# US 2021/0243029 A1 · Biometric verification process using certification token

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0243029 A1
- Document ID: US20210243029A1
- Status: Published application
- Kind: A1
- Application number: 17/239,038
- Filed: 2021-04-23
- Published: 2021-08-05
- Earliest claimed: 2020-01-30
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Quan Wang
- Web page: https://patentgrep.com/patent/US20210243029A1

## CPC

- G06Q 20/40145: {Biometric identity checks}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/33: using certificates
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/32: using wireless devices
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]}
- H04L 9/3236: {using cryptographic hash functions}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- G06Q 2220/00: Business processing using cryptography
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method for performing biometric authentication is disclosed. In one example, the method includes obtaining first and second biometric templates and comparing them to determine if they match. The method also includes determining if a biometric certification token is valid. A computing device or other device may communicate with a verification system to determine the validity of the biometric certification token.

## Claims

### Claim at position 1

1-20. (canceled)

### Claim 21

A method comprising:
receiving, as part of a transaction, by a computing device, a first biometric template of a user and a biometric certification token that is a hash of a second biometric template and is signed by a verification system comprising a blockchain system;
sending, by the computing device to a portable device, the first biometric template, wherein the portable device verifies that the first biometric template matches the second biometric template, the second biometric template being stored on the portable device;
sending, by the computing device to the verification system, the biometric certification token, wherein the verification system verifies that the biometric certification token is stored within the blockchain system; and
allowing, by the computing device, the transaction to proceed based on receiving an indication from the portable device that the first biometric template matches the second biometric template, and receiving an indication from the verification system that the biometric certification token is stored within the blockchain system.

### Claim 22 (depends on 21)

The method of claim 21, wherein the first biometric template is derived from a fingerprint.

### Claim 23 (depends on 21)

The method of claim 21, wherein the computing device is an access device, and the portable device is a mobile phone.

### Claim 24 (depends on 21)

The method of claim 21, wherein the computing device is an access device, and the portable device is a card.

### Claim 25 (depends on 21)

The method of claim 21, wherein the portable device received the biometric certification token from the verification system, prior to the computing device receiving the biometric certification token from the portable device.

### Claim 26 (depends on 21)

The method of claim 21, wherein the computing device comprises a processor, a reader coupled to the processor, the reader configured to read data from the portable device, and a biometric reader coupled to the processor.

### Claim 27 (depends on 21)

The method of claim 21, further comprising:
generating, by the computing device, an authorization request message; and
transmitting, by the computing device, the authorization request message to an authorization computer.

### Claim 28

A computing device comprising:
a processor; and
a computer readable medium, the computer readable medium comprising code, executable by the processor, to implement a method comprising:
receiving, as part of a transaction a first biometric template of a user and a biometric certification token that is a hash of a second biometric template and is signed by a verification system comprising a blockchain system;
sending, to a portable device, the first biometric template, wherein the portable device verifies that the first biometric template matches the second biometric template, the second biometric template being stored on the portable device;
sending, to the verification system, the biometric certification token, wherein the verification system verifies that the biometric certification token is stored within the blockchain system; and
allowing the transaction to proceed based on receiving an indication from the portable device that the first biometric template matches the second biometric template, and receiving an indication from the verification system that the biometric certification token is stored within the blockchain system.

### Claim 29 (depends on 28)

The computing device of claim 28, further comprising a biometric reader coupled to the processor.

### Claim 30 (depends on 28)

The computing device of claim 28, wherein the computing device is an access device.

### Claim 31 (depends on 28)

The computing device of claim 28, wherein the first biometric template is derived from a facial image.

### Claim 32 (depends on 28)

The computing device of claim 28, wherein the computing device comprises a network interface coupled to the processor.

### Claim 33

A method comprising:
sending, by a portable device to a computing device, a biometric certification token that is a hash of a first biometric template stored by the portable device and signed by a verification system comprising a blockchain system;
receiving, by the portable device from the computing device, a second biometric template of a user;
verifying, by the portable device that the first biometric template matches the second biometric template; and
sending, by the portable device to the computing device, an indication that the first biometric template matches the second biometric template, wherein the computing device allows a transaction to proceed after the computing device receives the indication and verifies that the biometric certification token is stored on the blockchain system.

### Claim 34 (depends on 33)

The method of claim 33, further comprising:
receiving, from the verification system, the biometric certification token; and
storing the biometric certification token on the portable device.

### Claim 35 (depends on 33)

The method of claim 33, wherein the computing device is an access device.

### Claim 36 (depends on 33)

The method of claim 33, wherein the portable device is a mobile phone device.

### Claim 37 (depends on 33)

The method of claim 33, wherein the first and second biometric templates are derived from one or more of a fingerprint, a facial image, or a voice sample.

### Claim 38 (depends on 33)

The method of claim 33, wherein the verification system signs the hashed first biometric template with a private key.

### Claim 39 (depends on 33)

The method of claim 33, wherein the computing device is configured to transmit authorization request messages and receive authorization response messages.

### Claim 40 (depends on 33)

The method of claim 33, wherein the computing device is configured to provide access to secure data as part of the transaction.