Cluster-based security for network devices

A method comprising:

• obtaining, by a first kiosk, a first biometric reading of a user and a user input value during an access session;
• sending, by the first kiosk, without accessing the Internet, a first message to a second kiosk via a local area network, wherein the first message comprises biometric data corresponding to the first biometric reading;
• retrieving, by the first kiosk, without accessing the Internet, a second message from the second kiosk based on the sending of the first message, wherein the second message comprises encrypted authentication information associated with a local user record, wherein the local user record (i) was previously created or updated by the second kiosk based on a prior biometric reading obtained via the second kiosk during a registration session and (ii) retrievable by the second kiosk using biometric data corresponding to the prior biometric reading;
• generating a decryption key based on the user input value;
• decrypting the encrypted authentication information associated with the local user record based on the decryption key generated from the user input value to determine authentication information associated with the user;
• and
• retrieving a remote user record value from a remote server based on the authentication information.

A non-transitory, computer-readable media storing instructions that, when executed by one or more processors, effectuate operations comprising:

• obtaining, via a first kiosk, a user input value during a registration session;
• generating a first encryption key based on the user input value;
• encrypting first authentication information to generate first encrypted information based on the first encryption key generated from the user input value, wherein the first authentication information is associated with a user record stored in a remote server;
• obtaining, via the first kiosk, a first biometric reading from a user during the registration session;
• updating a local user record at the first kiosk based on the first biometric reading, wherein the local user record is retrievable based on the first biometric reading;
• storing the first encrypted information at the first kiosk in association with the local user record;
• obtaining a second biometric reading and the user input value during a second session;
• retrieving, without accessing the Internet, the local user record based on the second biometric reading;
• generating a decryption key based on the user input value;
• decrypting the first encrypted information based on the decryption key generated from the user input value;
• obtaining a second user input value;
• generating a second encryption key based on the second user input value;
• encrypting second authentication information to determine second encrypted information based on the second encryption key;
• and
• storing the second encrypted information at the first kiosk in association with the local user record.