Systems and methods for identity authentication using tokenized biometric identification
Methods and systems for authenticating identity credentials are provided. An identity credential is proofed and issued with biometric and enrollment data, as well as a graphical seal. The identity credential is later presented for authentication, and the seal is used to access the biometric and enrollment data. Live biometric and identification data are compared to the identity credential, and the identity credential may be authenticated.
1. An identity credential authentication (ICA) computing device comprising a processor communicatively coupled to a memory, the ICA computing device configured to:
receive enrollment data associated with an identity credential to be issued and an initial biometric sample associated with a credential owner of the identity credential;
encrypt the received enrollment data and initial biometric sample;
generate a graphical seal encoding the encrypted data;
store the encrypted data in a storage location including a container file, wherein the storage location is accessible using the graphical seal;
encrypt a plurality of matching algorithms for matching a live biometric sample and presented identification data to the initial biometric sample and enrollment data;
store the encrypted matching algorithms in the container file;
store a plurality of executable smart contracts for executing the plurality of matching algorithms in the container file;
generate a non-fungible token (NFT) of the container file;
initiate application of the graphical seal to the identity credential upon issuance of the identity credential, wherein the graphical seal is a digital seal for sealing a digital version of the identity credential; and
generate the digital seal including an encoded link to the container file.
2. The ICA computing device of claim 1 , further configured to generate the NFT of the container file with an ownership record indicating the credential owner is an owner of the identity credential upon issuance of the identity credential.
3. The ICA computing device of claim 1 , further configured to generate the graphical seal including an expiration date of the graphical seal.
4. The ICA computing device of claim 1 , further configured to initiate application of the graphical seal to a physical version of the identity credential as a physical graphical seal and to the digital version of the identity credential as a part of a digital credential file forming the digital version of the identity credential.
5. The ICA computing device of claim 4 , wherein the graphical seal has a same appearance on the physical version of the identity credential and the digital version of the identity credential.
6. The ICA computing device of claim 1 , further configured to initiate application of the graphical seal to the digital version of the identity credential by modifying an existing digital credential file forming the digital version of the identity credential.
7. The ICA computing device of claim 1 , further configured to initiate application of the graphical seal to the digital version of the identity credential that corresponds to an existing physical version of the identity credential, by incorporating the graphical seal into a digital credential file forming the digital version of the identity credential.
8. An identity credential authentication (ICA) computing device comprising a processor communicatively coupled to a memory, the ICA computing device configured to:
receive an image of an identity credential presented for authentication, the image of the identity credential depicting a graphical seal applied to the identity credential;
receive a live biometric sample from a credential owner of the identity credential;
decode a link to a container file stored on a blockchain, the link encoded in the graphical seal;
decode enrollment data and an initial biometric sample encoded in the graphical seal by:
accessing the container file; and
decrypting an NFT associated with the container file to access the enrollment data and initial biometric seal from the container file;
extract live identification data from the image of the identity credential;
execute a first smart contract stored in the container file to execute a first matching algorithm that compares the live identification data to the enrollment data;
execute a second smart contract stored in the container file to execute a second matching algorithm that compares the live biometric sample to the initial biometric sample; and
authenticate the identity credential based on an outcome of the comparisons.
9. The ICA computing device of claim 8 , further configured to:
receive a matching score output from the second matching algorithm; and
update the container file with the matching score.
10. The ICA computing device of claim 9 , further configured to compare the matching score to an authentication history for the identity credential stored in the container file, the authentication history including a time-series of matching scores from a corresponding series of previous authentication transactions of the identity credential.
11. The ICA computing device of claim 10 , further configured to:
identify a gradually lowering trend by comparing the matching score to the authentication history; and
generate an alert to the credential owner, the alert recommending renewal of the at least one of the identity credential and the initial biometric sample.
12. The ICA computing device of claim 10 , further configured to:
identify a difference between the matching score and a most recent matching score in the authentication history;
determine the difference exceeds a threshold; and
generate a fraud alert.
13. The ICA computing device of claim 8 , further configured to determine a level of access to provide to a requesting party upon authentication of the identity credential.
14. The ICA computing device of claim 5 , wherein the identity credential is one of: (i) a physical identity credential being physically presented for authentication, or (ii) a digital identity credential being displayed on a user computing device of the credential owner.