scan each traveler's identification documents to confirm their authenticity, while observing the traveler's face to confirm that it matches the credential. This process is slow, serial, and requires a human operator trained to detect a variety of security compromises. It is often the limiting factor in passenger throughput, creating “bottlenecks” during peak hours that result in frustration and costly delays. The embodiments herein can leverage the limited availability of a security officer with experience and training, by enabling such security officer to process multiple passengers or travelers in parallel or can enable a less experienced security officer to rely on the embodiments to efficiently process multiple passengers or travelers in parallel with the same level of security performed by existing units that currently process passengers serially.
With the next Generation Credential Authentication Technology (CAT), TSA is evaluating innovative enhancements to CAT with additional capabilities that will enable a touchless experience utilizing one-to-one (1:1) face match techniques and acceptance of digital identification. The next generation CAT or CAT 2 intends to expand upon the original CAT and performs a 1:1 face match that confirms a live photo of the traveler matches the printed or electronic photo from their supplied credential and a digital identification. A face match option is expected to make the identity verification and validation process touchless and more secure. Such touchless identification verification and validation process would retain some of the existing bottlenecks without further improvements as noted herein.
As a parallel issue, the COVID-19 pandemic made evident the health risks inherent to the traditional screening process. Close physical contact between travelers and transportation security officers resulted in increased infection rates for the traveling public, as well as high fatality rates for security officers.
For these reasons, security agencies have expressed interest in convenient and user-friendly checkpoint terminals that enable “self-service” processing with reduced direct contact between passengers and officers. These systems must be able to verify travelers' identities rapidly and accurately, with a design that affords use by the maximum possible fraction of the traveling public. Development of terminals with these characteristics is a critical need for safe and secure travel, particularly in the aviation and airline industry.
The proposed embodiments comprise a local network of modular devices that may be combined as a unit 100 as shown in
In some embodiments, the AIM and TIM are independent modules that are remote from each other. In some embodiments as illustrated in the unit or system 100 of
The embodiments shown resolve several problems encountered in current screening systems. For example, current systems allow only screening of only one passenger at a time. The embodiments herein allows for a single agent to screen two or three passengers in parallel as illustrated in the unit 202 of
Current systems support only single-passenger/single-agent topologies, limiting flexibility and throughput. The embodiments allow multiple, self-service terminals in the form of TIMs to be arrayed under the supervision of a nearby agent. As shown in
In some embodiments, each TIM 300 as shown in
In some embodiments as shown
Current systems require travelers to recognize and employ multiple document scanners, causing error and frustration. The embodiments herein can employ a single document-scanning surface 301 in a TIM 300 for all credentials as shown in
In some embodiments, a unit 400 as illustrated in
Since the system in accordance with the embodiments is modular, the AIM and TIM combinations can come in any number of configurations as illustrated by the systems 450, 460, 470, 480 and 490 in corresponding block diagrams in
In some embodiments as shown in the system 470 in
In another configuration as illustrated by system 480 of
In yet another configuration as illustrated by system 490 of
Current systems have limited accessibility and frequently require agent assistance. The embodiments can be configured to support users with limited vision, hearing, mobility, or cognition, as well as multiple different users of different heights and that speak and read different languages.
Current systems must change the height of passenger-facing displays in order to accommodate multiple agent heights. The embodiments herein enable the agent to adjust the interface height without affecting passenger interface height, as the passenger interface is independent of the agent interface.
Current systems can also lack any visible indication that the unit is ready for the next passenger. The embodiments herein can include an elevated signal light that indicates system status to an agent and to waiting passengers or travelers.
Current systems can also have limited runtime if an electrical power connection is not available. Thus, in some embodiments herein, a system 900 as shown in
Current systems require a security agent to physically rotate document scanners to assist passengers. In some embodiments, a system herein can include a dedicated, agent-facing document scanner that can be employed to scan a passenger's ID if needed.
Current systems are difficult to transport due to size and weight. The embodiments herein can include folding handles and locking casters to support transport.
The primary benefit of creating separate AIM and TIM devices is the flexibility in configurations. While current systems have a similar, dual-interface approach, the embodiments herein enable one AIM to be connected to one, two, or three or more co-located TIM's if desired and/or with other TIMs that are not necessarily co-located. In addition, multiple TIM's can be positioned in banks separately from the AIM if suitable security can be maintained. In this way the embodiments herein support much greater flexibility and future expansion than a single terminal with dual interfaces.
Another advantage of the AIM/TIM architecture illustrated by the various embodiments is the ability to perform specific processing and peripheral communications on a separate processors or CPUs. Face tracking, capture, and recognition and document scanning are CPU and bus-intensive tasks. A lone AIM computer might slow down or create a bottleneck if processing data from multiple TIM's concurrently. Thus, a simple TIM and corresponding processor that performs the CPU and bus-intensive tasks will not interfere with the overall functions performed by a processor at an AIM.
Another advantage of the modular architecture is that the TIM units can be relatively low in cost and complexity as their functionality is limited. TIM units could be developed to use an embedded operating system and low-cost chips, and can be easier to cyber-secure than a combined AIM/TIM solution that has an AIM unit with additional complexity and connectivity. Thus, the resulting separation and independence of the TIMs can provide overall savings and security improvements.
As the AIM/TIM design allows a single agent to process multiple passengers in parallel, a smaller number of agents can support secure processing of a larger number of passengers. Thus, significant cost savings can be materialized by a security agency.
Since the AIM and the TIMs are separated, one agent can efficiently process multiple travelers to save time and cost. As passenger volume increases and as passengers become more familiar with self-service terminals, the flexibility of the embodiments herein can allow agencies to modify their passenger flows with minimal cost and complexity.
Referring to
Referring to
In some embodiments, as illustrated by UV LED controls 700 of
In some embodiments, as illustrated by the various positions of the display 406 using the articulated display mount 409 in an AIM 102 of a system 800 shown in
In some embodiments as illustrated by
In some embodiments, a further function can include the step 1004 of indicating a status to an agent and at least a waiting passenger using visual signaling indicating system. In some embodiments, another function can include the step 1006 of biometric tracking, capture, and recognition and document scanning. More particularly, such biometric tracking, capture and recognition can be the tracking, capture, and recognition of a live face in comparison to a face scanned from a document or other credential. In some embodiments, such biometric tracking, capture and recognition can involve fingerprints, hand prints, palm prints, iris scans, or even voice prints. The embodiments herein contemplate multi-modal live biometric tracking, capture and recognition that can be used with corresponding information scanned or otherwise captured from credentials or document presented at the TIM or AIM.
In some embodiments as shown in the system 203 of
In some embodiments as shown in
In some embodiments, the agent interface module 102 further includes a display 406 presenting processed inputs in parallel from two or more traveler interface modules.
In some embodiments as shown in
In some embodiments as shown in
In some embodiments, an agent interface module 900 further includes a hot-swappable battery system 905 as shown in
In some embodiments as shown in
In some embodiments, the agent interface module is co-located in modular fashion with one (as shown in
In some embodiments as shown in
In some embodiments, the agent interface module physically resides separate from one or more traveler interface modules and yet is enabled to process inputs in parallel from two or more traveler interface modules. (See block diagrams 4B, 4C, 4D, 4E, and 4F).
In some embodiments, a modular identity verification system 100 or 400 as shown in
In some embodiments, the system further includes a visual signaling indicating system (250) as shown in
In some embodiments, the agent interface module 102 further includes a transparent or translucent shield 101 separating the agent interface module from the traveler interface module as shown in
In some embodiments, the travel interface module 300 as shown in
In the absence of any specific clarification related to its express use in a particular context, where the terms “substantial” or “about” or “usually” in any grammatical form are used as modifiers in the present disclosure and any appended claims (e.g., to modify a structure, a dimension, a measurement, or some other characteristic), it is understood that the characteristic may vary by up to 30 percent if applicable.
The terms “include” and “comprise” as well as derivatives thereof, in all of their syntactic contexts, are to be construed without limitation in an open, inclusive sense, (e.g., “including, but not limited to”). The term “or,” is inclusive, meaning and/or. The phrases “associated with” and “associated therewith,” as well as derivatives thereof, can be understood as meaning to include, be included within, interconnect with, contain, be contained within, connect to or with, couple to or with, be communicable with, cooperate with, interleave, juxtapose, be proximate to, be bound to or with, have, have a property of, or the like.
Unless the context requires otherwise, throughout the specification and claims which follow, the word “comprise” and variations thereof, such as, “comprises” and “comprising,” are to be construed in an open, inclusive sense, e.g., “including, but not limited to.”
Reference throughout this specification to “one embodiment” or “an embodiment” or “some embodiments” and variations thereof mean that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of the phrases “in one embodiment” or “in an embodiment” in various places throughout this specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.
As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” include plural referents unless the content and context clearly dictates otherwise. It should also be noted that the conjunctive terms, “and” and “or” are generally employed in the broadest sense to include “and/or” unless the content and context clearly dictates inclusivity or exclusivity as the case may be. In addition, the composition of “and” and “or” when recited herein as “and/or” is intended to encompass an embodiment that includes all of the associated items or ideas and one or more other alternative embodiments that include fewer than all of the associated items or idea.
In the present disclosure, conjunctive lists make use of a comma, which may be known as an Oxford comma, a Harvard comma, a serial comma, or another like term. Such lists are intended to connect words, clauses or sentences such that the thing following the comma is also included in the list.
As the context may require in this disclosure, except as the context may dictate otherwise, the singular shall mean the plural and vice versa. All pronouns shall mean and include the person, entity, firm or corporation to which they relate. Also, the masculine shall mean the feminine and vice versa.
When so arranged as described herein, each computing device or processor may be transformed from a generic and unspecific computing device or processor to a combination device comprising hardware and software configured for a specific and particular purpose providing more than conventional functions and solving a particular technical problem with a particular technical solution. When so arranged as described herein, to the extent that any of the inventive concepts described herein are found by a body of competent adjudication to be subsumed in an abstract idea, the ordered combination of elements and limitations are expressly presented to provide a requisite inventive concept by transforming the abstract idea into a tangible and concrete practical application of that abstract idea. Furthermore, when interpreting the claims, the order of the elements may or may not be critical and it can be assumed in many instances that the order of certain functions can be performed either in the order presented in the claims or in a different order within contemplation of the scope of the embodiments.
The headings and Abstract of the Disclosure provided herein are for convenience only and do not limit or interpret the scope or meaning of the embodiments. The various embodiments described above can be combined to provide further embodiments. Aspects of the embodiments can be modified, if necessary to employ concepts of the various patents, application and publications to provide further embodiments.