Methods, systems and computer program products for monitoring or controlling user access at a point-of-service

1 . A method for monitoring or controlling access to a service at a point-of-service, comprising performing at a processor implemented point-of-service terminal, the steps of:

receiving, from one or more communication devices, a plurality of datasets, wherein each dataset within the plurality of datasets corresponds to a distinct person and comprises at least that person's biometric data;

acquiring, from a person at the point-of-service terminal, a biometric sample using a biometric sample acquisition sensor;

comparing the acquired biometric sample against biometric data within each of the plurality of datasets;

selecting a dataset from the plurality of datasets, wherein selection of said dataset is based on a comparison that has been performed at the point-of-service terminal between the acquired biometric sample and the biometric data within the selected dataset resulting in a positive match decision;

transmitting, to a service-access-control system, a data payload, wherein the transmitted data payload comprises data that is extracted from or derived from data within the selected dataset, wherein:

the service-access-control system is configured to respond to a determination that the person from whom the biometric sample has been acquired, is authorized to access the service by generating a control signal that authorizes or records such person's access to the service, wherein said determination is based on data within the transmitted data payload.

2 . The method as claimed in claim 1 , wherein:

data within the selected dataset is based on an associated communication device dataset stored in a memory of a communication device from which the selected dataset has been received at the point-of-service terminal, wherein the communication device from which the selected dataset has been received at the point-of-service terminal is one of the one or more communication devices; and

said associated communication device dataset corresponds to an associated service-access-control system dataset stored in a memory that is accessible by the service-access-control system.

3 . The method as claimed in claim 2 , wherein the determination that the person from whom the biometric sample has been acquired is authorized to access the service, is based on an output of a computation involving the transmitted data payload and at least one associated service-access-control system dataset stored in the memory that is accessible by the service-access-control system.

4 . The method as claimed in claim 1 , wherein:

biometric data within the selected dataset is inaccessible to the service-access-control system.

5 . The method as claimed in claim 1 , wherein:

the selected dataset comprises an additional data element, wherein the additional data element is an output of a cryptographic function or is derived from the output of the cryptographic function; and

the additional data element is indecipherable at the point-of-service terminal.

6 . The method as claimed in claim 1 , wherein a wireless connection or a wireless communication session used for receiving the selected dataset at the point-of-service terminal lasts for less than 3 minutes.

7 . The method as claimed in claim 1 , wherein the determination that the person from whom the biometric sample has been acquired is authorized to access the service, is conditioned on verification of authenticity of some data within the selected dataset, wherein the verification relies on a digital signature issued by a trusted entity.

8 . The method as claimed in claim 1 , wherein:

the biometric data within at least one dataset among the plurality of datasets is homomorphically encrypted and indecipherable at the point-of-service terminal;

or the biometric data within at least one dataset among the plurality of datasets is homomorphically encrypted and indecipherable at the point-of-service terminal unless the dataset is selected.

9 . The method as claimed in claim 8 , wherein:

the dataset among the plurality of datasets comprises an encrypted supplemental biometric data that is indecipherable at the point-of-service terminal unless the dataset is selected; and

the determination that the person present at the point-of-service terminal is authorized to access the service is conditioned on verification of authenticity of the supplemental biometric data.

10 . The method as claimed in claim 9 , wherein:

the determination that the person from whom the biometric sample has been acquired is authorized to access the service is conditioned on a comparison between the supplemental biometric data and the biometric sample acquired by the biometric sample acquisition sensor resulting in a positive match, or

the determination that the person from whom the biometric sample has been acquired, is authorized to access the service is conditioned on a comparison between the supplemental biometric data and the homomorphically encrypted biometric data contained within the selected dataset resulting in a positive match.

11 . A non-transitory computer program product for monitoring or controlling access to a service at a point-of-service, comprising a non-transitory computer readable medium having a computer readable program code embodied therein, the computer readable program code comprising instructions for performing at a processor implemented point-of-service terminal, the steps of:

receiving, from one or more communication devices, a plurality of datasets, wherein each dataset within the plurality of datasets corresponds to a distinct person and comprises at least that person's biometric data;

acquiring, from a person at the point-of-service terminal, a biometric sample using a biometric sample acquisition sensor;

comparing the acquired biometric sample against biometric data within each of the plurality of datasets;

selecting a dataset from the plurality of datasets, wherein selection of said dataset is based on a comparison that has been performed at the point-of-service terminal between the acquired biometric sample and the biometric data within the selected dataset resulting in a positive match decision;

transmitting, to a service-access-control system, a data payload, wherein the transmitted data payload comprises data that is extracted from or derived from data within the selected dataset, wherein:

the service-access-control system is configured to respond to a determination that the person from whom the biometric sample has been acquired, is authorized to access the service by generating a control signal that authorizes or records such person's access to the service, wherein said determination is based on data within the transmitted data payload.

12 . The computer program product as claimed in claim 11 , wherein:

data within the selected dataset is based on an associated communication device dataset stored in a memory of a communication device from which the selected dataset has been received at the point-of-service terminal, wherein the communication device from which the selected dataset has been received at the point-of-service terminal is one of the one or more communication devices;

said associated communication device dataset corresponds to an associated service-access-control system dataset stored in a memory that is accessible by the service-access-control system; and

the determination that the person from whom the biometric sample has been acquired is authorized to access the service, is based on an output of a computation involving the transmitted data payload and at least one associated service-access-control system dataset stored in the memory that is accessible by the service-access-control system.

13 . The computer program product as claimed in claim 11 , wherein:

biometric data within the selected dataset is inaccessible to the service-access-control system.

14 . The computer program product as claimed in claim 11 , wherein:

the selected dataset comprises an additional data element, wherein the additional data element is an output of a cryptographic function or is derived from the output of the cryptographic function; and

the additional data element is indecipherable at the point-of-service terminal.

15 . The computer program product as claimed in claim 11 , wherein a wireless connection or a wireless communication session used for receiving the selected dataset at the point-of-service terminal lasts for less than 3 minutes.

16 . The computer program product as claimed in claim 11 , wherein the determination that the person from whom the biometric sample has been acquired is authorized to access the service, is conditioned on verification of authenticity of some data within the selected dataset, wherein the verification relies on a digital signature issued by a trusted entity.

17 . The computer program product as claimed in claim 11 , wherein:

the biometric data within at least one dataset among the plurality of datasets is homomorphically encrypted and indecipherable at the point-of-service terminal;

or the biometric data within at least one dataset among the plurality of datasets is homomorphically encrypted and indecipherable at the point-of-service terminal unless the dataset is selected.

18 . The computer program product as claimed in claim 17 , wherein:

the dataset among the plurality of datasets comprises an encrypted supplemental biometric data that is indecipherable at the point-of-service terminal unless the dataset is selected; and

the determination that the person present at the point-of-service terminal is authorized to access the service is conditioned on verification of authenticity of the supplemental biometric data.

19 . The computer program product as claimed in claim 18 , wherein:

the determination that the person from whom the biometric sample has been acquired is authorized to access the service is conditioned on a comparison between the supplemental biometric data and the biometric sample acquired by the biometric sample acquisition sensor resulting in a positive match, or

the determination that the person from whom the biometric sample has been acquired, is authorized to access the service is conditioned on a comparison between the supplemental biometric data and the homomorphically encrypted biometric data contained within the selected dataset resulting in a positive match.

20 . A point-of-service terminal for monitoring or controlling access to a service at a point-of-service, the point-of-service terminal comprising:

a processor; and

a memory;

wherein the point-of-service terminal is configured to perform the steps of:

receiving, from one or more communication devices, a plurality of datasets, wherein each dataset within the plurality of datasets corresponds to a distinct person and comprises at least that person's biometric data;

acquiring, from a person at the point-of-service terminal, a biometric sample using a biometric sample acquisition sensor;

comparing the acquired biometric sample against biometric data within each of the plurality of datasets;

selecting a dataset from the plurality of datasets, wherein selection of said dataset is based on a comparison that has been performed at the point-of-service terminal between the acquired biometric sample and the biometric data within the selected dataset resulting in a positive match decision;

transmitting, to a service-access-control system, a data payload, wherein the transmitted data payload comprises data that is extracted from or derived from data within the selected dataset, wherein:

the service-access-control system is configured to respond to a determination that the person from whom the biometric sample has been acquired, is authorized to access the service by generating a control signal that authorizes or records such person's access to the service, wherein said determination is based on data within the transmitted data payload.