Method, system, device and software programme product for the remote authorization of a user of digital services

A method of authorizing a user of an identity document including biometric user data that are stored in an electronic memory that is part of the identity document, the method comprising:

• reading the biometric user data from the electronic memory of the identity document and storing the read biometric user data in a memory of a mobile electronic device (MED), the MED having a sensor configured to receive biometric data of the user;
• capturing the biometric data of the user using the sensor on the MED and storing the captured biometric data in the memory of the MED;
• comparing, on the MED, the captured biometric data with the stored biometric user data;
• generating a positive authentication status when the captured biometric data match the stored biometric user data;
• and
• transferring authentication data and personalization data corresponding to the respective identity document from the MED to an identity document server (IDS) when the captured biometric data match the stored biometric user data.

A system for authorizing a user to one or more of (i) access a server and (ii) receive an on-line service, the system comprising:

• a mobile electronic device (MED) comprising
• a memory, and
• a sensor that receives biometric data;
• and
• an identity document server (IDS) comprising, for a set of holders of a respective identity document, authentication data and personalization data corresponding to the respective identity document,
• wherein the system:
• stores a subscriber number of the MED on the IDS,
• loads a biometric template application and an ID data capture application on the MED,
• captures biometric data of the user using the sensor on the MED and provides the captured biometric data to the IDS,
• forms a biometric template from the captured biometric data on the IDS and storing stores the biometric template in the memory of the MED, thereby providing a registered activated identity MED, and
• allows one or more of (i) access to the server and (ii) receipt of the on-line service, by receiving matching biometric data and the biometric template, provided by the user to the IDS, via the registered activated identity MED.

A system for authorizing a user of an identity document, the system comprising:

• a mobile electronic device (MED) comprising
• a memory,
• a sensor that receives biometric data of the user, and
• an identity document comprising biometric user data that are stored in an electronic memory that is part of the identity document,
• wherein the system:
• reads the biometric user data from the electronic memory of the identity document and stores the biometric user data in the memory of the MED,
• captures biometric data of the user using the sensor on the MED and stores the captured biometric data in the memory of the MED,
• compares, on the MED, the captured biometric data with the stored biometric user data and generates a positive authentication status when the captured biometric data match the stored biometric data, and
• transfers authentication data and personalization data corresponding to the respective identity document from the MED to an identity document server (IDS) when the captured biometric data match the stored biometric user data.

A mobile electronic device (MED) comprising:

• a memory;
• and
• a sensor that receives biometric data;
• and
• one or more processors that
• capture the biometric data of a user via the sensor into the memory of the MED,
• read biometric data from an electronic memory that is part of an identity document into the memory of the MED, and
• compare the captured biometric data with the biometric data that have been read from the identity document,
• wherein the memory of the MED comprises an ID data capture application that
• transfers authentication data and personalization data that are read from the electronic memory of the identity document into the memory of the MED,
• transfers the captured biometric data that is captured with the sensor to an Identity Document Server (IDS),
• receives a biometric template from the IDS, and
• stores the received biometric template in the memory of the MED.

An identity document server (IDS) comprising:

• for a set of holders of a respective identity document, authentication data and personalization data corresponding to the respective identity document and that
• receive authentication data and personalization data from a mobile electronic device (MED) of a user, the personalization data from the MED comprising biometric data of the user captured with a sensor of the MED,
• generate a biometric template based on the personalization data and return the biometric template to the MED,
• compare the authentication and personalization data received from the MED with the stored authentication and personalization data,
• generate a comparison status, and
• when there is a positive comparison status, store a subscriber number of the MED for forming a registered MED.

A computer program product stored in a mobile electronic device (MED), the computer program product comprising:

• a data capture application configured to
• operate on the MED,
• read authentication data and personalization data comprising electronic biometric data from an electronic memory of an identity document into a memory of the MED,
• capture biometric data from a user via a sensor on the MED into the memory of the MED,
• compare the captured biometric data with the electronic biometric data received from the electronic memory of the identity document, and
• generate a comparison status indicating a match of the compared captured biometric data and the stored electronic biometric data,
• wherein the computer program product is configured to receive biometric template data from an identity document server (IDS), to store the biometric template data in the memory of the MED, and to forward the biometric template data together with the captured biometric data to the server.