# US 10,771,239 B2 · Biometric threat intelligence processing for blockchains > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,239 B2 - Document ID: US10771239B2 - Status: Granted - Kind: B2 - Application number: 15/955,966 - Filed: 2018-04-18 - Published: 2019-10-24 - Granted: 2020-09-08 - Earliest claimed: 2018-04-18 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Karthik Nandakumar; Nalini K. Ratha; Sharathchandra Pankanti - Web page: https://patentgrep.com/patent/US10771239B2 ## CPC - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/55: Detecting local intrusion or implementing counter-measures - H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/302: {gathering intelligence information for situation awareness or reconnaissance} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An example operation may include one or more of detecting a suspected biometric authentication incident, submitting a first blockchain transaction including a first report to a blockchain network, submitting a second blockchain transaction including a second report to the blockchain network, and taking an action, by one or more blockchain nodes, in response to determining one or more of the first and second reports are relevant to the one or more blockchain nodes. The first report includes public and private data corresponding to the suspected biometric authentication incident, and the second report includes one or more of a root cause and mitigation steps for the incident. ## Claims ### Claim 1 A method, comprising: detecting a suspected biometric authentication incident; submitting a first blockchain transaction comprising a first report to a blockchain network, the first report comprising public and private data corresponding to the suspected biometric authentication incident; submitting a second blockchain transaction comprising a second report to the blockchain network, the second report comprising one or more of a root cause and mitigation steps for the incident; and taking an action, by one or more blockchain nodes, in response to determining one or more of the first and second reports are relevant to the one or more blockchain nodes. ### Claim 2 (depends on 1) The method of claim 1, wherein each blockchain node comprises a distributed blockchain ledger, the distributed blockchain ledger comprising the first and second reports and one or more of actions taken reports, general threat alerts, and recommendations. ### Claim 3 (depends on 1) The method of claim 1, wherein prior to detecting the suspected biometric authentication incident, the method further comprising: creating the blockchain network comprising the one or more blockchain nodes, wherein the one or more blockchain nodes comprises one or more biometric vendors, organizations with deployed biometric systems, security intelligence organizations, and law enforcement or regulatory organizations. ### Claim 4 (depends on 3) The method of claim 3, wherein the private data comprises one or more of a name of an organization that detected the suspected biometric authentication incident and an identification of a biometric vendor, wherein only the organization that detected the suspected biometric authentication incident and the identified biometric vendor are able to read the private data, wherein the identified biometric vendor is associated with the suspected biometric authentication incident. ### Claim 5 (depends on 4) The method of claim 4, wherein an organization outside the blockchain network detects the suspected biometric authentication incident and in response notifies the biometric vendor of the incident and the biometric vendor submits the first report. ### Claim 6 (depends on 3) The method of claim 3, further comprising: calculating, by the one or more biometric vendors, a trust score based on the first report, the trust score reflecting a perceived plausibility of the incident; and distributing the trust score to the blockchain network. ### Claim 7 (depends on 3) The method of claim 3, wherein the public data comprises incident details available to all nodes of the blockchain network, wherein the action is taken to reduce or mitigate a chance of a successful future biometric authentication incident. ### Claim 8 A system, comprising: a blockchain network, comprising: a first blockchain node, configured to: detect a suspected biometric authentication incident; submit a first blockchain transaction comprising a first report to the blockchain network, the first report comprising public and private data that corresponds to the suspected biometric authentication incident; and take an action, in response to a determination of one or more of the first and a second report are relevant to the first blockchain node; and a second blockchain node, configured to: submit a second blockchain transaction comprising the second report to the blockchain network, the second report comprising one or more of a root cause and mitigation steps for the incident. ### Claim 9 (depends on 8) The system of claim 8, wherein each blockchain node comprises a distributed blockchain ledger, the distributed blockchain ledger comprising the first and second reports and one or more of actions taken reports, general threat alerts, and recommendations. ### Claim 10 (depends on 8) The system of claim 8, wherein the first and second blockchain nodes comprises one or more of biometric vendors, organizations with deployed biometric systems, security intelligence organizations, and law enforcement or regulatory organizations. ### Claim 11 (depends on 10) The system of claim 10, wherein the private data comprises one or more of a name of an organization that detected the suspected biometric authentication incident and an identification of a biometric vendor, wherein only the organization that detected the suspected biometric authentication incident and the identified biometric vendor are able to read the private data, wherein the identified biometric vendor is associated with the suspected biometric authentication incident. ### Claim 12 (depends on 11) The system of claim 11, wherein an organization outside the blockchain network detects the suspected biometric authentication incident and in response notifies the biometric vendor of the incident and the biometric vendor submits the first report. ### Claim 13 (depends on 10) The system of claim 10, wherein a blockchain node of the blockchain network calculates a trust score based on the first report, the trust score reflecting a perceived plausibility of the incident and distributes the trust score to the blockchain network. ### Claim 14 (depends on 10) The system of claim 10, wherein the public data comprises incident details available to all nodes of the blockchain network, wherein the action is taken to reduce or mitigate a chance of a successful future biometric authentication incident. ### Claim 15 A non-transitory computer readable medium comprising instructions, that when read by a processor, cause the processor to perform: detecting a suspected biometric authentication incident; submitting a first blockchain transaction comprising a first report to a blockchain network, the first report comprising public and private data corresponding to the suspected biometric authentication incident; submitting a second blockchain transaction comprising a second report to the blockchain network, the second report comprising one or more of a root cause and mitigation steps for the incident; and taking an action, by one or more blockchain nodes, in response to determining one or more of the first and second reports are relevant to the one or more blockchain nodes. ### Claim 16 (depends on 15) The non-transitory computer readable medium of claim 15, wherein prior to detecting the suspected biometric authentication incident, the processor further configured to perform: creating the blockchain network comprising the one or more blockchain nodes, wherein the one or more blockchain nodes comprises one or more biometric vendors, organizations with deployed biometric systems, security intelligence organizations, and law enforcement or regulatory organizations. ### Claim 17 (depends on 16) The non-transitory computer readable medium of claim 16, wherein the private data comprises one or more of a name of an organization that detected the suspected biometric authentication incident and an identification of a biometric vendor, wherein only the organization that detected the suspected biometric authentication incident and the identified biometric vendor are able to read the private data, wherein the identified biometric vendor is associated with the suspected biometric authentication incident. ### Claim 18 (depends on 17) The non-transitory computer readable medium of claim 17, wherein an organization outside the blockchain network detects the suspected biometric authentication incident and in response notifies the biometric vendor of the incident and the biometric vendor submits the first report. ### Claim 19 (depends on 16) The non-transitory computer readable medium of claim 16, the processor further configured to perform: calculating, by the one or more biometric vendors, a trust score based on the first report, the trust score reflecting a perceived plausibility of the incident; and distributing the trust score to the blockchain network. ### Claim 20 (depends on 16) The non-transitory computer readable medium of claim 16, wherein the public data comprises incident details available to all nodes of the blockchain network, wherein the action is taken to reduce or mitigate a chance of a successful future biometric authentication incident.