Method and system for secure information validation
The present teaching relates to method, system, medium, and implementation for biometric authentication in secure data management. Authentication is initiated for a person claiming to be a record owner prior to a transaction between the record owner and a service provider. Biometric based authentication of the person is performed by detecting liveness of the person and authenticating an identity of the person based on biometric information of the person. Upon successful authentication of the person, a trusted party processes a request directed to a trusted entity to validate one or more data items related to the record owner in order to proceed with the transaction and forward a cloaked identifier obtained based on the request, where the cloaked identifier is to be used by the service provider to seek a validation response with regard to the one or more data items from the trusted party.
1. A method, implemented on a machine having at least one processor, storage, and a communication platform for biometric authentication in secure data management, comprising:
prior to a person, claiming to a record owner, generating a request to validate one or more data items related to the record owner in order to proceed with a transaction between the record owner and a service provider, initiating authentication of the person claiming to be the record owner;
conducting biometric based authentication of the person by
detecting liveness of the person, and
authenticating an identity of the person based on biometric information of the person;
after the identity of the person is authenticated, receiving, by a trusted party and from the person the request to validate the one or more data items related to the record owner in order to proceed with the transaction; and
in response to the request, sending, by the trusted party, via the person, and to the service provider, a cloaked identifier obtained by the trusted party based on the request for validating the one or more data items, wherein
the cloaked identifier is to be used by the service provider to seek a validation response with regard to the one or more data items from the trusted party.
2. The method of claim 1 , wherein the liveness of the person is detected based on at least one of non-biometric and biometric means.
3. The method of claim 2 , wherein the biometric means for detecting the liveness of the person includes at least one of
an iris based liveness detection method;
a face based liveness detection method;
a fingerprint based liveness detection method;
a palm based liveness detection method;
a vein based liveness detection method; and
any combination thereof.
4. The method of claim 3 , wherein the iris based liveness detection method includes detecting liveness based on a measurement of the person in response to at least one of light strobing, displayed moving focus dots, a challenge, and an obfuscation protocol.
5. The method of claim 3 , wherein the face based liveness detection method includes detecting liveness based on a facial feature of the person in response to a challenge.
6. The method of claim 3 , wherein the fingerprint based liveness detection method includes detecting a pattern of blood flow of a vein inside of a finger of the person.
7. The method of claim 3 , wherein the palm based liveness detection method includes detecting a pattern of blood flow in a vein inside of a palm of the person.
8. Machine readable and non-transitory medium having information recorded thereon for biometric authentication in secure data management, wherein the information, when read by the machine, causes the machine to perform the following:
prior to a person, claiming to a record owner, generating a request to validate one or more data items related to the record owner in order to proceed with a transaction between the record owner and a service provider, initiating authentication of the persona claiming to be the record owner;
conducting biometric based authentication of the person by
detecting liveness of the person, and
authenticating an identity of the person based on biometric information of the person;
after the identity of the person is authenticated, receiving, by a trusted party and from the person the request to validate the one or more data items related to the record owner in order to proceed with the transaction; and
in response to the request, sending, by the trusted party, via the person, and to the service provider, a cloaked identifier obtained by the trusted party based on the request for validating the one or more data items, wherein
the cloaked identifier is to be used by the service provider to seek a validation response with regard to the one or more data items from the trusted party.
9. The medium of claim 8 , wherein the liveness of the person is detected based on at least one of non-biometric and biometric means.
10. The medium of claim 9 , wherein the biometric means for detecting the liveness of the person includes at least one of
an iris based liveness detection method;
a face based liveness detection method;
a fingerprint based liveness detection method;
a palm based liveness detection method;
a vein based liveness detection method; and
any combination thereof.
11. The medium of claim 8 , wherein the iris based liveness detection method includes detecting liveness based on a measurement of the person in response to at least one of light strobing, displayed moving focus dots, a challenge, and an obfuscation protocol.
12. The medium of claim 11 , wherein the face based liveness detection method includes detecting liveness based on a facial feature of the person in response to a challenge.
13. The medium of claim 10 , wherein the fingerprint based liveness detection method includes detecting a pattern of blood flow of a vein inside of a finger of the person.
14. The medium of claim 10 , wherein the palm based liveness detection method includes detecting a pattern of blood flow in a vein inside of a palm of the person.
15. A system for biometric authentication in secure data management, comprising:
an authentication request processor configured for prior to a person, claiming to a record owner, generating a request to validate one or more data items related to the record owner in order to proceed with a transaction between the record owner and a service provider, initiating authentication of the person claiming to be the record owner;
an authentication controller configured for conducting biometric based authentication of the person by
detecting liveness of the person, and
authenticating an identity of the person based on biometric information of the person; and
a trusted party configured for
after the identity of the person is authenticated, receiving, from the person, the request to validate the one or more data items related to the record owner in order to proceed with the transaction, and
in response to the request, sending, via the person and to the service provider, a cloaked identifier obtained based on the request for validating the one or more data items, wherein
the cloaked identifier is to be used by the service provider to seek a validation response with regard to the one or more data items from the trusted party.
16. The system of claim 15 , wherein the liveness of the person is detected based on at least one of non-biometric and biometric means.
17. The system of claim 16 , wherein the biometric means for detecting the liveness of the person includes at least one of
an iris based liveness detection method;
a face based liveness detection method;
a fingerprint based liveness detection method;
a palm based liveness detection method;
a vein based liveness detection method; and
any combination thereof.
18. The system of claim 17 , wherein the iris based liveness detection method includes detecting liveness based on a measurement of the person in response to at least one of light strobing, displayed moving focus dots, a challenge, and an obfuscation protocol.
19. The system of claim 17 , wherein the face based liveness detection method includes detecting liveness based on a facial feature of the person in response to a challenge.
20. The system of claim 17 , wherein the fingerprint based liveness detection method includes detecting a pattern of blood flow of a vein inside of a finger of the person.
21. The system of claim 17 , wherein the palm based liveness detection method includes detecting a pattern of blood flow in a vein inside of a palm of the person.