IP Library Granted Patent US 11,240,033
Granted Patent B2
US 11,240,033 · App. 16/583,728 · Granted Feb 1, 2022

Secure DNA-based password

Inventors: Andrew J. Lavery (Austin, TX); Igor S. Ramos (Round Rock, TX); Silvia Giacone (Austin, TX); Bernadette Marie Wing (Spring Ranch, TX); Fernando Jose Suarez Saiz (Toronto, CA)
Assignee: International Business Machines Corporation
H04L9/3231G06F21/46G06F21/6209G16B15/00H04L9/3236
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,240,033
App. No.
16/583,728
Granted
Feb 1, 2022
Kind
B2
Abstract

A method includes determining a password-length threshold. The password-length threshold may comprise an integer. The method also includes obtaining, for a first user, a set of nucleotide locations. The number of nucleotide locations in the set may be greater than or equal to the integer. The method also includes obtaining a first sample of the user's DNA. The method also includes determining, in the first sample, a nucleotide at each nucleotide location in the set of nucleotide locations, resulting in a first nucleotide-password sequence. The method also includes performing a one-way hashing operation on the first nucleotide-password sequence with a first hashing algorithm, resulting in a first hashed password.

Claims (68)

1. A method comprising:

determining a password-length threshold, wherein the password-length threshold comprises an integer;

obtaining, for a user, a set of nucleotide locations, wherein a number of nucleotide locations in the set is greater than or equal to the integer;

obtaining a first sample of the user's DNA;

determining, in the first sample, a nucleotide at each nucleotide location in the set of nucleotide locations, resulting in a first nucleotide-password sequence; and

performing a one-way hashing operation on the first nucleotide-password sequence with a first hashing algorithm, resulting in a first hashed password.

2. The method of claim 1 , further comprising storing the first hashed password, the set of nucleotide locations, and the first hashing algorithm in a profile for the user.

3. The method of claim 2 , further comprising:

obtaining a second sample of the user's DNA;

obtaining, from the user profile, the set of nucleotide locations and the first hashing algorithm;

determining, in the second sample, a nucleotide at each nucleotide location in the set of nucleotide locations, resulting in a second nucleotide-password sequence;

performing the one-way hashing operation on the second nucleotide-password sequence with the first hashing algorithm, resulting in a second hashed password;

comparing the first hashed password to the second hashed password; and

concluding, based on the comparing, that the first hashed password matches the second hashed password.

4. The method of claim 1 , wherein the obtaining the set of nucleotide locations and the first hashing algorithm further comprises:

transmitting, to a first third party, identification information for the user;

receiving, from the first third party, a universally unique identifier (UUID); and

retrieving, using the UUID, the set of nucleotide locations and the first hashing algorithm.

5. The method of claim 1 , wherein the set of nucleotide locations comprises locations of known single nucleotide polymorphisms.

6. The method of claim 1 , wherein the set of nucleotide locations comprises a set of locations of known cytosine-guanine sequences, and the determining comprises identifying, for each location of known cytosine-guanine sequences in the set of locations of known cytosine-guanine sequences, methylation of the corresponding cytosine nucleotide.

7. The method of claim 3 , wherein obtaining the first sample of DNA comprises recording a biometric signature of the user, wherein obtaining the second sample of DNA comprises re-recording the biometric signature of the user, and wherein the method further comprises determining that the recorded biometric signature and the re-recorded biometric signature match.

8. The method of claim 1 , wherein performing the one-way hashing operation comprises inputting a cryptographic salt to the first hashing algorithm.

9. A system comprising a first sequencer, the first sequencer comprising:

a processor; and

a memory in communication with the processor, the memory containing program instructions that, when executed by the processor, are configured to cause the sequencer to perform a first method, the first method comprising:

obtaining, a password-length threshold wherein the password-length threshold comprises an integer;

obtaining, for a first user, a set of nucleotide locations, wherein a number of nucleotide locations in the set is greater than or equal to the integer;

obtaining a first sample of the user's DNA;

determining, in the first sample, a nucleotide at each nucleotide location in the set of nucleotide locations, resulting in a first nucleotide-password sequence; and

performing a one-way hashing operation on the first nucleotide-password sequence with a first hashing algorithm, resulting in a first hashed password.

10. The system of claim 9 , wherein the first method further comprises:

transmitting the first hashed password to a storage server; and

securely deleting the first hashed password, the set of nucleotide locations, and the first hashing algorithm.

11. The system of claim 10 , the system further comprising the storage server, the storage server configured to perform a second method, the second method comprising:

receiving, from the first sequencer, the first hashed password; and

storing, in a profile for the user, the first hashed password, the set of nucleotide locations, and the first hashing algorithm.

12. The system of claim 11 , further comprising a second sequencer, the second sequencer configured to perform a third method, the third method comprising:

transmitting user identification information for the user to the storage server;

obtaining, from the storage server, the set of nucleotide locations and first hashing algorithm;

obtaining a second sample of the user's DNA;

determining, in the second sample, a nucleotide at each nucleotide location in the set of nucleotide locations, resulting in a second nucleotide-password sequence;

performing the one-way hashing operation on the first second nucleotide-password sequence with the first hashing algorithm, resulting in a second hashed password; and

transmitting the second hashed password to the storage server.

13. The system of claim 12 , wherein the second method also comprises:

receiving, from the second sequencer, the second hashed password;

verifying that the first hashed password matches the second hashed password; and

transmitting, as a result of the verifying, a hash match to the first sequencer and the second sequencer.

14. The system of claim 12 , wherein the first method further comprises:

receiving, from the second sequencer, a request for sensitive information associated with the first user; and

transmitting, to the second sequencer, a universally unique ID associated with the first user.

15. The system of claim 10 , wherein the first method further comprises querying the storage server for the set of nucleotide locations.

16. The system of claim 10 , wherein the first method further comprises querying the storage server for the first hashing algorithm.

17. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:

receive, from a first sequencer, identification information associated with a first user;

transmit, to the first sequencer, a set of nucleotide locations and a set of hash information, wherein each nucleotide location is one nucleotide in length;

receive, from the first sequencer, a first hashed password; and

storing, in a profile for the first user, the set of nucleotide locations, the set of hash information, the identification information, and the hashed password.

18. The computer program product of claim 17 , wherein the program instructions are further executable by the computer to cause the computer to:

receive, from the first sequencer, a second hashed password;

verify that the first hashed password and the second hashed password match; and

send a hash-match notification to the first sequencer.

19. The computer program product of claim 17 , wherein the program instructions are further executable by the computer to cause the computer to:

receive, from a second sequencer, the identification information;

transmit, to the second sequencer, the set of nucleotide locations and the set of hash information;

receive, from the second sequencer, a third hashed password;

verify that the first hashed password and the third hashed password match; and

send a hash-match notification.

20. The computer program product of claim 19 , wherein the hash-match notification is sent to the first sequencer.

Assignments (3)
SECURITY INTEREST Recorded Oct 1, 2025
From: MERATIVE US L.P.; MERGE HEALTHCARE INCORPORATED
To: TCG SENIOR FUNDING L.L.C., AS COLLATERAL AGENT
Reel/Frame 072808/0442 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2022
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: MERATIVE US L.P.
Reel/Frame 061496/0752 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 26, 2019
From: LAVERY, ANDREW J.; RAMOS, IGOR S.; GIACONE, SILVIA; WING, BERNADETTE MARIE; SUAREZ SAIZ, FERNANDO JOSE
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050501/0609 →