Biometric recognition and transaction engine apparatuses, processes and systems

1 . A biometric authentication engine apparatus, comprising:

at least one memory;

a component collection stored in the at least one memory;

at least one processor disposed in communication with the at least one memory, the at least one processor executing processor-executable instructions from the component collection, the component collection storage structured with processor-executable instructions, comprising:

obtain, via the at least one processor, a device identifying datastructure associated with a user's device, in which the device identifying datastructure is structured as a set of datastructure fields specifying device data;

execute, via the at least one processor, a device search on a device graph database, with the device data as a set of search parameters, to determine a device record corresponding to the device in the device graph database;

retrieve, via the at least one processor, a device token specified via the device record from the device graph database;

obtain, via the at least one processor, a user identifying media datastructure, in which the user identifying media datastructure is structured as a media stream;

generate, via the at least one processor, a face print datastructure associated with the user from the media stream, in which the face print datastructure is generated by transforming aspects of the user's facial features with an image transformation function;

generate, via the at least one processor, a voice print datastructure associated with the user from the media stream, in which the voice print datastructure is generated by transforming aspects of the user's voice waveform with an audio transformation function;

obtain, via the at least one processor, a user seed identifying datastructure associated with the device, in which the user seed identifying datastructure is structured to specify a user seed;

determine, via the at least one processor, a user token by analyzing the user seed, in which the user seed analysis includes decrypting the user seed with the device token;

execute, via the at least one processor, a face token search on a user graph database, with the user token as a set of search parameters, to determine a set of face token records linked with a user token record corresponding to the user token;

determine, via the at least one processor, a face match score by matching the generated face print datastructure against a set of stored face print datastructures specified via the set of face token records;

execute, via the at least one processor, a voice token search on the user graph database, with the user token as a set of search parameters, to determine a set of voice token records linked with the user token record corresponding to the user token;

determine, via the at least one processor, a voice match score by matching the generated voice print datastructure against a set of stored voice print datastructures specified via the set of voice token records;

authenticate, via the at least one processor, the user by analyzing the face match score and the voice match score;

generate, via the at least one processor, a login token indicating successful authentication; and

provide, via the at least one processor, the login token for the device.

2 . The apparatus of claim 1 , in which the device data is structured to include any of: a browser fingerprint, an IP address, a manufacturer device ID, a phone number, a GPS location.

3 . The apparatus of claim 1 , in which the device graph database and the user graph database are implemented via at least one graph database.

4 . The apparatus of claim 1 , in which the device search is executed using a rules-based machine learning system.

5 . The apparatus of claim 1 , in which the component collection storage is further structured with processor-executable instructions, comprising:

determine, via the at least one processor, a set of device data differences between the device data specified in the device identifying datastructure and device data specified in a device graph identified by the device token;

store, via the at least one processor, a temporary device graph that specifies the determined set of device data differences; and

merge, via the at least one processor, the temporary device graph into the device graph identified by the device token upon successfully authenticating the user.

6 . The apparatus of claim 1 , in which the media stream is structured as at least one of: a video stream, an audio stream, a photographic image file, a voice audio file.

7 . The apparatus of claim 1 , in which the image transformation function is a 1-way transformation function that precludes reconstruction of a face image from the face print datastructure.

8 . The apparatus of claim 1 , in which the audio transformation function is a 1-way transformation function that precludes reconstruction of a voice file from the voice print datastructure.

9 . The apparatus of claim 1 , in which the user seed corresponds to the last user who was successfully authenticated while utilizing the device.

10 . The apparatus of claim 1 , in which the user seed is formed by appending a face token and a voice token, and encrypting the result with the device token.

11 . The apparatus of claim 1 , in which the set of stored face print datastructures and the set of stored voice print datastructures are stored in at least one relational database.

12 . The apparatus of claim 1 , in which the analysis of the face match score and the voice match score includes evaluating the face match score and the voice match score with a set of rules.

13 . The apparatus of claim 1 , in which the analysis of the face match score and the voice match score includes obtaining additional authentication data from the user, in which the additional authentication data is at least one of: personally identifiable information data, payment method data, secret question answer, actuation of a registration link.

14 . The apparatus of claim 1 , in which the login token is structured to be valid for a specified duration.

15 . The apparatus of claim 1 , in which the component collection storage is further structured with processor-executable instructions, comprising:

add, via the at least one processor, a login token record corresponding to the login token to the user graph database; and

link, via the at least one processor, the login token record to the user token record corresponding to the user token.

16 . The apparatus of claim 1 , in which the image transformation function is a one way vectorization function.

17 . The apparatus of claim 1 , in which the component collection storage is further structured with processor-executable instructions, comprising:

provide, via the at least one processor, a payment token associated with the authenticated user to a checkout apparatus.

18 . The apparatus of claim 17 , in which the payment token corresponds to at least one of: a default payment method, a spoken payment method.

19 . The apparatus of claim 17 , in which the checkout apparatus is at least one of: a website, an app, a point of sale terminal, a kiosk, a car.

20 . A biometric authentication engine processor-readable, non-transient medium, the medium storing a component collection, the component collection storage structured with processor-executable instructions comprising:

obtain, via the at least one processor, a device identifying datastructure associated with a user's device, in which the device identifying datastructure is structured as a set of datastructure fields specifying device data;

execute, via the at least one processor, a device search on a device graph database, with the device data as a set of search parameters, to determine a device record corresponding to the device in the device graph database;

retrieve, via the at least one processor, a device token specified via the device record from the device graph database;

obtain, via the at least one processor, a user identifying media datastructure, in which the user identifying media datastructure is structured as a media stream;

generate, via the at least one processor, a face print datastructure associated with the user from the media stream, in which the face print datastructure is generated by transforming aspects of the user's facial features with an image transformation function;

generate, via the at least one processor, a voice print datastructure associated with the user from the media stream, in which the voice print datastructure is generated by transforming aspects of the user's voice waveform with an audio transformation function;

obtain, via the at least one processor, a user seed identifying datastructure associated with the device, in which the user seed identifying datastructure is structured to specify a user seed;

determine, via the at least one processor, a user token by analyzing the user seed, in which the user seed analysis includes decrypting the user seed with the device token;

execute, via the at least one processor, a face token search on a user graph database, with the user token as a set of search parameters, to determine a set of face token records linked with a user token record corresponding to the user token;

determine, via the at least one processor, a face match score by matching the generated face print datastructure against a set of stored face print datastructures specified via the set of face token records;

execute, via the at least one processor, a voice token search on the user graph database, with the user token as a set of search parameters, to determine a set of voice token records linked with the user token record corresponding to the user token;

determine, via the at least one processor, a voice match score by matching the generated voice print datastructure against a set of stored voice print datastructures specified via the set of voice token records;

authenticate, via the at least one processor, the user by analyzing the face match score and the voice match score;

generate, via the at least one processor, a login token indicating successful authentication; and

provide, via the at least one processor, the login token for the device.

21 . A biometric authentication engine processor-implemented system, comprising:

means to store a component collection;

means to process processor-executable instructions from the component collection, the component collection storage structured with processor-executable instructions including:

obtain, via the at least one processor, a device identifying datastructure associated with a user's device, in which the device identifying datastructure is structured as a set of datastructure fields specifying device data;

execute, via the at least one processor, a device search on a device graph database, with the device data as a set of search parameters, to determine a device record corresponding to the device in the device graph database;

retrieve, via the at least one processor, a device token specified via the device record from the device graph database;

obtain, via the at least one processor, a user identifying media datastructure, in which the user identifying media datastructure is structured as a media stream;

generate, via the at least one processor, a face print datastructure associated with the user from the media stream, in which the face print datastructure is generated by transforming aspects of the user's facial features with an image transformation function;

generate, via the at least one processor, a voice print datastructure associated with the user from the media stream, in which the voice print datastructure is generated by transforming aspects of the user's voice waveform with an audio transformation function;

obtain, via the at least one processor, a user seed identifying datastructure associated with the device, in which the user seed identifying datastructure is structured to specify a user seed;

determine, via the at least one processor, a user token by analyzing the user seed, in which the user seed analysis includes decrypting the user seed with the device token;

execute, via the at least one processor, a face token search on a user graph database, with the user token as a set of search parameters, to determine a set of face token records linked with a user token record corresponding to the user token;

determine, via the at least one processor, a face match score by matching the generated face print datastructure against a set of stored face print datastructures specified via the set of face token records;

execute, via the at least one processor, a voice token search on the user graph database, with the user token as a set of search parameters, to determine a set of voice token records linked with the user token record corresponding to the user token;

determine, via the at least one processor, a voice match score by matching the generated voice print datastructure against a set of stored voice print datastructures specified via the set of voice token records;

authenticate, via the at least one processor, the user by analyzing the face match score and the voice match score;

generate, via the at least one processor, a login token indicating successful authentication; and

provide, via the at least one processor, the login token for the device.

22 . A biometric authentication engine processor-implemented process, including processing processor-executable instructions via at least one processor from a component collection stored in at least one memory, the component collection storage structured with processor-executable instructions comprising:

obtain, via the at least one processor, a device identifying datastructure associated with a user's device, in which the device identifying datastructure is structured as a set of datastructure fields specifying device data;

execute, via the at least one processor, a device search on a device graph database, with the device data as a set of search parameters, to determine a device record corresponding to the device in the device graph database;

retrieve, via the at least one processor, a device token specified via the device record from the device graph database;

obtain, via the at least one processor, a user identifying media datastructure, in which the user identifying media datastructure is structured as a media stream;

generate, via the at least one processor, a face print datastructure associated with the user from the media stream, in which the face print datastructure is generated by transforming aspects of the user's facial features with an image transformation function;

generate, via the at least one processor, a voice print datastructure associated with the user from the media stream, in which the voice print datastructure is generated by transforming aspects of the user's voice waveform with an audio transformation function;

obtain, via the at least one processor, a user seed identifying datastructure associated with the device, in which the user seed identifying datastructure is structured to specify a user seed;

determine, via the at least one processor, a user token by analyzing the user seed, in which the user seed analysis includes decrypting the user seed with the device token;

execute, via the at least one processor, a face token search on a user graph database, with the user token as a set of search parameters, to determine a set of face token records linked with a user token record corresponding to the user token;

determine, via the at least one processor, a face match score by matching the generated face print datastructure against a set of stored face print datastructures specified via the set of face token records;

execute, via the at least one processor, a voice token search on the user graph database, with the user token as a set of search parameters, to determine a set of voice token records linked with the user token record corresponding to the user token;

determine, via the at least one processor, a voice match score by matching the generated voice print datastructure against a set of stored voice print datastructures specified via the set of voice token records;

authenticate, via the at least one processor, the user by analyzing the face match score and the voice match score;

generate, via the at least one processor, a login token indicating successful authentication; and

provide, via the at least one processor, the login token for the device.