# US 12,182,301 B2 · System and method for processing a data subject rights request using biometric data matching > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,301 B2 - Document ID: US12182301B2 - Status: Granted - Kind: B2 - Application number: 17/518,142 - Filed: 2021-11-03 - Published: 2023-05-04 - Granted: 2024-12-31 - Earliest claimed: 2021-11-03 - Assignees: Robert Bosch GmbH - Applicants: Robert Bosch GmbH - Inventors: Christian Zimmermann; Sven Trieflinger; Fatma Betül Durak; Stefan Gehrer - Web page: https://patentgrep.com/patent/US12182301B2 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 16/2379: {Updates performed during online database operations; commit processing} - G06F 16/245: Query processing - G06F 21/335: {for accessing specific resources, e.g. using Kerberos tickets} - G06N 3/08: Learning methods - G06N 5/022: Knowledge engineering; Knowledge acquisition - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06N 20/00: Machine learning - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method are disclosed for processing data subject rights requests. The system and method advantageously enable data controllers to train machine learning models on unaltered data having PII, while maintaining the privacy of the unaltered data and enabling compliance with data subject rights requests with respect to the data. The system and method incorporate a biometric database that stores biometric data extracted from the unaltered data having PII. In order to identify data relating to a data subject rights request, biometric data is received from the data subject and is matched against the biometric data stored in the biometric database. Based on the matched biometric data, the original unaltered source data having PII can be identified for the purpose of exercising one or more data subject rights, such as erasure, access, and objection to processing. ## Claims ### Claim 1 A method for processing a data rights request, the method comprising: storing, in a first database, a plurality of data having personally identifiable information of a plurality of persons including a plurality of biometric data of the plurality of persons; extracting, with the processing system, the plurality of biometric data of the plurality of persons from the plurality of data in the first database, the plurality of biometric data including first biometric data of a first person; storing, in a second database, a copy of the plurality of biometric data that has been extracted from the plurality of data in the first database; receiving, with a processing system, a data rights request from the first person in the plurality of persons, the data rights request indicating a requested action to be performed on first data in the plurality of data having personally identifiable information of the first person; receiving, with the processing system, second biometric data of the first person; and searching, with the processing system, after receiving the data rights request and the second biometric data, the first database to identify the first data having personally identifiable information of the first person by matching the second biometric data of the first person with the first data in the first database, the searching including (i) matching the second biometric data of the first person to the first biometric data of the first person in the plurality of biometric data in the second database, and (ii) identifying the first data in the plurality of data of the first database from which the matched first biometric data was extracted. ### Claim 2 (depends on 1) The method according to claim 1 further comprising: performing, with the processing system, the requested action on the first data in the first database. ### Claim 3 (depends on 2) The method according to claim 2, the performing the requested action further comprising: deleting the first data from the first database. ### Claim 4 (depends on 2) The method according to claim 2, the performing the requested action further comprising: providing access to the first data to the first person. ### Claim 5 (depends on 2) The method according to claim 2, the performing the requested action further comprising: flagging the first data in the first database such that further processing of the first data is prevented. ### Claim 6 (depends on 5) The method according to claim 5 further comprising: training, with the processing system, a machine learning model using the plurality of data in the first database, excluding any data in the first database that has been flagged. ### Claim 7 (depends on 5) The method according to claim 5 further comprising: receiving, with the processing system, additional data having personally identifiable information; and flagging, with the processing system, the additional data in response to the additional data having personally identifiable information of the first person, such that further processing of the additional data is prevented. ### Claim 8 (depends on 1) The method according to claim 1, wherein the second biometric data of the first person is a second image of a face of the first person and the first biometric data of the first person in the first data in the first database includes a first image or a first video of the face of the first person. ### Claim 9 (depends on 1) The method according to claim 1 further comprising: receiving, with the processing system, a certificate that verifies an identity of the first person, wherein the searching the first database to identify the first data is performed in response to receiving the certificate. ### Claim 10 (depends on 1) The method according to claim 1 further comprising: receiving, with the processing system, the plurality of data having personally identifiable information from a plurality of remote computing devices. ### Claim 11 (depends on 10) The method according to claim 10, the receiving the plurality of data further comprising: receiving the plurality of data from vehicle computers of a plurality of vehicles, wherein the plurality of data include video data captured by the plurality of vehicles. ### Claim 12 (depends on 10) The method according to claim 10 further comprising: separating, with the processing system, the plurality of data into (i) a first subset of the plurality of data having personally identifiable information and (ii) a second subset of the plurality of data without any personally identifiable information. ### Claim 13 (depends on 1) The method according to claim 1, the receiving the second biometric data of the first person further comprising: receiving encrypted second biometric data of the first person; transferring the encrypted second biometric data of the first person to at least one trusted execution environment; and unencrypting the encrypted second biometric data of the first person using the at least one trusted execution environment. ### Claim 14 (depends on 1) The method according to claim 1, the extracting further comprising: receiving, in at least one trusted execution environment, respective encrypted data of the plurality of data in the first database; unencrypting the respective encrypted data using the at least one trusted execution environment; and extracting biometric data of the plurality of biometric data from the unencrypted data using the at least one trusted execution environment. ### Claim 15 (depends on 1) The method according to claim 1, wherein the data rights request includes at least one parameter that delimits a scope of the first data, the searching further comprising: searching the database to identify the first data based on the at least one parameter. ### Claim 16 (depends on 15) The method according to claim 15, wherein the at least one parameter is at least one of a time and a place at which the first data was originally captured. ### Claim 17 (depends on 1) The method according to claim 1, the searching further comprising: searching the first database using at least one trusted execution environment. ### Claim 18 A system for processing a data rights request, the system comprising: a first database configured to store a plurality of data having personally identifiable information of a plurality of persons including a plurality of biometric data of the plurality of persons; a second database configured to store a copy of the plurality of biometric data that has been extracted from the plurality of data in the first database, the plurality of biometric data including first biometric data of a first person; and a processing system operably connected with the first database, the processing system being configured to: receive a data rights request from the first person in the plurality of persons, the data rights request indicating a requested action to be performed on first data in the plurality of data having personally identifiable information of the first person; receive second biometric data of the first person; and search, after receiving the data rights request and the second biometric data, the first database to identify the first data having personally identifiable information of the first person by matching the second biometric data of the first person with the first data in the first database, the searching including (i) matching the second biometric data of the first person to the first biometric data of the first person in the plurality of biometric data in the second database, and (ii) identifying the first data in the plurality of data of the first database from which the matched first biometric data was extracted.