Third party biometric homomorphic encryption matching for privacy protection
AssigneeThe Government of the United States of America, as represented by the Secretary of Homeland Security
InventorArun Vemury
Life of this patent
Estimating the term…
Abstract
Systems and methods for secure distribution of biometric matching processing are provided. Certain configurations include homomorphic encrypting of captured biometric information. In some configurations, the biometric information is classified without decryption between a first identity class and a second identity class. The biometric information may be formed as a feature vector. A homomorphic encrypted feature vector may be formed by homomorphic encrypting of the biometric information.
Claims30
A method comprising:
- storing homomorphic encrypted (HE) biometric information in a reference gallery;
- providing HE biometric matching logic, and an access control device;
- generating biometric information to store in the reference gallery with a kiosk comprising a scanner;
- scanning a user and generating biometric information for identifying the user;
- the biometric information comprising an image;
- generating the generated HE encrypted information containing biometric data using an HE encryption algorithm;
- storing HE encrypted biometric information in a library;
- distributing the HE encrypted biometric information to a third-party computer;
- based on the reference gallery, constructing HE encrypted reference information using HE encryption logic;
- the HE Encryption logic storing HE encrypted information in the reference gallery;
- the third-party computer performing a HE biometric matching process using the HE biometric matching logic;
- the HE biometric matching logic performing a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference gallery to identify matching HE encrypted reference information;
- the HE biometric matching logic performing the HE biometric matching process without decrypting or having a capacity to decrypt the HE encrypted information;
- the third-party computer processing biometric information used for biometric matching, without access to underlying biometric information of the user;
- the third-party computer transmitting a message to the access control device;
- the access control device executing an access granted process when the message indicates a positive match based on the matching comparison;
- and
- the access control device executing an access denied process when the message does not indicate a positive match based on the matching comparison.
A system for biographic capture and HE locked, keyless distribution to external processing resources, configured for HE domain, non-decrypting biometric comprising:
- an uploading station comprising:
- a HE domain artificial intelligence (AI) classifier construction and training logic;
- a reference gallery of HE encrypted biometric information;
- a scanner for biometric capture;
- the scanner configured to generate an image;
- HE encryption logic for HE encryption;
- pre-processing logic configured to generate pre-processed biometric information;
- a library of HE encrypted information;
- a third-party computer comprising:
- a pre-trained HE domain AI classifier and corresponding AI classification output logic;
- the third-party computer configured to send a message to an access control device;
- and
- HE biometric matching logic configured to perform a HE biometric matching process;
- the HE biometric matching logic configured to perform a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference gallery to identify matching HE encrypted reference information;
- the access control device programmed to execute:
- an access granted process when the message indicates a positive match based on the matching comparison;
- and
- an access denied process when the message does not indicate a positive match based on the matching comparison.
A system for biographic capture and homomorphic encrypted (HE) locked, keyless distribution to external processing resources, configured for HE domain, non-decrypting biometric classification comprising:
- an uploading station comprising:
- a scanner for biometric capture;
- HE encryption logic for HE encryption;
- pre-processing logic configured to generate pre-processed biometric information;
- N reference galleries of HE encrypted biometric information;
- the reference galleries configured to store integer reference images;
- wherein N is selected from the group of natural numbers;
- a HE domain artificial intelligence (AI) classifier construction and training logic;
- a library of HE encrypted information;
- a third-party HE domain AI biometric verify and identify (VF-ID) resource comprising:
- HE biometric matching logic configured to perform a HE biometric matching process;
- the HE biometric matching logic configured to perform a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference galleries to identify matching HE encrypted reference information;
- an access control device comprising access logic;
- the access control device programmed to execute:
- an access granted process when the access logic indicates a positive match based on the matching comparison;
- and
- an access denied process when the access logic does not indicate a positive match based on the matching comparison.
A system for biographic capture and homomorphic encrypted (HE) locked, keyless distribution to external processing resources, configured for HE domain, non-decrypting biometric comprising:
- an uploading station comprising:
- temporary identifier logic;
- a biometric capture device configured to received biometric captured BM FV extraction logic configured to extract FV from the biometric captured BM and generate a corresponding FV(BM);
- and
- HE encryption logic configured to encrypt FV(BM) as HE encrypted feature vector HE(FV(BM));
- N reference galleries of HE encrypted biometric information;
- the reference galleries configured to store integer reference images;
- a library of HE encrypted information;
- a third-party HE domain AI biometric verify and identify (VF-ID) resource comprising:
- HE biometric matching logic configured to perform a HE biometric matching process;
- the HE biometric matching logic configured to perform a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference galleries to identify matching HE encrypted reference information;
- an access control device comprising access logic;
- the access control device programmed to execute:
- an access granted process when the access logic indicates a positive match based on the matching comparison;
- and
- an access denied process when the access logic does not indicate a positive match based on the matching comparison.
Dependencies are inferred from the claim text.