Granted Patent B2

US 12,567,945 · App. 18/180,891 · Granted Mar 3, 2026

Inventors: Mohamed Zouhaier Ramadhane (Azcapotzalco, MX); Ricardo Ramos (Lima, PE); Syed Ali (Irvine, CA); Mauro Marzorati (Lutz, FL); Fernando R Zuliani (Newport Beach, CA)

Assignee: International Business Machines Corporation

H04L9/06G06K19/06018H04L9/0866H04L9/3268

Abstract

Claims (41)

1 . A processor-implemented method, the method comprising:

capturing user credential information on a credential medium, through a quick reference (QR) code, and biometrics from a user by one or more information capture devices, wherein the credential information comprises encrypted, hashed biometric information specific to the user, and wherein the one or more information capture devices are disconnected from a wide area network (WAN;

identifying a hash stored on the credential medium based on the captured credential information, wherein the hash is a private key in public-private encryption, and wherein the hash comprises a time-variable seed that produces different hashes at different times for a same input;

determining whether the identified hash is signed by an organization based on a read and/or decryption of the identified hash using a public certificate returns an expected result;

calculating, locally, a hash of the biometric information using a preconfigured hashing algorithm;

in response to the identified hash matching the calculated hash, authenticating the user;

determining one or more access restrictions within the captured credential information; and

in response to the user being permitted to a location based on the one or more determined access restrictions, granting the user access to the location.

2 . The method of claim 1 , further comprising:

in response to the identified hash not matching the calculated hash:

denying an authentication of the user; and

notifying the user of the denied authentication.

3 . The method of claim 1 , wherein the one or more information capture devices are selected from a group consisting of a QR code scanner, a barcode scanner, a NFC reader, an RFID scanner, an image capture device, an optical sensor, a capacitive scanner, an ultrasonic sensor, and a thermal line sensor.

4 . A computer system, the computer system comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system performs a method comprising:

capturing user credential information on a credential medium, through a quick reference (QR) code, and biometrics from a user by one or more information capture devices, wherein the credential information comprises encrypted, hashed biometric information specific to the user, and wherein the one or more information capture devices are disconnected from a wide area network (WAN);

identifying a hash stored on the credential medium based on the captured credential information, wherein the hash is a private key in public-private encryption, and wherein the hash comprises a time-variable seed that produces different hashes at different times for a same input;

determining whether the identified hash is signed by an organization based on a read and/or decryption of the identified hash using a public certificate returns an expected result;

calculating, locally, a hash of the biometric information using a preconfigured hashing algorithm;

in response to the identified hash matching the calculated hash, authenticating the user;

determining one or more access restrictions within the captured credential information; and

in response to the user being permitted to a location based on the one or more determined access restrictions, granting the user access to the location.

5 . The computer system of claim 4 , wherein the method further comprises:

in response to the identified hash not matching the calculated hash:

denying an authentication of the user; and

notifying the user of the denied authentication.

6 . The computer system of claim 4 , wherein the one or more information capture devices are selected from a group consisting of a QR code scanner, a barcode scanner, a NFC reader, an RFID scanner, an image capture device, an optical sensor, a capacitive scanner, an ultrasonic sensor, and a thermal line sensor.

7 . A computer program product, the computer program product comprising:

one or more computer-readable tangible storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor performing a method, the method comprising:

capturing user credential information on a credential medium, through a quick reference (QR) code, and biometrics from a user by one or more information capture devices, wherein the credential information comprises encrypted, hashed biometric information specific to the user, and wherein the one or more information capture devices are disconnected from a wide area network (WAN);

identifying a hash stored on the credential medium based on the captured credential information, wherein the hash is a private key in public-private encryption, and wherein the hash comprises a time-variable seed that produces different hashes at different times for a same input;

determining whether the identified hash is signed by an organization based on a read and/or decryption of the identified hash using a public certificate returns an expected result;

calculating, locally, a hash of the biometric information using a preconfigured hashing algorithm;

in response to the identified hash matching the calculated hash, authenticating the user;

determining one or more access restrictions within the captured credential information; and

in response to the user being permitted to a location based on the one or more determined access restrictions, granting the user access to the location.

8 . The computer program product of claim 7 , wherein the method further comprises:

in response to the identified hash not matching the calculated hash:

denying an authentication of the user; and

notifying the user of the denied authentication.

9 . The computer program product of claim 7 , wherein the one or more information capture devices are selected from a group consisting of a QR code scanner, a barcode scanner, a NFC reader, an RFID scanner, an image capture device, an optical sensor, a capacitive scanner, an ultrasonic sensor, and a thermal line sensor.

Assignments (1)

Continuity (1)

References Cited (22)