In this article, we explain what Oribi ExpertID is and why you can use it at your workplace.
What is it?
Oribi ExpertID is the ID-check that runs on a physical document scanner at a work location. A scanner sits on the desk where workers register. The worker hands over their passport, identity card or residence permit, and the desk user places it on the scanner. The scanner reads both sides of the document, reads the chip, checks the document’s security features and compares the photo on the chip with the photo printed on the document. WorkpassID receives that outcome, compares the details read from the document with the details already registered for the worker, and records one ID-check result on the worker.
ExpertID is one of two ways to complete an ID-check. The other is Oribi MobileID, which the worker completes on their own phone before arriving. The main contractor decides which one a project uses.
Why would you use it?
The main contractor is legally required to establish the identity of every worker who starts on a work location, and ExpertID produces the evidence that this happened
The worker is already standing at the desk, so the check takes under a minute and no one has to come back another day
A chip read and a face comparison catch forged and borrowed documents that a visual check at the desk would miss
The result is recorded, dated and reportable, so an audit does not depend on anyone remembering what happened at the desk
Workers without a smartphone, or without the WorkpassID app, can still be verified
Components
Component | What it does |
|---|---|
Desk scanner | Reads the document optically, reads the chip and produces the verdicts |
Scanner software on the desk computer | Connects the scanner to WorkpassID. It runs on the computer the scanner is attached to |
ID-check screen | Guides the desk user through the scan and shows the outcome |
Three checks | Document authenticity (VIZ), Chip (NFC) and Face & data comparison, each reported separately as approved, attention or failed |
Details comparison | Shows the details read from the document next to the details registered in WorkpassID, field by field |
ID-check status | A coloured status shown wherever the worker appears, with the outcome and the date |
ID-check report | A PDF filed against the worker’s registration, containing the verdicts, the document images where retention rules allow, and the check log |
Details lock | Locks the worker’s date of birth and nationality after an approved check, and locks the national identification number when the document supplied one |
The three checks, and why they are separate
The three checks can disagree, and each one means something different:
Document authenticity (VIZ) - the document is genuine, valid and unaltered, read from the printed side and from the machine-readable lines at the bottom
Chip (NFC) - the chip could be read and authenticated. This is the strongest signal, because a chip is far harder to forge than a printed page
Face & data comparison - the photo on the chip matches the photo on the page, and the chip details match the printed details
A document can be genuine while its chip cannot be read, for example when the chip is damaged. Showing the three separately tells the desk user which part to act on.
What ExpertID does not establish
ExpertID establishes identity, not the right to work. A residence permit can be genuine and still carry no work authorisation. The ID-check screen reminds the desk user to check this by eye, and WorkpassID cannot check it.
Oribi ExpertID accepts only three document types: passport, identity card and residence permit. A driving licence is not accepted.
Who uses this?
Rights group | What they do |
|---|---|
Operations: Fair | Performs the ID-check at the desk and decides whether to approve or reject the result |
Operations employee | Performs the ID-check at the desk |
Operations: Safe, Operations: Access | Open a worker’s ID-check details and see the outcome and the comparison |
Administration, Planning | Download the ID-check report from the signed registrations of a project |
Organisation management, Project management | Switch the ID-check on for a project and decide whether it may be skipped |
Oribi Administrator | All of the above |
Workers hand over their document. They do not log in, do not see the ID-check screen and cannot start the check themselves.
When the ID-check is not required
The ID-check is not requested for every worker. It is skipped for:
third-party and supplier deployments
companies placed on the project’s exemption list
main contractor workers, depending on the project’s setting for those workers
An empty ID-check status and a missing scan option on these workers is correct behaviour, not a fault.
What happens to the data
How much is stored depends on the worker and the document:
documents from the EU and the EEA: the document images are not kept
self-employed workers, and third-party and supplier deployments: only surname, date of birth and nationality are kept
documents from outside the EU and the EEA: the full record is kept
An approved check also locks details on the worker. Date of birth and nationality can no longer be edited, and a national identification number captured from the document is locked as well. Clearing the number stays possible; changing it to a different value does not.
Prerequisites
The project uses Oribi ExpertID, set by Organisation management or Project management
Oribi has entered the scanner credentials for the project
WorkpassID is opened on the computer the scanner is attached to
See Oribi ExpertID: set up the ID check on a work location.