Secure biometrics matching with split phase client-server matching protocol

Patent metadata

Field	Value
Publication number	US-10778672-B2
Application number	US-201514942931-A
Country	US
Kind code	B2
Filing date	Nov 16, 2015
Priority date	Nov 16, 2015
Publication date	Sep 15, 2020
Grant date	Sep 15, 2020

Abstract

An embodiment of the invention provides a method for secure biometrics matching with split phase client-server matching protocol, wherein a first biometric input is received in an electronic device. The first biometric input is stored in the electronic device as a biometric profile; and, the biometric profile is sent to a server. An additional biometric input is received from a user in the electronic device; and, the additional biometric input is compared to the biometric profile stored in the electronic device to generate a local matching score. The additional biometric input is sent to the server. The local matching score and a remote matching score generated by the at least one server are compared; and, it is determined whether to authenticate the user based on the comparison of the local matching score and the remote matching score.

First claim

What is claimed is:

1. A method comprising:
receiving a first biometric input by an electronic device;
storing the first biometric input in the electronic device as a biometric profile;
sending the biometric profile to at least one server;
receiving an additional biometric input from a user by the electronic device;
comparing the additional biometric input to the biometric profile stored in the electronic device to generate a local matching score;
sending the additional biometric input to the at least one server;
comparing, via processing circuitry, the additional biometric input to the biometric profile stored in the at least one server to generate the remote matching score;
comparing the local matching score and a remote matching score generated by the at least one server;
determining whether to authenticate the user based on the comparison of the local matching score and the remote matching score;
comparing, via the processing circuitry, the local matching score of the first user to a matching score of a second user, wherein the matching score of the second user is different from the remote matching score of the first user; and
determining that the electronic device is compromised when the local matching score of the first user is within a threshold degree of similarity with the matching score of the second user,
wherein the second user is a different person than the first user.

2. The method according to claim 1 , wherein said determining whether to authenticate the user includes authenticating the user when the local matching score matches the remote matching score.

3. The method according to claim 1 , wherein said determining whether to authenticate the user includes denying the user when the local matching score does not match the remote matching score.

4. The method according to claim 1 , further comprising determining at least one of whether an integrity of the electronic device is compromised or whether an integrity of the at least one server is compromised, based on said comparing of the local matching score and the remote matching score.

5. A device comprising:
processing circuitry configured to receive a first biometric input by an electronic device,
store the first biometric input in the electronic device as a biometric profile, send the biometric profile to at least one server,
receive an additional biometric input from a user by the electronic device, compare the additional biometric input to the biometric profile stored in the electronic device to generate a local matching score,
send the additional biometric input to the at least one server,
compare the additional biometric input to the biometric profile stored in the at least one server to generate the remote matching score,
compare the local matching score and a remote matching score generated by the at least one server, and
determine whether to authenticate the user based on the comparison of the local matching score and the remote matching score,
compare the local matching score of the first user to a matching score of a second user, wherein the matching score of the second user is different from the remote matching score of the first user, and
determine that the electronic device is compromised when the local matching score of the first user is within a threshold degree of similarity with the matching score of the second user,
wherein the second user is a different person than the first user.

6. The device according to claim 5 , wherein said determining whether to authenticate the user includes denying the user when the remote matching score does not match the local matching score.

7. The device according to claim 5 , wherein the processing circuitry is further configured to determine at least one of whether an integrity of the electronic device is compromised or whether an integrity of the at least one server is compromised, based on said comparing of the remote matching score and the local matching score.

8. The method according to claim 5 , wherein the processing circuitry is further configured to:
compare the remote matching score of the first user to a matching score of a second user, wherein the matching score of the second user is different from the local matching score of the first user, and
determine that the at least one server is compromised when the remote matching score of the first user is within a threshold degree of similarity with the matching score of the second user,
wherein the second user is a different person than the first user.

9. A non-transitory computer-readable medium storing computer-readable instructions thereon which when executed by a computer cause the computer to perform a method comprising:
receiving a first biometric input by an electronic device;
storing the first biometric input in the electronic device as a biometric profile; sending the biometric profile to at least one server;
receiving an additional biometric input from a user by the electronic device; comparing the additional biometric input to the biometric profile stored in the electronic device to generate a local matching score;
sending the additional biometric input to the at least one server;
comparing the local matching score and a remote matching score generated by the at least one server;
determining whether to authenticate the user based on the comparison of the local matching score and the remote matching score;
comparing the local matching score of the first user to a matching score of a second user, wherein the matching score of the second user is different from the remote matching score of the first user; and
determining that the electronic device is compromised when the local matching score of the first user is within a threshold degree of similarity with the matching score of the second user,
wherein the second user is a different person than the first user.

10. The method according to claim 1 , further comprising:
comparing the local matching score and the remote matching score to generate a third matching score; and
authenticating a user when the third matching score is above a threshold.

11. The method according to claim 1 , wherein said comparing comprises comparing the biometric input to all biometric profiles stored in the at least one server, wherein the highest matching score is used as the remote matching score.

12. The method according to claim 1 , further comprising receiving the first biometric input by an iris scanner.

13. The method according to claim 1 , wherein a difference between the local matching score and the remote matching score indicates version misalignment between the electronic device and the at least one server.

14. The method according to claim 1 , wherein the electronic device comprises a smartphone.

15. The method according to claim 1 , further comprising:
comparing the local matching score and the remote matching score to generate a third matching score; and
authenticating a user when the third matching score is above a threshold, wherein said comparing comprises comparing the biometric input to all biometric profiles stored in the at least one server, wherein the highest matching score is used as the remote matching score, wherein a difference between the local matching score and the remote matching score indicates version misalignment between the electronic device and the at least one servers.

Assignees

• IBM

Inventors

• Connell Ii Jonathan H
• Park Jae-Eun
• Ratha Nalini K

Classifications

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title