Patent Description:
In particular, the present invention relates to an online verification method and system for verifying the identity of a subject through a mobile electronic device in a digital identification procedure.

As is known, the digital identity is the set of information and resources given by an information system to a particular user of the aforementioned system under an identification procedure. In a wider meaning it comprises the set of information present online and relative to a user, a body, or the like.

Digital identity therefore means a set of credentials, username and password, that are associated with a physical person or company to establish an actual virtual recognition electronic document.

A digital identity more simply consists of a username and a secret identification word (or password). In this case the username is the identity, while the password is called the authentication credential.

In transactions, when it is proven that the digital identity is effectively that of whoever or whatever says it is, we talk about the authentication process.

Authentication with only one factor (i.e. with a username and password) is not very secure because the password could be identified by someone who is not the real user. Multi-factor authentication may be more secure, e.g. with a physical security key, magnetic card, smart card and a password. If biometric information is added (iris, fingerprint, voiceprint, face recognition, etc.) we have more robust authentication factors.

New identification and authentication procedures have been continuously developed, that replace and/or support classic passwords that can be poor in terms of security.

The generation and sending of passwords only generated once (OTP, "One Time Password") for the subject is also known in identification and authentication procedures. Such OTP passwords are valid for one access session or a single transaction only.

In some known identification procedures, files may be requested containing copies of personal documents such as ID cards, passports or healthcare cards to verify the real identity of the subject during the authentication step.

An authentication process of a subject is also known which allows a digital identity to be authenticated, adapted to operate with any body or subject of the Italian Public Administration through a single digital identity (username and password), through the use of computers, smartphones and/or tablets.

This known process requires authentication through an operator of an accredited identity service provider. In particular, in the online recognition situation, the subject must exhibit simultaneously to the capturing device an image of the subject him/herself and of an SMS ("Short Message Service"), containing an OTP code ("One Time Password"), previously sent by the operator to the mobile electronic device, so that the operator of the identity service provider is able to correctly verify the identity of the subject requesting the digital identity and the simultaneous possession of the mobile electronic device used for receiving the OTP code.

Such procedure is possible when the subject is in front of a PC provided with a camera adapted for the simultaneous capturing of the subject and of a mobile electronic device in his/her possession that displays the SMS containing the OTP code just received on its display.

Such procedure is not possible if the subject is only in possession of the mobile electronic device, as with such device it would not be possible to simultaneously capture the face of the subject and the SMS containing the OTP code.

Therefore, a need is felt for a verification procedure that envisages showing and simultaneously acquiring the image of the requesting subject and an OTP code received on the mobile electronic device of the subject, through the use of the mobile electronic device only.

<CIT> discloses validating the identity of an individual using a user credential including both a user biometric (such as a photo or a fingerprint) and a unique identifier associated with the user credential (such as the driver's license number or passport).

The object of the present invention is that of providing an online verification method and system for verifying the identity of a subject that allows identification should the subject be in possession of the mobile electronic device only.

Another object of the present invention is that of providing an online verification method and system for verifying the identity of a subject through the use of a mobile electronic device that can guarantee a high level of security.

A further object of the present invention is that of providing an online verification method and system for verifying the identity of a subject that is quick and efficient.

A further and not least object of the present invention is that of providing an online verification method and system for verifying the identity of a subject that is highly reliable, easy to realise and simple to use.

These and other objects are achieved by an online identification method for identifying a subject as described in claims <NUM> to <NUM>.

These and other objects are also achieved by an online identification system for identifying a subject as described in claims <NUM> and <NUM>.

The invention also finally provides a computer program which actuates one or more of the steps of the method, as described in claim <NUM>.

In a first aspect, the invention describes an online verification method for verifying the identity of a subject comprising the steps of a) generating, by a module, a random code associated with a subject to be identified; b) sending, from said module to the mobile electronic device of the subject to be identified, a text message including the random code or a hypertext link for selecting the random code; c) receiving, at the mobile electronic device, said text message including the random code or the hypertext link; d) acquiring, by means of the at least one electronic image acquisition device of the mobile electronic device, at least one first image representing the subject; e) generating, by a second acquisition module of a processing unit of the mobile electronic device, a second image representing the random code received at the mobile electronic device within said text message or selected with the hypertext link of the text message; f) processing in a single composite screen page comprising at least two images, the at least one first image representing the subject and a second image representing the random code; g) performing, at a server (9a, 9b), a check between the random code (S_COD2) displayed in a field in a graphical interface of the mobile electronic device (<NUM>) of the subject (<NUM>) and the random code (S_COD1) generated by the server.

In a second aspect the invention describes an online verification system for verifying the identity of a subject, comprising:.

wherein the processing unit is in data communication with the subject to be identified, said processing unit comprising:.

the system further comprising a server configured to perform a check between the random code displayed in a field in a graphical interface of the mobile electronic device of the subject and the random code generated by the server.

In a third aspect, the invention describes a computer program, which, when running on a computer, implements at least one or more steps of the method according to the first aspect of the invention.

The invention achieves the following technical effects:.

Further characteristics and advantages of the invention will more fully emerge from the description of a preferred but not exclusive embodiment of an online method and verification system for verifying the identity of a subject according to the invention, illustrated by way of indicative and nonlimiting example with reference to the accompanying drawings.

The description is provided below with reference to the accompanying figures, whose purpose is likewise purely illustrative and hence nonlimiting, in which:.

With reference to the cited figures, the online verification system for verifying the identity of a subject according to the invention is indicated overall with the reference number <NUM> in the block diagram of <FIG>.

<FIG> illustrates a subject <NUM> to be identified equipped with a mobile electronic device <NUM> and a remote operator <NUM> equipped with an electronic device <NUM>.

The remote operator <NUM> is preferably an operator qualified to recognise the identity of a subject and to register him/her.

The mobile electronic device <NUM> of the subject <NUM> to be identified and the electronic device <NUM> of the remote operator <NUM> are provided with interfaces that allow them to communicate with each other through a telematic communication network <NUM>.

The telematic network <NUM> is preferably the internet but could also be an intranet network or any private network adapted to implement a client-server type communication protocol. The telematic network <NUM> is connected, where necessary, to mobile networks for communication between the remote operator <NUM> and the subject <NUM>.

The mobile electronic device <NUM> comprises a display <NUM> adapted to display alphanumerical characters, images and videos and at least one electronic image acquisition device <NUM> adapted to acquire images and/or videos. The mobile electronic device <NUM> is configured to enable the subjects <NUM> to be identified to receive communications according to at least two distinct channels: in a preferred embodiment these channels are email and/or SMS messages. Furthermore, the mobile electronic device <NUM> allows the subject <NUM> to be identified to be connected in real time in audio and video connection with the remote operator <NUM>.

The electronic device <NUM> of the remote operator <NUM> comprises a means for communicating in real time through an audio and video connection with the subject <NUM> to be identified according to a plurality of channels, in particular, in a preferred embodiment, in the form of text messages. The text messages can preferably be emails and/or text chat messages.

Preferably, the audio and video connection is a video conference connection, e.g. through an instant messaging service such as, for example, Skype, Hangouts, Messenger or the like.

The electronic device <NUM> of the remote operator <NUM> is also provided with a display and at least one electronic image acquisition device (not shown in the appended figures) adapted to acquire images and/or videos, so as to be able to make a video conference connection with a subject <NUM>.

Preferably, the mobile electronic device <NUM> of the subject <NUM> to be identified and the electronic device <NUM> of the remote operator <NUM> are in data connection with an Application Server 9a, also provided with an interface that allows them to communicate through an telematic communication network <NUM>.

As illustrated in <FIG>, the system comprises a module <NUM> configured to generate a random code S_COD1 and means suitable for sending the random code S_COD1 to the mobile electronic device <NUM> of the subject <NUM> to be identified through a telematic network <NUM>.

The random code S_COD1 is generated for a limited time period and is only valid for a single access session or identity verification.

Alternatively, a remote server 9b, connected through the telematic network <NUM>, contains the module <NUM> configured to generate the random code S_COD1 and is managed by a third party.

The system <NUM> also comprises a processing unit <NUM> in data communication with the subject to be identified <NUM> and the module <NUM> configured to generate and send the random code S_COD1.

Preferably, the at least one first image 11a representing the subject <NUM> could comprise two or more images of the subject in different positions such as, for example, a front image and a profile image.

Preferably, the random code S_COD1 can be generated through an algorithm based on coordinated timing between the authentication server and client that provides the random code (OTPs are only valid for a short period of time), or through a mathematical algorithm that generates a new random code based on the previous code (in fact, the codes are a chain of interconnected codes, and must be used in a predefined order) or through a mathematical algorithm where the random code is based on a challenge (e.g. a random number selected by the authentication server or from the transaction details) and/or on a counter.

Preferably, the system <NUM> according to the present invention comprises a means adapted to create a video conference connection between the subject to be identified <NUM> and the remote operator <NUM>.

In the embodiment of <FIG>, the processing unit <NUM> is illustrated inside the mobile electronic device <NUM> of the subject <NUM> to be identified. However, the processing unit <NUM> could be located inside the electronic device <NUM> of the remote operator <NUM> or inside the server 9a.

In general, it should be noted that in the present context and in the subsequent claims, the processing unit <NUM> is considered to be split into distinct functional modules (storage modules or operating modules) for the sole purpose of describing its functionalities clearly and completely.

Such processing unit can comprise a single electronic device, appropriately programmed to perform the functionalities described, and the different modules can correspond to hardware entities and/or routine software that are part of the programmed device.

Alternatively or additionally, such functions may be performed by a plurality of electronic devices over which the aforesaid functional modules can be distributed.

The processing unit <NUM> can also make use of one or more processors for executing the instructions contained in the storage modules.

The aforementioned functional modules can also be distributed on different local or remote computers, depending on the architecture of the network in which they reside.

The processing unit <NUM> is in data communication with the subject to be identified <NUM>, with the electronic device <NUM> of the remote operator <NUM>, with the module <NUM> configured to generate a random code and with the means adapted to send the random code.

The processing unit <NUM> comprises a first acquisition module <NUM> configured to acquire at least one first image 11a representing the subject <NUM> from the electronic image acquisition device <NUM>, a second acquisition module <NUM> configured to generate a second image 11b representing the random code S_COD2 received by the mobile electronic device <NUM> and an image-processing module <NUM> configured to process in a single composite screen page <NUM> comprising at least two images, as illustrated in <FIG>. The at least two images of the composite screen page <NUM> comprise the at least one first image 11a representing the subject <NUM> to be identified and the second image 11b representing the random code S_COD2 received on the mobile electronic device.

Preferably, the system <NUM> comprises a third acquisition module for acquiring a third image 11c representing a remote operator <NUM> equipped with an electronic device <NUM>, equipped with at least one camera and audio devices (at least one loudspeaker and a microphone), in audio and video connection with the subject <NUM> to be identified.

Preferably, the remote operator <NUM> performs the identification process of the subject <NUM> in real time.

The image processing module <NUM> is further configured to process in a single composite screen page <NUM> the at least one first image 11a representing the subject <NUM>, the second image 11b representing the random code S_COD2 and the third image 11c representing the remote operator <NUM>.

The acquisition of the image 11c representing the remote operator <NUM> preferably takes place through an electronic image acquisition device present in the electronic device <NUM>.

The image processing module <NUM> is preferably configured to process in a single composite screen page <NUM> the at least one first image 11a representing the subject <NUM>, the second image 11b representing the random code S_COD2 and a third image 11c representing the remote operator <NUM>, as illustrated in <FIG>.

Contextually, the image of the composite screen page <NUM> is transmitted to the Application Server 9a and/or to the electronic device <NUM> of the remote operator <NUM>.

Preferably, the random code S_COD1 associated with the subject <NUM> to be identified, is sent to the subject <NUM> within a text message S_TXT, as a signal S_COD1.

Preferably, the module <NUM> detects the random code S_COD2 contained in the body of the text message S_TXT and enters it in a specific field found in a graphical interface represented on the mobile electronic device <NUM> of the subject <NUM>.

Optionally, the random code S_COD2 is sent by the module <NUM> present on the mobile electronic device <NUM> of the subject <NUM> also to the electronic device <NUM> of the remote operator <NUM> and entered in a specific field found in the remote operator side graphical interface <NUM>.

Preferably, the system comprises a module able to recognise the operating system of the mobile electronic device <NUM> of the subject <NUM>. For example, the recognition module of the operating system is able to detect whether the operating system is Android or IOS or Microsoft Mobile or others.

In the event that the operating system recognised is Android, the module <NUM> generates and sends a text message S_TXT containing the random code S_COD1 within the body of the message.

In that case, the random code S_COD2 received by the subject <NUM> to be identified is recognised by the acquisition module <NUM> and displayed in the relevant field of the graphical interface of the mobile electronic device <NUM> of the subject <NUM>.

In the event that the operating system recognised is IOS by Apple, the module <NUM> generates a text message S_TXT containing a hypertext link in the body of the message.

In that case, the random code S_COD2 is displayed by the acquisition module <NUM>, in the relevant field of the graphical interface of the mobile electronic device <NUM> of the subject <NUM> by means of the selection (clicking) of the hypertext link contained within the body of the text message S_TXT, without any manual intervention by the operator.

In both the situations described above, any possible typing errors in the event that the subject had to copy or dictate the random code S_COD2 received can be avoided and the identity verification procedure is quicker.

Preferably, the random code S_COD2 is automatically displayed in the relevant field of the graphical interface represented in the electronic device <NUM> of the remote operator <NUM>.

Preferably, the random code S_COD1 is automatically generated by an Application Server 9a. Optionally, the remote server 9b is part of a third party responsible for generating and sending random codes S_COD1.

Preferably, the random code S_COD1 associated with the subject <NUM> to be identified has a time duration and is different at each request for the online verification of the identity of the subject <NUM>. In particular, the random code S_COD1 is a "One-Time Password" which is only valid for the single identification session or verification.

Preferably, the server 9a or 9b that generated the code S_COD1 performs a verification between the random code S_COD2 displayed in the relevant field of the graphical interface of the mobile electronic device <NUM> of the subject <NUM> and the random code S_COD1 generated, optionally following the express command of the remote operator <NUM>.

In the event that the two random codes S_COD1; S_COD2 coincide, the composite screen page <NUM>, displayed on the mobile electronic device <NUM>, comprising the at least two images 11a and 11b, is captured. Preferably the capture of the composite screen page <NUM> can take place following the express command of the remote operator <NUM>.

Advantageously, the online verification system <NUM> for verifying the identity of a subject according to the invention can comprise a facial recognition method and system for recognising the remote user to be identified. In that case, the system exploits the electronic image acquisition device <NUM> of the mobile electronic device <NUM> to acquire in real time a plurality of images representing the face of the subject to be identified, through the movement of the head of the subject in different positions starting from an initial position. The acquisition module <NUM>, of the processing unit <NUM>, is therefore configured to receive a plurality of acquired images (of the subject to be identified), configured to process the plurality of acquired images and to measure, according to them, at least one biometric parameter of the face of the person associated with said different head positions, obtaining a plurality of measurements of the biometric parameters of the face, configured to verify whether the variations of the values of at least part of said plurality of measurements of at least one biometric parameter associated with the head movement are compatible with each other, and configured to generate a positive or negative outcome signal of the recognition of the face in real time, in the event of said respectively positive or negative verification of the compatibility of the measurements of the at least one biometric parameter. Furthermore, said acquisition module <NUM> configured to recognise the face, can comprise performing a comparison between one or more images captured in real time by the mobile electronic device <NUM> of the subject to be identified and an image acquired of the user (e.g. from an identity document, passport, driving licence or the like), in order to verify with precision whether the images captured in real time of the subject to be identified represent the face of the same user represented in the acquired image.

Advantageously, some or all of the subject identification steps can be performed automatically, without the intervention of a remote operator, by means of performing a process performed by the processing unit and possibly with the support of a chatbot that provides text instructions by means of an online chat (referred to as "automa").

The streaming video (sequence of individual images) of the subject to be identified during all the recognition steps of the subject captured by the electronic image acquisition device <NUM> are displayed on the display <NUM> of the mobile electronic device <NUM> while the subject communicates (by looking at the display <NUM>) with the remote operator or with the automa. In a preferred but not limiting embodiment of the invention, the first acquisition module <NUM> is configured to acquire at least one frame (i.e. single image) of the streaming video displayed by the subject on his/her display <NUM>; the frame acquired thus constitutes the at least one first image 11a that represents the subject <NUM> to be identified.

Preferably, the image 11a that represents the subject <NUM> to be identified is a frame of the streaming video provided on the application server 9a and captured in real time.

The composite screen page <NUM> comprising the at least two images 11a; 11b is memorised in a server provided with a memory. In particular, the server provided with a memory preferably coincides with the Application Server 9a.

Preferably, the online verification system and method for verifying the identity of a subject, described above, is placed within an online identification procedure for identifying the identity of the same subject.

Once the online audio and video connection between the electronic device <NUM> of the remote operator <NUM> and the mobile electronic device <NUM> of the subject <NUM> to be identified has been performed, some preliminary operations can be performed. For example, a request for the personal data of the subject <NUM>, warnings and disclaimers of the remote operator <NUM> to the subject <NUM>, a request for the identity document and tax code, compilation of data by the remote operator. After the operator has compiled the subject's data, a screen page can preferably be proposed again summarising the data entered with a request for approval by the subject. The remote operator can verify the existence of the natural person by connecting for example to the revenue agency's portal and/or to the website of the Ministry of the Interior. Consent may also be requested for the recording of the audio/video session for subsequent storage thereof. Following the aforementioned preliminary operations, the audio and video session with the qualified remote operator is started.

Claim 1:
An online verification method comprising the steps of:
a) generating, by a module (<NUM>) at a server, a random code (S_COD1) associated with a subject (<NUM>) to be identified;
b) recognizing the operating system of a mobile electronic device (<NUM>) of the subject (<NUM>) and sending, from said module (<NUM>) to a mobile electronic device (<NUM>) of the subject (<NUM>) to be identified, a text message (S_TXT) including the random code (S_COD1) or a hypertext link for selecting the random code (S_COD1);
c) receiving, at the mobile electronic device (<NUM>), said text message (S_TXT) including the random code (S_COD2) or the hypertext link;
d) acquiring, by means of the at least one electronic image-taking device (<NUM>) of the mobile electronic device (<NUM>), at least one first image (11a) representing the subject (<NUM>);
e) detecting, by a second acquisition module (<NUM>) of a processing unit (<NUM>) of the mobile electronic device (<NUM>), the random code (S_COD2) in the body of the text message (S_TXT) and displaying it in a field of a graphical interface represented on the mobile electronic device (<NUM>) of the subject (<NUM>), or selecting the hypertext link contained within the body of the text message and displaying the random code in said field of the graphical interface;
f) generating, by the second acquisition module (<NUM>) of the processing unit (<NUM>) of the mobile electronic device (<NUM>), a second image (11b) representing the random code (S_COD2) received at the mobile electronic device (<NUM>) within said text message (S_TXT) or selected with the hypertext link of the text message;
g) processing in a single composite screen page (<NUM>) comprising at least two images, the at least one first image (11a) representing the subject (<NUM>) and the second image (11b) representing the random code (S_COD2);
h) performing, at the server (9a, 9b), a check between the random code (S_COD2) represented in the second image of the single composite screen page (<NUM>) and the random code (S_COD1) generated by the server.