Granted Patent B2

US 12,368,582 · App. 18/200,228 · Granted Jul 22, 2025

Inventors: Salil Jain (Hartford, CT); Andrew L. Hinton (Hartford, CT)

Assignee: Aetna Inc.

H04L9/0866H04L9/085

Abstract

Claims (82)

1. A method, comprising:

obtaining, by a user device, biometric registration data associated with a user;

generating, by the user device, a secret key for the biometric registration data, wherein the secret key indicates an index translate point array;

determining, by the user device, enrollment data for the user based on an index translate function, the biometric registration data, and the secret key, wherein the index translate function modifies entries of the biometric registration data based on the index translate point array; and

generating, by the user device, one or more cryptographic keys for the user based on the index translate point array.

2. The method of claim 1 , wherein generating the one or more cryptographic keys comprises generating an encryption key based on the index translate point array, and wherein the method further comprises:

encrypting sensitive data associated with the user using the encryption key; and

storing the enrollment data and encrypted sensitive data associated with the user in memory of the user device.

3. The method of claim 2 , further comprising:

subsequent to storing the enrollment data and the encrypted sensitive data, deleting the encryption key;

retrieving, from the memory of the user device, the encrypted sensitive data and the enrollment data;

obtaining new biometric data associated with the user; and

recreating the secret key based on the retrieved enrollment data, the new biometric data, and the index translate function.

4. The method of claim 3 , further comprising:

re-generating the encryption key based on the recreated secret key;

decrypting the encrypted sensitive data using the re-generated encryption key; and

utilizing the decrypted sensitive data for one or more tasks.

5. A system, comprising:

a first user device configured to:

obtain biometric registration data associated with a user;

generate a secret key for the biometric registration data, wherein the secret key indicates an index translate point array;

determine enrollment data for the user based on an index translate function, the biometric registration data, and the secret key, wherein the index translate function modifies entries of the biometric registration data based on the index translate point array;

generate one or more cryptographic keys for the user based on the index translate point array; and

provide, to a computing platform, ancillary information associated with the one or more cryptographic keys and the enrollment data.

6. The system of claim 5 , wherein the biometric registration data comprises a biometric user array indicating a biometric representation of the user, wherein the biometric representation of the user is associated with a fingerprint of the user or a facial recognition image of the user.

7. The system of claim 5 , wherein the first user device is further configured to obtain second biometric data that is different from the biometric registration data associated with the user, and

wherein determining the enrollment data for the user comprises:

determining first index translate outputs based on the index translate point array, the biometric registration data, and the index translate function;

determining second index translate outputs based on the second biometric data and the index translate function; and

generating the enrollment data based on the first index translate outputs and the second index translate outputs.

8. The system of claim 7 , wherein generating the enrollment data comprises:

generating intermediate enrollment data using the first index translate outputs and the second index translate outputs; and

generating the enrollment data based on using a sparsify function and the intermediate enrollment data, wherein the sparsify function resets at least one entry from the intermediate enrollment data to zero.

9. The system of claim 8 , wherein generating the intermediate enrollment data is based on a noise vector.

10. The system of claim 5 , wherein generating the one or more cryptographic keys comprises generating a private and public key pair comprising a public key and a private key, and wherein providing the ancillary information comprises providing, to the computing platform, the public key and the enrollment data.

11. The system of claim 10 , wherein the first user device is further configured to:

subsequent to providing the public key and the enrollment data to the computing platform, delete the secret key and the private and public key pair;

receive, from the computing platform, the enrollment data;

obtain new biometric data associated with the user; and

recreate the secret key based on the received enrollment data, the new biometric data, and the index translate function.

12. The system of claim 11 , wherein recreating the secret key comprises:

determining one or more index translated vectors based on the index translate function and the new biometric data;

determining a plurality of enrollment-based index translated vectors based on the one or more index translated vectors and the enrollment data; and

obtaining the recreated secret key based on a mathematical operation and the plurality of enrollment-based index translated vectors.

13. The system of claim 11 , wherein the first user device is further configured to:

re-generate the private and public key pair based on the recreated secret key;

encrypt an element using the private key from the re-generated private and public key pair; and

provide the encrypted element to the computing platform.

14. The system of claim 13 , further comprising:

the computing platform, wherein the computing platform is configured to:

authenticate the user based on decrypting the encrypted element using the public key; and

provide an indication indicating the authentication of the user to the first user device.

15. The system of claim 10 , further comprising:

a second user device configured to:

receive, from the computing platform, the enrollment data;

obtain new biometric data associated with the user; and

recreate the secret key based on the received enrollment data, the new biometric data, and the index translate function.

16. The system of claim 15 , wherein the second user device is further configured to:

re-generate the private and public key pair based on the recreated secret key;

encrypt an element using the private key from the re-generated private and public key pair; and

provide the encrypted element to the computing platform, and

wherein the system further comprises the computing platform, wherein the computing platform is configured to:

authenticate the user based on decrypting the encrypted element using the public key; and

provide an indication indicating the authentication of the user to the second user device.

17. The system of claim 5 , wherein generating the one or more cryptographic keys comprises generating an encryption key based on the index translate point array, and wherein providing the ancillary information comprises:

generating encrypted sensitive data associated with the user based on the encryption key; and

providing the encrypted sensitive data and the enrollment data to the computing platform, and

wherein the computing platform is configured to store the encrypted sensitive data and the enrollment data.

18. The system of claim 17 , wherein the first user device is further configured to:

subsequent to providing the encrypted sensitive data and the enrollment data to the computing platform, delete the secret key and the encryption key;

receive, from the computing platform, the encrypted sensitive data and the enrollment data;

obtain new biometric data associated with the user; and

recreate the secret key based on the received enrollment data, the new biometric data, and the index translate function.

19. The system of claim 18 , wherein the first user device is further configured to:

re-generate the encryption key based on the recreated secret key;

decrypt the encrypted sensitive data using the re-generated encryption key; and

utilize the decrypted sensitive data for one or more tasks.

20. A non-transitory computer-readable medium having processor-executable instructions stored thereon, wherein the processor-executable instructions, when executed, facilitate:

obtaining biometric registration data associated with a user;

generating a secret key for the biometric registration data, wherein the secret key indicates an index translate point array;

determining enrollment data for the user based on an index translate function, the biometric registration data, and the secret key, wherein the index translate function modifies entries of the biometric registration data based on the index translate point array; and

generating one or more cryptographic keys for the user based on the index translate point array.

Assignments (1)

Continuity (1)

References Cited (41)