Back to results
US 2025/0028805 A1Published application
Optimized private biometric matching
AssigneeVisa International Service Association
InventorPeter Rindal
Life of this patent
Estimating the term…
Abstract
A homomorphic encryption scheme, such as Paillier encryption in combination with a bit packing process allows biometric matching at a terminal without exposing a biometric template stored at a user's device. Because such encryption schemes are data intensive, the bit packing process allows reductions in data being sent and processed so that the biometric matching process can be accomplished in near real time. The high speed of this optimized process allows the technique to be applied to many real world processes such as access control and transaction processing.
Claims20
A computer implemented method comprising:
- obtaining, by a terminal device, a sample biometric measurement of a first user;
- generating a sample biometric template based on the sample biometric measurement;
- receiving, from devices associated with a plurality of users, encrypted biometric templates and public keys, wherein each of the encrypted biometric templates and the public keys are associated with a different one of the plurality of users, and wherein the public keys are associated with corresponding private keys;
- determining encrypted similarity metrics based on comparing each of the encrypted biometric templates to the sample biometric template, wherein the encrypted similarity metrics are encrypted based on the public keys;
- sending the encrypted similarity metrics to the devices for decryption using the corresponding private keys;
- receiving decrypted similarity metrics from the devices;
- determining that a first device of the devices is associated with the first user based on comparing the decrypted similarity metrics to a threshold value;
- and
- providing access to a resource based on the determining that the first device is associated with the first user.
6 more elements
A computer implemented method comprising:
- obtaining a sample biometric measurement of a first user;
- generating a sample biometric template based on the sample biometric measurement;
- receiving, from each device of a plurality of devices associated with a plurality of users:
- an encrypted biometric template for a respective user of the plurality of users, and
- a public key of a public/private key pair associated with a respective user of the plurality of users, wherein the plurality of users comprises the first user, and wherein the encrypted biometric template for each respective user is encrypted based on the public key associated with the respective user;
- determining an encrypted similarity metric for each respective user of the plurality of users based on comparing the encrypted biometric template for the respective user to the sample biometric template;
- sending, to each device of the plurality of devices, the encrypted similarity metric for the respective user associated with the device;
- receiving, from each device of the plurality of devices, a decrypted similarity metric for the respective user associated with the device;
- determining a comparison metric for each respective user of the plurality of users based on the decrypted similarity metric for the respective user;
- comparing the comparison metric for each respective user of the plurality of users to a threshold value;
- determining that a first device of the devices is associated with the first user based on the comparison metric for the first user satisfying a threshold value;
- and
- providing access to a resource based on the determining that the first device is associated with the first user.
10 more elements
A computer implemented method comprising:
- receiving, from each device of a plurality of devices associated with a plurality of users:
- an encrypted biometric template for each respective user of the plurality of users, each encrypted biometric template including an encrypted vector of biometric values, and
- a public key of a public/private key pair associated with each respective user of the plurality of users;
- determining a similarity metric for each of the of users based on the respective encrypted biometric template and a sample biometric template generated for a first user;
- determining an encrypted similarly metric for each of the users from the respective similarity metric by applying a homomorphic encryption algorithm and the corresponding public key;
- sending to each device of the plurality of devices the respective encrypted similarity metric;
- receiving a decrypted similarity metric from each device of the plurality of the devices;
- determining that a first device of the devices is associated with the first user based on comparing the decrypted similarity metric provided by the first device to a threshold value;
- and
- providing the first device access to a resource.
7 more elements
Dependencies are inferred from the claim text.