IP Library Granted Patent US 11,296,888
Granted Patent B2
US 11,296,888 · App. 16/980,293 · Granted Apr 5, 2022

Distributed biometric comparison framework

Inventors: Sunpreet Singh Arora (San Jose, CA); Lacey Best-Rowden (San Mateo, CA); Kim Wagner (Sunnyvale, CA)
Assignee: Visa International Service Association
H04L9/3231H04L9/085H04L9/321
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,296,888
App. No.
16/980,293
Granted
Apr 5, 2022
Kind
B2
Abstract

A method is disclosed. An authentication node may receive a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes that compare a plurality of encrypted second biometric template parts derived from a second biometric template to a plurality of encrypted first biometric template parts derived from a first biometric template. The authentication node may decrypt the plurality of encrypted match values resulting in a plurality of decrypted match values. The authentication node may then determine if a first biometric template matches the second biometric template using the plurality of decrypted match values. An enrollment node may be capable of enrolling a biometric template and storing encrypted biometric template parts at worker nodes.

Claims (42)

1. A method comprising:

receiving, by an authentication node, a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes that compare a plurality of encrypted second biometric template parts derived from a second biometric template to a plurality of encrypted first biometric template parts derived from a first biometric template;

decrypting, by the authentication node, the plurality of encrypted match values resulting in a plurality of decrypted match values; and

determining, by the authentication node, if the first biometric template matches the second biometric template using the plurality of decrypted match values, and wherein the method further comprises:

encrypting, by the authentication node, the second biometric template resulting in an encrypted second biometric template; and

transmitting, by the authentication node, the encrypted second biometric template to the plurality of worker nodes, wherein the plurality of worker nodes derive the encrypted second biometric template parts.

2. The method of claim 1 , wherein determining, by the authentication node, if the first biometric template matches the second biometric template using the plurality of decrypted match values, further comprises:

determining, by the authentication node, a weight associated with each decrypted match value of the plurality of decrypted match values;

determining, by the authentication node, an overall authentication threshold;

comparing, by the authentication node, a number of worker nodes that responded to a number of needed responses; and

determining, by the authentication node, if an overall decision based on the weights and the decrypted match values is greater than or equal to the overall authentication threshold.

3. The method of claim 1 further comprising:

transmitting, by the authentication node, if the first biometric template matches the second biometric template, an authorization request message to an authorizing entity computer; and

receiving, by the authentication node, an authorization response message from the authorizing entity computer.

4. The method of claim 1 , wherein the first biometric template is a binary mathematical file containing distinct characteristics of a biometric sample.

5. The method of claim 1 , wherein the first biometric template is derived from a face of a user.

6. The method of claim 1 , wherein the decrypted match values are within a fixed range.

7. The method of claim 6 , wherein the fixed range is from 1-100.

8. The method of claim 1 , wherein the decrypted match values comprise match or no match values.

9. An authentication node comprising:

a processor;

a memory device; and

a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising:

receiving a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes that compare a plurality of encrypted second biometric template parts derived from a second biometric template to a plurality of encrypted first biometric template parts derived from a first biometric template;

decrypting the plurality of encrypted match values resulting in a plurality of decrypted match values; and

determining if the first biometric template matches the second biometric template using the plurality of decrypted match values, and wherein the method further comprises:

encrypting the second biometric template resulting in an encrypted second biometric template; and

transmitting the encrypted second biometric template to the plurality of worker nodes, wherein the plurality of worker nodes derive the encrypted second biometric template parts.

10. The authentication node of claim 9 , wherein the step of determining, if the first biometric template matches the second biometric template using the plurality of decrypted match values, further comprises:

determining a weight associated with each decrypted match value of the plurality of decrypted match values;

determining an overall authentication threshold;

comparing a number of worker nodes that responded to a number of needed responses; and

determining if an overall decision based on the weights and the decrypted match values is greater than or equal to the overall authentication threshold.

11. The authentication node of claim 9 , wherein the method further comprises:

transmitting if the first biometric template matches the second biometric template, an authorization request message to an authorizing entity computer; and

receiving an authorization response message from the authorizing entity computer.

12. A method comprising:

storing, by a worker node, an encrypted first biometric template part;

comparing, by the worker node, the encrypted first biometric template part and an encrypted second biometric template part resulting in an encrypted match value; and

transmitting, by the worker node, the encrypted match value to an authentication node, and wherein the method further comprises:

receiving, by the worker node, an encrypted second biometric template, wherein the authentication node encrypts a second biometric template resulting in the encrypted second biometric template; and

deriving, by the worker node, from the encrypted second biometric template, the encrypted second biometric template part.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 16, 2020
From: ARORA, SUNPREET SINGH; BEST-ROWDEN, LACEY; WAGNER, KIM
To: VISA INTERNATIONAL SERVICE ASSOCIATION
Reel/Frame 053787/0036 →
Continuity (1)
Related Publication 20210014063A1 · Jan 14, 2021