System and method for authenticating a person using biometric data

1. A computerized system for authenticating a person, comprising:

a controller configured to control access to a physical entity, said controller is connected to a biometric acquisition device configured to acquire biometric data of the person near the physical entity, said controller comprising:

a communication module configured to communicate wirelessly with an electronic device used by the person and an MPC module configured to participate in a multiparty computation (MPC) process with the electronic device used by the person;

a computerized server comprises a biometric data storage configured to store shares of biometric samples associated with multiple devices, a communication module configured to exchange information with at least one of the controller or the electronic device used by the person and an MPC module, said server is configured to provide validation indication of the person;

wherein the electronic device used by the person stores a share of the person's biometric sample, such that the person's biometric sample cannot be extracted solely from the information stored at the electronic device used by the person and cannot be extracted solely from the information stored at the computerized server;

wherein the controller, the electronic device used by the person and the computerized server perform an MPC process to determine a match between the person's biometric data acquired by the biometric acquisition device and the biometric samples stored in at least two shares, one share is stored at a computerized server and another share is stored in the electronic device used by the person;

wherein the controller determines authentication of the person upon determination of the match.

2. A method, comprising:

performing a multi-party computation (MPC′) an MPC process between a controller obtaining a biometric data of a person, said biometric data is acquired when the person is located near a physical entity controlled by the controller, said MPC process comprises exchanging information between the controller and an electronic device used by the person to find a match between the acquired biometric data and a biometric sample stored in at least two shares, one share is stored at a computerized server and another share is stored in the electronic device used by the person, wherein the person's biometric sample cannot be extracted solely from the information stored at the electronic device used by the person and cannot be extracted solely from the information stored at the computerized server;

receiving validation information from the computerized server communicating with the controller;

authenticating the person according to the MPC process and the validation information.

3. The method of claim 2 , further comprises exchanging information between the server and the electronic device used by the person and comparing the information received from the electronic device used by the person to a secret stored in the server, wherein the validation information comprises confirmation of a match between the information received from the electronic device used by the person and the secret stored in the server.

4. The method of claim 2 , further comprises performing a second MPC process between the server and the controller, wherein the server stores at least a portion of the biometric sample, wherein the validation information comprises confirmation of a match of the second MPC process.

5. The method of claim 2 , further comprises allowing the person to access the physical entity.

6. The method of claim 2 , further generating an alert signal in case authentication failed and transmitting the alert signal to a remote location, said alert signal comprises the captured image.