FaceBoarding

FaceBoarding is the app that allows passengers at Milan Linate to access security checkpoints and board through an innovative facial recognition system.
By registering on the app, passengers can be identified at the gates simply by showing their face.
Passengers must be 18 years old or older and in possession of a valid electronic document (passport or electronic identity card issued after 1st January 2017).
The app is based on two Cloud services that manage the verification of the identity document and the management of a Digital Wallet on the user's smartphone.
The user activates the app and has to register.
The app proposes a text with the Privacy Policy that explains how the personal data acquired during registration will be processed; the user can give consent or deny consent. If consent is given, the app proposes the terms and conditions of service and the user must read and accept them.
The process continues only if the user has accepted the terms as per GDPR.
After a tutorial, the user takes a picture of the ID page to read the MRZ string.
Then user brings the document close to his/her smartphone to read the document chip via NFC.
The app reads the data from the document chip: first and last name, nationality, date of birth, document number and expiry date.
It also captures the digital format of the photo recorded in the document chip.
The app verifies the authenticity and validity of the document. If the document is valid, the registration process continues, otherwise the app sends an error message.
After a second tutorial, the app invites the user to take a selfie.
The selfie is compared biometrically with the photo taken from the ID card.
If no similarity is found, the app sends an error message; the positive comparison proves that the user is the legitimate owner of the ID.
Then the app asks the user to define a PIN code and activates a Digital Wallet service on the device, where the data acquired from the ID and the selfie are stored in encrypted mode and only available to the user. This data is called 'Digital Travel Credential' - DTC.
The app checks the user's age; if the user is under 18, the data is automatically deleted and the registration is cancelled.
If the user leaves the app, he/she does not have to register again, but simply enters the PIN code to access DTC saved in the Wallet.
To use the FaceBoarding service at Linate Airport, the user must add one or more boarding passes. It is possible to take a photo of the 1D barcode in PDF147 format or 2D QR Code of a paper boarding pass or upload the boarding pass as an image in jpeg format or as a document in pdf format from the smartphone archive.
The app performs formal checks on the boarding pass and verifies that the origin of the flight is Linate airport.
The user sends the DTC data with the boarding pass to the Linate airport server.
The server check data consistency and applies eligibility rules to the user and the flight corresponding to the boarding pass; for example the user must have given consent, the flight must depart within a certain time window, the name on the boarding pass must match the name on the document.
If all checks are successful, the data is saved temporarily in the airport server for biometric recognition at security and boarding gates.
The app allows the user to revoke consent to the processing and saving of data; if the user requests revocation, the data are deleted from the airport server and the app. If the user wishes to use the FaceBoarding service, he/she will have to register again.