RS55537B1 - SYSTEM FOR AUTOMATIC VERIFICATION OF VEHICLES OF VEHICLES, DRIVERS AND PASSENGERS IN VEHICLES WITH LIMITED AREAS AND SERVICES - Google Patents

Abstract

An automated system for checking the access rights of vehicles, drivers and passengers to restricted areas and services has the novelty of using vehicle and passenger data from smart ID readers and biometric sensors in the vehicle itself (104), via radio transceivers (101), (106 ), as well as vehicle data obtained by an optical sensor (105) to decide whether to grant access rights (107). The scanned biometric data of passengers are compared with the reference data in their smart identification media or in-vehicle documents (104). The result of the comparison is sent to the stationary access control subsystem (102) (107). The visual data of the vehicle obtained by the optical sensor (105) are compared with the readable vehicle data obtained through the transceiver (101), (106) in the stationary subsystem (102). The system described in this invention checks the right of access without stopping users and exposing their private information to unauthorized third parties.

Description

TECHNICAL FIELD

The system for automatically checking the right of access of vehicles, drivers and passengers to restricted areas and services, according to the invention, belongs to the field of traffic control systems for road vehicles that identify vehicles (G08G 1/017), with devices for recognizing different types of vehicles (G08G 1/015), procedures or devices for recognizing using electronic means (G06K 9/62), devices for registering people at entrances or exits (G07C 9/00), mechanisms activated by objects other than money for switching on or activating devices for the sale, rental, issuing of metal or paper money or for the return of money by coded identity card or credit card (G07F 7/08), used simultaneously with a coded signal (G07F 7/10), means and devices for charging a toll or fee at a checkpoint (G07B 15/00), means or devices for collecting a toll or fee with release devices passage, using a turnstile or similar (G07B 15/04), devices and procedures for digital calculation or data processing, especially adapted for specific functions (G06F 17/00), devices and procedures for obtaining and determining data (G06F 17/40), burglar alarms, thefts and the like, using systems for scanning and comparing images (G08B 13/194), security solutions for protecting computers or computer systems from unauthorized operation by recognition unauthorized entry into a fenced area (G06F 21/06), procedures and devices for reading or recognizing printed or written characters or recognizing geometric figures (patterns), e.g. fingerprints (G06K 9/00), record carriers for use with machines and with at least one part provided for carrying digital marks, where at least one type of marking is used for authentication, e.g. credit cards or identification cards (G06K 19/10), methods and devices for identification using electronic means, record carriers with conductive markings, printed circuits or semiconductor circuit elements, e.g. credit cards or identification cards (G06K 19/067), systems for managing the traffic of road vehicles by bypassing the rules of managed traffic, e.g. according to the signal emitted by the vehicle for emergency purposes (G09G 1/087), vehicle equipment for preventing or detecting the unauthorized use or theft of the vehicle (B60R 25/00), vehicle identification signs (B60R 13/10), other vehicle equipment (B60R 99/00), as well as secret or secure communication devices (H04L 9/00).

TECHNICAL PROBLEM

The system for automatically checking the right of access of vehicles, drivers and passengers to restricted areas and services, according to the invention, solves the problem of implementing a system for highly secure access of authorized road vehicles and authorized drivers and passengers to areas where access rights are limited and allowed for pre-registered vehicles and drivers or passengers, such as private roads, parking areas, garages, elevators for road vehicles, fuel supply stations, or security-risk areas, where it is necessary to ensure that unauthorized persons cannot to directly access or leave existing areas undetected, while preserving the privacy of authorized users, and preventing other possible abuses. Resources to be protected are physical, such as unfenced or fenced areas or entire facilities, whether physically protected by doors, gates, ramps or not, as well as logical, such as services and data that can be accessed in protected areas

In the case of controlling the right of access of persons driving a vehicle, for the sake of the user's comfort and the speed of the procedure, it is preferable to check the identity in a way that does not require the person to get out of the vehicle, and preferably without stopping the vehicle. Also, in certain cases of interest for the safety of people, territory and property, it is necessary to check whether the person is driving the vehicle for which he is authorized or whether the people in the vehicle are authorized to access the restricted area. Typical examples of such areas are areas for parking rental vehicles, where the vehicle and driver are checked, or border crossings and high security facilities, where the passengers in the vehicle are also checked. These two requirements, i.e. checking the identity of both the vehicle and the people in it, can be reconciled by remote scanning of the visual features of the vehicle and the biometric features of the driver and passengers, while checking the same by remote reading of digital records with data on the features of the vehicle and people in it.

Remote reading of digital records stored in a moving vehicle can be performed by automatically establishing a radio communication connection between the vehicle and the access control device installed on the approach to the protected area, and as such does not distract the driver from driving. In contrast, the successful scanning of the driver's biometric features often requires redirecting the driver's attention to the scanning process, which often has to be repeated in order for the image (scanning result) to be of sufficiently good quality, which can be a hindrance to the smooth running of the car, as well as a safety risk due to the distraction of the driver's attention from driving the vehicle. Examples of this are placing a finger on the fingerprint scanner, which often has to be repeated with the current quality of the scanner on the market, signing on the signature scanner, unsuccessful face recognition that occurs in a certain number of cases, voice recognition that depends on the health, emotional and psychological state of the speaker in conditions of background noise caused by the operation of the engine, the movement of the vehicle on the road, the reception of sound on the radio installed in the vehicle and the voices of other passengers in the vehicle. Even entering a password, as a non-biometric driver's secret data, via the appropriate keyboard, requires the driver's time and attention, which is risky for safety when the vehicle is in motion. In this case, the driver's identity verification system would have to provide a scan of the driver's biometric features when starting or before starting the vehicle itself, and would have to be automatically initiated upon detection of a change of driver or passenger in the vehicle.

STATE OF THE ART

In practice, the control of access rights and identification of road vehicles is most often used to check license plates, including automatic recognition of license plates and characters on them. During more detailed checks, authorized officials check the body number, as well as the data from the traffic license, which they compare with the registration number, body number, model and color of the vehicle, and the identity of the traffic license holder. Driving licenses are increasingly issued in the form of smart cards ("smart cards"), which enable fast machine reading of these vehicle features. In order to protect against forgery and unauthorized reading, the data in the "smart" traffic license is often encoded with asymmetric key technology (PKI, in English "Public Key Infrastructure"). Namely, the private digital key of the smart card encrypts data about the vehicle and the owner, and its public key, which is available to the access control device, decrypts this data and checks its authenticity.

Various means are used to control the access of persons: mechanical keys; biometric verification of a person's identity; and digital records stored on a readily portable medium, machine-readable by magnetic, electronic (eg smart card) or optical (eg "bar code" or optical character recognition) means. Often, a combination of biometric identity verification and digital record is used in the control of access rights based on the identification of a person. At the same time, the digital record contains coded information about the biometric features of the person who is the bearer of the medium (token, card), such as a fingerprint, iris, arrangement of blood vessels, voice, signature. Biometric features in the digital record on the medium are called reference biometric data. This data is read from the medium and compared with the biometric data scanned from the person who is the holder of the medium, at the time of the request for access to the protected area. In addition to biometrics, a digital record can also contain textual data about a person's identity and their rights within the protected area. This identification data can be contained in a "digital certificate" placed in the digital record on the medium, together with information about ways to verify the authenticity of the digital record and the identity of the bearer. Such digital records are increasingly used in standard identification media, i.e. documents such as biometric ID cards, passports, driver's licenses, residence permits, official identification cards, employee cards, biometric tickets for amusement parks, credit cards, mobile phones, RFID tags and the like.

It is desirable that the record format of the above data be such that only devices for checking access to the protected area and services, controlled by the organization that issues identification media, can read it and translate it into human-understandable information, thus protecting unwanted theft of private data. Namely, one of the ways of abuse is to plant a fake access control device on the authorized user - the driver, or for example to eavesdrop on the communication made by the access control device with the rest of the system, so the collected information is subsequently used for unauthorized access. In order to avoid such misuse, the technology of asymmetric digital keys (PKI, in English "Public Key Infrastructure") is also used. In such an embodiment, the access control device is identified by sending a digital certificate to a smart user identification medium, or an account physically associated with it. This digital certificate contains identification data, both of the device for checking access rights, and of the organization to which it belongs; device public key; as well as the digital signature of the organization authorized by the user or his organization to verify the right of access. The authenticity of the digital signature in the certificate can be checked if the smart identification medium, or the computer connected to the Reader of this medium, has access to the public key of the organization to which the device for checking access rights belongs. Also, when requesting to send data from a smart identification medium or medium, the device for checking access rights can be presented with a message encoded with its private key, and on the processor unit that is in direct physical connection with the smart medium (the processor on the medium itself or in the media reader installed in the vehicle), the authenticity of the device for checking access rights is checked with its previously submitted public key.

The need to provide secure access has existed for a long time, so there are numerous examples of patents that describe ways to securely access individual or networked resources, such as: U.S. Pat. Pat. No. 6,256,737 (B1), which describes a system, method and computer program for controlling access to resources, using biometric devices where the user's biometric data is stored on a server;

U.S. Pat. No. 6,317,544 (B1), which describes a distributed mobile identification system with a centralized server and mobile workstations. With this system, the reference biometric data is stored on the server;

U.S. Pat. No. 6,320,974 (B1), which describes a distributed identification system with connected standalone workstations. With this system, the reference biometric data is placed on workstations;

U.S. Pat. No. 6,326,903 (B1) which describes a system and procedure for controlling traffic lights from emergency vehicles.

U.S. Pat. No. 6,434,259 (B1), which describes a procedure for secure user access to physical entrances and computer networks, which is based on searching stored biometric features based on an entered PIN code;

U.S. Pat. No. 6,681,034 (B1), which describes a system and method for comparing fingerprints, which includes the use of smart cards on which the reference prints are placed and on whose microprocessor the comparison of the read prints with the reference is performed;

U.S. Pat. No. 6,853,739 (B2), which describes a system for verifying identity using biometric features, where reference data is compared with read data;

U.S. Pat. No. 6,928,547 (B2), which describes a system and procedure for user authentication in a computer network, where biometric features and a password are combined; ;This system does not solve the problem of user identification in the vehicle and vehicle identification;

U.S. Pat. No. 7,020,308 (B2), which describes a biometric authentication system based on the comparison of read biometric features with a reference biometric feature, with an emphasis on the method of comparing the biometric features. This system does not solve the problem of user identification in the vehicle and vehicle identification;

U.S. Pat. No. 7,266,224 (B2), which describes a device and method for recognizing a person, and an access controller, where a facial image is used as a biometric feature, which is compared to a reference facial image stored in memory; This system does not solve the problem of user identification in the vehicle and vehicle identification; - U.S. Pat. No. 7,299,360 (B2), which describes a system and method for comparing fingerprints, which includes the use of smart cards on which the reference prints are placed and on whose microprocessor the comparison of the read prints with the reference is performed; This system does not solve the problem of user identification in the vehicle and vehicle identification;

U.S. Patent 7,735,728 (B2), which describes an access control system that includes a data carrier reader containing identification data, a database, and a camera that takes pictures of the person and compares them to reference images in the database; This system does not solve the problem of user identification in the vehicle and vehicle identification;

U.S. Patent application No. 6018739 (A), which describes a distributed personnel identification system based on biometric features of fingerprints and facial images, but does not solve the problem of in-vehicle user identification and vehicle identification;

PCT Patent Application No. VVO2005093993 (A1), which describes a device and a procedure for secure access to the equipment, based on the verification of encrypted reference data with a biometric signature obtained from the user, but does not solve the problem of user identification in the vehicle and vehicle identification;

U.S. Patent application No. 20100017856 (A1), which describes the procedure for biometric access control to a secured computer system, where user data is stored on a server and not on a smart card, while vehicle identification is not mentioned;

U.S. Patent application No. 20110153497 (A1), which describes a system and procedure for performing secure transactions based on biometric identification, where the read biometric features are sent to the biometric module on the server, where they are compared with reference biometric features. The mentioned patent application does not deal with vehicle identification, and it differs from ours in the place of comparison of biometric features,

which in our application is done on the user's biometric-cryptographic card itself.

U.S. Patent application No. 20120054842 (A1), which describes a system for secure access control based on the verification of read biometric features with reference biometric features stored in a cryptographic element and where a one-time access password is generated, which is sent to the server for verification; This patent application does not deal with vehicle identification, and is limited to checking access to banking and telematics services.

PCT Patent Application No. WO2011043559, which describes a method for protecting a vehicle from theft as well as a method for tracking passengers in a vehicle using biometric authentication and biometric identification documents, while not dealing with vehicle identification either visually or electronically. - EPO Patent Application 1705085 (A1), which describes a method for verifying the identity of a driver based on facial recognition to allow authorized persons to drive a vehicle. This method does not deal with vehicle identification either visually or electronically.

PCT Patent Application VVO2012090229 (A2), which describes a system for driver authentication, vehicle control and sending vehicle data to a remote server, where the driver's data is stored on an identification device ("identitv dongle"). This device is not in the form of a smart card or smart medium described in this application, but is a device in itself, equipped with a modem that can communicate with a remote server. Driver authentication is not done on the card but on the device installed in the vehicle. Vehicle data does not come from the smart card as in this application, but from the vehicle's engine control unit.

DISCLOSURE OF THE ESSENCE OF THE INVENTION

The system proposed here solves the problems mentioned above. The proposed system consists of: a subsystem for checking the right of access installed on the approach to a restricted area, i.e. access to services with limited right of use, and a subsystem located in the vehicle. These two subsystems communicate via radio link.

The subsystem in the vehicle uses a smart medium for driver identification (for example, a medium with a microprocessor, such as a card with a microprocessor, in English "smart card") which, in addition to the record of the driver's reference biometric feature, may have implemented algorithms for comparing the scanned and reference biometric feature;

digital record reader from a smart medium for driver identification; a biometric feature scanner (for example, a finger scanner, a digital camera for imaging the face or iris, a signature scanner, a voice recording device, and the like); detector of the driver's presence or absence on the driver's seat of the vehicle in an optoelectronic, piezoelectric or other version; a smart medium for vehicle identification, for example a traffic license with a microprocessor, on which data about the vehicle (type, brand, model, color, license plate, body number) and the medium itself (a digital certificate digitally signed by the organization that issued the smart medium) are stored; digital record reader from a smart medium for vehicle identification; own processing unit and memory for managing parts of the subsystem and their communication with the subsystem for checking access rights, as well as for executing algorithms for comparing the scanned and reference biometric features if they cannot be executed on the smart medium itself; an interface for radio communication with a device for controlling access to a protected area or services with limited right of use accessed by the user; and through which the user accesses other protected resources. Optionally, the subsystem in the vehicle can also contain one or more security modules, for example in the form of a smart card, or a SAM card (Securitv Access Module) the size of chip cards in mobile phones. These security modules contain digital certificates digitally signed by organizations authorized to collect data from identification media for drivers and vehicles, with the aim of avoiding the installation of a fake subsystem in the vehicle and misuse of the identification data collected in this way. Also, security modules can contain digital certificates of persons authorized to drive or use the vehicle. In addition, security modules can contain digital records of the vehicle's visual features, as well as the biometric features of authorized vehicle users, if the corresponding smart media do not possess them. In the event that it contains the user's biometric features in non-volatile memory inaccessible to other parts of the subsystem in the vehicle, the security module contains algorithms for comparing biometric features on its crypto-processor, which prevents the exposure of digitally recorded biometric features to its environment, thus also theft during unauthorized access to the subsystem in the vehicle. Finally, the security module may contain certificates that authenticate the subsystem in the vehicle as an authorized device to communicate with the subsystem for checking access to the restricted area and services. The subsystem in the vehicle may also contain a keyboard for entering a password, if the procedure for accessing a restricted area and services foresees the possibility of entering a password. Optionally,

the in-vehicle subsystem may also contain equipment for voice communication with authorized persons in an organization that controls access to a restricted area or services.

The subsystem installed at the entrance to the restricted area or services contains one or more cameras that scan the visual features of the vehicle (registration marks, type, brand, model, color, logo); implemented image comparison algorithms (for example comparing logo images with reference logo images in the database, or vehicle images with a reference previously scanned image of that vehicle or reference two-dimensional or three-dimensional images of the vehicle model) and algorithms for license plate extraction and optical character recognition in license plates; own processing unit and memory for executing these algorithms; interface for radio communication with the vehicle; optionally, an interface for communication with the servers and databases of the organization authorized to check access rights; optionally, gangway release devices, ramps, gates, turnstiles or the like, or a communication interface thereto. Optionally, the subsystem at the approach to the restricted area or services may also contain a security module, which contains digital certificates digitally signed by organizations authorized to collect data from identification media for drivers, passengers and vehicles, in order to avoid the subversion of a fake subsystem at the approach to the restricted area or services and misuse of the identification data collected in this way;

In the following description, the invention will be presented in a simplified manner with possible implementations. The embodiments given serve to explain the principles of the invention, and in no way limit the scope of protection afforded by the claims below.

The system for automatically checking the right of access of vehicles, drivers and passengers to restricted areas and services, according to the invention, solves the above-mentioned problem of realizing a system for highly secure access of vehicles and their authorized drivers and passengers to physical objects and surfaces, fenced or unfenced, and services, as well as supply services of intangible products, energy resources and consumables, while at the same time protecting the privacy of data of authorized users, and preventing other possible abuses. In order for the user to access the system, he needs to have a smart medium, for example his personal smart card or a security module, the authenticity of which is verified by the certificates on it. This medium also contains the user's biometric data, for example a reference record of the user's fingerprint, palm print, iris, finger, palm or eye capillary network, face, signature or voice. The user confirms his identity by scanning his biometric features upon entering the vehicle or when using access to the desired resource, which are then compared with reference biometric data. A record of a biometric feature can be in the form of an image of the feature, but often due to limited resources and faster comparison, a derived record is used in which only data about key points describing the biometric feature (such as minutiae describing a fingerprint) is stored. The only important thing is that the record on the smart medium and the record that is forwarded to the medium for comparison, be of the same type and that the comparison of records of that type is supported by the medium. Data on the medium can additionally be protected by a password that the user remembers and enters when logging in to the system. The theft of the user's biometric data can be prevented by comparing the biometric data, stored on the card or other medium, with the scanned biometric data using algorithms located and executed on the smart medium itself, so for example the reference fingerprint stored on the user's smart card never leaves the card. If neither the user's smart identification medium nor the security module has the necessary crypto-processor and memory for the above-described mode of operation, the reference biometric feature is compared with the one scanned on the device's processor in the vehicle. In addition to determining the authenticity of the medium and the identity of the user, the system also checks the authenticity of individual parts by checking the module certificate of the subsystem in the vehicle and the subsystem on the approach to the restricted area and services.

One example of a possible use of such a system is in access control to restricted areas, roads and facilities that may or may not be fenced off and protected by gates, ramps and the like. Another example of the possible use of such a system is in the control of access to services such as energy supply or telecommunication services such as the Internet and other means of data and voice communication. Toll payments, fuel purchases and other items can also be made from the vehicle using this system as a personal biometric smart medium can be linked to the user's account like a credit card.

This system relies on the methodology of symmetric/asymmetric encryption/decryption, and one of the examples of that methodology with which this system can be used is the public key infrastructure (eng. PKI - Public key infrastructure).

BRIEF DESCRIPTION OF THE DRAFT PICTURES

The system for automatically checking the right of access of vehicles, drivers and passengers to restricted areas and services, according to the invention, is shown in the attached figures where the same reference marks indicate the same elements of the device and where: • Figure 1a shows a block diagram with the logical units of the system; • Figure 1b shows an example of the physical realization of the entire system; • Figure 1c shows a block diagram with logical units of subsystems in the vehicle; • Figure 1d shows an example of driver and vehicle identification module installation; • Figure 1e shows an example of the installation of the passenger-passenger identification module; • Figure 1f shows an example of passenger identification module installation; • Figure 2a shows a block diagram with the logical units of the driver and vehicle identification module within the in-vehicle subsystem; • Figure 2b shows a block diagram with logical units of the passenger identification module within the subsystem in the vehicle; • Figure 3 shows a block diagram with the logic units of the restricted area approach subsystem. • Figures 4a, 4b and 4c show the sequence of steps in the process of checking smart media for the identification of drivers and passengers (biometric identity card, driver's license, official document, etc.), as well as vehicles (traffic ticket or similar smart media), in order to access a restricted area. • Figure 5 shows the system used to generate the smart media certificate of the system user; • Figure 6 shows the process of generating the system user's smart media certificate.

DETAILED DESCRIPTION OF DRAWING IMAGES

Figure 1 shows a block diagram of the entire system with separate logical units: subsystem 101 located in the vehicle and subsystem 102 for checking the right of access installed on the approach to a restricted area, i.e. access to services with limited right of use. These two subsystems communicate via radio link. The subsystem102 for checking the right of access on access to a restricted area, i.e. access to services, can be connected to remote servers103.

Figure 1b shows an example of the physical implementation of the entire system, where the subsystem 101 installed in the vehicle 104 sends data to the radio transceiver 106 of the subsystem 102 on the approach. Vehicle data sent from subsystem 101 is compared with data obtained by image processing from cameras 105 in subsystem 102 on the driveway or on the computer or server to which this subsystem is connected. If the data matches, the ramp or gate on the approach to the restricted area 107 can be activated or opened.

Figure 1c shows an example of the implementation of subsystem 101 in a vehicle, which consists of a module 291 for driver and vehicle identification and modules 292, 293, 294 for passenger identification. In this implementation, the driver and vehicle identification module 291 serves as the telecommunications hub of the passenger identification module 292, 293, 294 with the restricted area approach and services subsystem. The maximum number of passenger identification modules in the vehicle is equal to the number of seats reserved for passengers.

Figure 1d shows an example of the installation of the module 291 for the identification of the driver and the vehicle of the subsystem 101 in the vehicle on the windshield near the rearview mirror. In the picture, the fingerprint scanner 241 is clearly visible as an example of the implementation of the biometric feature scanner, the vehicle identification medium 201, i.e. the traffic license, as well as the driver identification medium 203, i.e. the biometric driver's license, identity card or similar document, both in the form of a smart card, or a booklet with a contactless chip, such as a passport or a mobile phone with stored biometric data of the user.

Figure 1e shows an example of the installation of an identification module in the space between the driver's and passenger's seats, which can be used to identify the driver or passenger-passenger. In this as well as in the previous picture, the fingerprint scanner 241 is clearly visible as an example of the implementation of the biometric features scanner, and the medium 203 for driver identification, i.e. biometric driver's license, identity card, passport, mobile phone or similar document. Vehicle identification medium 201, i.e. traffic license, RFID tag or similar document, can optionally be used in the driver module as well as in the passenger module, while it is not used in the other passenger modules.

Figure 1f shows an example installation of the passenger identification module 292 installed on the back of the seatback in front of the seat of the passenger being identified. In this picture, the fingerprint scanner 281 and the camera 298, as an example of the implementation of the biometric feature scanner, and the biometric medium 261, i.e. a biometric identity card, passport, driver's license or similar document in the appropriate reader, are clearly visible. The camera 298 can also be used as a detector of the presence or change of passengers on the seat. Instructions to the passenger can be displayed on the touch screen 299, which can serve as a signature scanner as an additional biometric feature, and as a keyboard for entering a personal identification number (PIN, from the English Personal Identification Number) if this data was used in the identification process.

Figure 2 shows a detailed block diagram of the driver and vehicle identification module of the subsystem installed in the vehicle. This module uses data from two sources. One of the sources is a smart medium201 for vehicle identification (for example, a traffic license in the form of a card with a microprocessor used for this purpose in Serbia), which is read in a medium202 reader (for example, a smart card reader). Data about the vehicle 104 (type, brand, model, color, registration number, body number) and about the medium itself 201 (digital certificate digitally signed by the organization that issued the smart medium) are stored on this medium 201. Another source is a smart medium 203 for driver identification (for example, a driver's license, ID card or official identification card equipped with a suitable memory and microprocessor) which, in addition to the record of the driver's reference biometric feature, may have implemented algorithms for comparing the scanned and reference biometric feature. The smart medium203 for driver identification is read in the reader204 of the digital record. The driver and vehicle identification module of the subsystem in the vehicle, apart from the aforementioned readers, also contains a scanner240 of biometric features, which can contain a scanner241 of a fingerprint, a digital camera243 for taking pictures of the face or the iris of the eye, a scanner242 of a signature, a device244 for recording voice and the like. The detector 208 of the presence or absence of the driver on the driver's seat of the vehicle in an optoelectronic, piezoelectric or other version enables the repetition of the identification process when the driver is changed, i.e. after his departure from the vehicle seat 104. The subsystem 101 in the vehicle contains its own memory and processing unit 200 for managing the processes of communication, data processing and identification, including the comparison of the scans with the biometric features stored on the smart medium if the same cannot be done within the smart medium; interface250 for radio communication with the device102 for controlling access to the protected area or services with limited right of use to which the user accesses; and through which the user accesses other protected resources, for example servers 103; optionally, the subsystem 101 in the vehicle can also contain a security module 205, which on an additional, third smart medium 206 (for example SAM type - the English abbreviation of "Security Access Module") contains digital certificates digitally signed by organizations authorized to collect data from the identification media for drivers 203 and vehicles 201, in order to avoid setting up a fake subsystem in the vehicle and abusing the data collected in that way of identification data; optionally, the subsystem 101 may contain a keyboard 224 or a touch screen 222 for entering a password, if the procedure for accessing a restricted area and services provides for the possibility of entering a password; optionally, the subsystem may contain a voice communication equipment, i.e. a microphone 232 or a headset with authorized persons in the organization that controls access to the restricted area or services 291 drivers and vehicles in the frame The in-vehicle subsystem 101 may also include status indicators 223 and displays 221 and 222, as well as a vehicle blocking unit 210 in the event that the driver identification process does not result in a match of the scanned biometric features or password with the data stored on the smart driver identification medium. This module 291 is connected to the passenger identification modules 292, 293, which it manages and whose output data it forwards via the radio communication interface to the subsystem 102 at the approach to the restricted area and services.

Figure 2b presents a block diagram of the passenger identification module. This module is almost identical to the driver and vehicle identification module, and contains all functional blocks except for the smart media reader for vehicle identification, the radio-communication interface and the engine control unit, i.e. the vehicle lock. This module uses a smart medium 261 for passenger identification (for example an ID card, passport, driver's license or official identification equipped with a suitable memory and microprocessor) which, in addition to the record of the driver's reference biometric feature, may have implemented algorithms for comparing the scanned and reference biometric feature. The smart medium 261 for passenger identification is read in the reader 262 of the digital record. The module for identification of passengers in the vehicle, in addition to the aforementioned reader 262, also contains scanners 280 of biometric features, which may include a fingerprint scanner 282, a digital camera 285 for taking pictures of the face or iris of the eye, a signature scanner 283, a device 286 for recording voice and the like. The detector 267 of the presence or absence of a passenger, on the seat of the vehicle on which he previously registered, can be implemented as an optoelectronic, piezoelectric, electromechanical or optical sensor and enables the repetition of the identification process when the passenger changes the seat, i.e. after his departure from the vehicle seat 104. This module 292 contains its own memory and processing unit 260 for managing the processes of communication, data processing and identification, including the comparison of scans with biometrics stored on a smart medium markings if the same cannot be done within a smart medium; interface 290 for communication with the module 291 for driver and vehicle identification and through which data is exchanged with the subsystem at the approach to the protected area or services with limited right of use; optionally, this module can also contain a security module 263, which on an additional, second smart medium 264 (for example, SAM card type) contains digital certificates digitally signed by organizations authorized to collect data from identification media 261 for passengers, in order to avoid setting up a fake subsystem in the vehicle and misuse of the identification data collected in this way. Optionally, the passenger identification module 292 can also contain a keyboard 274 or a touch-sensitive screen 272 for entering a password 275, if the identification procedure through a smart medium foresees the possibility of entering a password; optionally, the passenger identification module may also contain equipment for voice communication, ie a microphone 277 and speaker 276 or headphones, with authorized persons in the organization that controls access to the restricted area or services. The passenger identification module 292 within the subsystem 101 in the vehicle may also contain status indicators 273 and displays 271 and 272. This module 292 is connected to the driver identification module 291, which controls it and forwards its output data via the radio communication interface to the subsystem 102 at the approach to the restricted area and services.

Figure 3 shows a block diagram of the subsystem 102 installed at the access to a restricted area, ie services. This subsystem contains one or more cameras 301 that scan the visual features of the vehicle (registration marks, type, make, model, color, logo) and store them in the local memory in the form of an image or a text-numeric record (number of plates, name of the recognized type, make and/or model, color designation, e.g. "gray"); implemented image comparison algorithms (for example comparing logo images with reference logo images in the database, or vehicle images with a reference previously scanned image of that vehicle or reference two-dimensional or three-dimensional images of the vehicle model) and algorithms for license plate extraction and optical character recognition in license plates; own processing unit 300 with memory for executing these algorithms; interface for radio communication with the vehicle 322; optionally, an interface321 for communication with servers and databases of the organization authorized to check access rights; optionally, means 302 for releasing passageways, ramps, gates, turnstiles or the like, or a communication interface thereto; optionally, the subsystem at the access to the restricted area or services may also contain a security module 310, which contains digital certificates digitally signed by organizations authorized to collect data from the identification media 203, 201 for drivers and vehicles, in order to avoid the installation of a fake subsystem 102 at the access to the restricted area or services and misuse of the identification data collected in this way. This digital data can be stored on a hard disk, but also on a SAM card 311 or another medium.

Figures 4a, 4b and 4c show the sequence of steps in the process of checking smart media with records about the driver (biometric identity card, driver's license, official document, etc.) and about the vehicle (traffic ticket or similar smart media) in order to access a restricted area or services.

Figure 4a shows a part of the access control algorithm that verifies the authenticity of the smart medium for driver identification and the right of its holder to use it. The verification process begins with the user starting the reading 401 of his smart medium 203 in the reader 204. This can be achieved by inserting the smart medium 203 into the slot provided for this purpose in the reader 204 for the purpose of exchanging data, easily the driver's license is explicitly mentioned in step 401, any other biometric document can be used instead, including the security module 206 if reference biometric features are stored on it. Data exchange is done through electrical contacts on the smart medium 203 (an example of such a medium is a biometric identity card in Serbia), or by bringing the smart medium 203 closer to the antenna of the reader 204 (an example of such a medium is the Serbian biometric passport) in order to enable radio data transmission. The passenger identification steps are identical to steps 410 and 420 in Figure 4a and step 430 in Figure 4b.

Verification of the right of use in this stage of the access control process, i.e. identification of the driver or passenger, can be achieved by a request to enter a password, i.e. a personal identification number 225 (eng. PIN) which the reader 204 can display via the indicator 223, on the ordinary screen 221, on the screen 222 that is sensitive to touch or by a voice message through the speaker 231. The verification 410 of the right of use via the password is an optional step in reading the digital record from the smart medium for identification of the driver or passenger. The password or PIN 225 is entered 411 via the keyboard 224, the touch-sensitive screen 222 or by voice through the microphone 232. The password or PIN 225 from one of the above-mentioned inputs 222, 224, 232 comes to the central processing unit, i.e. the microcontroller 200 of the subsystem 101 in the vehicle, from where 412 is forwarded via the reader 204 smart medium 203 for driver or passenger identification. On the microprocessor of the smart medium 203, the entered PIN or password 225 is compared 413 with the PIN or password stored in the memory of the smart medium 203. If the entered data 225 is identical to the stored data, the smart medium is unlocked 414 for further work, and the result of the comparison 413 from the smart medium is sent via the reader 204 to the central processor 200 of the subsystem. 101 in the vehicle. The central processor 200 sends the result of the comparison 413 to one or more audiovisual outputs 221, 222, 223 or 232 and decides on further steps 416 depending on the result of the comparison 413. In case the result of the comparison 413 is negative, i.e. if the entered PIN or password 225 does not match the stored data, the process returns to the request for re-entering the password 411 or of the PIN, or upon reinsertion 401 or bringing the driver identification smart medium 203 closer to the reader 204. In case the entered PIN 225 or password and the stored PIN or password match, the process of reading the smart medium 203 in the reader 204 can continue. This completes the optional check 410 of the right of the holder of the smart medium 203 to use that medium 203.

The next step shown in Figure 4a is the part of the access control algorithm that performs a check 420 of the authenticity of the smart medium 203 to identify the driver or passenger. In this step, the smart medium 203 sends 421 its digital certificate to the central processing unit 200, i.e. the microcontroller in Figure 2a. The central processing unit 200 compares the received digital certificate with a list of smart media digital certificates stored on non-volatile memory to which the central processing unit has access, for example on the hard disk within the device or on the SAM card 206. If the digital certificate from the smart media does not match any certificate stored on the non-volatile memory, the processor 200, via the audiovisual outputs 221, 222, 223 or 232, sends the user an error message and invites him to re-insert the corresponding card, i.e. returns him to step 401, where he optionally disables the use of the vehicle by sending a signal to the engine control unit 210. In this way, the number of smart media for driver identification, for example driver's licenses in the form of a smart card, and their authorized holders, i.e. drivers who have the right to use the vehicle, is narrowed. If the digital certificate from the smart medium matches one of the certificates stored on the non-volatile memory, for example on the SAM card 206, this stage of the algorithm ends, and the process of checking the right of access continues with the steps of biometric verification of the driver and authentication of the smart medium for vehicle identification described in Figure 4b.

Part of the right of access process described in Figure 4b consists of the verification 430 of the driver's or passenger's biometric features and the process of downloading data from the smart medium 201 for vehicle identification with the verification 440 of matching the certificate from the smart medium with the data stored on the non-volatile memory of the subsystem 101 in the vehicle. In this step, one or more biometric features of the driver or passenger are scanned 431 by a suitable sensor from the group of audiovisual inputs 240 into the subsystem 101 in the vehicle. For example, camera 243 may scan a face or iris, fingerprint scanner 241 may scan finger 245 , signature scanner 242 may record signature 246 of a driver or passenger, and voice recording device 244 may record voice. The central processing unit or microcontroller 200 forwards these scanned data 432 to the reader 204 of the smart medium for their comparison with the corresponding reference biometric mark or marks stored on the memory of the smart medium 203. Namely, it is preferable that the biometric comparison algorithms 433 are executed on the microprocessor of the smart medium 203, because in this way the reference biometric marks never leave this medium. 203, which reduces the possibility of their theft and unauthorized use. In case this is not possible, the reference biometric features can be stored on the SAM 206 security module and compared on it. If this is also not possible, the reference features must be stored at least temporarily on the memory of the reader 204 or the central processing unit 200, which is a security risk due to the connection of these parts of the subsystem 101 in the vehicle with the outside world, via the radio communication interface 250. Additional security in this optional step is provided by the digital signing 434 of the results of the comparison of biometric features, which is performed by the smart medium 203 for the identification of the driver that is, the passenger, that is, the security module 206, with its private signing key. In this way, it is ensured that the result of the comparison in the subsystem 101 in the vehicle is authentic and not tampered with by unauthorized and malicious modification of the subsystem 101. The central processing unit 200 reads the result 436 of the comparison, optionally with its previous decryption and signature verification. If the result of the biometric comparison is negative or if it is unintelligible or if the signature check has failed, the user is directed via audiovisual outputs 221, 222, 223 or 232 to rescan 430 biometric features, with an optional blocking of the vehicle by sending a signal to the engine control unit 210.

If the result 436 of the comparison of the scanned and reference biometric feature is positive, and if it has previously successfully passed the decryption and signature verification steps, the person being verified, in this case the verified authorized user, driver or passenger, is directed via the audiovisual outputs 221, 222, 223 or 232 to the next stage shown in Figure 4b, the purpose of which is to download and verify data from the smart medium 201 for identification vehicles.

If the presence of a smart medium 201, for example a traffic permit in the form of a smart card, has not already been detected by the subsystem 101 in the vehicle, it is requested via the audiovisual outputs 221, 222, 223 or 232 to insert it into the reader 202, or, if it is contactless (RFID), to bring it to the antenna of the reader 202. This is described in Figure 4b as a mandatory step 437, which enables reading the vehicle data from the smart medium 201. If the data from the smart medium 201 for vehicle identification, for example, the name of the authorized person, the vehicle data or the digital certificate of the medium (for example, the traffic license) matches the data stored on the subsystem in the vehicle 101 or on its security module 206, and if the data from the smart medium for driver identification is verified by at least one successful comparison in steps 410, 420 or 430, vehicle it can be started in the option where it is controlled by the engine control unit 210. Even if this option is not present, the subsystem 101 in the vehicle stores data ready for exchange with the system installed at the approach to the restricted area or services 102 until the driver presence detector indicates the absence or change of the driver, which would lead to the requirement to repeat the entire driver and vehicle verification process described in Figures 4a and 4b.

Also indicated in Figure 4b is the possibility of using optional data authentication 440 from a smart vehicle identification medium. It can be done both by sending the certificate 441 from the smart medium for vehicle identification 201 to the subsystem in the vehicle 101, i.e. its central processing unit 200 and comparing it 442 with the certificate stored on the device 101 or the security module SAM 206, as well as by checking the digital signature of data from the medium 201, if it enables digital signing of data, in a manner analogous to that of biometric features signed, as described in step 434 in the same figure.

At the end of the process described in Figures 4a and 4b, data is stored on the subsystem 101 in the vehicle, the sending of which to the subsystem 102 installed on the approach to a restricted area or services can be initiated at the request of this subsystem 102. The malicious replacement of an authenticated driver by an unauthorized person is prevented by the driver presence detector 208, which registers the departure or change of the driver from the driver's seat of the vehicle. This detector can be implemented as an electromechanical, piezoelectric or optoelectronic sensor in or on the seat, or as an optical sensor or camera 243, where any of these sensors is connected to the central processing unit 200 of the subsystem 101 in the vehicle. If a driver presence detector, for example a camera 243 with a suitable image processing algorithm that can be executed on the processor 200, indicates the absence or change of the driver, the subsystem 101 in the vehicle would request via the audio-visual outputs 221, 222, 223 or 232 to repeat the entire driver and vehicle verification procedure described in Figures 4a and 4b, optionally stopping the engine or preventing the engine from starting via a signal sent from processor 200 to engine control unit 210.

It is important to note that the fulfillment of the authentication and identification steps from Figures 4a and 4b, which precedes the procedure for checking access to the area and services in Figure 4c, enables smooth driving, because any of the steps 401, 410, 420, 430, 437 and 440 can be performed before starting the engine or before entering the vehicle into traffic, while potentially malicious replacement of the person behind the wheel is detected by checking the presence or absence of the driver with optical, electromechanical, piezoelectric or optoelectronic sensor 208.

Figure 4c shows the procedure for checking the right of access of the authorized vehicle and the driver to the restricted area and services, assuming that the driver's authentication using the identification smart medium and the vehicle's identification have already been performed in accordance with the steps described in Figures 4a and 4b. When the vehicle 104 enters 461 the radio signal range of the restricted area approach and service subsystem 102 (abbreviated PPOP), the in-vehicle (PV) subsystem 101 and the PPOP 102 exchange digital certificates 462 to establish communication trust. In the same step, when exchanging certificates, PPOP 102 generates a symmetric key and sends it encrypted with the public key PV. Public key encryption is used to keep this information known only to these two parties, as only the PV 101 has a private key (located on one of the three smart media, 201, 203, 206) that can decrypt this message. The symmetric key is further used for encrypted communication between PV 101 and PPOP 102 in both directions. All messages exchanged below are first signed with the sender's certificate and then encrypted with a symmetric key. During each session, PPOP generates a new symmetric key unique to that session in order to avoid possible abuses and ensure communication secrecy. The PPOP 102 is connected to an organization that issues one of the 3 smart media,201,203,206, for example SAM 206. This allows the PPOP 102 access to the digital certificate of the corresponding smart media201,203,206, which can be stored in the non-volatile memory of the PPOP 102 itself or retrieved via a remote database server accessible via interface 321. The PPOP 102 will ensure the withdrawal of the digital certificate for that system101 in the vehicle, whose access right it controls, by identifying the corresponding certificate in the database or on its own non-volatile memory thanks to the identification data (e.g. license plate number) previously sent from the vehicle as part of the certificate exchange process 462. After establishing secure communication, PPOP102 sends a request to send data about the vehicle and driver463, and PV101 sends data464 that PPOP102 checks by scanning 465, that is, by photographing the vehicle 104 and analyzing the images of the vehicle 104 obtained by the camera 105, 301. By analyzing the images, data such as license plate numbers, vehicle category, vehicle color, as well as the vehicle make and in some cases the model can be obtained automatically. This data is compared on the processing unit 300 of the PPOP approach subsystem 102 with the reference data from the smart medium 201 for vehicle identification sent in the previous step 464 of this algorithm. If these reference and scanned data do not match, that is, if the result of the check467 is negative, access to the restricted area and services is disabled. If the reference and scanned data match, that is, if the result of the check467 is positive, the right of access468 is checked, that is, whether the driver and the vehicle104 are authorized to access the restricted area and services. If the result 469i of this check is positive, access to the restricted area or services is enabled by releasing the passage 470, otherwise the passage is blocked. Also, every absence of a driver is registered by checking 450 driver presence. In case of a registered temporary absence of the driver, in order to prevent the malicious replacement of an authorized driver by an unauthorized one, access to the restricted area and services is disabled until the entire procedure of checking the right of access described in figures 4a, 4b and 4c is repeated.

Digital certificates are used to ensure high security in communication between two parties. By sending the certificate, the owner of the certificate proves his identity to the other party in the communication. A digital certificate of a smart medium is a document that contains the name of the holder or owner of the smart medium, the holder's asymmetric public key for encrypting data intended for the holder and decrypting data sent by the holder, the name of the certification body that issued the certificate and the smart medium, the digital signature of the certification body and other identification data. In order to explain how in practice digital certificates are created and stored on smart media, Figure 5 shows a block diagram of the system for generating certificates on smart media. The parts of that system are the smart medium 201, 203, 206, which is shown in the picture as the driver's license 203 of the user, but it can also be the smart medium 201 for vehicle identification such as a traffic license with a chip, SAM module 206 and the like, then the reader 510 of the smart medium, which is also the editor of the records of the smart medium, the computer 520 in the production process to which the reader 510 is connected, as well as the certification body { eng. CA - Certificate Authority)530. The certification body 530 is an entity that issues digital certificates, which in practice is a computer under the control of the organization that issues certificates, protected from theft, alteration and falsification of data either physically or by information technology or telecommunications. Therefore, it is understood that the certification body 530 is trusted by both parties who want to establish communication (eng. trusted third pa/ty), both the owner of the certificate and the one who relies on that certificate to check the identity of the owner and the authenticity of his messages. It is important to remember that both parties, and in this application they are subsystem 102 on access to restricted area and services (PPOP) as one party, via a certificate recorded on a device or on smart media 311, and subsystem 101 in a vehicle via at least one smart media 201 203 206 (SAM modules, driver's, traffic licenses, official identification cards, passports, etc.) are connected to the organization that issued these certificates and issued corresponding smart media to them.

Figure 6 shows the process of generating a certificate for use on a smart medium. The procedure in Figure 6 is executed when issuing a document in the form of a smart medium to its user, and therefore precedes subsequent access controls. This image also explains where the certificates and keys that are stored on the protected non-volatile memory of the smart media come from. The generation of a pair of private and public keys 611 is performed on the smart media 201, 203 or 206 itself, upon request initiated on the computer 520 in the production process and forwarded to the smart media 201, 203, 206, through the reader-editor 510. The private key or secret key (eng. private keyorsecret key) is stored exclusively in the place where it was generated, i.e. on protected non-volatile memory smart medium. This memory is available exclusively to the cryptographic processor on the smart medium 201, 203, 206, and its contents cannot be revealed by reading the digital record of the smart medium by the readers 510 used in the production process, nor by the readers 202, 204, 207, 312 used in the verification processes. The holder of the smart medium, i.e. the owner of the key, uses his private key for encryption and digital signing of data. This data can be available on the smart medium itself to the outside world, or it can be entered from the outside world onto the smart medium for encryption and digital signature. This type of private key protection guarantees that encrypted or signed data originates from its owner. The public key is used to decrypt data and is publicly available to parties interested in communicating with its owner. The public key is assigned to interested parties as part of a digital certificate, along with identification data about its owner. The recipient of a digitally signed or encrypted message uses the sender's public key for decryption and thus verifies that the message originates from the owner of the key. In addition to generating a private and public key on the smart medium, it is necessary to confirm that the smart medium was issued by an organization that guarantees its authenticity. Therefore, after creating a private and public key on the non-volatile memory of the smart medium, the computer 520 in the production process creates 612 a request to the certification body for signing the certificate (eng. CSR-Certificate signing request). Before sending, the computer 520 in the production process through the reader 510 delivers this request to the smart medium 203. The smart medium 203 digitally signs 614 this request with its previously generated private through its cryptographic processor. key. The signed request 615 is forwarded via the reader 510 to the account 520 in the production process. The computer 520 then addresses the certification body 530 with a request to issue a certificate 616. The certification body 310 generates a certificate 617 and sends it 618 to the computer 520 in the production process. The computer forwards the certificate 619 via the reader 510 to the smart media 203. Thus, during each access rights check, the smart media will be able to send its certificate signed by the certification body. The recipient, for example PPOP 102, will be able to verify the authenticity of this certificate by checking the signature of the certification body with the public key of this body. This implies that the recipient is connected to an organization that controls the certification body and that can deliver its public key to all interested parties, including itself.

METHOD OF INDUSTRIAL OR OTHER APPLICATION OF THE INVENTION

The described system for automatically checking the right of access of vehicles and drivers to restricted areas and services ensures the implementation of a system for highly secure access to areas or services with restricted right of use, while preserving the privacy of authorized users, and preventing other possible abuses.

Claims (20)

1. A system for automatically checking the right of access of the vehicle, driver and passengers in the vehicle, which consists of a mobile subsystem 101 placed in the vehicle and a stationary subsystem 102 placed at the approach to the controlled area and services, indicated that the mobile subsystem in the vehicle contains readers (202, 204, 262) of smart identification media (201, 203), sensors (240) and memory, wired or wirelessly, directly or indirectly connected to the input of the processor unit (200) for comparing biometric data and a wireless transceiver (250) wired or wirelessly connected to the output of the processor (200); 2. The system according to claim 1, indicated by the fact that the sensors (240) in the driver and vehicle identification module (291) of the mobile subsystem provide biometric sensors, that the smart identification mediums include the smart identification medium (203) of the driver and the smart identification medium (201) of the vehicle and that the readers include the reader (204) of the smart identification medium of the driver and the reader (202) of the smart identification medium of the vehicle. 3. The system according to claim 2, indicated by the smart identification medium (203) can be any machine or electronically readable medium with personal data, such as a driver's license, passport, identity card, visa, residence permit, official document, credit card, bank card, mobile phone, ticket, card for temporary or short-term access to the area or identification document for employees, 4. The system according to claim 2, characterized by providing a smart identification medium (201) a traffic permit, an RFID tag or a document temporarily issued by the vehicle owner, vehicle rental agency, vehicle fleet management organization or competent authorities. 5. The system according to claim 1, indicated by the fact that the mobile subsystem (101) contains modules (292) for passenger identification, within which are biometric sensors (240) and readers (262) of smart passenger identification media. 6. The system according to claim 2, characterized by providing the input of the processing unit (200) for comparing biometric data, in the module (291) for driver identification, wirelessly or wired, directly or indirectly connected to the outputs of the biometric sensors (241), (242), (243) or (244) as well as to the outputs of the reader (202) of smart identification media, and that the output of the processing unit (200) is via a radio interface (250) and transceiver (106) wirelessly connected to the stationary subsystem (102). 7. The system according to claim 5, characterized by the fact that the input of the processor unit (260) in the module (292) for passenger identification is wired or wireless, directly or indirectly connected to the outputs of the biometric sensors (281), (283), (285) or (286) as well as to the outputs of the reader (261) of smart identification media, and that the output of this processor unit is through the radio interface (250) and the transceiver (106) connected to the stationary subsystem (102). 8. The system according to claim 1, indicated by the input of the processor (300) for data comparison connected to the output of the optical sensor (105), i.e. the image of the actual visual features of the vehicle, as well as to the output of the wireless transceiver (106), i.e. via the radio interface (250) and the reader (202) with the data on the visual features recorded in the smart identification medium of the vehicle (201), and that the output of this processor is wired or wireless, directly or indirectly, connected to the movable barrier (107). 9. System according to claim 6 or 7, characterized by the fact that the input of the processor (300) for data comparison is connected wirelessly via the transceiver (106), radio interface (250) and interface (290) to the outputs of the biometric sensors (281), (283), (285) or (286) as well as to the outputs of the reader (261) of smart identification media and that the output of this processor is wired or wirelessly, directly or indirectly, connected to the movable barrier (107). 10. The system according to claims 1, 6 and 7, indicated by the output of the processor (300) connected to the input for controlling the moving barrier (107) and the input of this processor through the transceiver (106) and the radio interface (250) with the output of the processing unit (200) and/or processing unit (260), as well as wired or wireless, indirectly or directly with the output of the optical sensor (105). 11. The system according to claim 2 or 5, indicated by the fact that the smart identification medium (203) and/or (261) contains its own microprocessor unit for comparing biometric data, within which the memory with reference biometric data of the document owner is inaccessible to the readers (204, 262). 12. The system according to claim 2 or 5, characterized by the fact that the security module (206) contains a processing unit for comparing biometric data, the input of which is connected via the microcontroller (200) to the memory on the biometric smart identification medium (203) or (261) as well as to the output of the biometric sensor (240), (281), (283), (285) or (286). 13. The system according to claim 2 or 5, indicated by the fact that the mobile subsystem (101) contains optoelectronic or piezoelectric detectors (208) of the presence of the driver and/or detectors (267) of the presence of passengers, the outputs of which are connected by wire or wirelessly, indirectly or directly to the input of the processor (200) and/or (260). 14. Procedure for automatically checking the right of access of the vehicle, the driver and the passengers in the vehicle through the exchange of data between the mobile subsystem (101) in the vehicle (104) and the stationary subsystem (102) at the approach to the area with limited access rights, indicated by that the stationary subsystem (102) compares the extracted textual-numeric record obtained by automatic recognition of the vehicle's visual features with digitally recorded data from the smart identification medium (201) of vehicles read in the vehicle itself (104) and received via the transceiver (106) via a wireless connection, thereby confirming the identity of the vehicle (104). 15. The method according to claim 14, characterized in that the mobile subsystem (101) is authenticated by smart identification media (203), (261) by means of a digital certificate stored on smart identification media (206) or (264). 16. The procedure according to claim 14, indicated by the fact that the stationary subsystem (102) checks the certificate of the mobile subsystem (101) in the vehicle with a query sent through the telecommunications network to the certification body that issued it. 17. The procedure according to claim 14, indicated that the stationary subsystem (102) checks the certificate of the mobile subsystem (101) of the vehicle locally, based on the list of invalid certificates stored in the memory of the stationary subsystem. 18. The method according to claim 14, characterized in that the messages exchanged between the stationary subsystem (102) and the mobile subsystem (101) are digitally signed and encrypted. 19. The method according to claim 14, characterized by the fact that the stationary system (102) controls the entry or exit from the restricted area by sending an alarm signal or starting a ramp (107), a mobile barrier, a gate or a similar obstacle controlled remotely. 20. The method according to claim 14, indicated that the mobile subsystem (101) automatically detects a change of driver or passenger in a certain seat in the vehicle (104) with an optoelectronic or piezoelectric presence or absence detector and that after each automatically registered change, the processor (260) or (200) initiates a new driver or passenger identification procedure.