Patent Description:
Travelers are known to wait in lengthy time-consuming queues in transportation hubs while traveling for business and recreation. Queue lengths vary with fluctuating traveler volumes, traveler behavior, and resource constraints of transportation hubs, and are known to be particularly burdensome for travelers during or around holiday seasons and during inclement weather. Such burdensome queues may cause travelers to miss, for example, an airplane flight and perhaps a connecting flight resulting in inconvenient, frustrating delays. Additionally, hotels and individuals planning to collect the traveler may need to be notified of delays.

Because travelers are typically close to each other in such queues, travelers are more likely to contract pathogens from each other while in the queue. Such queue conditions may thus present a dangerous health risk for travelers who are vulnerable to lethal pathogens like the coronavirus.

Currently, transportation hub operators use historical traveler data to predict the timing of daily, weekly, and holiday traveler volume surges and allocate resources according to the predictions. However, despite the best efforts of transportation hub operators overcrowded queues continue to develop. Therefore, known techniques for managing transportation hub queues have drawbacks.

<CIT> describes a decryption system for use with machine readable travel documents such as electronic passports.

Thus, it would be advantageous and an improvement over the relevant technology to provide an apparatus, method and computer-readable readable recording medium capable of enhancing authorization to access transportation hub services to reduce traveler inconvenience and reduce health risks for travelers.

An aspect of the present disclosure provides a method as detailed in claim <NUM>. Advantageous features are in the dependent claims.

An aspect of the present disclosure provides an electronic device per claim <NUM> and a computer program per claim <NUM>.

The following detailed description is made with reference to the accompanying drawings and is provided to assist in a comprehensive understanding of various example embodiments of the present disclosure. The following description includes various details to assist in that understanding, but these are to be regarded merely as examples and not for the purpose of limiting the present disclosure as defined by the appended claims and their equivalents. The words and phrases used in the following description are merely used to enable a clear and consistent understanding of the present disclosure. In addition, descriptions of well-known structures, functions, and configurations may have been omitted for clarity and conciseness. Those of ordinary skill in the art will recognize that various changes and modifications of the examples described herein can be made without departing from the spirit and scope of the present disclosure.

<FIG> is a schematic diagram of an example computing system <NUM> for enhancing authorization to access transportation hub services according to an embodiment of the present disclosure. As shown in <FIG>, the main elements of the system <NUM> include a computing device <NUM>, a computer <NUM>, and an access control mechanism (ACM) <NUM> communicatively connected via a network <NUM>.

In <FIG>, the computing device <NUM> can be any wireless hand-held electronic consumer computing device capable of at least downloading applications over the Internet, running the applications, capturing and storing data temporarily and/or permanently, and otherwise performing any and all functions described herein by any computer, computer system, or computing device included in the system <NUM>. One example of the computing device <NUM> is a smart phone. Other examples include, but are not limited to, a cellular phone, a tablet computer, a phablet computer, a laptop computer, and any type of hand-held consumer electronic device having wired or wireless networking capabilities capable of performing the functions, methods, and/or algorithms described herein. Although the system <NUM> includes a single computing device <NUM>, it is contemplated by the present disclosure that the system <NUM> may include any number of computing devices <NUM>. Each computing device <NUM> is typically associated with a single traveler as described herein. However, it is contemplated by the present disclosure that each computing device <NUM> may alternatively be associated with more than one traveler, for example, a husband and wife.

The computer <NUM> can be, for example, any type of server or computer implemented as a network server or network computer. The computing device <NUM> and computer <NUM> may alternatively be referred to as electronic devices or information systems.

The ACM <NUM> can be any automated self-service barrier which can obtain data stored in a chip of a document to verify a traveler's identity. For example, biometric template data stored in the chip may be obtained and used to biometrically verify the identity of the traveler. One example of an ACM <NUM> is an electronic gate (eGate). After a traveler is successfully authenticated, a physical barrier such as a gate or turnstile opens to permit passage.

The network <NUM> may be implemented as a <NUM> communications network. Alternatively, the network <NUM> may be implemented as any wireless network including, but not limited to, <NUM>, <NUM>, Wi-Fi, Global System for Mobile (GSM), Enhanced Data for GSM Evolution (EDGE), and any combination of a LAN, a wide area network (WAN) and the Internet. The network <NUM> may also be any type of wired network or a combination of wired and wireless networks.

It is contemplated by the present disclosure that the number of computing devices <NUM>, computers <NUM>, and ACMs <NUM> is not limited to the number of computing devices <NUM>, computers <NUM>, and ACMs <NUM> shown in <FIG>.

<FIG> is a more detailed schematic diagram illustrating the computing device <NUM>, the computer <NUM>, and the ACM <NUM> in the system <NUM> for enhancing authorization to access transportation hub services according to an embodiment of the present disclosure. Transportation hub services include, but are not limited to, security services and modes of transportation. Although <FIG> shows one computing device <NUM>, one ACM <NUM>, and one computer <NUM>, the computing device <NUM>, the ACM <NUM>, and the computer <NUM> in the figure are meant to be representative of additional computing devices <NUM>, ACMs <NUM>, and computers <NUM> that may be included in the system <NUM> shown in <FIG>.

The computing device <NUM> includes components such as, but not limited to, one or more processors <NUM>, a memory <NUM>, a communications interface <NUM>, a bus <NUM>, a camera <NUM>, a user interface <NUM>, a display <NUM>, and a sensing device <NUM>. General communication between the components in the computing device <NUM> is provided via the bus <NUM>.

The processor <NUM> executes software instructions, or computer programs, stored in the memory <NUM>. As used herein, the term processor is not limited to just those integrated circuits referred to in the art as a processor, but broadly refers to a computer, a microcontroller, a microcomputer, a programmable logic controller, an application specific integrated circuit, and any other programmable circuit capable of executing at least a portion of the functions and/or methods described herein. The above examples are not intended to limit in any way the definition and/or meaning of the term "processor.

The memory <NUM> may be any non-transitory computer-readable recording medium. Non-transitory computer-readable recording media may be any tangible computer-based device implemented in any method or technology for short-term and long-term storage of information or data. Moreover, the non-transitory computer-readable recording media may be implemented using any appropriate combination of alterable, volatile or non-volatile memory or non-alterable, or fixed, memory. The alterable memory, whether volatile or non-volatile, can be implemented using any one or more of static or dynamic RAM (Random Access Memory), a floppy disc and disc drive, a writeable or re-writeable optical disc and disc drive, a hard drive, flash memory or the like. Similarly, the non-alterable or fixed memory can be implemented using any one or more of ROM (Read-Only Memory), PROM (Programmable Read-Only Memory), EPROM (Erasable Programmable Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), and disc drive or the like. Furthermore, the non-transitory computer-readable recording media may be implemented as smart cards, SIMs, any type of physical and/or virtual storage, or any other digital source such as a network or the Internet from which a computing device can read computer programs, applications or executable instructions.

The memory <NUM> may be used to store any type of data, for example, data records of travelers. The data records are typically for travelers associated with the computing device <NUM>. The data record for each traveler may include data such as, but not limited to, health credentials, reservation credentials, electronic tokens, health questionnaires, messages for prompting travelers to perform an action, biometric modality data, biometric templates, and personal data. Biometric modality data is the data of a biometric modality of a person captured by the computing device <NUM>. Biometric modalities include, but are not limited to, voice, face, finger, iris, palm, any other modalities, and any combination of modalities. Biometric modality data may be in any form including, but not limited to, image data and audio data. Image data may be a digital image, a sequence of digital images, or a video. Each digital image is included in a frame. The biometric modality data in the data record may be processed to generate at least one biometric modality template. The memory <NUM> may also store an identifier of the computing device <NUM>. The identifier may include all numbers, all letters, or may be alphanumeric and may be of any length.

Biometric modality data may be captured in any manner. For example, for voice biometric data the computing device <NUM> may record a user speaking. For face biometric data, the camera <NUM> may record image data of the face of a user by taking one or more photographs or digital images of the user, or by taking a video of the user. The camera <NUM> may record a sequence of digital images at irregular or regular intervals. A video is an example of a sequence of digital images being captured at a regular interval. Captured biometric modality data may be temporarily or permanently stored in the computing device <NUM> or in any device capable of communicating with the computing device <NUM> via the network <NUM>. As used herein, capture means to record temporarily or permanently, any data including, for example, biometric modality data of a person.

The process of verifying the identity of a user is known as a verification transaction. Typically, during a verification transaction a biometric template is generated from biometric modality data of a user captured during the transaction. The generated biometric template is compared against the corresponding record biometric template of the user and a matching score is calculated for the comparison. If the matching score meets or exceeds a threshold score, the identity of the user is verified as true. Alternatively, the captured user biometric modality data may be compared against the corresponding record biometric modality data to verify the identity of the user. An authentication data requirement is the biometric modality data desired to be captured during a verification or identification transaction.

The term "personal data" as used herein includes any demographic information regarding a traveler as well as contact information pertinent to the traveler. Such demographic information includes, but is not limited to, a traveler's name, age, date of birth, street address, email address, citizenship, marital status, and contact information. Contact information can include devices and methods for contacting the traveler.

Additionally, the memory <NUM> can be used to store any type of software. As used herein, the term "software" is intended to encompass an executable computer program that exists permanently or temporarily on any non-transitory computer-readable recordable medium that causes the computing device <NUM> to perform at least a portion of the functions, methods, and/or algorithms described herein. Application programs are software and include, but are not limited to, operating systems, Internet browser applications, enrolment applications, a travel related application, and any other software and/or any type of instructions associated with algorithms, processes, or operations for controlling the general functions and operations of the computing device <NUM>. The travel application can be downloaded from a digital distribution service via the network <NUM> using the computing device <NUM> or similar device. The software may also include computer programs that implement buffers and use RAM to store temporary data.

When executed by the processor <NUM>, the travel related application causes the computing device <NUM> to perform operations such as, but not limited to, capturing personal data about a traveler, capturing answers to a health questionnaire, creating a health credential for a traveler, creating a reservation credential for a traveler, creating an electronic token based on the health and reservation credentials for a traveler, displaying the electronic token, displaying an icon that includes a message for performing an action, determining whether or not a health credential was created within a period of time, and determining whether or not a reservation credential is for a current time. One example of the message is "Show QR Code".

The communications interface <NUM> may include various network cards, and circuitry implemented in software and/or hardware to enable wired and/or wireless communications with other computing devices <NUM> (not shown), the computer <NUM>, and the ACM <NUM> via the network <NUM>. Communications include, for example, conducting cellular telephone calls and accessing the Internet over the network <NUM>. By way of example, the communications interface <NUM> may be a digital subscriber line (DSL) card or modem, an integrated services digital network (ISDN) card, a cable modem, or a telephone modem to provide a data communication connection to a corresponding type of telephone line. As another example, the communications interface <NUM> may be a local area network (LAN) card (e.g., for Ethemet. or an Asynchronous Transfer Model (ATM) network) to provide a data communication connection to a compatible LAN. As yet another example, the communications interface <NUM> may be a wire or a cable connecting the computing device <NUM> with a LAN, or with accessories such as, but not limited to, other computing devices. Further, the communications interface <NUM> may include peripheral interface devices, such as a Universal Serial Bus (USB) interface, a PCMCIA (Personal Computer Memory Card International Association) interface, and the like.

The communications interface <NUM> also allows the exchange of information across the network <NUM>. The exchange of information may involve the transmission of radio frequency (RF) signals through an antenna (not shown). Moreover, the exchange of information may be between the computing device <NUM>, other computing devices <NUM> (not shown), the computer <NUM>, the ACM <NUM>, and other computer systems (not shown) capable of communicating over the network <NUM>.

Examples of other computer systems (not shown) include computer systems of service providers such as, but not limited to, financial institutions, medical facilities, national security agencies, merchants, and authenticators. The computing devices <NUM> (not shown) may be associated with any traveler or with any type of entity including, but not limited to, commercial and non-commercial entities.

The camera <NUM> captures image data. The camera <NUM> can be one or more imaging devices configured to record image data of at least a portion of the body of a traveler including any biometric modality of the traveler while utilizing the computing device <NUM>. Moreover, the camera <NUM> is capable of recording image data under any lighting conditions including infrared light. The camera <NUM> may be integrated into the computing device <NUM> as one or more front-facing cameras and/or one or more rear facing cameras that each incorporates a sensor, for example and without limitation, a CCD or CMOS sensor. Alternatively, the camera <NUM> can be external to the computing device <NUM>.

The user interface <NUM> and the display <NUM> allow interaction between a traveler and the computing device <NUM>. The display <NUM> may include a visual display or monitor that displays information to a traveler. For example, the display <NUM> may be a Liquid Crystal Display (LCD), active matrix display, plasma display, or cathode ray tube (CRT). The user interface <NUM> may include a keypad, a keyboard, a mouse, an illuminator, a signal emitter, a microphone, and/or speakers.

Moreover, the user interface <NUM> and the display <NUM> may be integrated into a touch screen display. Accordingly, the display may also be used to show a graphical user interface, which can display various data and provide "forms" that include fields that allow for the entry of information by the user. Touching the screen at locations corresponding to the display of a graphical user interface allows the person to interact with the computing device <NUM> to enter data, change settings, control functions, etc. Consequently, when the touch screen is touched, the user interface <NUM> communicates this change to the processor <NUM>, and settings can be changed or user entered information can be captured and stored in the memory <NUM>. The display <NUM> may function as an illumination source to apply illumination to an object while image data for the object is captured.

For user interfaces <NUM> that include an illuminator, the illuminator may project visible light, infrared light or near infrared light on a biometric modality, and the camera <NUM> may detect reflections of the projected light off the biometric modality. The reflections may be off of any number of points on the biometric modality. The detected reflections may be communicated as reflection data to the processor <NUM> and the memory <NUM>. The processor <NUM> may use the reflection data to create at least a three-dimensional model of the biometric modality and a sequence of two-dimensional digital images. For example, the reflections from at least thirty thousand discrete points on the biometric modality may be detected and used to create a three-dimensional model of the biometric modality. Alternatively, or additionally, the camera <NUM> may include the illuminator.

The sensing device <NUM> may include Radio Frequency Identification (RFID) components or systems for receiving information from other devices in the system <NUM> and for transmitting information to other devices in the system <NUM>. The sensing device <NUM> may alternatively, or additionally, include components with Bluetooth, Near Field Communication (NFC), infrared, or other similar capabilities.

The computer <NUM> can be, for example, any type of server or computer implemented as a network server or network computer and can include components similar those described herein with reference to the computing device <NUM>. More specifically, the computer <NUM> can include components such as, but not limited to, one or more processors <NUM>, a memory <NUM>, a communications interface <NUM>, a bus <NUM>, a display <NUM>, and a user interface <NUM>. General communication between the components in the computer <NUM> is provided via the bus <NUM>.

The processor <NUM> is similar to the processor <NUM> described herein with regard to the computing device <NUM>. Additionally, the memory <NUM> is similar to the memory <NUM> described herein with regard to the computing device <NUM>. However, the non-alterable or fixed memory can additionally be implemented using an optical ROM disc, such as a CD-ROM or DVD ROM disc. The memory <NUM> may be used to store any type of data, for example, traveler data records similar to those described herein for the memory <NUM>. Furthermore, the memory <NUM> can be used to store any type of software including, for example, the software described herein as being stored in the memory <NUM>.

The user interface <NUM> is similar to the user interface <NUM> described herein with regard to the computing device <NUM>. Moreover, the display <NUM> and communications interface <NUM> are similar to the display <NUM> and communications interface <NUM>, respectively, described herein with regard to the computing device <NUM>.

The ACM <NUM> can be any automated self-service barrier which can obtain data stored in a chip of a document and can transmit the obtained data to a computer system, for example, computer <NUM> which verifies the identity of the traveler based on the obtained data. Alternatively, the ACM <NUM> may verify the identity of the traveler using the obtained data. For example, biometric template data stored in the chip of a document may be obtained and used to biometrically verify a traveler's identity. One example of an ACM is an electronic gate (eGate). The document can be a government issued document, for example, a passport or a driving license.

The data can be obtained from the chip using RFID, Bluetooth, NFC, infrared, or other similar capabilities. After the identity of a traveler is successfully verified, a physical barrier such as a gate or turnstile opens to permit passage into, for example, a security service area.

The ACM <NUM> can include components such as, but not limited to, one or more processors <NUM>, a memory <NUM>, a communications interface <NUM>, a bus <NUM>, a sensing device <NUM>, a display <NUM>, a user interface <NUM>, and a camera <NUM>. General communication between the components in the ACM <NUM> is provided via the bus <NUM>.

The processor <NUM> and memory <NUM> are similar to the processor <NUM> and memory <NUM>, respectively, described herein with regard to the computing device <NUM>. Additionally, the memory <NUM> may be used to store any type of data, for example, data of a biometric modality captured during a verification transaction, data of a biometric modality of a traveler obtained from a document presented by the traveler, and personal data about travelers. Furthermore, the memory <NUM> can be used to store any type of software including the software described herein as being stored in the memory <NUM> as well as, for example, software for conducting verification transactions.

The communications interface <NUM>, sensing device <NUM>, and display <NUM> are similar to the communications interface <NUM>, sensing device <NUM>, and display <NUM>, respectively, described herein with regard to the computing device <NUM>. The camera <NUM> may be similar to the camera <NUM> in the computing device <NUM> or may be any camera suitable for capturing data of a biometric modality of travelers.

The user interface <NUM> can be similar to the user interface <NUM> described herein with regard to the computing device <NUM>. Additionally, the user interface <NUM> includes a scanner for scanning documents presented by travelers. As a result of scanning a document, for example, a passport the ACM <NUM> can capture data about the traveler associated with the passport. The ACM <NUM> may also scan electronic tokens displayed by the computing device <NUM> of a traveler, and the scanned token and/or data related to the token may be communicated to another device included in the system <NUM>, for example, the computer <NUM>.

It is contemplated by the present disclosure that transportation hubs can be any facility that accommodates a mode of transportation and include, but are not limited to, airports, train stations, and bus depots. Transportation hub services include, but are not limited to, checkpoint security services and modes of transportation. Modes of transportation include, but are not limited to, airplanes, trains, subways, taxis, transportation computer company autos, and buses.

<FIG> is a top view of an example security checkpoint <NUM> that can be found in a transportation hub. The security checkpoint <NUM> can include, for example, ACMs <NUM>, a lane or aisle <NUM> corresponding to each ACM <NUM>, and a security service area <NUM>. The ACMs <NUM> may each include a mechanism <NUM> for preventing travelers from entering the security service area <NUM>. Such mechanisms <NUM> include, but are not limited to, a turnstile, an electronic door, and a swing gate.

Each lane or aisle <NUM> accommodates a queue of travelers desiring to pass through a respective ACM <NUM> to access the security service area <NUM>. The security service area <NUM> includes a walk-through metal detector <NUM> for screening travelers and X-ray machines <NUM> for screening traveler carry-on items.

The information shown in <FIG> is the same information shown in <FIG> as described in more detail below. As such, features illustrated in <FIG> that are identical to features illustrated in <FIG> are identified using the same reference numerals used in <FIG>.

<FIG> is a top view of another example security checkpoint <NUM> similar to the checkpoint <NUM> shown in <FIG>. However, the ACMs <NUM> are not located near the security checkpoint <NUM>. Rather, each ACM <NUM> is located at the entrance to an aisle <NUM>. Positioning each ACM <NUM> at the entrance to an aisle <NUM> allows identifying a traveler without a valid electronic token before the traveler enters a queue. Thus, the number of travelers in a queue is facilitated to be reduced. As a result, traveler delays, inconvenience, and frustration are facilitated to be reduced. Moreover, with fewer travelers in the queue it is easier to practice social distancing to facilitate reducing transmission of pathogens between travelers.

Travelers are known to wait in crowded lengthy time-consuming queues in order to access the security service area <NUM>. Queue lengths vary with fluctuating traveler volumes, traveler behavior, and resource constraints of transportation hubs, and are known to be particularly burdensome for travelers during or around holiday seasons and during periods of inclement weather. Such burdensome queues may cause travelers to miss, for example, an airplane flight or a train resulting in inconvenient, frustrating delays. A missed flight may cause travelers to miss connecting flights or trains thus compounding delays, inconvenience and frustration for travelers.

To address these problems, each traveler uses his or her computing device <NUM> to create and display an electronic token for scanning by the ACM <NUM>. The ACM <NUM> can transmit the scanned token and/or data about the token, to the computer <NUM> which can determine whether or not the token is valid. If valid, the computer <NUM> transmits a message to the ACM <NUM> indicating the token is valid and the traveler associated with the token is authorized to pass through the ACM <NUM> and access the security service area <NUM>. Otherwise, if the token is invalid a message is transmitted to the ACM <NUM> indicating the token is invalid and the traveler is not authorized to access the security service area <NUM>.

In order to obtain an electronic token, each traveler can be required to obtain a health credential and a reservation credential before arriving at a transportation hub. Alternatively, travelers may obtain the credentials at the transportation hub, but before attempting to pass through an ACM <NUM>. The health credential can be obtained by satisfactorily completing a health questionnaire which is a series of questions about the health of the traveler. The questions may enquire about, for example, whether the traveler has been tested for a pathogen and if so the result and date of the test. Additional questions may include, but are not limited to, whether the traveler has a fever and has been in contact with a person infected with a pathogen. If the traveler has been in contact with a person infected with a pathogen, another question may enquire about the length of time since contact. It is contemplated by the present disclosure that the questionnaire may include any number of questions and that any question relating to the health of a traveler may be included.

A traveler may use his or her computing device <NUM> to download the questionnaire over the network <NUM> and to answer the questions. The answers are transmitted to the computer <NUM> which determines if the traveler constitutes a health risk to other travelers based on the answers. After determining the traveler does not constitute a health risk, the computer <NUM> creates and can transmit an electronic health credential to the computing device <NUM> of the traveler.

A traveler is considered a risk to other travelers when an answer indicates he or she may transmit a pathogen like the coronavirus to others. For example, it is recommended that people who may have been in contact with an infected person quarantine for fourteen days. Thus, a person who answers that he or she was in contact with an infected person within fourteen days of the travel date is considered a health risk to others.

It is contemplated by the present disclosure that the health credential be created no more than twenty-four hours before a traveler attempts to access the security service area <NUM>. Alternatively, the health credential may be created any period of time before attempting to access the security service area <NUM> that inhibits the spread of a pathogen like the coronavirus.

The computing device <NUM> of a traveler can also be used to obtain an electronic reservation credential. More specifically, a traveler can operate his or her computing device <NUM> to reserve a period of time to wait in a queue and access the security service area <NUM>. The period of time may be, for example, fifteen minutes. Alternatively, the period of time may be of any duration that enables travelers to pass through the security checkpoint <NUM> without delay while ensuring social distancing and other health safety measures can be practiced. Such health safety measures include, but are not limited to, checking travelers for a fever. After reserving a period of time, the computer <NUM> creates and can transmit a reservation credential to the computing device <NUM> of the traveler. The reservation credential is valid during the reserved time only.

<FIG> is an enlarged plan view of the computing device <NUM> displaying buttons and/or icons. One button and/or icon <NUM> includes a message that reads "Scan QR Code". In response to the "Scan QR Code" icon <NUM> being pressed, touched or operated, the computing device <NUM> can create an electronic token based on the health credential and the reservation credential of the traveler. The token can include the identifier of the traveler's computing device <NUM>, the traveler's email address, and any other information relating to the traveler. Additionally, it is contemplated by the present disclosure that the electronic token may be any type of token, including, but not limited to, a QR code and a bar code. The created electronic token can also be displayed by the computing device <NUM>. The displayed icon <NUM> is typically pressed, touched or operated when the traveler arrives at an ACM <NUM>.

The traveler presents the displayed electronic token to the scanner in the ACM <NUM>. After scanning the token, the ACM <NUM> transmits the scanned token and/or data about the token, to the computer <NUM> which determines whether or not the token is valid. If valid, the computer <NUM> transmits a message to the ACM <NUM> indicating the token is valid and the traveler associated with the token is authorized to access the security service area <NUM>. As a result, the mechanism <NUM> operates to permit the traveler to enter the security service area <NUM>. Additionally, the computing device <NUM> may display a message indicating the traveler is authorized to access the security service area when both credentials are valid.

Otherwise, if the token is invalid a message is transmitted to the ACM <NUM> indicating the token is invalid and the traveler is not authorized to access the security service area <NUM>. As a result, the mechanism <NUM> does not operate to permit the traveler into the security service area <NUM>. Additionally, the computing device <NUM> may display a message indicating the traveler is denied access to the security service area <NUM> when the token is invalid. The token is invalid when at least one of the health and reservation credentials is invalid.

Although the ACM <NUM> transmits the scanned token and/or data about the token to the computer <NUM> after scanning the electronic token, the ACM <NUM> may alternatively transmit the scanned token and/or data about the token to the computing device <NUM>. Thus, it is contemplated by the present disclosure that the computing device <NUM> may alternatively determine whether or not the token is valid and as a result that the traveler is authorized or not authorized to access the area <NUM>. The computing device <NUM> may transmit a message to the ACM <NUM> indicating the traveler is authorized or not authorized to access the area <NUM>. After receiving the message, the ACM <NUM> operates the mechanism <NUM> according to the received message. Additionally, the computing device <NUM> may display a message indicating the traveler is authorized or not authorized to access the security service area <NUM>.

Although the icon <NUM> includes a message that reads "Scan QR Code", the icon <NUM> may alternatively include a message that reads "Show QR Code" when the token is a QR code or "Scan the bar code" or "Show the Bar Code" when the token is a bar code. Instead of the electronic token being created by the computing device <NUM>, in response to the icon <NUM> being touched, pressed or operated the computing device <NUM> may communicate with the computer <NUM> such that the computer <NUM> creates the electronic token and transmits the token to the computing device <NUM> for display. Although the message is displayed as part of an icon, it is contemplated by the present disclosure that the message may alternatively be displayed in any manner, for example, as large bold text across the display <NUM>. For such a message, the electronic token may be created when the large bold text is touched or pressed.

<FIG> is an enlarged plan view of the computing device <NUM> displaying a QR Code <NUM> created in response to pressing, touching or operating the icon <NUM>.

<FIG> is an enlarged plan view of the computing device <NUM> displaying a message "ACCESS GRANTED" <NUM> which indicates that the traveler is authorized to access the security service area <NUM>. Alternatively, a message that reads "ACCESS DENIED" may be displayed when the traveler is not authorized to access the security service area <NUM>. It is contemplated by the present disclosure that the computing device <NUM> may alternatively display any message that indicates the traveler is authorized or not authorized to access the security service area <NUM>. Such messages may also be displayed when a traveler is authorized, or not authorized, respectively, to board a mode of transportation.

<FIG> is a top view of an example train platform <NUM> including a train <NUM> on each side of the platform <NUM>. Each train <NUM> includes standard cars <NUM> and a car <NUM> reserved for travelers who desire to practice social distancing from other travelers. The trains <NUM> may include any number of standard cars <NUM> and any number of reserved cars <NUM>. Additionally, a scanner <NUM> can be located at the entry to each car <NUM>. Some airports are known to use trains to transport people to and between terminals. Thus, it is contemplated by the present disclosure that the train platform <NUM> may be located in an airport or other transportation hub like a train station.

Travelers are required to present a valid electronic credential to access the reserved car <NUM>. Thus, as travelers arrive at a scanner <NUM> on the platform <NUM> he or she touches, presses or operates the icon <NUM> to create and display an electronic token which is presented to the scanner <NUM> for scanning. Alternatively, the electronic token created for accessing the security service area <NUM> may be scanned. The electronic token for entering the security service area <NUM> has a finite life, for example, half an hour. It is contemplated by the present disclosure that the life of the electronic token for entering the security service area <NUM> may be any length of time in which a traveler may conveniently pass through the security checkpoint <NUM> and then board a reserved train car <NUM> without rushing.

The scanner <NUM> transmits the scanned token and/or data about the token, to the computer <NUM> which determines whether or not the token is valid. If valid, the computer <NUM> transmits a message to the scanner <NUM> indicating the token is valid and the traveler associated with the token is authorized to board the car <NUM>. Thus, the traveler is permitted to board the car <NUM>. Otherwise, if the token is invalid a message is transmitted to the scanner <NUM> indicating the token is invalid and authorization to board the car <NUM> is denied. Thus, the traveler is not permitted to board the car <NUM>.

Although the scanner <NUM> transmits the scanned token and/or data about the token to the computer <NUM> after scanning the electronic token, the scanner <NUM> may alternatively transmit the scanned token and/or data about the token to the computing device <NUM>. Thus, it is contemplated by the present disclosure that the computing device <NUM> may alternatively determine whether or not the token is valid and as a result determine that the traveler is authorized or not authorized to board the car <NUM>. The computing device <NUM> may also transmit a message to the scanner <NUM> indicating the traveler is authorized or not authorized to board the car <NUM>. After receiving the message, the scanner <NUM> permits or does not permit a traveler to board the car <NUM> according to the message. Additionally, the computing device <NUM> and/or the scanner <NUM> may display a message indicating the traveler is authorized or not authorized to board the car <NUM>.

<FIG> is an example method and algorithm for creating a health credential and a reservation credential. <FIG> illustrates example operations performed when the processor <NUM> executes software stored in the memory <NUM> and the processor <NUM> executes software stored in the memory <NUM> to create a health credential and a reservation credential.

The method and algorithm start in step S1, then in step S2, the software executed by the processor <NUM> causes the computing device <NUM> to record answers to a health questionnaire entered by a traveler and transmit the completed questionnaire to the computer <NUM> via the network <NUM>. In response to receiving the completed questionnaire, in step S3, the software executed by the processor <NUM> causes the computer <NUM> to determine if the traveler constitutes a health risk to others based on the completed questionnaire. The computer <NUM> determines a traveler does not constitute a health risk when the answers in the completed questionnaire evidence the traveler presents little or no risk of facilitating transmission of a pathogen to others.

Upon determining the traveler constitutes a health risk to others, in step S4, the computer <NUM> transmits via the network <NUM> to the computing device <NUM> a message indicating a health credential will not be created for the traveler. Next, in step S5, the method and algorithm end. However, upon determining the traveler does not constitute a health risk to other travelers, in step S6, the computer <NUM> creates a health credential and transmits the health credential to the computing device <NUM> via the network <NUM>. The computing device <NUM> receives the health credential and stores the health credential in the memory <NUM>.

In step S7, the software executed by the processor <NUM> causes the computing device <NUM> to record a time period selected by the traveler for accessing the security service area <NUM> and transmits the selected time period to the computer <NUM> using the network <NUM>. In step S8, the software executed by the processor <NUM> causes the computer <NUM> to determine if the selected period of time is available by comparing the selected period against available periods of time. If the selected period is not available, in step S7, another period of time is selected. However, if the selected period is available, in step S9, the computer <NUM> creates a reservation credential and transmits via the network <NUM> the reservation credential to the computing device <NUM> for storage therein. Next, in step S5, the method and algorithm end.

Although the health credential is created and received by the computing device <NUM> before the reservation credential in the method and algorithm described herein with reference to <FIG>, it is contemplated by the present disclosure that the reservation credential may be created and received before the health credential. Moreover, it is contemplated by the present disclosure that the time between receiving and storing the health credential in the computing device <NUM> and selecting a time for accessing the security service area <NUM> may be any period of time.

<FIG> is an example method and algorithm for enhancing authorization to access an area in a transportation hub. <FIG> illustrates example operations performed when the processor <NUM> executes software stored in the memory <NUM> and the processor <NUM> executes software stored in the memory <NUM> for enhancing authorization to access an area within a transportation hub, for example, the security service area <NUM>.

The method and algorithm start in step S10, and then in step S11 the software executed by the processor <NUM> causes the computing device <NUM> to create an electronic token for the traveler based on the traveler's health and reservation credentials created according to the method and algorithm described herein with reference to <FIG>. More specifically, when the traveler arrives at the ACM <NUM>, the traveler touches, presses or operates an icon displayed by the computing device <NUM> that causes the computing device <NUM> to create an electronic token based on the traveler's health and reservation credentials. The icon may be, for example, an icon that reads "Scan QR Code" or "Show QR Code" when the token is a QR code or "Scan the bar code" or "Show the Bar Code" when the token is a bar code. The electronic token may be any type of token, including, but not limited to, a QR code and a bar code. It is contemplated by the present disclosure that the token may include the traveler's email address, identifier of the computing device <NUM> associated with the traveler, and any other information relating to the traveler.

In step S12, the computing device <NUM> displays the electronic token for the ACM <NUM> to scan, and the ACM <NUM> transmits the scanned electronic token and/or data relating to the electronic token, to the computer <NUM> using the network <NUM>. Next, in step S13, software executed by the processor <NUM> causes the computer <NUM> to determine whether or not the health credential for the traveler was created within the preceding twenty-four hours. If not, in step S14, the computer <NUM> determines the electronic token is invalid so the traveler is not authorized to access the security service area <NUM> and then, in step S15, the method and algorithm end. However, if the health credential was created within the preceding twenty-four hours, in step S16, the computer <NUM> determines whether or not the traveler's reservation credential is for the current time. If not, in step S14, the computer <NUM> determines the electronic token is invalid so the traveler is not authorized to access the security service area <NUM> and then, in step S15, the method and algorithm end. It is contemplated by the present disclosure that when the health credential or the reservation credential is invalid, a message may be displayed by the computing device <NUM> indicating the traveler is not authorized to access the security service area <NUM>.

However, if the computer <NUM> determines that the reservation credential is for the current time, the electronic token is considered valid. A message indicating the traveler is authorized to access the security service area <NUM> may be displayed by the computing device <NUM>. Next, in step S17, the user is authorized to access the security service area <NUM>. Next, in step S15, the method and algorithm end.

Although the ACM <NUM> transmits the scanned token and/or data about the token to the computer <NUM> after scanning the electronic token in the method and algorithm described herein with regard to <FIG>, the ACM <NUM> may alternatively transmit the scanned token and/or data about the token to the computing device <NUM>. Thus, it is contemplated by the present disclosure that the computing device <NUM> may alternatively determine whether or not the token is valid and as a result that the traveler is authorized or not authorized to enter the security service area <NUM>. The computing device <NUM> may transmit a message to the ACM <NUM> indicating the traveler is authorized or not authorized to access the security service area <NUM>. After receiving the message, the ACM <NUM> operates the mechanism <NUM> according to the received message. Additionally, the computing device <NUM> may display a message indicating the traveler is authorized or not authorized to access the security service area <NUM>.

<FIG> is an example method and algorithm for enhancing authorization to access a mode of transportation in a transportation hub. <FIG> illustrates other example operations performed when the processor <NUM> executes software stored in the memory <NUM> and the processor <NUM> executes software stored in the memory <NUM> for enhancing authorization to access a mode of transportation in a transportation hub, for example, the train <NUM>.

The method and algorithm start in step S18, and then in step S19 the software executed by the processor <NUM> causes the computing device <NUM> to display the electronic token created using the method and algorithm described herein with reference to <FIG>. The electronic token is scanned by the ACM <NUM> which can transmit the scanned electronic token and/or data relating to the electronic token to the computer <NUM> using the network <NUM>.

Next, in step S20, software executed by the processor <NUM> causes the computer <NUM> to determine whether or not the traveler's health credential was created within the preceding twenty-four hours. If not, in step S21, the computer <NUM> determines the health credential is invalid so the traveler is denied authorization to board the reserved train car <NUM> and then, in step S22, the method and algorithm end. However, if the health credential was created within the preceding twenty-four hours, in step S23, the computer <NUM> determines whether or not the traveler's reservation credential is for the current time. If not, in step S21, the computer <NUM> determines the electronic token is invalid so the traveler is denied authorization to board the reserved train car <NUM> and then, in step S22, the method and algorithm end. It is contemplated by the present disclosure that when the health credential or the reservation credential is invalid, a message may be displayed by the computing device <NUM> indicating the traveler is not authorized to board the reserved train car <NUM>.

However, if the computer <NUM> determines that the reservation credential is for the current time, in step S24, the electronic token is deemed valid so the traveler is authorized to board the reserved train car <NUM>. A message indicating the traveler is authorized to board the train <NUM> may be displayed by the computing device <NUM>. Next, in step S22, the method and algorithm end.

Although the scanner <NUM> transmits the scanned token and/or data about the token to the computer <NUM> after scanning the electronic token in the method and algorithm described herein with reference to <FIG>, the scanner <NUM> may alternatively transmit the scanned token and/or data about the token to the computing device <NUM>. Thus, it is contemplated by the present disclosure that the computing device <NUM> may alternatively determine whether or not the token is valid and as a result determine that the traveler is authorized or not authorized to board the car <NUM>. The computing device <NUM> may also transmit a message to the scanner <NUM> indicating the traveler is authorized or not authorized to board the car <NUM>. After receiving the message, the scanner <NUM> permits or does not permit a traveler to board the car <NUM> according to the message. Additionally, the computing device <NUM> and/or the scanner <NUM> may display a message indicating the traveler is authorized or not authorized to board the car <NUM>.

Although the health credential is deemed invalid if not created within the preceding twenty-four hours, it is contemplated by the present disclosure that the health credential may alternatively be created any period of time before scanning the electronic token by the ACM <NUM> that enables reducing traveler inconvenience and frustration and inhibits the spread of a pathogen like the coronavirus. Although the electronic token is created based on the health and reservation credentials as described herein, it is contemplated by the present disclosure that the electronic token may alternatively be created based on any type or combination of credentials and that such credentials may be created from information different than health and reservation information.

Using the methods and algorithms for enhancing authorization to access transportation hub services facilitates reducing travel delays and related traveler inconvenience and frustration, and facilitates reducing the risk that travelers will contract a pathogen like the coronavirus while traveling.

Claim 1:
A method for enhanced authorization to access transportation hub services comprising the steps of:
creating (S11), by an electronic device (<NUM>), a token based on credentials of a traveler, at least one of the credentials being a health credential created after determining whether the traveler constitutes a health risk to other travelers, the health risk determined based on answers provided by the traveler to a questionnaire;
displaying (S12) the token by the electronic device for scanning by a scanner of an access control mechanism (<NUM>) of the access transportation hub services to access a security service area (<NUM>);
determining (S13, S16) whether the credentials are valid;
in response to determining the credentials are valid, authorizing (S17) the traveler to access the security service area (<NUM>); or
in response to determining at least one of the credentials is invalid, denying (S14) the traveler access to the security service area.