Remote usage of locally stored biometric authentication data

Patent metadata

Field	Value
Publication number	US-11308189-B2
Application number	US-201716316572-A
Country	US
Kind code	B2
Filing date	Aug 8, 2017
Priority date	Aug 23, 2016
Publication date	Apr 19, 2022
Grant date	Apr 19, 2022

Abstract

A method for biometric authentication is disclosed. Reference biometric data established at a first device can be stored at a backend server computer. The server computer can then provide the reference biometric data with a second device when needed for biometric authentication at the second device.

First claim

What is claimed is:

1. A method comprising:
receiving, by a server computer, from a first user device, a first reference biometric template and a first parameter value;
storing, by the server computer, the first reference biometric template and the first parameter value;
receiving, by the server computer, from a second user device, a request for accessing data, the request including a query biometric template and a second parameter value;
identifying, by the server computer, the first reference biometric template and an associated first dataset based on a comparison of the second parameter value with the first parameter value, wherein identifying the first reference biometric template and authenticating the query biometric template includes:
determining, by the server computer, a subset of datasets based on the second parameter value, wherein each dataset in the subset of datasets is associated with a parameter value that is within a predetermined range of the second parameter value, wherein the first parameter value is within the predetermined range of the second parameter value, and wherein the subset of datasets includes the first dataset; and
for each dataset in the subset of datasets, identifying, by the server computer, an associated reference biometric template;

authenticating, by the server computer, the query biometric template based on a comparison with the first reference biometric template, wherein authenticating the query biometric template includes:
comparing, by the server computer, the query biometric template with each reference biometric template; and
based on comparing, identifying, by the server computer, a reference biometric template that matches the query biometric template within a predetermined threshold, wherein the matching reference biometric template is the first reference biometric template associated with the first dataset; and

based on authenticating the query biometric template, transmitting, by the server computer, an authentication approval message to the second user device, wherein the second user device grants access to the first dataset based on the authentication approval message.

2. The method of claim 1 , wherein the dataset is identified based on the query biometric template and the second parameter value, and not based on a user identifier.

3. The method of claim 1 , wherein the first reference biometric template is received from the first user device along with an associated user identifier, wherein the first dataset is associated with the user identifier, wherein the authentication approval message includes the first reference biometric template and the user identifier, wherein the second user device stores the first reference biometric template and the user identifier, and wherein the second user device uses the first reference biometric template and the user identifier for a subsequent user authentication for accessing the first dataset.

4. The method of claim 1 , wherein the first parameter value is associated with the first user device and is received when the first user device is being used to access the first dataset, wherein the second parameter value is associated with the second user device and is received when the second user device is being used to access the first dataset, and wherein identifying the first reference biometric template and the associated first dataset includes determining that the second parameter value matches the first parameter value within a predetermined range.

5. The method of claim 1 , further comprising: instructing, by the server computer, the second user device to prompt a user to indicate a biometric template type associated with the first reference biometric template; receiving, by the server computer, from the second user device, an indicated biometric template type, wherein the subset of datasets is further determined based on the indicated biometric template type, wherein each dataset in the subset of datasets is associated with a reference biometric template of the indicated biometric template type; and instructing, by the server computer, the second user device to obtain a biometric template of the indicated biometric template type, wherein the received query biometric template is of the indicated biometric template type.

6. The method of claim 1 , wherein the first reference biometric template is a voice template, and wherein the query biometric template is generated using a voice command at the second user device.

7. The method of claim 1 , wherein the first reference biometric template is a first voice template, wherein the query biometric template is generated using a voice command, and wherein the identified reference biometric templates associated with each dataset are each voice templates.

8. The method of claim 6 , wherein the second user device activated a service provider application in response to the voice command, and wherein the second user device sent the request for accessing data based on the voice command.

9. A server computer comprising:
a processor; and
a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising:
receiving from a first user device, a first reference biometric template and a first parameter value;
storing the first reference biometric template and the first parameter value;
receiving from a second user device, a request for accessing data, the request including a query biometric template and a second parameter value;
identifying the first reference biometric template and an associated first dataset based on a comparison of the second parameter value with the first parameter value, wherein identifying the first reference biometric template and authenticating the query biometric template includes:
determining a subset of datasets based on the second parameter value, wherein each dataset in the subset of datasets is associated with a parameter value that is within a predetermined range of the second parameter value, wherein the first parameter value is within the predetermined range of the second parameter value, and wherein the subset of datasets includes the first dataset; and
for each dataset in the subset of datasets, identifying an associated reference biometric template;

authenticating the query biometric template based on a comparison with the reference biometric template, wherein authenticating the query biometric template includes:
comparing the query biometric template with each reference biometric template; and
based on comparing, identifying a reference biometric template that matches the query biometric template within a predetermined threshold, wherein the matching reference biometric template is the first reference biometric template associated with the first dataset; and

based on authenticating the query biometric template, transmitting an authentication approval message to the second user device, wherein the second user device grants access to the first dataset based on the authentication approval message.

10. The server computer of claim 9 , wherein the authentication approval message includes the first reference biometric template, and wherein the second user device stores the first reference biometric template.

11. The server computer of claim 9 , wherein the first parameter value is associated with the first user device and is received when the first user device is being used to access the first dataset, wherein the second parameter value is associated with the second user device and is received when the second user device is being used to access the first dataset.

12. The server computer of claim 9 , wherein t

Assignees

• Visa Int Service Ass

Inventors

• Sheets John

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title