Method for checking individuals with simplified authentication
A method for checking an individual having an identity document on a medium comprising an electronic chip in which a reference biometric datum of the individual is stored and capable of displaying an automatic reading zone representing an optical reading datum of the identity document, the method includes carrying out by a checking device of acquiring a candidate biometric datum on a biometric trait of the individual, retrieving from the candidate biometric datum in a memory, an optical reading datum associated with the reference biometric datum corresponding to the biometric trait of the individual, and opening a secure communication channel with the electronic chip of the medium of the individual's identity document using said retrieved optical reading datum.
1. A method for checking an individual having an identity document on a medium comprising an electronic chip in which a reference biometric datum of the individual is stored and capable of displaying an automatic reading zone representing a first optical reading datum of the identity document, the method comprising:
carrying out by a checking device of:
(a) acquiring a candidate biometric datum on a biometric trait of the individual;
(b) retrieving, using the candidate biometric datum, a second optical reading datum, in a memory, associated with the reference biometric datum corresponding to the biometric trait of the individual, the second optical reading datum being retrieved by matching the candidate biometric datum to reference biometric datum and retrieving the second optical reading datum that is stored in correspondence with the reference biometric datum in the memory; and
(c) opening a secure communication channel with the electronic chip of the medium of the individual's identity document using said retrieved second optical reading datum,
wherein the method further comprises, before the acquiring and carried out by an enrollment device:
retrieving the reference biometric datum of the individual from said electronic chip;
acquiring the first optical reading datum of the identity document by reading the automatic reading zone; and
recording, in said memory, the first optical reading datum of the identity document linked to the reference biometric datum of the individual as the second optical reading datum.
2. The method according to claim 1 , wherein the opening does not include either retrieving the reference biometric datum of the individual from said electronic chip via said secure communication channel or reading said automatic reading zone of the identity document medium.
3. The method according to claim 2 , wherein opening includes authenticating said electronic chip via said secure communication channel.
4. The method according to claim 1 , wherein opening includes authenticating said electronic chip via said secure communication channel.
5. The method according to claim 4 , wherein said electronic chip stores a private and public key pair, said authentication of said electronic chip being chosen from: an active authentication and a hardware authentication.
6. The method according to claim 4 , wherein no datum other than data necessary for said authentication of the electronic chip is transmitted via said secure communication channel.
7. The method according to claim 5 , wherein said authentication of said electronic chip is an active authentication including verification using said public key of an electronic signature received from the electronic chip in response to sending of a nonce.
8. The method according to claim 7 , wherein no datum other than data necessary for said authentication of the electronic chip is transmitted via said secure communication channel.
9. The method according to claim 5 , wherein no datum other than data necessary for said authentication of the electronic chip is transmitted via said secure communication channel.
10. The method according to claim 1 , wherein said secure channel is opened according to a protocol chosen from: Basic Access Control (BAC), and Password Authenticated Connection Establishment (PACE), using a key derived from said retrieved second optical reading datum.
11. The method according to claim 1 , wherein the retrieving the second optical reading datum further comprises:
comparing reference biometric data stored in the memory with the candidate biometric datum; and
selecting at least one second optical reading datum of an identity document corresponding to at least one reference biometric datum having a rate of similarity with the candidate biometric datum greater than a predetermined threshold.
12. The method according to claim 11 , wherein, when more than one second optical reading datum of an identity document has been selected, the opening is attempted for each second optical reading datum selected until the secure communication channel opens.
13. The method according to claim 1 , wherein the checking device includes contactless communication means, the opening being carried out by placing said medium near the checking device in any given orientation.
14. The method according to claim 1 , wherein the identity document is a passport, and
during the retrieving the reference biometric datum, the acquiring the first optical reading datum, and the recording, the passport is presented to the enrollment device open on page of the automatic reading zone in order to acquire the first optical reading datum of the identity document, and
during the opening, the passport is presented closed to the checking device.
15. The method according to claim 1 , wherein during the carrying out by the checking device the document is presented closed to the checking device.
16. A device for checking an individual having an identity document on a medium comprising:
an electronic chip in which a reference biometric datum of the individual is stored and capable of displaying an automatic reading zone representing first optical reading datum of the identity document, the electronic chip being configured to:
(a) acquire a candidate biometric datum on a biometric trait of the individual;
(b) retrieve, using the candidate biometric datum, a second optical reading datum, in a memory, associated with a reference biometric datum corresponding to the biometric trait of the individual; and
(c) open a secure communication channel with the electronic chip of the medium of the individual's identity document using said retrieved second optical reading datum,
wherein before the electronic chip acquires the candidate biometric datum, an enrollment device is configured to
retrieve the reference biometric datum of the individual from said electronic chip,
acquire the first optical reading datum of the identity document by reading the automatic reading zone, and
record, in said memory, the first optical reading datum of the identity document linked to the reference biometric datum of the individual as the second optical reading datum.
17. A system for checking individuals, comprising:
a memory;
a checking device according to claim 16 ; and
an enrollment device configured to:
retrieve the reference biometric datum of the individual from said electronic chip;
acquire the optical reading datum from the identity document by reading the automatic reading zone; and
record, in said memory, the optical reading datum of the identity document linked to the reference biometric datum of the individual.
18. A non-transitory computer-readable storage medium having stored thereon a computer program product having code instructions for executing a method according to claim 1 for checking an individual.
19. A method for checking an individual having an identity document on a medium comprising an electronic chip in which a reference biometric datum of the individual is stored and capable of displaying an automatic reading zone representing an optical reading datum of the identity document, the method comprising:
carrying out by a checking device of:
(a) acquiring a candidate biometric datum on a biometric trait of the individual;
(b) retrieving, from the candidate biometric datum, an optical reading datum, in a memory, associated with the reference biometric datum corresponding to the biometric trait of the individual;
(c) opening a secure communication channel with the electronic chip of the medium of the individual's identity document using said retrieved optical reading datum; and
before the acquiring and carried out by an enrollment device,
retrieving the reference biometric datum of the individual from said electronic chip,
acquiring the optical reading datum of the identity document by reading the automatic reading zone, and
recording, in said memory, the optical reading datum of the identity document linked to the reference biometric datum of the individual,
wherein the identity document is a passport, and during the retrieving the reference biometric datum, the acquiring the optical reading datum, and the recording, the passport is presented to the enrollment device open on page of the automatic reading zone in order to acquire the optical reading datum of the identity document, and during the opening, the passport is presented closed to the checking device.