Back to results
US 2023/0403158 A1Published application
Biometric identification using homomorphic primary matching with failover non-encrypted exception handling
AssigneeThe Government of the United States of America, as represented by the Secretary of Homeland Security
InventorArun Vemury
Life of this patent
Estimating the term…
Abstract
Systems and methods for providing exception failover augmented, homomorphic encrypted (HE) distributing, end-to-endpoint persistent encryption, and distributed HE domain non-decrypting, privacy-protective biometric processing are provided. Some configurations may include generating HE biometric feature data, based on homomorphic encrypting the biometric feature data. Some configurations determine an exception status of the HE biometric feature data between exception and non-exception. Systems and methods may include performing a HE domain, non-decrypting biometric classifying of the HE biometric feature data.
Claims30
A third-party computer resource comprising a hardware processor and a memory;
- the third-party computer resource configured to:
- perform a flow of distributed privacy protective, homomorphic encrypted (HE) persistent encryption locked, non-decrypting biometric identification and verification processing, with exception failover backup for exception failover augmented, homomorphic encrypted (HE) distributing, end-to-endpoint persistent encryption, and distributed HE domain non-decrypting, privacy-protective biometric processing of a current user K;
- store captured biometric information BM(k) from the current user into an HE encrypted reference gallery;
- receive an HE encrypted reference gallery of N HE encrypted reference files from the current user;
- each of the N HE encrypted reference files corresponding to a verified reference identity;
- receive HE encrypted feature vectors representing captured facial image information from a biometric capture EP HE ECDS unit in response to user interactions with the biometric capture EP HE ECDS unit;
- perform HE domain, non-decrypting N+1 class classification of the HE encrypted feature vectors, using a similarity algorithm;
- detect an exception;
- and
- provide failover processing by the biometric capture, EP HE ECDS unit in response to detecting the exception;
- wherein the biometric capture EP HE ECDS unit is a camera configured to capture a row-by-column pixel array in RGB of the user's face;
- FV(BGH(k)) includes representation of biometric features unique to k with a smaller file size than the original pixel array;
- HE encrypt the feature vector FV(BM(k)) to obtain a current HE{FV(BM(k))};
- compare HE{FV(BM(k))} to an accumulated HE{FV} memory of previously used HE{FV(BM(k))};
- wherein a result of the compare is a positive or negative outcome;
- insert the HE{FV(BM(k))} into an accumulated HE{FV(BM)} memory;
- and distribute HE{FV(BM(k))} to third-party computer resources for HE domain ID-VF processing when if the comparing is a negative outcome;
- and
- refer to the user for which the accumulated HE{FV(BM)} value which is identical to the current HE{FV(BM(k))} was generated as a “cth” user when the comparing is a positive outcome;
- determine whether biographical information for the cth user matches the biographical information for a current kth user;
- when the determination is positive, verify the current kth user as the cth user;
- when the determination is positive, upload HE{FV(BM(k))} to the third-party computer resources;
- and
- when the determination is negative, flag HE{FV(BM(k))} as invalid, an exception based on a collision;
- and perform a system-internal cleartext biometric process using a cleartext of the captured biometric information BM(k) or a cleartext of the feature vector FV(BM(k)).
22 more elements
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
A system for collision detection and fallback processing associated with identification of a user;
- the system comprising:
- one or more third-party computer resources comprising a hardware processor and a memory;
- the third-party computer resource configured to receive a specifically generated homomorphic encrypted (HE) domain processing configuration;
- a biometric capture, exception protective HE encryption and distribution unit (EP HE ECDS) comprising:
- a user interface configured and a wireless communication device for interface with a smartphone to receive biographic and user specific information;
- logic for extracting characterization of biometric information from captured biometrics information;
- the characterization of biometric information extracted as biometric feature vectors:
- logic for privacy-protective HE encrypting the characterization biometric information;
- a system controller configured to:
- provide the specifically generated HE domain processing configurations to the one or more third-party computer resources;
- generate the HE domain processing configuration based on a reference gallery of verified biometric reference images;
- and
- a reference gallery configured to correspond to “N” verified reference identities;
- wherein the biometric capture, exception protective HE encryption and distribution unit comprises:
- logic for privacy-protective distributing the HE encrypted characterization biometric information to one or more third-party computer resources;
- logic for performing system-internal, not distributed biometric processing in response to detecting that the HE encrypted information is an exception;
- the system-internal, not distributed biometric processing configured to cleartext of the captured biometric information or a clear text of the characterization biometric information;
- and
- logic for conditioning the distributing the HE encrypted characterization biometric information based on a positive verification that the HE encrypted characterization biometric information is not an exception;
- wherein the HE encrypted characterization biometric information is:
- an exception detection logic that maintains a memory of all HE encrypted characterization biometric information the unit has generated;
- a Z-bit HE encrypted one-dimensional vector;
- and
- configured to check the memory to determine whether the Z-bit HE encrypted one-dimensional vector is already stored prior to uploading the Z-bit HE encrypted one-dimensional vector to the third-party computer resources.
21 more elements
A system for collision detection and fallback processing associated with identification of a user;
- the system comprising:
- one or more third-party computer resources comprising a hardware processor and a memory;
- the third-party computer resource configured to receive a specifically generated homomorphic encrypted (HE) domain processing configuration;
- a biometric capture, exception protective HE encryption and distribution unit (EP HE ECDS) comprising:
- a user interface configured and a wireless communication device for interface with a smartphone to receive biographic and user specific information;
- logic for extracting characterization of biometric information from captured biometrics information;
- the characterization of biometric information extracted as biometric feature vectors:
- logic for privacy-protective HE encrypting the characterization biometric information;
- a system controller configured to:
- provide the specifically generated HE domain processing configurations to the one or more third-party computer resources;
- generate the HE domain processing configuration based on a reference gallery of verified biometric reference images;
- and
- a reference gallery configured to correspond to “N” verified reference identities;
- logic for detecting reference gallery exceptions;
- said logic for detecting reference gallery exceptions configured to:
- remove HE encrypted biometric information corresponding to a collision;
- place the HE encrypted biometric information in an exception gallery;
- and
- distribute the exception gallery to the biometric capture, EP HE ECDS unit.
16 more elements
A system for collision detection and fallback processing associated with identification of a user;
- the system comprising:
- one or more third-party computer resources comprising a hardware processor and a memory;
- the third-party computer resource configured to receive a specifically generated homomorphic encrypted (HE) domain processing configuration;
- a biometric capture, exception protective HE encryption and distribution unit (EP HE ECDS) comprising:
- a user interface configured and a wireless communication device for interface with a smartphone to receive biographic and user specific information;
- logic for extracting characterization of biometric information from captured biometrics information;
- the characterization of biometric information extracted as biometric feature vectors:
- logic for privacy-protective HE encrypting the characterization biometric information;
- a system controller configured to:
- provide the specifically generated HE domain processing configurations to the one or more third-party computer resources;
- generate the HE domain processing configuration based on a reference gallery of verified biometric reference images;
- and
- a reference gallery configured to correspond to “N” verified reference identities;
- wherein the logic for extracting characterization of biometric information is configured to apply orthogonal basis function transforms or feature filters involving convolving of one or more two-dimensional spatial filter;
- wherein such transforms or application of feature filters generates a one-dimensional V-element vector, as opposed to the original row-by-column pixel array.
12 more elements
A system for collision detection and fallback processing associated with identification of a user;
- the system comprising:
- one or more third-party computer resources comprising a hardware processor and a memory;
- the third-party computer resource configured to receive a specifically generated homomorphic encrypted (HE) domain processing configuration;
- a biometric capture, exception protective HE encryption and distribution unit (EP HE ECDS) comprising:
- a user interface configured and a wireless communication device for interface with a smartphone to receive biographic and user specific information;
- logic for extracting characterization of biometric information from captured biometrics information;
- the characterization of biometric information extracted as biometric feature vectors:
- logic for privacy-protective HE encrypting the characterization biometric information;
- a system controller configured to:
- provide the specifically generated HE domain processing configurations to the one or more third-party computer resources;
- generate the HE domain processing configuration based on a reference gallery of verified biometric reference images;
- and
- a reference gallery configured to correspond to “N” verified reference identities;
- a kiosk for biometric capture from the user;
- the kiosk configured to:
- generate HE encryption of biometric information of a previous user to form a previous HE encrypted feature vector;
- and
- generate HE encryption of biometric information of a current user to form a current HE encrypted feature vector;
- screening equipment for people and objects;
- and
- an electronic gate comprising biometric matching technology;
- the electronic gate configured to control access to a restricted area;
- logic for determining collisions by performing an exception check to determine whether the current HE encrypted feature vector is identical to the previous HE encrypted feature vector;
- and
- logic for performing failover processing by performing a not-distributed, system-internal biometric image identification or verification process.
22 more elements
(canceled)
The system of claim 23 wherein the EP HE ECDS unit is configured to:
- HE encrypt the biometric information with an HE encrypting process;
- and
- determine whether a result of the HE encrypting process is a valid HE encryption value as opposed to being an exception.
A system for homomorphic encrypted (HE), privacy-protective, dynamically expandable, distributed resource biometrics identification and verification processing, with exception based local cleartext failover comprising:
- a biometric capture, exception protective HE encryption and distribution unit (EP HE ECDS unit) configured to:
- connect to a third-party computer resource;
- capture biographic information of a present user;
- capture biometric information of the present user;
- and
- a third-party HE process configuring logic configured to interface with a reference gallery;
- wherein the exception is an HE encryption value identical to an HE value generated previously, for another, earlier user.
4 more elements
The system of claim 29 comprising:
- logic for alternative, non-distributing, biometric matching including logic for communicating cleartext of the captured biometric information or a system-internal encryption of the captured biometric information to a system internal resource for matching against a cleartext reference gallery;
- and
- interface session logic configured to:
- receive biographical information about a user;
- and
- assign a temporary identifier associated with a session containing actions or interactions between the user and the biometric capture, EP HE ECDS unit that receives the biographical information.
3 more elements
Dependencies are inferred from the claim text.