Back to results
US 12,712,875 B2Granted
Systems, methods, and non-transitory computer-readable media for secure biometrically-enhanced data exchanges and data storage
AssigneeMastercard International Incorporated
InventorsPrzemek Praszczalek, Raman Narayanswamy
Life of this patent
Estimating the term…
Abstract
A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying or verifying an individual over time without retaining sensitive biometric data (e.g., biometric images or biometric templates) for the purpose of various data-related interactions. The data interactions including but not limited to: accessing, sharing, exchanging, controlling, or processing of personal data or any data related to an individual, entity, or thing.
Claims14
A system for securely identifying and verifying an individual in a biometrically-enhanced data exchange network, the system comprising:
- a plurality of local partner devices including a first local partner device, the first local partner device including a first electronic processor, a first communication interface, and a first memory, the first electronic processor is configured to
- receive biometrics and registration information of an individual,
- generate, with a tokenization algorithm, a first biometric token based on the biometrics that are received, wherein the first biometric token indicates a relationship between an entity and the individual, and
- output the registration information and the first biometric token that is generated;
- and
- a local identity server including a second electronic processor, a second communication interface, and a second memory, the second electronic processor is configured to
- receive the registration information and the first biometric token from the first local partner device,
- create a data account associated with the individual in the second memory, the data account including the registration information and the first biometric token that are received,
- synchronize the first biometric token with one or more local partner devices of the plurality of local partner devices, the one or more local partner devices including a second local partner device, and the one or more local partner devices are separate and distinct from the first local partner device,
- wherein the second local partner device of the plurality of local partner devices includes a third electronic processor, a third communication interface, biometric capture circuitry, and a third memory, the third electronic processor is configured to
- control the third communication interface to receive the first biometric token via the synchronization with the local identity server,
- store the first biometric token in a local biometric storage of the third memory,
- receive a request,
- responsive to receiving the request, control the biometric capture circuitry to capture second biometrics of the individual,
- responsive to capturing the second biometrics, generate, with the tokenization algorithm, a second biometric token based on the second biometrics that are captured,
- responsive to generating the second biometric token, match the second biometric token to tokens stored in the local biometric storage,
- responsive to matching the second biometric token to the first biometric token, output an authentication of the relationship between the entity and the individual to a user of the second local partner device, and
- responsive to generating the second biometric token, synchronize the second biometric token with a second one or more local partner devices of the plurality of local partner devices, the second one or more local partner devices including the first local partner device, and the second one or more local partner devices are separate and distinct from the second local partner device,
- wherein the biometrically-enhanced data exchange network is established from the synchronization of biometric tokens between the local identity server and the plurality of local partner devices, the biometric tokens including the first biometric token and the second biometric token.
16 more elements
A method for securely identifying and verifying an individual in a biometrically-enhanced data exchange network, the method comprising:
- receiving, with a first local partner device of a plurality of local partner devices, biometrics and registration information of an individual;
- generating, with a tokenization algorithm of the first local partner device, a first biometric token based on the biometrics that are received, wherein the first biometric token indicates a relationship between an entity and the individual;
- outputting, with the first local partner device, the registration information and the first biometric token that is generated;
- receiving, with a local identity server, the registration information and the first biometric token from the first local partner device;
- creating, with the local identity server, a data account associated with the individual in a first memory, the data account including the registration information and the first biometric token that are received;
- synchronizing, with the local identity server, the first biometric token with one or more local partner devices of the plurality of local partner devices, the one or more local partner devices including a second local partner device, and the one or more local partner devices are separate and distinct from the first local partner device;
- receiving, with a second local partner device of the plurality of local partner devices, the first biometric token via the synchronization with the local identity server;
- storing, with the second local partner device, the first biometric token in a local biometric storage of a second memory,
- receiving, with the second local partner device, a request;
- responsive to receiving the request, capturing, with a biometric capture circuitry of the second local partner device, second biometrics of the individual,
- responsive to capturing the second biometrics, generating, with the second local partner device and the tokenization algorithm, a second biometric token from the second biometrics of the individual that is captured;
- responsive to generating the second biometric token, matching, with the second local partner device, the second biometric token to tokens stored in the local biometric storage;
- responsive to matching the second biometric token to the first biometric token in the local biometric storage, outputting, with the second local partner device, an authentication of the relationship between the entity and the individual to a user of the second local partner device;
- and
- responsive to generating the second biometric token, synchronizing, with the second local partner device, the second biometric token with the local identity server and a second one or more local partner devices of the plurality of local partner devices, the second one or more local partner devices including the first local partner device, and the second one or more local partner devices are separate and distinct from the second local partner device,
- wherein the biometrically-enhanced data exchange network is established from the synchronization of biometric tokens between the local identity server and the plurality of local partner devices, the biometric tokens including the first biometric token and the second biometric token.
13 more elements
A non-transitory computer-readable medium comprising instructions that, when executed by an electronic processor, cause the electronic processor to perform a set of operations comprising:
- receiving registration information and a first biometric token that are output by a first local partner device of a plurality of local partner devices, the registration information associated with an individual and the first biometric token based on first biometrics of the individual, wherein the first biometric token indicates a relationship between an entity and the individual;
- creating a data account associated with the individual in a memory of a local identity server, the data account including the registration information and the first biometric token that are received;
- synchronizing the first biometric token with one or more local partner devices of the plurality of local partner devices, the one or more local partner devices including a second local partner device, and the one or more local partner devices are separate and distinct from the first local partner device,
- receiving a second biometric token that is output by the second local partner device of the plurality of local partner devices, the second biometric token based on second biometrics of the individual, wherein the second biometric token indicates a second relationship between a second entity and the individual;
- synchronizing the second biometric token with a second one or more local partner devices of the plurality of local partner devices, the second one or more local partner devices including the first local partner device, and the second one or more local partner devices are separate and distinct from the second local partner device, and
- wherein a biometrically-enhanced data exchange network is established from the synchronization of biometric tokens between the local identity server and the plurality of local partner devices, the biometric tokens including the first biometric token and the second biometric token.
3 more elements
Dependencies are inferred from the claim text.