IP Library Granted Patent US 11,544,367
Granted Patent B2
US 11,544,367 · App. 17/738,106 · Granted Jan 3, 2023

Systems, apparatus and methods for secure electrical communication of biometric personal identification information to validate the identity of an individual

Inventor: Armin Ebrahimi (Los Gatos, CA)
Assignee: Ping Identity Corporation
G06F21/33G06F21/32H04L63/0861
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,544,367
App. No.
17/738,106
Granted
Jan 3, 2023
Kind
B2
Abstract

An apparatus for validating an identity of an individual based on biometrics includes a memory and a processor operatively coupled to a distributed database and the memory. The processor is configured to provide biometric data as an input to a predefined hash function to obtain a first biometric hash value. The processor is configured to obtain, using a first pointer to the distributed database, a signed second biometric hash value. The processor is configured to define a certification of the biometric data in response to verifying that a signature of the signed second biometric hash value is associated with the compute device and verifying that the first biometric hash value corresponds with the second biometric hash value. The processor is configured to digitally sign the certification using a private key associated with the processor to produce a signed biometric certification and store the signed biometric certification in the distributed database.

Claims (44)

1. An apparatus, comprising:

a memory; and

a processor operatively coupled to a distributed database and the memory, the processor configured to:

receive encrypted biometric data associated with a compute device;

decrypt the encrypted biometric data using a private key associated with the processor to obtain biometric data;

provide the biometric data as an input to a predefined hash function to obtain a first biometric hash value;

receive a first pointer to a record in the distributed database, the record including a signed second biometric hash value;

obtain, using the first pointer, the signed second biometric hash value from the distributed database;

validate an identity of a user of the compute device in response to:

verifying that a signature of the signed second biometric hash value is associated with the compute device using a public key of the compute device; and

verifying that the first biometric hash value corresponds with the second biometric hash value;

define a certification based on the validating;

digitally sign the certification using a private key associated with the processor to produce a signed biometric certification;

store the signed biometric certification in the distributed database; and

provide, to the compute device, a second pointer to the signed biometric certification in the distributed database such that the compute device can provide the second pointer to a relying entity.

2. The apparatus of claim 1 , wherein the biometric data includes at least one of: a fingerprint, a facial image, an iris-scan, a voice print or DNA data.

3. The apparatus of claim 1 , wherein the signed second biometric hash value is signed using a private key associated with the compute device.

4. The apparatus of claim 1 , wherein the processor is configured to provide the second pointer to the compute device such that the compute device can provide the first pointer, the second pointer, the biometric data and the public key to the relying entity.

5. The apparatus of claim 1 , wherein the distributed database is a blockchain.

6. The apparatus of claim 3 , wherein the private key associated with the compute device is paired with the public key associated with the compute device.

7. The apparatus of claim 1 , wherein the encrypted biometric data is encrypted using at least one of Rivest-Shamir-Adleman (RSA) encryption algorithm or Elliptic Curve Digital Signature Algorithm (ECDSA).

8. A method, comprising:

receiving, at a processor, encrypted biometric data associated with a compute device;

decrypting the encrypted biometric data using a private key associated with the processor to obtain biometric data;

providing the biometric data as an input to a predefined hash function to obtain a first biometric hash value;

receiving a first pointer to a first record in a distributed database, the first record including a second biometric hash value;

obtaining, using the first pointer, the second biometric hash value from the distributed database;

validating an identity of a user of the compute device in response to:

verifying that a signature of the second biometric hash value is associated with the compute device using a public key of the compute device; and

verifying that the first biometric hash value corresponds with the second biometric hash value; and

receiving, a second pointer to a second record in the distributed database based on the validating.

9. The method of claim 8 , wherein the second record includes a signed biometric certification, the method further comprising:

obtaining, using the second pointer, the signed biometric certification from the distributed database; and

validating, based on the signed biometric certification, that the identity of the user of the compute device has been certified.

10. The method of claim 8 , wherein the second record includes a signed biometric certification, the method further comprising:

obtaining, using the second pointer, the signed biometric certification from the distributed database; and

validating, that the identity of the user of the compute device has been certified in response to:

verifying that a signature of the signed biometric certification is associated with a relying entity device using a public key of the relying entity device; and

verifying that the signed biometric certification is associated with the second biometric hash value.

11. The method of claim 8 , wherein the biometric data includes at least one of: a fingerprint, a facial image, an iris-scan, a voice print or DNA data.

12. The method of claim 8 , wherein the second biometric hash value is signed using a private key associated with the compute device.

13. The method of claim 8 , wherein the distributed database is a blockchain.

14. The method of claim 12 , wherein the private key associated with the compute device is paired with the public key associated with the compute device.

15. The method of claim 8 , wherein the encrypted biometric data is encrypted using Rivest-Shamir-Adleman (RSA) encryption algorithm or Elliptic Curve Digital Signature Algorithm (ECDSA).

Assignments (7)
RELEASE OF SECURITY INTEREST AT R/F 61703/0988 Recorded Nov 14, 2025
From: BLUE OWL CAPITAL CORPORATION
To: PING IDENTITY CORPORATION
Reel/Frame 073570/0777 →
SECURITY INTEREST Recorded Nov 13, 2025
From: PING IDENTITY CORPORATION; PING IDENTITY INTERNATIONAL, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 073557/0093 →
GRANT OF SECURITY INTEREST IN PATENT RIGHTS Recorded Oct 18, 2022
From: PING IDENTITY CORPORATION
To: OWL ROCK CAPITAL CORPORATION, AS COLLATERAL AGENT
Reel/Frame 061703/0988 →
CHANGE OF NAME Recorded Aug 1, 2022
From: SHOCARD, INC.
To: SHOCARD, LLC
Reel/Frame 061032/0770 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 1, 2022
From: EBRAHIMI, ARMIN
To: SHOCARD, INC.
Reel/Frame 060686/0433 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 1, 2022
From: EBRAHIMI, ARMIN
To: PING IDENTITY CORPORATION
Reel/Frame 060686/0307 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 1, 2022
From: SHOCARD, LLC
To: PING IDENTITY CORPORATION
Reel/Frame 060686/0450 →
Continuity (7)
Continuation 17691597 · Mar 10, 2022
Continuation 17514667 · Oct 29, 2021
Continuation 16018773 · Jun 26, 2018
Continuation In Part 15146872 · May 4, 2016
Provisional Application 62304934 · Mar 7, 2016
Provisional Application 62157256 · May 5, 2015
Related Publication 20220342973A1 · Oct 27, 2022
Cited By (2)
US 12,235,946 US 12,518,278