FIELD OF THE INVENTION This invention relates in general to a user control system or security system, such as a gate control system. More particularly, this invention relates to a user control system for passengers who are required to have a passport, official travel document or other identity document certifying the passenger ^' s identity in order to travel to their destination. More specifically, this invention relates to a user control system for streamlining or expediting passenger processing through security or boarding an aircraft.

BACKGROUND OF THE INVENTION

Typically, at some point prior to a passenger's departure on a flight, a security check is performed to verify that a passenger's name on a boarding pass matches the name on their passport or identity document.

A boarding pass is usually a paper document with the passenger ^' s name, flight details, gate and seat number printed on it. Usually, the check is a visual check performed by a security officer who checks that the passenger name on the boarding pass matches the passenger name on the passenger's passport.

Currently in airports, it takes, on average, anywhere from 20 to 40 minutes to complete an aircraft boarding for an international flight, depending on the size of the aircraft and the number of passengers.

In order to board an aircraft, an agent stands in front of the boarding gate and lets each passenger board the aircraft, one at a time, after verifying his boarding pass and a form of identification.

The verification process that usually takes place is for the agent to look at the person ^' s face, look at the passport, then look at the boarding pass and to place the boarding pass onto a reader for scanning, so that the Departure Control System can be updated. This process can take about 5 to 25 seconds per passenger to perform. As part of the scanning process, data is read from a MRZ on a page of the passport by opening the passport and placing it on an optical reader, which performs Optical Character Recognition (OCR) on the MRZ. Optical Character Recognition is the mechanical or electronic translation of scanned images of printed text into machine-encoded text.

In addition to the amount of time taken to process each passenger, the required infrastructure to scan is quite large since a space for a desk, a full personal computer, and a printer and a scanner are required. SUMMARY OF THE INVENTION

The invention is defined in the appended claims to which reference should now be made. Embodiments of the invention seek to address the above problems by providing an improved user control system comprising reading means, preferably optical, for reading user data from a user identity document and for reading further user data from a token associated with a product or service; display means for displaying a field of view for the agent; wherein in response to the agent positioning the user identity document and token within the field of view, the reading means reads the user data from the document and reads the further user data from the token; and processing means such as an integrated circuit for comparing the user data and further user data.

Thus, boarding pass and passport reading is more streamlined and results in faster throughput of passengers through security or at boarding. Embodiments of the invention seek to reduce the time to process passengers at boarding by reducing the processing time of each passenger to between 1 to 5 seconds.

Embodiments of the invention also seek to increase the accuracy of face recognition check against the ID, since an agent can look at the passenger while the scanning of an identity document and token is being made in parallel, resulting in a reduction of cases where a wrongful passenger could board a plane.

Embodiments of the invention also reduce the amount of infrastructure needed at the boarding gate because only a portable computing device such as a wearable or hands-free device, for example a pair of computing glasses, are required. In some embodiments, the system further comprises an optional portable communication device such as a mobile telephone. The portable communication device may wirelessly communicate with the wearable or hands free computing device. The communication device may comprise a memory for storing Departure Control System data. The stored data may comprise information associated with passengers who have been authorised to travel by the device as a result of the scanning and comparison process. The information may only comprise passenger data associated with a single flight or leg of a journey. Preferably, the agent may also be equipped a mobile or portable printer connected to the portable computing device via a communication link. The pair of wearable computing glasses may be for use by an agent. The glasses may substantially simultaneously scan both the passenger's identity document and boarding pass and provide close-to-immediate feedback to the agent on a head-set display placed in front of the eye or eyes. Usually, the wearable or hands-free computing device comprises a glass or pair of glasses having a Field of View which displays images in front of the eye with a simple, colour coded, status for passenger boarding. The device may have a small Field of View screen which may replace the current hardware necessary for boarding passengers. The process of simultaneously scanning both the passport and boarding pass and then providing an immediate feedback to the agent is a lot faster than the current process, which means significant savings for airlines.

Embodiments of the invention improve the accuracy of matching the person ^' s ID with their faces since it allows the agent to look at the passenger's face at the same time that the scanning is taking place to verify that the passenger corresponds to the image on the passport since the head set display is on the side and not intrusive.

Embodiments of the invention also have the advantage that the agent does not have to scan the boarding pass onto a reader at the departure gate, so the hardware at the gate does not need to update the Departure Control System (DCS). Embodiments of the invention may also comprise a Departure Control System (DCS) update which may be made via a mobile telephone or other portable communication device connected via a communication link to back end systems. BRIEF DESCRIPTION OF THE DRAWINGS

An embodimeni of the invention will now be described, by way of example only, and with reference to the accompanying drawings, in which:

Figure 1 shows a data page of a passport including a Machine Readable Zone;

Figure 2 shows a boarding pass for use with embodiments of the invention;

Figure 3 is a schematic diagram of the main functional components of an embodiment of the invention;

Figure 4 shows the view seen by a user of an embodiment of the invention in which the system is ready for use;

Figure 5 shows the view seen by a user of an embodiment of the invention once the boarding pass has been scanned;

Figure 6 shows the view seen by a user of an embodiment of the invention once the machine readable zone has been read from a passport;

Figure 7 shows the view seen by a user of an embodiment of the invention in which the system has determined that there is a match between the boarding pass and identification document;

Figure 8 shows the view seen by a user of an embodiment of the invention in which the system has determined that there is a partial match between the boarding pass and identification document;

Figure 9 shows the view seen by a user of an embodiment of the invention in which the system has determined that there is no match between the boarding pass and identification document;

Figure 10 shows the view seen by a user of an embodiment of the invention in which the system has determined that there is an error in the reading process;

Figure 1 1 is a schematic diagram showing use of an embodiment of the invention for flight attendant boarding at the entrance to an aircraft;

Figure 12 is a schematic diagram showing use of an embodiment of the invention which expedites check in;

Figure 13 is a schematic diagram showing use of an embodiment of the invention by a flight attendant for greeting passengers; and

Figure 14 is a schematic diagram showing use of an embodiment of the invention by a security agent at a security checkpoint. The following description is of a system for use in the aviation industry, but this is exemplary and other applications of the invention will also be discussed. For example, the control system may be used in any environment where security or other procedures require a user ^' s identification document and a token for providing a service to the user to be authenticated as belonging to the user before a product or service is provided to the user. Thus, embodiments of the invention find application in the travel industry in general. The control system may also be used in any environment in which quick and accurate a comparison needs to be made between two documents. Thus, embodiments of the invention have particular application in the travel industry (for example rail, air, coach and the like), but also in the ticketing industry, such as ticketing for theatre, cinema, and the like.

Figure 1 of the accompanying drawings shows a data page of a passport which is divided into a number of zones. A Visual Inspection Zone is located in the upper half of the page and contains data not specifically intended to be read by machine. A MRZ of the passport is located in the bottom half of the data page and contains data which is both human readable and machine readable.

The MRZ data may comprise: a user name, and surname, the document number, the date of expiry, and optionally, the date of birth of the user. Below is an example of the data contained in the MRZ of the passport, although some personal details have been blanked out with an X:

P<IRLSMITH««JOHN««XXXX«<«««««««<

PC12345670IRL7903130 1711157««««<«««4 The data within the MRZ may be structured as 2 lines of alphanumeric characters. The data on each line may be separated by one or more filler characters which may be represented by <. Each line of data may be 44 characters in length.

The alphanumeric data in this field may have the following format:

A 9 character Alphanumeric Passport Number. If the passport number is less than 9 characters, then the remaining characters may be padded with the character "<", for example: "ABC123XY<".

A 6 character numeric date of birth in YYMMDD format, for example "720823".

A 6 character numeric date of expiry in YYDDMM format, for example, "210922".

Referring now to figure 2, this shows a boarding pass for use with embodiments of the invention. The boarding pass comprises further user data, such as LAST NAME, and FIRST NAME and may also comprise data such as departure gate, boarding time, boarding zone, seat number, coach, departure time boarding time.

Information encoded on or within the boarding pass may be encoded as a 2D bar code or as an electronic boarding pass including the 2D bar code.

The data is then rendered into a bar coded boarding pass. A Near Field Communication (NFC) boarding pass may have the information in alphanumeric format. Operation of the control system 300 will now be described referring to figures 3 to 10 of the drawings. In use, the components shown within the dashed line 300 of figure 3 may be located at an airport, although embodiments of the invention may find application outside the airport environment, as previously described. The following description of a preferred embodiment refers to a pair of smart glasses or wearable computing glasses 308, although this is not essential since embodiments of the invention may be performed with a heads-up-display and the like, or may be embodied in a smart telephone and the like. Referring now to figure 3, this shows the main functional components of a system 300 embodying the invention.

The system 300 comprises a reader or scanner 307, processor 309 and transmitter- receiver 311 , display 305 which may be integrated into a wearable or portable computing device 308 or other portable communications device. As shown by the arrows in figure 3, each of the reader, display, and transmitter is communicatively coupled to the processor. A power source, not shown in figure 3, such as a battery may also be provided.

The embodiment shown in figure 3 also includes a mobile device 313 associated with an agent using the control system, for example located on or near the agent, however this is optional. Further, a departure control system 315 may also be included, which may be communicatively coupled to the transmitter receiver 311 or mobile device 313 or both.

The following description assumes that a user has been issued with a token or boarding pass 301 for travel, such as that shown in figure 2 of the drawings. In some embodiments, this may be a conventional paper token or boarding pass, but in other embodiments, associated with each user is a token storage medium such as a portable or mobile device which is capable of storing a boarding pass such as an electronic boarding pass or e- boarding pass. The boarding pass may be thought of as a token which is issued by a service provider to a user which allows the user receive the service in return for payment. The token may comprise an NFC boarding pass, a paper boarding pass, a paper bag tag attachable to a piece of baggage or an airline ticket.

Usually, the token or boarding pass is provided by a server which is wirelessly coupled to a user ^' s mobile device, for example, using a wireless communications network, but in principle, any communications means, such as a wired network may be used provided the e-boarding pass can be transferred to, and stored on the user ^' s mobile device.

When a check, such as a security check, is being performed on a passenger, for example at a boarding gate or at security station, an agent wears the portable computing device 308 such as a pair of smart glasses or wearable computing glasses. The device is usually a hands-free device so that it is wearable by the agent allowing the device to perform a check without the need for the agent to manually hold the device.

Usually, the computing device 308 is initially in a standby mode where the device or glasses are worn, but boarding has not yet started. The agent then activates the device 308 by pressing a button on the glasses or device 308 or using a voice activated command which is recognised by voice recognition software operable by the device, and the agent can then start the boarding process. Suitable voice recognition software will be known to the skilled person. The agent may open a software application stored on the device, which then loads from a memory. Figure 4 shows a view seen by an agent using an embodiment of the invention in which the system is ready to start the process of boarding passenger one-by-one. The view seen by the agent may included a user interface 401 displayed by the device 308 using the display means. The display means may comprise one or more lenses and a projector for producing a heads-up display where a projected image is displayed or overlaid on another image seen by a user.

The agent receives the proper documentation from each passenger and then holds the passenger ID and boarding pass in front of his eyes. For convenience, the documents are usually held at arms length distance for scanning of both documents. Usually, the device is located between the agent and the documents being scanned. Further, usually a portion of the device is substantially transparent so that the user can see images through a portion of the device. The agent may look at both documents for the scanning process to start. For example, eye movement recognition software, which will be known to the skilled person may be used to determine that the agent has looked at both documents, in order for the scanning process to be initiated. Further, in order to initiate scanning the user may position the passport 303 and boarding pass within a Field of View of the device 308 or a predetermined region of the display as seen by the agent when using the device. Once again, suitable object recognition positioning software known to the skilled person may be used in order to determine that the passport and boarding pass have been positioned within a predetermined Filed of View.

The device 308 first scans the boarding pass 301 by reading or scanning the barcode contained on or within the boarding pass. The particular portion of the boarding pass being scanned is highlighted by rectangular box 501 shown in figure 5, although rectangular box 501 does not necessarily need to be displayed by the device 308.

Suitable boarding pass scanning processes will be known to the skilled person, such as BCBP (bar-coded boarding pass) scanning. BCBP defines the 2-Dimensional (2D) bar code printed on a boarding pass or sent to a mobile phone for electronic boarding passes. Airlines and third parties use a barcode reader to read the bar codes and capture the data. Reading the bar code usually takes place in the boarding process, but can also happen when entering the airport security checkpoints.

The device thus scans the boarding pass may extract the following information: Number of legs (each flight in your itinerary is a single leg), Passenger name, Electronic ticket number, Airline identifier, Airline booking reference (PNR), Departure city or airport, Arrival city or airport, Flight number, Date of flight, Seat Number, Passenger type (adult, male, female, child, infant...), and Digital signature.

Usually, the device only uses the passenger name element for reconciliation.

The device may display a BP icon in a green colour to indicate that it was successful in extracting the passenger name. It may also display the passenger name on the heads up display.

The device may scan or read the passenger ID and boarding pass independent of the relative positions of the boarding pass and passport, such as whether one is on the left or right hand side. Thus, embodiments of the invention may be configured to recognize a type of barcode, and select a suitable scanning process dependent upon the detected data type and position of the data within the field of view. The device also scans the ID card/passport 303 by reading the alphanumeric characters contained within the MRZ of the passport, as shown in figure 6. The particular portion of the passport being scanned is highlighted by rectangular box 601 shown in figure 6, although rectangular box 601 does not necessarily need to be displayed by the device 308. Accordingly, the device scans the MRZ from the ID and may extract the following information from the first and second row of the MRZ. Table 1 below gives the format of the first row of the MRZ and data which may be read according to embodiments of the invention.

Table 1 : the format of the first row of the MRZ.

Table 2 below gives the format of the second row of the MRZ and data which may be read according to embodiments of the invention.

Table 2: the format of the second row of the MRZ. Usually, the device only uses the Last name, followed by two filler characters, followed by Given names elements for reconciliation.

The scanning process may be reversed, for example, the passport may be scanned first and then the boarding pass so that scanning order is interchanged.

Preferably, the device displays an I D icon in a green colour to indicate that it was successful in extracting the Last name, followed by two filler characters, followed by Given names. It may also display the passenger name on the heads up display, as shown in figures 5 to 7 of the drawings.

Suitable passport scanning processes will be known to the skilled person, such as Machine Readable Zone (MRZ) scanning. Thus, embodiments of the invention may read a

Readable Travel Document (MRTD) such as Machine Readable Passport (MRP) where the data on the identity page is encoded in optical character recognition format. Most travel passports worldwide are MRPs having a MRZ, which is usually at the bottom of the identity page at the beginning of a passport. Usually the passport is a Type 3 travel document where the Machine Readable Zone spans two lines and each line is 44 characters long. Thus, a user's name, passport number, nationality, date of birth, sex, passport expiration date and personal identity number are often provided in the MRZ. Optional, and often country dependent supplementary information may be included in the MRZ.

Usually, the device scans both the boarding pass and the ID card/passport simultaneously. The processor then compares the user data read from the user identity document and the further user data read from the token.

The device may also determine the location, usually by reading gate data using a scanning process as previously described. Further, the gate number may also be read from the boarding pass so that a check may be made between the gates number shown in figure 5 and the gate data read from the boarding pass. This prevents someone with matching boarding pass and passport from boarding the wrong flight at the wrong gate.

The scanning system then provides feedback in the field of view once:

1. The ID document is successfully read and checksums in MRZ are correct and 2. The BP barcode is successfully read and checksum (if applicable) matches. Field of View The user interface in the field of view may comprise a split display with area for boarding pass on left and ID card on right part of the field of view, as shown in figures 4 to 10 of the drawings. These areas may be inter-exchangeable if the agent holds the ID and boarding pass in different hands each time, and the scanning algorithm may be configured to search for the barcode as a way of determining whether the boarding pass is on the left or right.

Further, embodiments of the invention overlay a visual colour indicator in accordance with the following rules:

1. Green: once ID document is successfully read and checksums in MRZ are correct 2. Green: once BP barcode is successfully read and checksum (if applicable) matches

3. Green: if name in MRZ matches exactly the name in barcode

4. Orange: if name of MRZ matches barcode name MRZ - but there are some issues around first/last name order, accents and other non conformities i.e ϋ = U, o = o.

5. Red: if no match is returned. The option of re-scanning or move to manual process is available to the agent.

Referring now to figures 7 to 10, these figures include an extract from the Field of View of the device 308, with information being displayed in the field of view depending upon the result of the matching process.

Figure 7 is a schematic diagram showing how the device 308 has simultaneously scanned both the passport and boarding pass by as a result of the user orientating the boarding pass and passport into the field of view of the device. In this case, the processor has determined that there is an exact match between the text read from the boarding pass and the text read from the passport, resulting in all of the text displayed within the user interface being displayed in Green. Further, the user interface outline may also be coloured green and the tick associated with the boarding pass text or passport text within the user interface may also be coloured green. Accordingly, the device has extracted the information required to complete reconciliation between the data returned from the ID and the boarding pass. Reconciliation may be made using a checksum from the data returned from the ID and the boarding pass. The checksum used by embodiments of the invention may be a small-size datum computed from a block of digital data for the purpose of detecting errors that may have been introduced during its transmission or storage.

The reconciliation process verifies the integrity of the data is checked on the fly and in real time. If the checksums match, the data was likely not accidentally altered.

The device may display a last icon on the left of the user interface in a green colour with a check mark to indicate that the passenger is approved for boarding.

Embodiments of the invention may reset after a successful scanning process in order to scan the next passenger in line. Embodiments of the invention may also generate a list of individual passengers that have boarded. This list may then be wirelessly transmitted over the air, for example using WIFI, Bluetooth or another other communications means to the DCS (Departure Control System) for an update.

Figure 8 shows a partial match case where once the agent has simultaneously scanned both the passport and the boarding pass, a determination is made as to whether there are any ambiguities between the data read from the boarding pass and the data read from the passport, then this is flagged as a partial match.

For example, embodiments of the invention classify a partial match as a case in which it is determined that passport has the user's name written as FIRSTNAME SURNAME and that the user's name written as SURNAME FIRSTNAME on the boarding pass. Alternatively, or in addition, embodiments of the invention may classify a partial match as a case when the system determines that user's name is written including any accents on the passport but without the corresponding accents on the boarding pass, then this will also be flagged as a partial match.

In one specific example, if user ^' s name is written as Stephane Cheikh on their passport and Cheikh Stephane on the boarding pass, then this will be considered as a partial match, since the data read from the 2 documents corresponds, but is at least partially reversed in sequence. Further, a partial match may also be determined if a user's name such as Stephane Cheikh is written on the passport and but it is written as Stephane Cheikh on the boarding pass. In this case, the tick next to the text boarding pass in the box labelled "PARTIAL NAME MATCH ^' ' in figure 8 may be coloured in red. Figure 9 shows a case in which there is no match between the data read from the passport and the boarding pass. No match may occur if both the first name and surname do not match. For example, the device may determine that no match occurs if the name on the passport is STEPHANE CHEIKH and the name on the boarding pass is MARC SMITH. Once the agent has simultaneously scanned both the passport and ID, if there is a no match in the name, there will be a red coloured status. The agent may then retry the scanning process or move to a manual process via mobile device 313 such as a mobile telephone.

The mobile telephone may include an application that allows for manual boarding of the passenger and automatic update of the DCS in the case of no match.

The system may further comprise a Departure Control System. The Departure Control System (DCS) automates processing an Airlines' Airport management operation. This includes managing the information required for Airport Check-in and printing Boarding card. cargo load control and aircraft checks.

Further, the Departure Control System 315 does not necessarily need to be located at an airport, since it may communicate with the device 307 via wired or wireless means known to the skilled person.

The agent may carry a mobile telephone 313 or other portable computing device that interfaces between the device and back end systems. The systems the mobile application will potentially be connected to are Reservations and Departure Control systems. Data is wirelessly sent from the device to the mobile device worn by the agent. The data sent may include passenger name, seat number and flight information.

Embodiments of the invention may also connect to a loyalty program system and display the passenger tier on the glass upon boarding for better customer greetings of VIP passengers. In some embodiments, the passport may be pre-stored on the mobile telephone. The passport may be stored in a secured or unsecured manner in the mobile telephone or other portable communication device. Thus, in some embodiments, the passport information is provided by a mobile telephone. Further, the security check matching may occur when the travel document such as the boarding pass is sent, or when checking-in.

Figure 10 shows an error message which may be displayed by embodiments of the invention. In figure 10, the error message indicates that the image is not sharp, but embodiments of the invention may also be configured to handle multiple error messages that may be displayed on the heads up display while using the application.

The following error messages may be displayed:

1. "Image not sharp"

2. "Image overexposed"

3. "Image underexposed"

4. "Focus failed"

5. "Device moving too much"

6. "Focus triggered"

7. "Focus set"

8. "Barcode cannot be extracted."

9. "MRZ not found."

10. "NAMES DO NOT MATCH"

11. "PARTIAL MATCH" After one or more of these messages have been displayed, embodiment of the invention may search for the barcode/ MRZ again, for example after a few seconds.

Figure 1 1 is a schematic diagram of use of the control system for boarding of an aircraft by flight attendants at an entrance to the aircraft, removing the need for boarding passengers at the gate. This can lead to significant cost savings.

As shown in figure 11 . a flight attendant is equipped with the control device and waits for passengers in front of the aeroplane. Each passenger is asked for his boarding pass and passport/identification. Both documents are scanned as previously described, and the information is compared. If there is a match, an update is sent to the DCS and the passenger is cleared to board. Otherwise, manual action needs may need to be taken, such as boarding using a mobile application.

Embodiments of the invention may also find application with Transportation Security Administration, TSA agents in the United States.

For every passenger going through security, a TSA agent verifies that the passenger boarding pass and ID match. In this scenario, the TSA agent will use the wearable computing device to scan both the boarding pass and ID instead of manually checking both documents.

In a scenario when the passenger holds a Mobile Boarding pass, the TSA agent may manually scan the Mobile Boarding pass. Figure 12 is a schematic diagram of use of an embodiment of the invention which expedites check-in.

For example, there may sometimes be a long line to check-in at the airport. While some passengers have bags to check in and thus need to go through the regular process, some of passengers may only be travelling with carry-on luggage. Embodiments of the invention may be advantageously used to allow such passengers to be checked-in faster.

For example, an agent equipped with smart glasses according to embodiments of the invention may go through a check-in line to see if some passengers are travelling only with a carry-on luggage.

When such passenger is found, the agent looks at his passport/id that is scanned according to embodiments of the invention. Embodiments of the invention may extract passport information. This information may then be forwarded to a DCS, which is updated. The update may comprise information indicating that say a particular passenger X has checked-in.

A mobile boarding pass is then sent to the passenger ^' s mobile device. Consequently, the passenger may then proceed to security. If a mobile boarding pass is not available, then agent may be equipped with a wearable printer to print the boarding pass on the spot. Figure 13 is a schematic diagram of use of an embodiment of the invention by a flight attendant for greeting passengers. For example, each first and business class passenger may be greeted by name before entering the plane. The face of every incoming passenger is scanned and compared to the picture of the first and business class passengers checked-in for the flight. The picture may be gathered via the Internet prior to this. When there is a match, the name and seat of the passenger is displayed on the head mounted display, allowing the flight attendant to greet personally the passenger.

Figure 14 is a schematic diagram of use of an embodiment of the invention by a security agent at a security checkpoint. For every passenger going through security, face recognition is used to make sure that this individual authorized to travel. Using the device, the incoming passenger's face may be compared with one or more pictures of people who are not authorized to travel and the device may look for a match. For example, it may be necessary to compare 1 image with 100Ό00 images of people not authorised to travel.