IP Library Granted Patent US 11,711,362
Granted Patent B2
US 11,711,362 · App. 17/180,908 · Granted Jul 25, 2023

Dynamic biometric authentication based on distributed ledger data

Inventors: Arthur Carroll Chow (Markham, CA); Anthony Haituyen Nguyen (Toronto, CA); Perry Aaron Jones Haldenby (Toronto, CA); Milos Dunjic (Oakville, CA); David Tax (Toronto, CA); John Jong-Suk Lee (Toronto, CA); Arun Victor Jagga (Toronto, CA)
Assignee: The Toronto-Dominion Bank
H04L63/0861H04L9/0643H04L9/3231H04L9/3239
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,711,362
App. No.
17/180,908
Granted
Jul 25, 2023
Kind
B2
Abstract

The disclosed exemplary embodiments include computer-implemented devices, apparatuses, and processes that, among other things, perform dynamic biometric authentication based on distributed ledger data. For example, a device may compute a first hash value based on first biometric data captured by a sensor unit, and may transmit a request to, and receive a response from, a computing system across a communications network via the communications unit. The request may cause the computing system to execute instructions maintained within the distributed ledger data, and to extract second biometric data maintained within an element of the distributed ledger data. The second biometric data may include a second hash, which the computing system may incorporate into the response. The device may authenticate an identity associated with the device when the first hash value corresponds to the second hash value incorporated within the response.

Claims (90)

1. A device, comprising:

a sensor unit;

a communications unit;

a storage unit storing instructions; and

at least one hardware processor coupled to the sensor unit, the communications unit, and the storage unit, the at least one hardware processor being configured to execute the instructions to:

transmit, via the communications unit, a public cryptographic key to a computing system, the computing system being configured to obtain first biometric data from an element of distributed ledger data associated with the public cryptographic key;

receive the first biometric data from the computing system via the communications unit; and

authenticate an identity associated with the device based on the first biometric data and on second biometric data captured by the sensor unit.

2. The device of claim 1 , wherein:

the public cryptographic key is associated with the device; and

the computing system is further configured to execute additional instructions included within an additional element of distributed ledger data, the additional executed instructions causing the computing system to identify and load the first biometric data from the element of the distributed ledger data.

3. The device of claim 1 , wherein:

the first biometric data comprises a first hash value; and

the at least one hardware processor is further configured to execute the instructions to:

compute a second hash value based on the second biometric data; and

authenticate the identity when the first hash value corresponds to the second hash value.

4. The device of claim 3 , wherein the at least one hardware processor is further configured to execute the instructions to:

perform operations that map elements of the second biometric data to corresponding spatial coordinates, the spatial coordinates being associated with the sensor unit; and

compute the second hash value based on the elements of the second biometric data and the corresponding spatial coordinates.

5. The device of claim 1 , wherein:

the second biometric data comprises a plurality of biometric data samples, the biometric data samples being captured by the sensor unit during a corresponding sampling interval; and

the at least one hardware processor is further configured to execute the instructions to:

identify feature points within each of the biometric data samples;

based on the second biometric data, generate first coordinate data that maps the identified feature points to corresponding first coordinates, the first coordinates being associated with the sensor unit; and

compute first displacements between the first coordinates of corresponding pairs of the identified feature points within the biometric data samples.

6. The device of claim 5 , wherein:

the first biometric data comprises a first hash value; and

the at least one hardware processor is further configured to execute the instructions to:

based on the computed first displacements, establish a displacement range for the each of the identified pairs of feature points;

determine a range value that characterizes the displacement range for each of the identified pairs of feature points;

compute a second hash value based on the range values; and

authenticate the identity when the first hash value corresponds to the second hash value.

7. The device of claim 5 , wherein:

the first biometric data comprises a first hash value; and

the at least one hardware processor is further configured to:

generate second coordinate data based on an application of an orthogonal transformation to portions of the first coordinate data, the second coordinate data mapping the identified feature points to corresponding second coordinates associated with the orthogonal transformation;

compute second displacements between the second coordinates of corresponding pairs of the identified feature points within the biometric data samples;

based on the computed second displacements, establish a displacement range for the each of the identified pairs of feature points;

determine a range value that characterizes the displacement range for each of the identified pairs of feature points; and

compute a second hash value based on the determined range values; and

authenticate the identity when the first hash value corresponds to the second hash value.

8. The device of claim 5 , wherein:

the sensor unit comprises a fingerprint scanner having a corresponding surface;

the biometric data samples identify fingerprints captured by the fingerprint scanner;

the first coordinates correspond to spatial coordinates; and

the first coordinate data maps the identified feature points to corresponding spatial positions along the surface of the fingerprint scanner.

9. The device of claim 1 , wherein:

the sensor unit comprises at least one of a fingerprint scanner, an iris scanner, a retinal scanner, a motion sensor, an accelerometer, or a digital camera; and

the first biometric data comprises at least one of a fingerprint sample, an iris scan, a retinal, or postural data characterizing a posture or gait of a user.

10. The device of claim 1 , wherein:

the second biometric data is associated with a user; and

the first biometric data comprises reference biometric data associated with the user, the reference biometric data being maintained within the element of the distributed ledger data.

11. The device of claim 1 , wherein the at least one hardware processor is further configured to execute the instructions to:

receive third biometric data captured by the sensor unit; and

transmit the public cryptographic key and at least a portion of the third biometric data to the computing system via the communications unit, the computing system being further configured to generate an additional element of the distributed ledger data that associates the portions of the third biometric data with the public cryptographic key.

12. A computer-implemented method, comprising:

by at least one hardware processor, transmitting a public cryptographic key to a computing system, the computing system being configured to obtain first biometric data from an element of distributed ledger data associated with the public cryptographic key;

receiving, by the at least one hardware processor, the first biometric data from the computing system; and

authenticating, by the at least one hardware processor, an identity associated with the device based on the first biometric data and on second biometric data captured by a sensor unit.

13. The computer-implemented method of claim 12 , wherein the computing system is further configured to execute additional instructions included within an additional element of distributed ledger data, the additional executed instructions causing the computing system to identify and load the first biometric data from the element of the distributed ledger data.

14. The computer-implemented method of claim 12 , wherein:

the first biometric data comprises a first hash value;

the computer-implemented method further comprises computing, by the at least one hardware processor, a second hash value based on the second biometric data; and

the authenticating comprises authenticating the identity of the device when the first hash value corresponds to the second hash value.

15. The computer-implemented method of claim 14 , further comprising:

performing, by the at least one hardware processor, operations that map elements of the second biometric data to corresponding spatial coordinates, the spatial coordinates being associated with the sensor unit; and

computing, by the at least one hardware processor, the second hash value based on the elements of the first biometric data and the corresponding spatial coordinates.

16. The computer-implemented method of claim 14 , wherein:

the sensor unit comprises at least one of a fingerprint scanner, an iris scanner, a retinal scanner, a motion sensor, an accelerometer, or a digital camera; and

the second biometric data comprises at least one of a fingerprint sample, an iris scan, a retinal, or postural data characterizing a posture or gait of a user.

17. The computer-implemented method of claim 12 , wherein:

the second biometric data comprises a plurality of biometric data samples, the biometric data samples being captured by the sensor unit during a corresponding sampling interval; and

the computer-implemented method further comprises:

identifying, by the at least one hardware processor, feature points within each of the biometric data samples;

based on the second biometric data, generating, by the at least one hardware processor, first coordinate data that maps the identified feature points to corresponding first coordinates, the first coordinates being associated with the sensor unit; and

computing, by the at least one hardware processor, first displacements between the first coordinates of corresponding pairs of the identified feature points within the biometric data samples.

18. The computer-implemented method of claim 17 , wherein:

the first biometric data comprises a first hash value; and

the computer-implemented method further comprises:

based on the computed first displacements, establishing, by the at least one hardware processor, a displacement range for the each of the identified pairs of feature points;

determining, by the at least one hardware processor, a range value that characterizes the displacement range for each of the identified pairs of feature points;

computing, by the at least one hardware processor, a second hash value based on the range values; and

authenticating, by the at least one hardware processor, the identity when the first hash value corresponds to the second hash value.

19. The computer-implemented method of claim 12 , further comprising:

receiving, by the at least one hardware processor, third biometric data captured by the sensor unit; and

transmitting, by the at least one hardware processor, the public cryptographic key and at least a portion of the third biometric data to the computing system, the computing system being further configured to generate an additional element of the distributed ledger data that associates the portions of the third biometric data with the public cryptographic key.

20. A tangible, non-transitory computer-readable medium storing instructions that, when executed by at least one hardware processor, cause the at least one hardware processor to perform a method, comprising:

transmitting a public cryptographic key to a computing system, the computing system being configured to obtain first biometric data from an element of distributed ledger data associated with the public cryptographic key;

receiving the first biometric data from the computing system; and

authenticating an identity associated with the device based on the first biometric data and on second biometric data captured by a sensor unit.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2021
From: CHOW, ARTHUR CARROLL; NGUYEN, ANTHONY HAITUYEN; HALDENBY, PERRY AARON JONES; DUNJIC, MILOS; TAX, DAVID; LEE, JOHN JONG-SUK; JAGGA, ARUN VICTOR
To: THE TORONTO-DOMINION BANK
Reel/Frame 055347/0919 →
Continuity (2)
Continuation 15946703 · Apr 5, 2018
Related Publication 20210176244A1 · Jun 10, 2021