IP Library Granted Patent US 11,792,012
Granted Patent B2
US 11,792,012 · App. 17/683,846 · Granted Oct 17, 2023

Distributed biometric comparison framework

Inventors: Sunpreet Singh Arora (San Jose, CA); Lacey Best-Rowden (San Mateo, CA); Kim Wagner (Sunnyvale, CA)
Assignee: Visa International Service Association
H04L9/3231H04L9/085H04L9/321
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,792,012
App. No.
17/683,846
Granted
Oct 17, 2023
Kind
B2
Abstract

A method is disclosed. An authentication node may receive a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes that compare a plurality of encrypted second biometric template parts derived from a second biometric template to a plurality of encrypted first biometric template parts derived from a first biometric template. The authentication node may decrypt the plurality of encrypted match values resulting in a plurality of decrypted match values. The authentication node may then determine if a first biometric template matches the second biometric template using the plurality of decrypted match values. An enrollment node may be capable of enrolling a biometric template and storing encrypted biometric template parts at worker nodes.

Claims (55)

1. A method comprising:

receiving, by an authentication node, a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes as a result of comparing a plurality of second biometric template parts derived from a second biometric template to a plurality of first biometric template parts derived from a first biometric template ;

decrypting, by the authentication node, the plurality of encrypted match values resulting in a plurality of decrypted match values; and

determining, by the authentication node, if the first biometric template matches the second biometric template using the plurality of decrypted match values,

wherein determining, by the authentication node, if the first biometric template matches the second biometric template using the plurality of decrypted match values, further comprises:

determining, by the authentication node, a weight associated with each decrypted match value of the plurality of decrypted match values;

determining, by the authentication node, an overall authentication threshold;

comparing, by the authentication node, a number of worker nodes that responded to a number of needed responses; and

determining, by the authentication node, if an overall decision based on the weights and the decrypted match values is greater than or equal to the overall authentication threshold.

2. The method of claim 1 further comprising:

dividing, by the authentication node, the second biometric template resulting in the second biometric template parts;

encrypting, by the authentication node, the second biometric template parts resulting in encrypted second biometric template parts; and

transmitting, by the authentication node, the encrypted second biometric template parts to the plurality of worker nodes.

3. The method of claim 1 further comprising:

transmitting, by the authentication node, if the first biometric template matches the second biometric template, an authorization request message to an authorizing entity computer; and

receiving, by the authentication node, an authorization response message from the authorizing entity computer.

4. The method of claim 3 , wherein the authorization request message comprises a primary account number and an amount.

5. The method of claim 1 , wherein the first biometric template is derived from a face data, fingerprint data, or retina data.

6. The method of claim 1 , wherein biometric template parts of the first biometric template parts are of equal size.

7. An authentication node comprising:

a processor;

a memory device; and

a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising:

receiving a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes as a result of comparing a plurality of second biometric template parts derived from a second biometric template to a plurality of first biometric template parts derived from a first biometric template ;

decrypting the plurality of encrypted match values resulting in a plurality of decrypted match values; and

determining if the first biometric template matches the second biometric template using the plurality of decrypted match values,

wherein the step of determining, if the first biometric template matches the second biometric template using the plurality of decrypted match values, further comprises:

determining a weight associated with each decrypted match value of the plurality of decrypted match values;

determining an overall authentication threshold;

comparing a number of worker nodes that responded to a number of needed responses; and

determining if an overall decision based on the weights and the decrypted match values is greater than or equal to the overall authentication threshold.

8. The authentication node of claim 7 , wherein the method further comprises:

dividing the second biometric template resulting in the second biometric template parts;

encrypting the second biometric template parts resulting in encrypted second biometric template parts; and

transmitting the encrypted second biometric template parts to the plurality of worker nodes.

9. The authentication node of claim 7 , wherein the method further comprises:

transmitting if the first biometric template matches the second biometric template, an authorization request message to an authorizing entity computer; and

receiving an authorization response message from the authorizing entity computer.

10. The authentication node of claim 9 , wherein the authorization request message comprises a primary account number and an amount.

11. The authentication node of claim 7 , wherein the first biometric template is derived from a face data, fingerprint data, or retina data.

12. The authentication node of claim 7 , wherein biometric template parts of the first biometric template parts are of equal size.

13. A system comprising:

an authentication node comprising,

a processor,

a memory device, and

a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising,

receiving a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes as a result of comparing a plurality of second biometric template parts derived from a second biometric template to a plurality of first biometric template parts derived from a first biometric template ,

decrypting the plurality of encrypted match values resulting in a plurality of decrypted match values; and

determining if the first biometric template matches the second biometric template using the plurality of decrypted match values,

wherein the step of determining, if the first biometric template matches the second biometric template using the plurality of decrypted match values, further comprises:

determining a weight associated with each decrypted match value of the plurality of decrypted match values;

determining an overall authentication threshold;

comparing a number of worker nodes that responded to a number of needed responses; and

determining if an overall decision based on the weights and the decrypted match values is greater than or equal to the overall authentication threshold; and

the plurality of worker nodes.

Continuity (2)
Continuation 16980293
Related Publication 20220191032A1 · Jun 16, 2022