Abstract:
The current invention discloses a solution for using a surface based computing device for verification of an identification document, such as a driver&#39;s license. A surface based computing device can be a device capable of scanning an identification document, comparing the scanned document against a set of conditions for a valid document, and reporting comparison results. A secured resource can be granted based at least in part upon identity verifications conducted by the surface based computing device. The surface based computing device can include a MICROSOFT SURFACE device or any other computing device able to scan an identification document and to process scanned results. In one embodiment, the surface based computing device can be used in conjunction with a human agent for added security.

Description:
BACKGROUND 
     1. Field of the Invention 
     The present invention relates to the field of surface based computing and, more particularly, to using a surface based computing device for verification of an identification document. 
     2. Description of the Related Art 
     Security measures involving identifying documents are used to access goods, services, secured regions, and the like. For example, alcohol distribution is age restricted and alcohol purchasers are required to show a driver&#39;s license or other photo identification that verifies their age at a time of sale. In another example, night clubs are commonly age restricted and only grant entry to people that meet the age requirement, as verified by an identifying document (e.g., driver&#39;s license). Many test taking facilities, such as facilities administering Scholastic Aptitude Tests (SAT) or American College Test (ACT) tests, require test takers to produce a valid photo identification document to verify that the person actually taking a test is a person receiving credit for the test results. 
     In conventional security situations, a human agent is involved in the verification process. Use of humans to verify identifying documents is inherently flawed for multiple reasons. First, human agents can be bribed to overlook a flawed identification document, such as when a cashier is paid excessive amounts for alcohol by a minor. Even if there are no bribes are involved, humans are generally not skilled at verifying a legitimacy of identifying documents, especially when the documents are from a state or a country other than the one the human agent is in. More specifically, a human agent is generally not very good at knowing whether items within an identifying document are positioned correctly, even though incorrect or inexact positioning of items is common for fake identifying documents. What is needed is a convenient, more secure way to verify identity which is not solely dependent on human verification. 
     SUMMARY OF THE INVENTION 
     The current invention discloses a solution for using a surface based computing device for verification of an identifying document, such as a driver&#39;s license. A surface based computing device can be a device capable of scanning an identifying document, comparing the scanned document against a set of conditions for a valid document, and reporting comparison results. A secured resource can be granted based at least in part upon identity verifications conducted by the surface based computing device. The surface based computing device can include a MICROSOFT SURFACE device or any other computing device able to scan an identifying document and to process scanned results. In one embodiment, the surface based computing device can be used in conjunction with a human agent for added security. 
     The present invention can be implemented in accordance with numerous aspects consistent with the material presented herein. For example, one aspect of the present invention can include a method of granting access to a secured resource based upon verifying an identification document. The method can include a step of identifying an identification document placed on a surface based computing device. The surface based computing device can digitally encode information from the identification document. The digitally encoded information can be analyzed to determine a type of the identification document. Features for the determined type of identification document can be retrieved from a data store. The digitally encoded information can be compared against the retrieved features to determine a compatibility score. When the compatibility score exceeds a previously established threshold, the identification document can be verified as authentic. When the compatibility score does not exceed the previously established threshold, the identification document can remain unverified. Verified identification documents can be utilized to grant a related user access to a secured resource. In one embodiment, a human verification agent can be required to verify the identification document before access is granted to the secured resource. 
     Another aspect of the present invention can include a surface based computing device that includes a scanning device, an identification engine, and a user interface. The scanning device can scan an identification document. The identification engine can analyze an identification document scanned by the scanning device to determine a validity of the scanned document by comparing features of the scanned identification document against features of an identification document template for a document of a same type as the scanned identification document. The user interface can present verification results of the analysis performed by the identification verification engine. The verification results can be utilized to selectively grant access to a secured resource. 
     It should be noted that various aspects of the invention can be implemented as a program for controlling computing equipment to implement the functions described herein, or as a program for enabling computing equipment to perform processes corresponding to the steps disclosed herein. This program may be provided by storing the program in a magnetic disk, an optical disk, a semiconductor memory, or any other recording medium. The program can also be provided as a digitally encoded signal conveyed via a carrier wave. The described program can be a single program or can be implemented as multiple subprograms, each of which interact within a single computing device or interact in a distributed fashion across a network space. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
       There are shown in the drawings, embodiments which are presently preferred, it being understood, however, that the invention is not limited to the precise arrangements and instrumentalities shown. 
         FIG. 1  is a schematic diagram of a system for using a surface based computing device for verification of an identification document. 
         FIG. 2  illustrates an application interface of a surface based computing device used to verify of an identifying document in accordance with an embodiment of the inventive arrangements disclosed herein. 
         FIG. 3  is a flow chart of a method for using a surface based computing device for verification of an identifying document. 
     
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       FIG. 1  is a schematic diagram of a system  100  for using a surface based computing device  110  for verification of an identification document  109 . The identification document  109  can be provided for access to a secured resource. Standard identification documents  109  include a driver&#39;s license, social security card, state ID, a birth certificate, a military ID, a passport, and the like. The secured resource can be an age restricted good (e.g., alcohol, tobacco, etc.), can be a restricted access area (e.g., a movie theater, a nightclub, etc.), can be a transaction verification event (e.g., identity verification for a check, credit card, debit card use or for test taking purposes, etc.), and the like. The automated identity verification performed by the device  110  can be an exclusive system for verifying the identification document  109  or can be a supplemental mechanism used in conjunction with a human verifying agent  106 . 
     In system  100 , a user  105  can position the identification document  109  near the device  110  so that an included or attached scanning device  124  can function. Data obtained from the scanning device  124  can be processed by the identification engine  122  to determine a type of identification document  109  scanned. Once a type is determined, a data store  152  can be consulted (i.e., table  153 ) to determine exact features that the identification document  109  is to have. For example, a Florida Driver&#39;s License has different features arranged in a different manner than a New York Driver&#39;s License, or a Maryland Passport. Additionally, an automated device  110  is better at identifying differences in spatial arrangements than is a human agent  106 . The data store  152  can be managed by a backend server  148  remote from device  110  connected via network  140  or can be a data store of the device  110 , which is periodically updated from a remote source (e.g., data store  152 ). 
     In one implementation, a user  105  can be verified for a completely automated transaction based upon results of the feature comparison, which can be combined with a number of other optional verification techniques in order to increase system  100  accuracy. In a different implementation, a verifying agent  106  can also be involved in the identification document  109  verification process. The human agent  106  can monitor interaction between user  105  and the device  110  to minimize the ability of user  105  to deceive the device  110 . The agent  106  can also inspect the identification document  109  to validate other aspects, which are difficult for automated components of system  100  to detect. Such aspects can include document  109  texture, color, and the like. Additionally, many identification documents  109  incorporate anti-forgery elements, such as holograms, which are difficult to reproduce, difficult for many automated systems to detect, yet easy for a human agent  106  to discern. Further, the human agent  106 , who may not be familiar with details of the identification document  109  can be presented with information from the device  110 , such as a sample picture of what the document  109  should look like, which can be obtained from table  153 . In one embodiment, the agent  106  can be prompted to examine specific elements of the document  109 , such as looking for a hologram on the top right corner or looking for a magnetic strip on the back of the document. 
     As noted, the device  110  can implement numerous optional additional verification processes. These additionally verification procedures can be performed for each identification document  109  verification event, can be randomly performed as a safety measure within system  100  to keep users  105  “honest”, and/or can be selectively performed for abnormal transactions. An abnormal transaction can, for example, be an attempted purchase of a thousand dollars worth of alcohol, as opposed to a six pack of beer. 
     One such optional verification process uses an image capture device  126  to capture an image of user  105 . This image can be compared against an image contained in the identification document  109 . A captured image of the user  105  can also be compared against a stored image accessible by device  110  for the user  105 . The image capture device  126  can be situationally supplemented with any number of biometric input devices, such as a finger print reader, a voice print analyzer, and the like, depending on an amount of security desired for the system  100 . In one embodiment, users  105  can be required to register before using device  110 , where user  105  images and other biometric data is captured during the registration process for later use. The additional verification elements are not limited to biometrics, and pass codes, personal identification numbers (PINS), and the like can also be used. 
     Other optional verification processes can compare content from the document  109  extracted by content extraction engine  123  against an authority source. The authority source is indicated as a remotely located verification server  160  attached to the device  110  via network  140 . Server  160  can include a data store  162 , which can maintain a valid identification table  164 . For example, the verification server  160  can be a Department of Motor Vehicle (DMV) server, which maintains access to driver&#39;s license information for every license carrier. Content extracted from the scanned document  109  can be compared against equivalent elements in the table  164 . For example, when no valid driver&#39;s license number is found in table  164 , then the identification engine  122  can infer that the presented identification document  109  is not authentic. Similarly, attributes, such as an age attribute from the scanned document  109  can be compared against an equivalent element of table  164  to ensure the document  109  contains valid information. 
     In system  100 , a surface based computing device  110  can be any device able to scan an identification document  109  at a security junction, which is able to access a validity of the scanned document  109  so that a secured resource is optionally released to the user  105  depending on processing results. The surface based computing device  110  can be a surface able to recognize physical objects, including an identification document  109 , and to perform programmatic actions including verification/security actions pertaining to the document  109  involving the physical object. A surface based computing device  110  can be an enhancement of an otherwise ordinary tabletop which changes the “tabletop surface” into a vibrant, dynamic surface that provides effortless interaction with digital content through natural gestures, touch and physical objects. Surface computing device  110  integrates a variety of input and detection devices to permit “intuitive” interactions that do not involve traditional input devices, such as a mouse and keyboard. One implementation of a surface based computing device  110  is produced by MICROSOFT and is referred to presently as MICROSOFT SURFACE. The surface based computing device  110  is not limited to implementation specifics of the MICROSOFT SURFACE standard, but includes any set of standards, which together form a surface computing device. Software/firmware  111  of device  110  can include an identity verification application  120 , which includes an identification engine  122  and/or a content extraction engine  123 . Hardware  112  of device  110  can include the scanning device  124 , a transceiver  125  for network  140  communications, and/or an image capture device  126 . 
     Scanning device  124  can be any device capable of visually capturing details of identification  109  and encoding the captured details in a digital form for later processing. The scanning device  124  can utilize any scanning technology, such as optical character recognition (OCR) techniques, to extract meaning from the document  109 . 
     The data stores  152 ,  162  can be physically implemented within any type of hardware including, but not limited to, a magnetic disk, an optical disk, a semiconductor memory, a digitally encoded plastic memory, or any other recording medium. Each of the data stores  152 ,  162  can be a stand-alone storage unit as well as a storage unit formed from a plurality of physical devices which may be remotely located from one another. Additionally, information can be stored within the data stores  152 ,  162  in a variety of manners. For example, information can be stored within a database structure, such as table  153  and  164  information, or can be stored within one or more files of a file storage system where each file may or may not be indexed for information searching purposes. Information stored in data stores  152 ,  162  can also be optionally encrypted for added security. 
     The network  140  can include components capable of conveying digital content encoded within carrier waves. The content can be contained within analog or digital signals and conveyed through data or voice channels and can be conveyed over a personal area network (PAN) or a wide area network (WAN). The network  140  can include local components and data pathways necessary for communications to be exchanged among computing device components and between integrated device components and peripheral devices. The network  140  can also include network equipment, such as routers, data lines, hubs, and intermediary servers which together form a packet-based network, such as the Internet or an intranet. The network  140  can further include circuit-based communication components and mobile communication components, such as telephony switches, modems, cellular communication towers, and the like. The network  140  can include line based and/or wireless communication pathways. 
       FIG. 2  illustrates an application interface  200  of a surface based computing device used to verify of an identification document in accordance with an embodiment of the inventive arrangements disclosed herein. The interface  200  can be one contemplated interface for the surface based computing device  110  of system  100 . The displayed elements of interface  200  are for illustrative purposes only and adaptations, rearrangements, and modifications of the interface  200  are to be considered within the scope of the disclosed invention. 
     The interface  200  can request  204  a user to present an identification document within a designated detection area  205  of a surface-computing device. Once placed in the detection area  205 , the identification document can be scanned and processed. Results of the processing can be displayed  210  to a user along with additional requirements as necessary. Additional verification information may be required in some embodiment, which a user can provide through any suitable input mechanism, such as keypad  215  for a PIN, a finger print reader for a fingerprint, and the like. When a user&#39;s image is captured, the image can be played back to the user in image preview  202 . A user can be informed that their image  202  is stored for a period of time until the transaction occurring via interface  200  has been successfully verified. Additionally, measures can be taken to ensure the image  202  is not easily faked, such as through use of a photograph or other still. For example, the surface based computing device can require the image in preview  202  to change over time, such as in a manner consistent with images that change when users currently utilize a Web-camera or other such image capture device. 
       FIG. 3  is a flow chart of a method  300  for using a surface based computing device for verification of an identification document. Method  300  can begin in step  310 , where the user can enter a restricted location which can require proper identification. In step  315 , the user can be prompted for identification by an application running on a surface based computing device. In step  320 , the user can place the identification document on the computing device&#39;s identification detection area. 
     In step  325 , the computing device can scan the identification document. In step  330 , the computing device can consult a database of identification types and retrieve determining characteristics of the identification document&#39;s type. The consulted database can be located on the surface base computing device, on a peripheral data store connected to the computing device, or on a network data store linked to the computing device. The type of document can be automatically determined by the computing device using recognition technologies such as optical character recognition (OCR) after scanning the document and extracting text from the document. For example, step  330  can determine a scanned document is an Ohio driver&#39;s license. In step  335 , the computing device can compare the scan&#39;s results to the database derived characteristics. For example, when the scanned identification was determined to be an Ohio driver&#39;s license, the characteristics returned from the database can specify the elements, element arrangements, and relative positions of elements that are appropriate for an Ohio driver&#39;s license, which is compared against the scanned identification. 
     In step  335 , if the comparison fails, method  300  can return to step  315 , where the user can be prompted again for identification by an application running on a surface based computing device. The method  300  repeats back to step  315  to ensure the document was properly placed upon the surface based device during the scan. After a number of incorrect attempts, the scanning attempt can fail and access to a secured resource can be denied. In step  335 , if the comparison succeeds, method  300  can continue to step  340 , where the document can appear to be valid. 
     In step  345 , the computing device can use optical character recognition (OCR) to recognize the content of the document. In step  350 , the computing device can search a network source to obtain content associated with the identification document and the scanned content can be compared against the content from the source. For example, a Department of Motor Vehicle (DMV) database can be searched to ensure a scanned driver&#39;s license number is valid and is associated with an individual specified by the scanned documents. Other scanned attributes, such as date of birth, can also be validated against content contained in a validation source (e.g., DMV database). 
     In step  355 , the computing device can optionally capture a picture of the user, using an image capturing device. In step  360 , the acquired picture can be compared to a photo stored over a network source and/or a photo included in the scanned document. If in step  360 , the comparison fails, method  300  can return to step  315 , where the user can be prompted again for identification from a surface based computing device. 
     If in step  360  the comparison succeeds, method  300  can continue to step  365 , where the automated verification can succeed. In step  370 , additional human verification can be optionally required. For example, humans are particularly good at identifying a texture and “face validity” of an identification document, which an automated system may not be able to discern. If in step  370  human verification is not required, method  300  can return and end in step  365 , where the verification can succeed. 
     If in step  365 , human verification is required, method  300  can continue to step  375 , where a human agent can be optionally prompted with the attributes of the identification document to analyze. For example, a human agent can be shown a valid identification document of a type similar to that produced, where elements to check, such as holographic elements, are highlighted. In step  380 , the agent can attempt to verify the attributes or otherwise verify the identification document. If in step  380 , the agent verifies the identification as valid, method  300  can return and end in step  365 , where the document can be successfully verified. If in step  380 , the agent does not verify the identification as valid, method  300  can return to step  315 , where the user can be prompted again to use the surface based computing device to identify the document (or a different identification document). 
     The present invention may be realized in hardware, software, or a combination of hardware and software. The present invention may be realized in a centralized fashion in one computer system, or in a distributed fashion where different elements are spread across several interconnected computer systems. Any kind of computer system or other apparatus adapted for carrying out the methods described herein is suited. A typical combination of hardware and software may be a general purpose computer system with a computer program that, when being loaded and executed, controls the computer system such that it carries out the methods described herein. 
     The present invention also may be embedded in a computer program product, which comprises all the features enabling the implementation of the methods described herein, and which when loaded in a computer system is able to carry out these methods. Computer program in the present context means any expression, in any language, code or notation, of a set of instructions intended to cause a system having an information processing capability to perform a particular function either directly or after either or both of the following: a) conversion to another language, code or notation; b) reproduction in a different material form. 
     This invention may be embodied in other forms without departing from the spirit or essential attributes thereof. Accordingly, reference should be made to the following claims, rather than to the foregoing specification, as indicating the scope of the invention.