Biometric data sub-sampling during decentralized biometric authentication
AssigneeRedrock Biometrics, Inc.
InventorsHua Yang, Leonid Kontsevich, Kevin Horowitz, Igor Lovyagin
Life of this patent
Estimating the term…
Abstract
A biometric authentication platform uses fault-tolerant distributed computing to determine if a supplied biometric sample and a template sample, which may be stored in a registry, are from the same person. Samples may be subdivided and assigned to Sub-Sample Processing Clusters for processing in parallel to determine sub-results. A consensus authentication result may then be determined by the processing cluster based upon the sub-results.
Claims20
A method for biometric authentication of user identity in connection with a transaction via comparison of an electronically-captured user live scan against a biometric template by a decentralized computing platform, implementing two independent distributed ledgers, each distributed ledger comprising a computing system that electronically communicatively links a plurality of computing devices as processing nodes configured to implement a distributed data storage network, the platform comprising:
- a user ledger configured to enable users to access and immutably store or delete biometric templates, wherein the user is one party to the transaction and a provider is another entity to the transaction, wherein each user template stored on the user ledger is not accessible by any provider or others;
- an authentication ledger configured to host a biometric matching processing algorithm used in authenticating users and to store authentication transaction records, wherein the authentication ledger comprises a processing cluster comprised of a plurality of sub-sample processing clusters (SSPCs), each SSPC comprising one or more processors, each processor comprised of a network-connected computer, and
- a gateway server computer electronically connected via a digital communications network to the user ledger and the authentication ledger for coordinating the use of each ledger in executing authentication requests by providers involving transactions with users;
- the method comprising:
- receiving, by the server, from a provider computing device, a request to authenticate the identity of a user involved in a transaction with a provider;
- receiving, by the server, from the provider computing device, a user live scan, wherein the live scan is received via the digital communications network by the server for authentication of user identity in connection with the transaction;
- receiving, by the server, from the user ledger, a biometric template of the user via the digital communications network;
- splitting, by the server, each of the user live scan and the biometric template into a plurality of sub-samples thereof, each user live scan sub-sample comprising a subset of the user live scan and each biometric template sub-sample comprising a subset of the biometric template that corresponds to an associated user live scan sub-sample;
- assigning, by the server, each user live scan sub-sample and its associated biometric template sub-sample for processing by at least an assigned one of said SSPCs;
- determining, by the assigned SSPC, a sub-sample sub-result for storage on the authentication ledger implemented using the SSPC, based on comparison of the user live scan sub-sample with its associated biometric template sub-sample by execution of the biometric matching algorithm by the assigned SSPC;
- determining, by the processing cluster, a biometric authentication result based at least in part upon the sub-sample sub-results determined by the SSPCs;
- transmitting, by the processing cluster, the authentication result to the server;
- transmitting, by the server, to the provider, the authentication result;
- and
- storing, by the server, the biometric authentication result, in the authentication ledger.
An apparatus for biometric authentication of an identity of a user participating in a transaction via comparison of an electronically-captured live scan of the user against a biometric template by a decentralized computing platform implementing two independent distributed ledgers, each distributed ledger comprising a computing system that electronically communicatively links a plurality of computing devices as processing nodes configured to implement a distributed data storage network, the platform comprising:
- a user ledger configured to enable users to access and immutably store or delete biometric templates, wherein the user is one party to the transaction and a provider is another entity to the transaction, wherein each user template stored on the user ledger is not accessible by any provider or others;
- an authentication ledger configured to host a biometric matching processing algorithm used in authenticating users and to store authentication transaction records, wherein the authentication ledger comprises a processing cluster comprised of a plurality of Sub-Sample Processing Clusters (SSPCs), each SSPC comprised of one or more processors, each processor comprised of a networked computing device communicating with other computers via a computer network for implementing the distributed authentication ledger;
- and
- a gateway server computer electronically connected via a digital communications network to the user ledger and the authentication ledger for coordinating the use of each ledger in executing authentication requests by providers involving transactions with users;
- wherein the gateway server comprises a transaction director comprised of a network-connected computing device, the transaction director transmitting an authentication task request comprising a template retrieved from the distributed user ledger and a live scan to a first network-connected computer within the processing cluster;
- wherein one or more of the processing cluster computers are configured to:
- split the live scan and biometric template into a plurality of sub-samples thereof;
- assign each sub-sample to at least one SSPC for biometric matching of the user live scan sub-sample with a corresponding template sub-sample to generate and store in the distributed authentication ledger a sub-result via execution of a biometric matching algorithm;
- and output a biometric authentication result for authenticating an identity of the user involved in the transaction based at least in part upon the sub-results.
Dependencies are inferred from the claim text.