RU2736507C1 - Method and system for creating and using trusted digital image of document and digital image of document created by this method - Google Patents

Abstract

FIELD: computer equipment.SUBSTANCE: disclosed is a method of creating a trusted digital image of a document, comprising sending a signal to a security element located on a secure medium through a communication bus for launching an application, reading data recorded on a carrier of the readable document using an application on the same security element, verifying the validity of data recorded on the medium of the readable document, public digital certificate, verification of certificate validity, creation of document digital image on the same security element, preserving a digital image of a document on the same security element with possibility of its reading.EFFECT: technical result consists in creating a trusted image of a digital document on one safe medium for use by any third-party applications.17 cl, 7 dwg

Description

Technology area

[0001] In the current situation of universal digitalization, there is a significant problem associated with the ability to identify a user using a digital document. Such identification and use of a digital document will be possible only if the device and method for creating an image of the digital document have a sufficient degree of reliability and the environment in which the document is created is recognized as a trusted and secure environment.

[0002] The claimed invention is aimed at creating a reliable image of a digital document on a tangible medium and using it as a full-fledged digital document, be it a passport, travel document or bank card.

[0003] The invention is aimed at describing the principle of secure tokenization of applications on contactless smart cards (hardware tokens, security elements), their storage and management of tokenized document images.

State of the art.

[0004] A device for tokenizing the confidentiality of payments is known (RU 2602394). This solution proposes converting tokenized payment orders for purchases into the movement of funds to pay for purchases between the accounts of multiple issuers. In one embodiment, the PPT receives a token arbitration request from a merchant containing unambiguous, source-independent, universally resolvable payment token information for processing a purchase order from a user. The PPT queries the token database for information about the issuer using the payment token information and obtains the information about the issuer. Based on the information about the payment token, the PPT also determines that the user should be prompted for payment options, and transmits the request for payment options to the user's mobile device. After receiving a response from the mobile device, the PPT generates a purchase authorization request based on the payment options and predefined settings for the issuers to be contacted in order to process the purchase order, and transmits the generated authorization request to the issuer.

[0005] Also known is an invention (US2016119296) that allows machine-readable media and systems to provide a token service environment, a token requestor (eg, a token requestor) to specify parameters for generating a token to control and customize the token generation process. For example, a token requestor can specify (eg, select from a list or provide a list) the accounts to be tokenized. Accounts can be identified using account identifiers (such as account numbers) or bank identification numbers (BIN). The party requesting the token can also specify encryption keys for the generated tokens. The party requesting the token can also specify additional parameters, such as notification thresholds indicating when token-related notifications should be generated.

[0006] In addition, a patent is known (WO 2016193227). In a device that supports both NFC and TEE and has a security element (SE), the NCE-based software application acts as an interface / proxy and handles insensitive security functions, while the trusted application in TEE and the applet on SE interact to handling security-sensitive functions. An end-to-end security relationship can be established between the SIM card, the TEE, and the SAM (Secure Authentication Module) provided for a second NFC-enabled device (eg, a contactless reader) that communicates with the first device in a contactless manner. The solution integrates NCE, TEE, SE and SAM to provide secure contactless applications and also supports advanced security measures.

[0007] A patent has also been identified from the prior art (EP2048590). The invention relates to a method for communication between a secure processor with a terminal interface, whereby the terminal interface sends a request for a desired interaction with a software module. According to the invention, the method is performed in such a way that the terminal interface or digital processor connected to the terminal interface integrates the template into the request for the desired interaction, the template including information about the class of interactions with which the desired interaction consists in the fact that the subscriber identity module contains at least two different software modules and that the secure processor (10) and / or the mobile device that is connected to the secure processor contains a selector in which the selector is able to parse the pattern, the selector specifying the class of interactions to which the request belongs, and that the selector makes a selection a selectable software module, in which the choice is influenced by the interaction class to which the desired interaction belongs.

[0008] A method of simplifying a transaction between a first party and a second party is known (WO2005059693). A system for facilitating a transaction between a first party and a second party is controlled by a trusted third party system and programmed to perform the method by receiving instructions from the first party to fulfill at least a portion of the obligations of the first party in said transaction. The system communicates with the second party and provides the other party with tangible assurance that the other party is communicating with the trusted third party system through the system. The system communicates information to the second party to ensure that the instructions of the first party have been or will be followed. In this way, trust in the third party is transferred to the first party, and the second party can trust that the obligations of the first party have been or will be fulfilled.

[0009] Currently, all major identification systems provide an architecture in which:

[0010] The user has a secure element (embedded secure element) that stores information (from simple numbers as an identifier (Proximity / RFID cards) to complex structures such as a bank card (EMV payment cards) or national documents (eID , ePassport, mobile ID, ICAO, eIDAS, NationalID, Driver license, Insurance card)). The use of secure media certified by the Common Criteria Certification Evaluation Assurance Level (CC EAL) is accepted by the industry as proof of high reliability and ensures that current hacking methods are more expensive than the information they contain (principle of sufficiency).

[0011] On a secure medium, a specialized code (application - secure application, applet, trustlet) is executed for this security element (Mifare Classic / Mifare DESFire / JCOP (Java Card Open Platform) / MorphoOS / CardOS), which implements the functionality of a smart card. For example, a bank card is a Secure Element on which the JCOP operating system is installed with VISA (MasterCard) applets, which in turn contain the personal data of the card (PAN, Expire Date, Customer name) and can be verified / signed as part of the exchange with the terminal (payment transaction). Applets of this type provide functionality for card-emulation. It is impossible to replace an applet without authorization on a secure medium without knowing the access keys. In this way, it is guaranteed that the application and data are stored inside a secure element without the possibility of tampering.

[0012] From the infrastructure side, terminals are used for contactless exchange with a secure medium, within which, due to the energy of the terminal field, contact with the secure medium is ensured and a two-way exchange is carried out according to a previously agreed exchange protocol (specification). For banking transactions, this is compliance with the requirements for Contactless EMV (cEMV). For international passports - ICAO requirements and specifications. Transport and national documents may have their own national standards and specifications.

[0013] Within the framework of the exchange, as a rule, mutual identification (authentication / authorization) occurs, in which each side (terminal and secure medium) verifies the authenticity of each other. The simplest version of identification - a secure medium contains a private and public key inside it. The public key only allows data to be encrypted, the private key allows decryption. The terminal requests the public key from the card, generates random data, encrypts it with the public key of the secure medium and gives it to the carrier. The carrier decrypts the data with its private key (which never leaves the carrier) and gives it to the terminal for comparison. If the data matches, the terminal considers the provided secure medium to be genuine.

[0014] Typically, both the carrier and the terminal possess keys to mutually sign / authenticate the exchange and ensure that there are no forgeries or man-in-middle security attacks.

[0015] The terminal is classically a two-chip (two microcircuits) solution, in which one microcircuit is a transmitter (NFC analog front-end, transmitter, transceiver) of an analog signal in accordance with the requirements for the quality and size of the generated field (EMVL1 certification rules apply for Contactless EMV). In this case, the transmitter does not know anything about the security of the exchange. The second chip (microcontroller, microprocessor) is used to create an exchange session, check the card for validity, read data and then transfer it in the required exchange formats to a workstation (computer, mobile phone). To maintain security, the microcontroller must contain various blocks of encryption and secure storage of access keys, which in the event of a hack will be reset to zero to prevent compromise of the infrastructure as a whole.

[0016] Recently, chips have become available on the market that physically contain both a transmitter and a security element in the same housing, meeting the requirements of the CC EAL. Currently, the security element contains applets that emulate banking, transport and access control cards, that is, they work in card-emulation mode (a common example is ApplePay or GooglePay).

[0017] These microcircuits can also contain applets of another type - implementing the functionality of a contactless reader (reader mode applet). By implementing applets in reader mode, you can provide unprecedented security for reading and then storing a data image from a secure medium.

[0018] For example, in this way, a payment terminal (POS, mPOS) can be implemented, when the EMV L2 exchange protocol is implemented on the security element of the reading terminal within the reader mode of the applet, the application access keys are stored on the security element (on the user card) and keys data encryption for acquiring. In this case, at the exit from the security element of the terminal, only encrypted data is output, which is necessary for the acquiring bank to conduct a transaction within the framework of the payment system. Thus, high security, flexibility and low cost of the payment terminal solution are achieved.

[0019] The objective of this invention is to create a trusted image of a digital document on one secure medium (namely, on its security element) for use by any external applications and in order to create a trusted (non-falsified) image of a digital document (passport, bank card, transport card , national identity, etc.), which may continue to act in the KYC (Know Your Customer) procedure.

[0020] In this case, a secure medium means any device with a secure microchip (security element) or a secure execution unit (Secure Element, Trusted Execution Environment) and a contactless reading unit controlled by it. A smartphone or wearable device can act as such a secure medium, but is not limited to these form factors.

Disclosure of the essence of the invention

[0021] The technical result of the claimed invention is to create a trusted image of a digital document on one secure medium for use by any third-party applications. Since the entire exchange procedure takes place in a contactless exchange session and the data is stored directly in the same microcircuit (in the security element), using the claimed method and systems, a trusted and unforgeable image of a digital document (passport, bank card, transport card, national identity, etc.) etc.), which can further act in the KYC (Know Your Customer) procedure.

[0022] The technical result is achieved in the invention by a method of creating a trusted digital image of a document, which consists in supplying a signal to a security element located on a secure medium through a communication bus to launch an application; reading data recorded on the readable document medium with an application residing on the same security element; verification of the authenticity of the data recorded on the medium of the readable document with a public digital certificate; verification of the validity of the certificate; creating a digital image of the document on the same security element; storing a digital image of a document on the same security element with the ability to read it.

[0023] In this case, there are cases when the created trusted digital image of the document is additionally signed with a certificate located on the same security element; and / or when the reading is contactless; and / or when the encryption of the document image is performed by an asymmetric or symmetric encryption mechanism, and it is possible to encrypt the document image after additional signing with a certificate.

[0024] And also the above technical result is achieved in the invention by using a trusted digital image of a document by a third-party application, which consists in creating a trusted digital image of a document according to the above method and providing a digital image of a document for a third-party application using an application located on the same security element or Providing a trusted digital image of a document for a third-party application using an application located outside the security element.

[0025] In this case, there are cases when the user manually selects a digital image of a document to be provided; and / or the choice of a digital image of the document to be provided is made by the application automatically by recognition.

[0026] And also this technical result is achieved by creating a trusted digital image of the document according to the above method.

[0027] In this case, there are cases when: the created digital image of the document is additionally signed with a certificate located on the security element; reading is contactless; the reading is performed using an application that allows contactless, safe reading of data, i.e. the possibility of compromising the communication channel is excluded due to the fact that both applications are located in an environment with the highest level of trust (security); the encryption of the document image is performed by the asymmetric encryption mechanism; encryption of the document image is performed by the symmetric encryption mechanism.

[0028] As a security element, microcircuits that physically contain in the same housing a transmitter and a chip made in accordance with the requirements of CC EAL (Common Criteria Certification Evaluation Assurance Level - the level of ensuring the assessment of an IT product or system, which is a numerical rating assigned after completion safety assessment according to general criteria, which is an international standard).

[0029] Environment with the highest level of trust (security) - a hardware and software environment in which the possibility of introducing software viruses, substitution of software in it or exchange data, unauthorized access is minimized or excluded.

[0030] A trusted environment can be, inter alia, a system that uses hardware and software to ensure the simultaneous processing of information of different categories of secrecy by a group of users without violating access rights.

[0031] The image of a digital document created in this way can be subsequently used by any external applications. Since the entire exchange procedure takes place in a contactless exchange session and the data is stored directly in the same microcircuit with a high level of security, it follows that an unforgeable image of a digital document (passport, bank card, transport card, national identity, etc.) is created, who can continue to perform in the KYC (Know Your Customer) procedure.

[0032] And also the above technical result is achieved by the system for creating a trusted digital image of the document (according to independent paragraph 11), containing the carrier of the readable document; controller for working with a safety element; a secure medium, including a communication bus and a security element, with an application installed on it for safe reading, verification and digital imaging.

[0033] In this case, there are cases when the system for creating a trusted digital image of a document according to claim 11 further comprises a server on which an application is installed that verifies the validity of the certificate of the read document; and / or additionally comprises means for communicating with the controller.

[0034] The claimed technical result is also achieved by a system for using a trusted digital image of a document by a third-party application (dependent clauses 14, 15 of the formula), comprising a system for creating a trusted digital image of a document according to claim 11, and an application located on a security element for providing a digital image of a document, or an application outside the security element to provide a digital image of the document.

[0035] Moreover, there are cases when the system for using a trusted digital document image additionally comprises a user interface; and / or contains an additional controller for working with an application for providing a digital image of a document. Brief description of the drawings.

[0036] The invention is illustrated by six figures.

[0037] Figure 1 shows a diagram of an implementation of a method for creating a trusted digital image of a document.

[0038] Figure 2 shows a diagram of an implementation of a method for using a trusted digital document image, including a method for creating a trusted digital document image.

[0039] Figure 3 shows a system for implementing a method for creating a trusted digital image of a document.

[0040] Figure 4 shows a system for implementing a method for creating a trusted digital image of a document, in which the controller is located on a secure medium.

[0041] Figure 5 shows a system for implementing a method for creating a trusted digital image of a document, which includes an additional controller located in the communication means.

[0042] Figure 6 illustrates a system for implementing a method for using a trusted digital document image, in which an application is located on a security element for providing a digital document image.

[0043] Figure 7 illustrates a system for implementing a method for using a trusted digital document image, in which an application is located outside a security element to provide a digital document image.

[0044] Position 1 is an operation of signaling a security element located on the secure medium via a communication bus to start an application;

[0045] Position 2 is an operation of reading data recorded on the medium of the readable document using an application located on the same security element;

[0046] Position 3 - the operation of verifying the validity of the data recorded on the medium of the readable document by a public digital certificate;

[0047] Position 4 - the operation of verifying the validity of the certificate;

[0048] Position 5 - the operation of creating a digital image of the document on the same security element;

[0049] Position 6 - the operation of storing a digital image of a document on the same security element with the ability to read it.

[0050] Position 7 - the operation of providing a trusted digital image of a document for the operation of a third-party application using the application, either located on the same security element, or located outside the security element.

[0051] Position 8 - controller for working with a safety element;

[0052] Position 9 - secure media;

[0053] Position 10 - communication bus;

[0054] Item 11 - security element;

[0055] Item 12 - application for secure reading, verification and digital imaging;

[0056] Position 13 - an application that verifies the validity of the certificate of the read document located on the server.

[0057] Position 14 - the carrier of the readable document;

[0058] Position 15 - server;

[0059] Position 16 - a controller for working with an application for providing a digital image of a document;

[0060] Item 17 - communication device controller;

[0061] Position 18 - communication means;

[0062] Position 19 - user interface;

[0063] Position 20 - third party application.

[0064] Position 21 is an application located on a security element for providing a digital image of a document.

[0065] Position 22 is an application located outside the security element for providing a digital image of a document.

[0066] A method for creating a trusted digital image of a document is characterized by six sequential steps, namely (see Fig. 1):

[0067] 1 - signaling a security element located on the secure medium through the communication bus to start the application;

[0068] 2 - reading data recorded on the readable document carrier using an application residing on the same security element;

[0069] 3 - verifying the validity of the data recorded on the medium of the readable document by a public digital certificate;

[0070] 4 - verification of the validity of the certificate;

[0071] 5 - creating a digital image of a document on the same security element;

[0072] 6 - storing a digital image of a document on the same security element with the ability to read it. Detailed description of the invention.

[0073] In the following detailed description of an implementation of the invention, numerous implementation details are set forth to provide a thorough understanding of the present invention. However, it will be obvious to a person skilled in the art how the present invention can be used with or without these implementation details. In other instances, well-known techniques, procedures, and components are not described in detail so as not to obscure the details of the present invention.

[0074] In addition, it is clear from the foregoing disclosure that the invention is not limited to the foregoing implementation. Numerous possible modifications, changes, variations and substitutions, while retaining the spirit and form of the present invention, will be apparent to those skilled in the art.

[0075] The method for creating a trusted digital image of a document is implemented as follows:

[0076] The signal 1 to the safety element 11 via the communication bus 10 to start the application is carried out by the controller 8 (or controller 17) using the application 12. The controller 8 can be built into the housing of the safe medium 9. In one embodiment, when the safe medium 9 does not contain a built-in controller 8, for signaling a controller 17 is used, which is located on the communication means 18 (smartphone, tablet, personal computer). Application (12) is used to implement data exchange between the secure medium 9 and the medium of the readable document 14. As the communication bus 10, a serial asymmetric bus can be used for communication, for example, I2C or SPI bus.

[0077] Next, 2 data recorded on the readable document medium 14 are read by the application 12 located on the security element 11. The application 12 carries out the process of reading, processing and storing the result of the application in the security element 11, according to a pre-configured script or script configured while the application is running 12.

[0078] At the same time, verification 3 of the validity of the data with a public digital certificate takes place, namely, mutual identification of the secure medium 9 and the medium 14 containing readable data occurs, for example, as follows: the security element 11 requests a public key from the medium 14 containing readable data , generates random data, encrypts it with a public key and gives it to the carrier 14 containing the readable data. The medium 14, containing the data to be read, decrypts the data with its private key (which never leaves the medium) and gives the security element 11 of the secure medium 9 for comparison. If the data matches, then the secure medium 9 considers the information located on the readable medium 14 to be genuine. In this case, application (12) can use the asymmetric encryption mechanism.

[0079] Verification 4 of the validity of the certificate itself, that is, verification that it was generated by a valid issuer can occur using a previously saved chain of certificates in the application (12) or using a sequential hierarchical verification of the validity of the certificate, through a request from a special server 15 and work with Appendix 13.

[0080] After that, the image of the digital document is created 5 using the application 12. In this case, the data of the digital image of the document does not leave the security element 11, and the application 12 only controls the sequence of the creation process (the sequence of actions for creating a digital image of the document).

[0081] Saving 7 of a digital image of a document is as follows: application 12 performs primary processing of data and records the results on the security element 11 of secure medium 9, thus creating a tokenized product .. This creates a trusted digital image of the document with the possibility of subsequent interaction with it applications 12, 21 located on the security element, for example, via a Shareable interface (JCOP) or the like, or applications 22 located outside the security element.

[0082] The method of using a trusted digital image of a document, in addition to creating, also includes the stage of providing a digital image of a document, respectively, the method of using a trusted image of a digital document is characterized by sequential actions, namely (see figure 2):

[0083] 1 - signaling a security element located on the secure medium via a communication bus to start an application;

[0084] 2 - reading data recorded on the readable document medium using an application located on the same security element;

[0085] 3 - verifying the validity of the data recorded on the readable document carrier by a public digital certificate;

[0086] 4 - verification of the validity of the certificate;

[0087] 5 - creating a digital image of a document on the same security element;

[0088] 6 - storing a digital image of a document on the same security element with the ability to read it.

[0089] 7 - providing a trusted digital image of a document for the operation of a third-party application using an application located on the same security element.

[0090] The digital image of the document on the secure medium 9 can implement the specification of the readable document. Due to this, the verified data of the read document, read and processed within the secure environment of the security element 11, can be accessed from the application 12, 21 or from the application 22 in the corresponding data exchange specification, for example, Contactless EMV or ICAO.

[0091] In addition, the method enables contactless reading of digital image data.

[0092] Reading occurs using an application (21 or 22), which allows contactless, secure reading of data, due to the fact that both applications are located in an environment with the highest level of trust (security), i. E. the possibility of data compromise in the communication channel is minimized.

[0093] It is also possible in the method to select a digital image of a document for provision to a third-party application 20.

[0094] Also in the method, it is possible to select a trusted digital image of a document to be provided to the third-party application 20 automatically by the application by recognition. For example, by geolocation, when hitting which a particular product is activated. Or temporary scenarios - one product is active in the morning, another one in the evening, or a combination of the above.

[0095] In the method, it is possible to encrypt a document image with an asymmetric encryption mechanism both after signing with a certificate and independently.

[0096] Since the entire exchange procedure takes place in a contactless session between the secure medium 9 performing the reads and the medium 14 of the readable document, the data is stored directly in the same microchip (security element 11) with a high security level, it follows that a trusted, unforgeable image of a digital document (passport, bank card, transport card, national identity, etc.), which can further act in the KYC (Know Your Customer) procedure, which is the implementation of the claimed technical result, which consists in creating a reliable digital image document on one tangible medium for its subsequent use by third-party applications installed on the security element or external devices.

[0097] When performing (implementing) methods for creating (and using) a trusted digital image of a document, such material objects are used as: secure medium 9; safety element 11; communication bus 10; controller 8 (16, 17); the carrier of the readable document 14; terminal; communication means 18; user interface 19, server 15. Since when creating a digital image of a document, a secure medium 9 is used, generating a field (electromagnetic field) into which the medium 14 of a readable document is introduced, it can be considered that in this method there is a process of influence of one material object on another with the help of material means ... The material means are electromagnetic waves, located both in the field around the safe carrier 9 and the security element 11. The material object (security element 11) is exposed to electromagnetic waves of a given configuration (creating a digital image of the document), as a result of which its internal structure changes according to a pattern that allows you to use a digital image of a document.

[0098] A trusted digital image of a document, such as a passport, bank card, transit card and national identity, created by these methods is a trusted digital image of the document.

[0099] The system for creating a trusted digital image of a document according to claim 11 can be implemented in various versions.

[00100] In one embodiment (FIG. 3), a system for creating a trusted digital image of a document comprises:

[00101] a secure medium 9 including a communication bus 10 and a security element 11 with an application 12 and possibly an application 21 installed thereon. In some embodiments, application 12 and application 21 are a single whole application.

[00102] Sometimes the controller 8 is installed on the secure medium 9, while other times the controller 8 is a stand alone device. Moreover, the controller 8 sends a signal through the communication bus 10 to the safety element 11 to start the application 12.

[00103] In this case (in this embodiment) the main element of the system for creating a trusted digital image of a document is a secure medium 9, which includes a communication bus 10 and a security element 11, with an application (12) installed on it, a controller 8 signal 1. In this case, the controller 8 is connected via the communication bus 10 with the safety element.

[00104] The secure medium 9 can be made in the form of an electronic medium module, in the form of a hardware token, placed in a smartphone or in a hard or soft case with a security element 11 placed inside it, a controller 8 connected to a security element 11 via a communication bus 10 The design of the safety carrier 9 is not limited to the above-mentioned construction models.

[00105] As a security element 11, for example, you can use a security chip or a microcircuit physically containing in one housing a transmitter and a security element (not shown in the figures) with the CC EAL requirement fulfilled. Security element 11 has various applets or trustlets installed. The secure medium 9 is designed so that it is possible to write / create unforgeable, trusted images of a digital document (passport, bank card, transport card, national identity, etc.) on it. In this case, the security element 11, located on the secure medium 9, can contain either one or several digital images of the document. Switching between digital images of the document is carried out using the controller 8 (or 16). The secure medium 9 may additionally contain a connector connected to the controller 17.

[00106] - a readable document carrier 14 containing a readable document, which may be a passport, bank card, transport card, national identity card, and so on.

[00107] The system for creating a trusted digital image of a document, depicted in figure 3, implements the creation of a digital image of a document, as follows:

[00108] The controller 8 located on the secure medium 9 sends a signal 1 to the security element 11 located on the secure medium 9 through the communication bus 10 to launch the application 12. Then, from the medium 14 of the readable document located in the immediate vicinity of the secure medium 9, the readout occurs 2 data. After that, as a result of the exchange of information (data) between the secure medium 9 and the medium 14 of the readable document, the validity of the data recorded on the medium 14 of the readable document is verified 3 with a public digital certificate, after which the validity of the certificate is verified 4, then 5 is created on the security element 11 digital image of the document, with the subsequent storage of 6 digital image of the document on the security element 11 with the ability to read it by the application (12, 21).

[00109] In other embodiments (FIG. 4), the system further comprises a server 15 that verifies the validity of the certificate using application 13.

[00110] In yet another embodiment (FIG. 5), the system for creating a trusted digital document image comprises:

[00111] - a secure medium 9, including a communication bus 10 and a security element 11, with an application 12 and possibly an application 21 installed on it.

[00112] - the carrier of the readable document 14,

[00113] - means of communication 18 with the processor (controller) 17, wherein the processor 17 provides a signal and is connected via a communication bus to the safety element 11.

[00114] In this case, the communication means 18 can be a mobile phone, tablet, personal computer, etc.

[00115] The system for creating a trusted digital image of a document, shown in figure 5, implements the creation of a digital image of a document as follows:

[00116] Located on the communication means 18, the controller 17 sends a signal 1 to the safety element 11 located on the safe medium 9 through the communication bus 10 (which can be either a separate element or a structural element of the secure medium 9 or the communication means 18) for launching application 12. Next, data 2 is read from the medium 14 of the readable document located in the immediate vicinity of the secure medium 9. After that, as a result of the exchange of information (data) between the secure medium 9 and the medium 14 of the readable document, the validity of the data recorded on the medium 14 of the readable document is verified by a public digital certificate, after which the validity of the certificate is verified 4 by checking that the certificate is generated by a valid issuer using the pre-stored codes in Appendix 12. Then there is 5 creation of a digital image of the document on the security element 11, followed by storage 6 of the digital image of the document on the security element 11 with the ability to read it by the application (12, 21 or 22).

[00117] In yet another embodiment (FIG. 6), a system for using a trusted digital document image comprises:

[00118] a secure medium 9 including a communication bus 10; safety element 11, with installed on it application 12 and application 21; a controller 8 connected via a communication bus 10 to the safety element 11, which generates a signal; (it is possible to have a user interface 19, not indicated in Fig. 6, which allows the selection of the module of the secure reading program 12. Moreover, a keyboard, button, switch, etc. can be used as the user interface 19).

[00119] - the medium of the readable document 14;

[00120] - Additional controller 16.

[00121] - a terminal with a third-party application 20. In this case, any device (mobile phone, tablet, personal computer, turnstile, etc.) with the ability to use a digital image of a document can be used as a terminal.

[00122] The system for using a trusted digital document image depicted in Figure 6 implements the creation and use of a digital document image as follows:

[00123] The controller 8 located on the secure medium 9 sends 1 signal to the security element 11 located on the secure medium 9 through the communication bus 10 to start the application 12. Then, the readout occurs from the medium 14 of the readable document located in the immediate vicinity of the secure medium 9. 2 data. After that, as a result of the exchange of information (data) between the secure medium 9 and the medium 14 of the readable document, the validity of the data recorded on the medium 14 of the readable document is verified by a public digital certificate, after which the validity of the certificate is verified 4 by checking that the certificate is generated by a valid issuer using the pre-stored codes in Appendix 12. Then there is 5 creation of a digital image of the document on the security element 11, followed by storing the 6 digital image of the document on the security element 11 with the ability to read it by the application 12. At the end, the 7th digital image of the document is provided (12 or 21) with the help of the controller 16 (or in the absence of controller 8), for the operation of the third-party application 20 located on the terminal, with the passage of the verification procedure launched by the application 12. In this case, the user has the opportunity, when providing 8 digital th document image using the user interface 19 (located on the secure medium 9) to select the application module 12 located on the security element 11 of the secure medium 9.

[00124] And in another embodiment (Fig. 7), the system for using a trusted digital document image contains

[00125] a secure medium 9 including a communication bus 10; safety element 11, with installed on it application 12 and application 21;

[00126] - the medium of the readable document 14;

[00127] - the server 15, performing verification of the validity of the certificate using the application 13;

[00128] a terminal with a third-party application 20;

[00129] In another embodiment, a system for using a trusted digital document image comprises

[00130] a secure medium 9 including a communication bus 10; safety element 11, with installed on it application 12 and application 21;

[00131] - the medium of the readable document 14;

[00132] - the server 15, performing verification of the validity of the certificate using the application 13;

[00133] a terminal with a third-party application 20;

[00134] a communication means 18 comprising a user interface 19 allowing selection of an application module 12; processor 17 (controller), on which the application 22 is installed.

[00135] The system for using a trusted digital document image implements the creation and use of a digital document image as follows:

[00136] The controller 8 sends a signal 1 to the security element 11 located on the secure medium 9 through the communication bus 10 (which can be either a separate element or a structural element of the secure medium 9 or communication means 18) to launch the application 12. Next data 2 is read from the readable document carrier 14 located in the immediate vicinity of the secure medium 9. After that, as a result of the exchange of information (data) between the secure medium 9 and the medium 14 of the readable document, the validity of the data recorded on the medium 14 of the readable document is verified 3 with a public digital certificate, after which the validity of the certificate is verified 4 by sending a request from the secure medium 9 to server 15 and receive a response. Then there is 5 creation of a digital image of the document on the security element 11, followed by storage 6 of the digital image of the document on the security element 11 with the possibility of reading it by the application 12. At the end, the 7th digital image of the document is provided by the application 22 located on the communication means 18 for a third-party application 20. In this case, the user has the opportunity, when providing 8 a digital image of the document, using the user interface 19 (located on the communication means 18), to select the application module 12 located on the security element 11 of the secure medium 9.

[00137] Thus, systems for using a trusted digital document image allow not only to create a reliable image of a digital document on one tangible medium, but also to use it by third-party applications located on the terminal. In this case, the terminal can be represented both as a separate device and as a module for a more complex system (for example, a device connected to a personal computer). Since the entire exchange procedure takes place in a contactless session between a secure medium and a medium containing a readable document, the data is stored directly in the same microcircuit (security element) with a high level of security, it follows that a trusted, non-forged image of a digital document (passport, bank card, transport card, national identity card, etc.), which can further act in the KYC (Know Your Customer) procedure.

[00138] In the present application materials, the preferred disclosure of the implementation of the claimed technical solution is presented, which should not be used as limiting other, particular embodiments of its implementation, which do not go beyond the scope of the claimed scope of legal protection and are obvious to specialists in the relevant field of technology.

Claims (32)

1. A method for creating a trusted digital image of a document, which consists in - sending a signal to the safety element located on the safe carrier through the communication bus to launch the application, - reading the data recorded on the medium of the readable document using an application located on the same security element, - verification of the authenticity of the data recorded on the medium of the readable document by a public digital certificate, - verification of the validity of the certificate, - creating a digital image of the document on the same security element, - saving a digital image of a document on the same security element with the ability to read it. 2. The method according to claim 1, characterized in that the created digital image of the document is additionally signed with a certificate located on the same security element. 3. The method according to claim 1, characterized in that the reading is contactless. 4. The method according to claim 1, characterized in that the encryption of the document image is performed by an asymmetric or symmetric encryption mechanism. 5. The method according to claim 4, characterized in that the encryption of the document image is performed after additional signing with a certificate. 6. A method of using a trusted digital image of a document by a third-party application, which consists in - creating a digital image of the document according to the method according to claim 1, - providing a digital image of a document for a third-party application using an application located on the same security element. 7. A method of using a trusted digital image of a document by a third-party application, which consists in - creating a digital image of the document according to the method according to claim 1, - provision of a digital image of a document for a third-party application using an application located outside the security element. 8. The method according to claim 6 or 7, characterized in that the selection of a digital image of the document for provision is made by the user manually. 9. The method according to claim 6 or 7, characterized in that the choice of a digital image of the document for provision is made by the application automatically by recognition. 10. A computer-readable medium with a trusted digital image of the document created by the method of claim 1. 11. The system for creating a trusted digital image of a document according to the method according to claim 1, containing - the carrier of the readable document, - controller for working with a safety element, - secure media, including a communication bus and a security element, with an application installed on it for safe reading, verification and digital imaging. 12. The system for creating a trusted digital image of a document according to claim 11, characterized in that it further comprises a server on which an application is installed that verifies the validity of the certificate of the read document. 13. The system for creating a trusted digital image of a document according to claim 11, characterized in that it further comprises a means of communication with the controller. 14. A system for using a trusted digital image of a document by a third-party application, containing a system for creating a trusted digital image of a document according to clause 11, as well as - an application located on a security element to provide a digital image of a document. 15. A system for using a trusted digital image of a document by a third-party application, containing a system for creating a trusted digital image of a document according to clause 11, as well as - an application located outside the security element to provide a digital image of the document. 16. The system for using a trusted digital document image according to claim 15, further comprising a user interface. 17. The system for using a trusted digital image of a document according to claim 14, or 15, or 16, characterized in that it contains an additional controller for working with the application for providing a digital image of a document.

Images