METHOD FOR GENERATING AND USING IDENTIFIER DATA

Abstract: The invention relates to a method for generating and using identifier data. The method is characterized in that an identifier means (1) is used which is the existing identifier means (1) administered by a user (3), a connection restricted in time is made at a server (7) between the identifier data (2) arranged into the identifier means and data located separate from the identifier means (1), the connection providing the user (3) of the identifier means (1) with a specific right which is interpreted and confirmed on the basis of the identifier data (2) arranged into the identifier means (1). The connection between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) is made and transferred using a telecommunications network (8), such as the Internet.

Description: METHOD FOR GENERATING AND USING IDENTIFIER DATA FIELD OF THE INVENTION The invention relates to a method for generating and using identifier data, the method comprising: employing an existing identifier means administered by a user into which the identifier data is arranged; making connections between the identifier data arranged into the identifier means and data located separate from the identifier means for creating various rights to be assigned to the user of the identifier means; using the identifier data arranged into the identifier means for identifying the user of the identifier means and for interpreting and confirming the user's rights. BACKGROUND OF THE INVENTION Identifier means, together with identifier data and identifying methods associated with them, are used for example for identifying users of various services and for interpreting and confirming the rights of the users. The user is usually a person, the purpose of the identifier means and the related method being to establish the identity and rights of the person in question. Identifier means area used in systems which are based on data processing which is as automated as possible. A good example of an identifier means and an identifying method employing the means is an ordinary bank card. The card is provided with a magnetic stripe, a specific magnetic code being stored in the stripe. The code can be read in a reader device, in addition to which the user can be asked to enter a personal identifier, such as an identification number only known to the user, to confirm the user's rights. The bank card is meant for the user's personal use only, and it aims at identifying the card user when account transactions are made. Most people today have several cards based on a similar principle, either on card identifying data alone, or on a combination of identifier data and an identifying number. Various identifier means are also ever increasingly used in diverse automated systems controlling people's access rights. A characteristic feature of these systems is that they require an identifier means, such as a card, key or label specifically designed and produced for the system in question. The identifier data is read for example in reader devices arranged at gates or doors, the user of the identifier means being identified and his/her access right confirmed on the basis of the identifier data read from the identifier means. In this case, the system is a passage control system. In the following, a purpose of use will be described, by way of example, in which access control is not yet automated to any major extent, i.e. various events and occasions, such as sports events, concerts, fairs and other similar mass events, where entrance tickets are conventionally used. However, the tendency today is towards using automated subscription systems and the Internet, which allows tickets for such events be ordered and paid for in advance via the Internet. In prior art solutions, problems arise from how to organize the distribution logistics of the identifier means of the participants having a right to participate to the event, i.e. how to deliver the tickets from the point of sale to the subscribers. The distribution logistics currently employed require that the tickets are either sent, by post for example, or that they are collected from a predetermined service point. Another problem related to the distribution logistics is its slowness: the subscriber cannot receive the ticket immediately after having placed the order and paid for the ticket. Moreover, present system require that the advance selling of the tickets stops at a sufficiently early stage to allow the tickets to be delivered to the subscribers before the beginning of the event. This means that important sales opportunities are lost, usually a few days. The tickets are often printed onto a sheet-like material whereby there is a risk that illegal counterfeits can be easily made by copying the tickets. Forgery can be complicated by using hologram technique or ultraviolet colours, for example, in the tickets, but this increases the production costs of the tickets significantly. A further problem area is the checking of the validity of the tickets at the entrance. Today the validity of the tickets is usually checked visually, which means that every ticket must be checked separately. In a rapid visual check it may be difficult to notice counterfeit tickets. In addition, each ticket usually has to be cancelled immediately after the checking to prevent the re- use of the ticket at the same event. In addition, visual confirmation requires a lot of staff and involves the risk of human error and misuse. Visual confirmation therefore incurs high labour costs and, in addition, it may cause financial loss through misuse. It is also known that the present systems for the advance sale of tickets allow only the number of sold tickets and reserved seats to be known in advance, whereas no contact information of the subscribers is usually available. This causes problems in case there are any changes or additional information that would need to be informed to the participants. In such cases, the changes must be communicated through newspaper advertising, which is expensive and reaches the participants poorly. BRIEF DESCRIPTION OF THE INVENTION It is an object of the present invention to describe a method for generating and using identifier data which allows the above mentioned problems to be solved, the method being based on means already at the subscriber's disposal and suitable to be used as identifier means. Moreover, the method is well suited for use for advance subscriptions made in a telecommunications network, such as the Internet, and in systems employing automated reader devices for interpreting identifier data, such as passage control systems. The object is achieved with a method for generating and using identifier data shown in the preamble, the method being characterized in that the identifier means used is an existing identifier means administered by the user, a connection restricted in time being made between identifier data arranged into the identifier means and data located separate from the identifier means, the connection providing the user with a specific right which is interpreted and confirmed on the basis of the identifier data arranged into the identifier means. The preferred embodiments of the invention are disclosed in the dependent claims. The invention is based on the idea that the identifier means used for identifying the user is an existing means suitable to be used an identifier means and that the right provided by the connection between the identifier data arranged into the identifier means and the data located separate from the identifier means is created by the user at a server connected to a telecommunications network. The user creates a connection to the server from a terminal connected to the telecommunications network and uses the terminal to supply the data needed for creating the right to be produced by the connection between the identifier data arranged into the identifier means and the data located separate from the identifier means to the server and confirms the creation of the right produced by the connection between the identifier data arranged into the identifier means and the data located separate from the identifier means by making an electronic payment transaction through the telecommunications network, whereby the server makes the connection between the identifier data arranged to the identifier means and the data located separate from the identifier means and creates the right thereby produced, the right being stored into the server's database from where it can be transferred to the means, such as a card reader in a passage control system, over the telecommunications network, the identifier means and the identifier data arranged thereto being used in the means to confirm and interpret the user's rights. The identifier means is always provided with an identifier data identifying the identifier means, such as an identifier data fixedly attached to the identifier means. One example of an identifier means is a magnetic stripe card, such as customer card, for example the bonus card of a retail shop chain (such as the K-card), or the like. The magnetic stripe on the card contains an identifier data identifying the card and the user, the data being readable in a reader device. In addition, there is usually a string of characters printed on the card surface, and the string may serve as an identifier data identifying the card, the data corresponding to that on the magnetic stripe or there may be a specific connection linking it to the data on the stripe. Another example of a suitable identifier means is a smart card provided with a micro chip, such as a city card, which allows identifier data identifying the identifier means to be dynamically added to the card by using a suitable writing device. In this case the identifier data generated for the identifier means at the time the connection is made between the identifier data and other data may be transferred to the card in the writing device. Another example of an identifier means employing a similar principle is a conventional entrance ticket on the surface of which the identifier data identifying the ticket is printed. The identifier data may be any visually readable code, an optically readable bar code, or the outer appearance of the identifier means. Since the user already has an identifier means at his/her disposal which contains identifier data that can be read and interpreted by a machine to confirm the user's rights in a system interpreting identifier data, such as a passage control system, the existing identifier means can also be used for systems differing from the original purpose of use, provided that it is authorized by the party who has issued the identifier means and that new connections can be made between the identifier data located in the identifier means and other data located separate from the identifier means, such as access right data, and to relay the data about these rights to the user of the identifier means and the system interpreting the identifier data. An advantage of this system is that it allows existing identifier means to be advantageously used in association with systems controlling access rights, or the like, and to create and transfer connections required by the identifier data and the diverse rights via commercial systems operating in a telecommunications network by transferring only digital data, preferably through telecommunications networks, by applying electronic communication methods between the various systems. The advantages of an identifier means that can be identified using a reader device are that the identification is rapid and simple, that the identifier means is difficult to forge by copying, and that the risk of human errors in interpretation is eliminated. The identifier data can preferably be arranged into a magnetic stripe, bar code, micro chip, or in a similar magnetically, electrically, or optically readable form into the identifier means. According to a preferred embodiment of the invention, the connection between the identifier data located on the identifier means, or generated thereto, and one or more other data elements located separate from the identifier means is created using databases relying on automated data processing. The databases are preferably shopping, ordering, or payment systems, or combinations thereof, which operate in telecommunications networks and from which data transfer interfaces may be arranged to systems that can be used for confirming identifier data, such as access rights. The identifier data can then always be easily confirmed from a database containing the access rights sold to a specific occasion. According to the preferred embodiment of the invention, the connection established in different databases between the identifier data attached to the identifier means and the other data is limited in time. This means that the identifier data generated is valid for a certain period of time, for the duration of a sports event for example, the access right associated with the identifier data being recorded to begin when the entrance to the competition opens, the right being automatically cancelled after the competition is over. The method of the invention for generating and using identifier data is particularly well suited for solutions where a telecommunications network is used for transferring the identifier data between the identifier means and the database, and between the database and the means interpreting the identifier data. This provides the user, such as a subscriber to an access right, with a modem method to use a telecommunications network, such as the Internet, for obtaining identifier means containing identifier data, such as tickets granting an access right, to his/her disposal by using his/her terminal, such as a personal computer or a mobile phone, by using existing means suitable for identification. The user will then have an identifier means applicable for identification at his/her disposal immediately after he/she has placed the order and paid for it. Furthermore, any information, changes or additional services relating to the event can be communicated to the user through communication means available in telecommunications networks, such as e-mail, mobile phone short message services, or the like, because when the subscription made by the user is received it is possible to also collect his/her contact information. On the basis of the user information in the databases it is possible to advantageously produce various reports and statistical data for monitoring the reservations, for sales follow-up, authorities, accounting, marketing, and for controlling the flow of people, or the like. BRIEF DESCRIPTION OF THE DRAWINGS In the following the invention will be described in greater detail in connection with preferred embodiments and with reference to the accompanying drawing, in which Figure 1 schematically shows the elements of a solution for implementing the method of the invention for generating and using identifier data, and the operation of the elements. DETAILED DESCRIPTION OF THE INVENTION Figure 1 shows a preferred embodiment of the method of the invention for generating and using identifier data. The Figure shows the separate elements needed for implementing the method and their basic function. The components needed comprise an identifier means 1 , identifier data 2 associated with the identifier means, a user 3 (a person) using the method, a server where a database 7 runs (subscription system, shopping system, payment system), and means 4 which the user 3 uses to communicate with a telecommunications network in order to create a connection between the identifier data and one or more other data elements (a terminal, such as a personal computer or a mobile phone), means 5 for reading the identifier data 2 (reader device), means 6 for interpreting and confirming the identifier data 2 (passage control system), and a telecommunications network 8 for transferring the data generated with the method. The following description of a preferred embodiment will discuss the operation of the invention both in a case where the identifier data 2 associated with the identifier means 1 is a fixedly attached identifier and in a case where the identifier data 2 associated with the identifier means 1 is an identifier generated and transferred into the identifier means 1 at the time of making a connection between the identifier data 2 and some other data. The invention will be illustrated by an example of a series of operations where the user 3 subscribes to an access right to a specific event and participates to the event as a spectator at the venue of the event. The user 3 uses his/her terminal 4, which is a personal computer, to contact the subscription system at the server 7 supplying access rights through the telecommunications network 8, such as the Internet. The terminal 4 communicates with the server 7 by using a communications protocol suitable for the purpose, such as the HTTP, WAP or a similar protocol. The server 7 identifies the user 3 by means of a registration method, or the like, whereby the user 3 is given the right to use the subscription services available at the server 7. The user informs the server 7 that he/she subscribes to a ticket to an event he/she has selected, after which the server 7 requests the user 3 to enter the necessary contact information, payment information, and to select the identifier means 1 the user 3 wishes to use to confirm his/her access right at the venue. The server 7 displays a list of acceptable identifier means 1 to the user 3. In a first alternative, the user 3 selects a card provided with a magnetic stripe as the identifier means 1. The user 3 informs the server 7 that the magnetic stripe card he/she will be using is a K-card, which is among the card types accepted by the server 7. The server 7 requests the user 3 to enter the identifier data 2 of the K-card, the data being also recorded as a number series on the surface of the card, as well as stored in the magnetic stripe. The user 3 enters the number series representing the identifier data 2 using the keyboard of his/her terminal 4 or, alternatively, a reader device attached to the terminal 4, which then transfers the data to the server 7 through the telecommunications network 8. In a second alternative, the identifier means 1 selected by the user 3 is his/her smart card, which is provided with a micro chip. This embodiment assumes that there is a smart card reader/writer device attached to the user's 3 terminal 4. The user 3 informs the server 7 that the chip card he/she will be using is of the city card type, which is among the card types accepted by the server 7. The server 7 requests the user 3 to place the smart card into the reader/writer device, reads the identifier data 2 stored in the micro chip and transfers the data to the server 7 through the telecommunications network 8. The server then asks the user 3 to select the method of payment he/she prefers and to settle the payment for the subscription. The payment is made using a method of payment accepted by the subscription system at the server 7, the method being preferably a credit card payment conforming to the SET standard, electronic money, electronic payment transaction service provided by a bank, or the like. When the payment transaction has been completed, a connection between the identifier data 2 of the identifier means 1 and the data relating to the participation of the user 3 is made in the subscription system at the server 7, the user being thereby provided with a right to access the venue by using the identifier means 1 of his/her choice in the interpreting means 6 for identifier data 2, i.e. a passage control system, during the event. For added reliability of identification, the subscription system at the server 7 can be made to submit a identification number to the user 3, which the user 3 then enters into the interpretation means 6 for the identifier data 2 after the reader device 5 has read the identifier data 2 from the card. If the user 3 selected the magnetic stripe card of the first alternative as the identifier means, the card is now ready for use in the interpretation means 6 for the identifier data 2 at the venue. If the user 3 selected chip card of the second alternative as the identifier means 1 , the connection between the identifier data 2 and the data relating to the participation of the user 3 can be made using two alternatives, or combinations thereof. A first alternative is to use the identifier data residing in the micro chip to identify the card in the passage control system. A second alternative is to arrange the subscription system to generate a unique identifier code which is stored into the card's micro chip in the reader/writer device and which is then used as the identifier data in the passage control system. A third alternative is to use a combination of the above two alternatives. The method to be applied may be selected by the user 3 or the server 7, the card being then ready to be used in the passage control system. The identifier data of the participants are then transferred, in good time before the event takes place, from the database of the order system to a database 6 of the passage control system at the venue through the telecommunications network 8. When the user 3 arrives at the venue at the time of the event, he/she enters the identifier means 1 into the reader 5 at the entrance to the venue. The reader 5 confirms the access right on the basis of the identifier data 2 and opens the gate to allow the user 3 to enter the venue. When the event ends, the connection that generated the access right is deactivated at the database of the passage control system, whereby the right ceases to exist. The information collected to the database of the subscription system and that of the passage control system can be used for producing reports on the number of tickets purchased for the event and those used, reports for accounting, for authorities, and for monitoring traffic load at the gates of the venue, and other similar information. Although the invention is described above with reference to only one preferred embodiment used as an example, it is apparent that the invention is not restricted to it, but can vary in many ways within the inventive idea disclosed in the attached claims.

Claims: CLAIMS 1. A method for generating and using identifier data, the method comprising using an identifier means (1) into which identifying data (2) is arranged; the identifier means (1) used is an existing identifier means (1) administered by a user (3); making connections between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) for creating various rights to be assigned to the user (3) of the identifier means (1); using the identifier data (2) arranged into the identifier means (1) for identifying the user (3) of the identifier means (1) and for interpreting and confirming the user's (3) rights, c h a r a c t e r i z e d in that the right provided by the connection between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) is created by the user (3) at a server (7) connected to a telecommunications network (8), whereby the user (3) creates a connection to the server (7) from a terminal (4) connected to the telecommunications network (8); the user (3) uses the terminal (4) to enter the data needed for creating the right produced by the connection between the identifier data (2) arranged to the identifier means (1) and the data located separate from the identifier means (1) to the server (7); the user (3) confirms the creation of the right produced by the connection between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) by making an electronic payment transaction through the telecommunications network (8); the server (7) makes the connection between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) and creates the right thereby produced, the right being stored in the server's (7) database from where it can be transferred to the means (5) over the telecommunications network (8), the identifier means (1) and the identifier data (2) arranged thereto being used in the means to confirm and interpret the user's (3) rights. 2. A method according to claim 1 , c h a r a c t e r i z e d in that the identifier data (2) arranged into the identifier means (1) is an identifier which is fixedly arranged into the identifier means (1). 3. A method according to claim 1, characterized in that the identifier data (2) arranged into the identifier means (1) is an identifier which is generated and transferred at the same time when the connection is made between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1). 4. A method according to claim 1, characterized in that a connection restricted in time is created between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1), the connection providing the user (3) of the identifier means (1) with a specific right. 5. A method according to claim 2 or 3, characterized in that the identifier data (2) arranged into the identifier means (1) is read using a means (5) which is a machine. 6. A method according to claim 1, characterized in that the telecommunications network (8) is the Internet network. 7. A method according to claim 1 or 2, characterized in that the identifier data (2) arranged into the identifier means (2) is arranged into a magnetic stripe. 8. A method according to claim 1 or 3, characterized in that the identifier data (2) arranged into the identifier means (2) is arranged into a micro chip. 9. A method according to claim 1 or 2, characterized in that the identifier data (2) arranged into the identifier means (2) is an optical identifier. 10. A method according to any one of the preceding claims, characterized in that the identifier means (1) and the identifier data (2) arranged thereto are used for confirming and interpreting the user's (3) access rights. 11. A method according to any one of the preceding claims, characterized in that the connection between the identifier data (2) arranged into the identifier means (1) and the data located separate from the identifier means (1) for creating various rights for the user (3) of the identifier means (1) is made and transferred to the user (3) in real-time, after the user (3) has confirmed that he/she is entitled to the rights to be associated with the identifier means (1).

Inventors: GEFWERT DADA, GEFWERT, DADA
Applicants: GEFWERT DADA, WEBPRINT KY, GEFWERT, DADA
Application year: 2000
Main classification: G06F17
IPC codes: G06F1, G06F21, G07B15, G07F7