Third party biometric homomorphic encryption matching for privacy protection
AssigneeThe Government of the United States of America, as represented by the Secretary of Homeland Security
InventorArun Vemury
Life of this patent
Estimating the term…
Abstract
Systems and methods for secure distribution of biometric matching processing are provided. Certain configurations include homomorphic encrypting of captured biometric information. In some configurations, the biometric information is classified without decryption between a first identity class and a second identity class. The biometric information may be formed as a feature vector. A homomorphic encrypted feature vector may be formed by homomorphic encrypting of the biometric information.
Claims30
A system comprising:
- a reference gallery of homomorphic encrypted (HE) biometric information;
- a third-party computer;
- HE biometric matching logic;
- an access control device;
- a kiosk comprising a scanner connected to the reference gallery via a cloud resource;
- the scanner configured to:
- generate biometric information to store in the reference gallery;
- scan a user and generate biometric information identifying the user from the scan;
- generate HE encrypted information containing biometric data using an HE encryption algorithm;
- the system configured to:
- store the generated HE encrypted biometric information in a library;
- distribute the HE encrypted biometric information to the third-party computer;
- an HE encryption logic configured to construct, based on the reference gallery, HE encrypted reference information;
- the HE encryption logic configured to store HE encrypted information in the reference gallery;
- the HE encryption logic configured to apply homomorphic encryption to information captured from the biometric capture device;
- the third-party computer comprising HE biometric matching logic configured to perform a HE biometric matching process;
- the HE biometric matching logic configured to perform a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference gallery to identify matching HE encrypted reference information;
- the HE biometric matching logic configured to perform the HE biometric matching process without decrypting or having a capacity to decrypt the HE encrypted information;
- the third-party computer configured to process biometric information used for biometric matching, without access to underlying biometric information of the user;
- the third-party computer configured to transmit a message to the access control device;
- the access control device programmed to execute an access granted process when the message indicates a positive match based on the matching comparison;
- and
- the access control device programmed to execute an access denied process when the message does not indicate a positive match based on the matching comparison.
(canceled)
A method comprising:
- storing homomorphic encrypted (HE) biometric information in a reference gallery;
- providing HE biometric matching logic, and an access control device;
- generating biometric information to store in the reference gallery with a kiosk comprising a scanner;
- scanning a user and generating biometric information for identifying the user;
- generating HE encrypted information containing biometric data using an HE encryption algorithm;
- storing the generated HE encrypted biometric information in a library;
- distributing the HE encrypted biometric information to a third-party computer;
- the third-party computer comprising HE Biometric matching logic;
- based on the reference gallery, constructing HE encrypted reference information using HE encryption logic;
- the HE Encryption logic storing HE encrypted information in the reference gallery;
- the third-party computer performing a HE biometric matching process using the HE biometric matching logic;
- the HE biometric matching logic performing a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference gallery to identify matching HE encrypted reference information;
- the HE biometric matching logic performing the HE biometric matching process without decrypting or having a capacity to decrypt the HE encrypted information;
- the third-party computer processing biometric information used for biometric matching, without access to underlying biometric information of the user;
- the third-party computer transmitting a message to the access control device;
- the access control device executing an access granted process when the message indicates a positive match based on the matching comparison;
- and
- the access control device executing an access denied process when the message does not indicate a positive match based on the matching comparison.
Dependencies are inferred from the claim text.