Use of biometrics and privacy preserving methods to authenticate account holders online
AssigneeVisa International Service Association
InventorsJason Blackhurst, Kim Wagner, John F. Sheets, Chunxi Jiang, Sunpreet Singh Arora
Life of this patent
Estimating the term…
Abstract
Embodiments are directed to a method for securely performing biometric authentication online. The method described can be used to securely perform biometric authentication on a mobile device. For protecting the privacy of the user's biometric data, a cryptographic comparison protocol can be used to perform matching of encrypted templates. For example, the cryptographic comparison protocol may involve Fuzzy Extractors (FE), Homomorphic Encryption (HE), and/or Secure Multi-Party Computation (SMPC).
Claims18
A computer-implemented method, comprising:
- performing an authentication process using a resource provider application executing on a mobile device of a user by:
- obtaining a biometric authentication sample captured by the mobile device;
- generating a biometric authentication template of a user from the biometric authentication sample;
- retrieving a biometric enrollment template related to the biometric authentication template, wherein the biometric enrollment template is previously generated at the mobile device using a previously obtained biometric enrollment sample of the user captured using the mobile device;
- authenticating the user of the mobile device based on the biometric authentication template, authenticating including:
- generating a first cryptographic key from the biometric authentication template and a first function, and a second cryptographic key from the biometric enrollment template and a second function, and
- using the first and second cryptographic keys to authenticate the user by comparing the first cryptographic key representing the biometric authentication template to the second cryptographic key representing the biometric enrollment template without retrieving the biometric enrollment sample of the user;
- and
- executing at least one operation in response to the user being authenticated.
A user device comprising:
- one or more biometric capture devices;
- one or more processors;
- and
- one or more memories storing a resource provider application, and computer-executable instructions, wherein executing the computer-executable instructions by the one or more processors causes the user device to:
- perform an authentication process using a resource provider application executing on the user device of a user by:
- obtaining a biometric authentication sample captured by the user device;
- generating a biometric authentication template of a user from the biometric authentication sample;
- retrieving a biometric enrollment template related to the biometric authentication template, wherein the biometric enrollment template is previously generated at the user device using a previously obtained biometric enrollment sample of the user captured using the user device;
- authenticating the user of the user device based on the biometric authentication template, authenticating including:
- generating a first cryptographic key from the biometric authentication template and a first function, and a second cryptographic key from the biometric enrollment template and a second function, and
- using the first and second cryptographic keys to authenticate the user by comparing the first cryptographic key representing the biometric authentication template to the second cryptographic key representing the biometric enrollment template without retrieving the biometric enrollment sample of the user;
- and
- execute at least one operation in response to the user being authenticated.
Dependencies are inferred from the claim text.