Method and system for authenticating biometric data

1. A method for authenticating biometric data obtained from a fingerprint of a user, comprising:

determining a set of regions of the fingerprint, such that each region includes multiple minutiae of the fingerprint;

determining, for each region, a descriptor representing a structure of the fingerprint in the region to produce a first set of descriptors;

comparing each descriptor in the first set of descriptors with each descriptor in a second set of descriptors to determine a number of matching descriptors, wherein the second set of descriptors is determined during an enrolment of the biometric data of the user; and

comparing the number of matching descriptors with a threshold for authenticating the biometric data, wherein steps of the method are performed by a processor.

2. The method of claim 1 , wherein determining the set of regions comprises:

determining a shape and dimensions of the region;

arranging the region around each minutia in the fingerprint;

selecting the region in the set of regions, if the minutia of the region neighboring at least n minutiae within the region, wherein n is a predetermined number greater than one.

3. The method of claim 2 , further comprising:

counting a number of regions in the set; and

changing at least one of the shape of the region, the dimensions of the region or the predetermined number; and

repeating the determining the set of regions.

4. The method of claim 1 , wherein the second set of descriptors is encrypted with a public key of a homomorphic cryptosystem, further comprising:

encrypting the first set of descriptors with the public key, such that the comparing of each descriptor is performed in an encrypted domain using homomorphic properties.

5. The method of claim 4 , further comprising:

generating an encrypted result corresponding to the number of matching descriptors; and

decrypting the encrypted result at an authentication server to determine an authentication decision.

6. The method of claim 1 , wherein the descriptor of the region includes minutiae-based features representing at least one or combination of relative distances of minutiae within the region, relative distances of orientations of the minutiae within the region, and relative distances of radial placements of the minutiae within the region.

7. The method of claim 1 , wherein the descriptor of the region includes a combination of minutiae-based features, texture-based features and orientation-based features.

8. The method of claim 1 , wherein the comparing comprises:

determining, for a descriptor in the first set, a nearest descriptor from the second set; and

determining a distance between the descriptor and the nearest descriptor; and

comparing the distance with a distance threshold to determine the matching descriptors.

9. A system for authenticating biometric data obtained from a fingerprint of a user, comprising a processor for:

determining a set of regions of the fingerprint such that :each region includes multiple minutiae of the fingerprint;

determining, for each region, a descriptor representing a structure of the fingerprint in the region to produce a first set of descriptors;

comparing each descriptor in the first set of descriptors with each descriptor in a second set of descriptors to determine a number of matching descriptors, wherein the second set of descriptors is determined during an. enrolment of the biometric data of the user; and

comparing the number of matching descriptors with a threshold for authenticating the biometric data.

10. A biometric authentication system, comprising;

an access control device for determining a first set of descriptors of a probe fingerprint presented for an authentication old user, wherein each descriptor in the first set represents a region of the probe fingerprint that s includes multiple minutiae;

a server for determining a second set of descriptors of a enrolment fingerprint presented for an enrolment of the user, wherein each descriptor in the second set represent a region of the enrolment fingerprint that includes multiple minutiae;

a processor for comparing each descriptor in the first set of descriptors with each descriptor in a second set of descriptors to determine a number of matching descriptors; and

an authentication server for comparing the number of matching descriptors with a threshold to make an authentication decision.

11. The authentication system of claim 10 , wherein the processor is running on the access control device or on the server.

12. The authentication system of claim 10 , wherein the access control device encrypts the first set of descriptors with a public key, wherein the server encrypts the second set of descriptors with the public key, and wherein the processor compares the descriptor in the encrypted domain.