Biometric data sub-sampling during decentralized biometric authentication
A biometric authentication platform uses fault-tolerant distributed computing to determine if a supplied biometric sample and a template sample, which may be stored in a registry, are from the same person. Samples may be subdivided and assigned to Sub-Sample Processing Clusters for processing in parallel to determine sub-results. A consensus authentication result may then be determined by the processing cluster based upon the sub-results.
1 . A method for biometric authentication of user identity in connection with a transaction via comparison of an electronically-captured user live scan against a biometric template by a decentralized computing platform, implementing two independent distributed ledgers, each distributed ledger comprising a computing system that electronically communicatively links a plurality of computing devices as processing nodes configured to implement a distributed data storage network, the platform comprising:
a user ledger configured to enable users to access and immutably store or delete biometric templates, wherein the user is one party to the transaction and a provider is another entity to the transaction, wherein each user template stored on the user ledger is not accessible by any provider or others;
an authentication ledger configured to host a biometric matching processing algorithm used in authenticating users and to store authentication transaction records, wherein the authentication ledger comprises a processing cluster comprised of a plurality of sub-sample processing clusters (SSPCs), each SSPC comprising one or more processors, each processor comprised of a network-connected computer, and
a gateway server computer electronically connected via a digital communications network to the user ledger and the authentication ledger for coordinating the use of each ledger in executing authentication requests by providers involving transactions with users; the method comprising:
receiving, by the server, from a provider computing device, a request to authenticate the identity of a user involved in a transaction with a provider;
receiving, by the server, from the provider computing device, a user live scan, wherein the live scan is received via the digital communications network by the server for authentication of user identity in connection with the transaction;
receiving, by the server, from the user ledger, a biometric template of the user via the digital communications network;
splitting, by the server, each of the user live scan and the biometric template into a plurality of sub-samples thereof, each user live scan sub-sample comprising a subset of the user live scan and each biometric template sub-sample comprising a subset of the biometric template that corresponds to an associated user live scan sub-sample;
assigning, by the server, each user live scan sub-sample and its associated biometric template sub-sample for processing by at least an assigned one of said SSPCs;
determining, by the assigned SSPC, a sub-sample sub-result for storage on the authentication ledger implemented using the SSPC, based on comparison of the user live scan sub-sample with its associated biometric template sub-sample by execution of the biometric matching algorithm by the assigned SSPC;
determining, by the processing cluster, a biometric authentication result based at least in part upon the sub-sample sub-results determined by the SSPCs;
transmitting, by the processing cluster, the authentication result to the server;
transmitting, by the server, to the provider, the authentication result; and
storing, by the server, the biometric authentication result, in the authentication ledger.
2 . The method of claim 1 , wherein the step of receiving a user live scan comprises receiving a user live scan originating from a registered computing device associated with a user and transmitted via the digital communications network.
3 . The method of claim 2 , wherein the step of receiving a user live scan originating from a registered computing device associated with a user comprises:
capturing a live scan by the registered device;
transmitting the live scan to a transaction director computer via the digital communications network; and
relaying the live scan from the transaction director to the processing cluster via transmission over the digital communications network.
4 . The method of claim 1 , wherein the step of determining a biometric authentication result comprises calculating a weighted average of the sub-results.
5 . The method of claim 1 , wherein the step of determining a biometric authentication result comprises determining a maximum or minimum value of the sub-results.
6 . The method of claim 1 , wherein a copy of the distributed authentication ledger is maintained by each of the SSPCs.
7 . The method of claim 1 , in which the step of determining, by the assigned SSPC, a sub-sample sub-result based on comparison of the user live scan sub-sample with its associated biometric template sub-sample comprises:
determining a local sub-result by each of said processors within an assigned SSPC; and
applying, by the processors within the assigned SSPC, consensus rules to determine a sub-result based on the local sub-results.
8 . The method of claim 1 , wherein the step of assigning each user live scan sub-sample and its associated biometric template sub-sample for processing by at least an assigned one of said SSPCs comprises assigning each user live scan sub-sample and its associate biometric template sub-sample to a SSPC based at least in part upon the computational performance of processors within each SSPC.
9 . The method of claim 8 , wherein the step of assigning each user live scan sub-sample and its associated biometric template sub-sample for processing by at least an assigned one of said SSPCs comprises assigning a plurality of sub-samples to each of one or more of said SSPCs based at least in part upon the computational performance of processors within said SSPCs.
10 . The method of claim 1 , wherein:
the user live scan sub-samples have varying length; and
the step of assigning, by the server, each user live scan sub-sample and its associated biometric template sub-sample for processing by at least an assigned one of said SSPCs comprises assigning each user live scan sub-sample and its associate biometric template sub-sample to a SSPC based at least in part upon computational performance of processors within each SSPC.
11 . The method of claim 1 , wherein the server comprises a computer within the processing cluster.
12 . An apparatus for biometric authentication of an identity of a user participating in a transaction via comparison of an electronically-captured live scan of the user against a biometric template by a decentralized computing platform implementing two independent distributed ledgers, each distributed ledger comprising a computing system that electronically communicatively links a plurality of computing devices as processing nodes configured to implement a distributed data storage network, the platform comprising:
a user ledger configured to enable users to access and immutably store or delete biometric templates, wherein the user is one party to the transaction and a provider is another entity to the transaction, wherein each user template stored on the user ledger is not accessible by any provider or others;
an authentication ledger configured to host a biometric matching processing algorithm used in authenticating users and to store authentication transaction records, wherein the authentication ledger comprises a processing cluster comprised of a plurality of Sub-Sample Processing Clusters (SSPCs), each SSPC comprised of one or more processors, each processor comprised of a networked computing device communicating with other computers via a computer network for implementing the distributed authentication ledger; and
a gateway server computer electronically connected via a digital communications network to the user ledger and the authentication ledger for coordinating the use of each ledger in executing authentication requests by providers involving transactions with users;
wherein the gateway server comprises a transaction director comprised of a network-connected computing device, the transaction director transmitting an authentication task request comprising a template retrieved from the distributed user ledger and a live scan to a first network-connected computer within the processing cluster;
wherein one or more of the processing cluster computers are configured to: split the live scan and biometric template into a plurality of sub-samples thereof; assign each sub-sample to at least one SSPC for biometric matching of the user live scan sub-sample with a corresponding template sub-sample to generate and store in the distributed authentication ledger a sub-result via execution of a biometric matching algorithm; and output a biometric authentication result for authenticating an identity of the user involved in the transaction based at least in part upon the sub-results.
13 . The apparatus of claim 12 , further comprising a registered user computer device comprising digital memory storing the live scan for transmission to the transaction director via a computer network.
14 . The apparatus of claim 13 , wherein the registered user computer device digital memory is further configured to store the biometric template for transmission to the transaction director via a computer network.
15 . The apparatus of claim 12 , wherein the decentralized user ledger is implemented by a plurality of network-connected computers being electronically communicatively linked as nodes on a distributed ledger, from which the transaction director may retrieve the biometric template via a computer network.
16 . The apparatus of claim 12 , wherein the biometric authentication result is based on a weighted average of the sub-results.
17 . The apparatus of claim 12 , wherein the biometric authentication result is based on a maximum or minimum value of the sub-results.
18 . The apparatus of claim 12 , where each sub-result is determined based on application of consensus rules by the plurality of processors within an associated SSPC.
19 . The apparatus of claim 12 , wherein the processing cluster is further configured to assign each sub-sample to one or more SSPC for biometric matching based at least in part upon computational performance capabilities of processors within each SSPC.
20 . The apparatus of claim 12 , in which the sub-samples vary in length; and are assigned to an SSPC based at least in part upon computational performance of processors within each SSPC.