Remote usage of locally stored biometric authentication data

Patent metadata

Field	Value
Publication number	US-11847199-B2
Application number	US-202217685275-A
Country	US
Kind code	B2
Filing date	Mar 2, 2022
Priority date	Aug 23, 2016
Publication date	Dec 19, 2023
Grant date	Dec 19, 2023

Abstract

A method for biometric authentication is disclosed. Reference biometric data established at a first device can be stored at a backend server computer. The server computer can then provide the reference biometric data with a second device when needed for biometric authentication at the second device.

First claim

What is claimed is:

1. A method comprising:
measuring, by a user device, a second parameter value;
sending, by the user device, to a server computer, a request for accessing a first dataset, wherein the first dataset is associated with a first reference biometric template and a first parameter value at the server computer, wherein the request includes a query biometric template and the second parameter value associated with the user device, wherein the server computer determines a subset of datasets from a plurality of datasets based on the second parameter value, the subset of datasets including more than one dataset and less than the plurality of datasets, each of the subset of datasets corresponding to a different user, and the subset of datasets including the first dataset, the server computer retrieves a subset of reference biometric templates including, for each dataset in the subset of datasets, a corresponding reference biometric template, the server computer identifies a matching reference biometric template from among the subset of reference biometric templates that matches the query biometric template within a predetermined threshold, wherein the matching reference biometric template that matches the query biometric template is the first reference biometric template associated with the first dataset, and the server computer authenticates the query biometric template based on a comparison with the first reference biometric template;
receiving, by the user device, from the server computer, an authentication approval message that allows the user device to access to the first dataset; and
accessing, by the user device, the first dataset.

2. The method of claim 1 , wherein the user device is a second user device, wherein the server computer receives the first reference biometric template and the first parameter value from a first user device associated with the first dataset, the first parameter value is associated with the first user device, the second parameter value is associated with the second user device, the server computer receives the first parameter value when the first user device is being used to access the first dataset, and wherein the server computer determines that the second parameter value matches the first parameter value within a predetermined range.

3. The method of claim 2 , wherein the first parameter value is a first location, wherein the second parameter value is a second location.

4. The method of claim 1 , wherein the first dataset is associated with a user identifier, wherein the authentication approval message includes the first reference biometric template and the user identifier, and further comprising:
storing, by the user device, the user identifier and the first reference biometric template, wherein accessing the first dataset includes performing a subsequent user authentication based on the user identifier and the first reference biometric template.

5. The method of claim 1 , wherein each dataset in the subset of datasets is associated with a respective parameter value that is within a predetermined range of the second parameter value, wherein the first parameter value is within the predetermined range of the second parameter value.

6. The method of claim 5 , further comprising:
receiving, by the user device, from the server computer, an instruction to prompt a user for a biometric template type;
prompting, by the user device, the user to select the biometric template type;
receiving, by the user device, from the user, a selection of the biometric template type;
sending, by the user device, to the server computer, the selected biometric template type, wherein the server computer determines the subset of datasets further based on the selected biometric template type, wherein each dataset in the subset of datasets is associated with a reference biometric template of the selected biometric template type;
receiving, by the user device, from the server computer, an instruction to obtain a biometric template of the selected biometric template type;
receiving, by the user device, from the user, a biometric; and
generating, by the user device, the query biometric template, wherein the query biometric template is of the selected biometric template type.

7. The method of claim 1 , wherein the first reference biometric template is a voice template, and further comprising:
receiving, by the user device, from a user, a voice command; and
generating, by the user device, the query biometric template based on the voice command.

8. The method of claim 7 , further comprising:
activating, by the user device, a service provider application in response to the voice command, and wherein the request for accessing the first dataset is sent based on the voice command.

9. The method of claim 1 , wherein, before sending the request for accessing the first dataset, the user device has never accessed the first dataset, wherein the request does not include an identifier for the first dataset, and wherein the server computer identifies the first reference biometric template based on the second parameter value and not based on a user identifier.

10. A user device comprising:
a processor; and
a computer readable medium, the computer readable medium comprising code, executable by the processor, for implementing a method comprising:
measuring a second parameter value;
sending, to a server computer, a request for accessing a first dataset, wherein the first dataset is associated with a first reference biometric template and a first parameter value at the server computer, wherein the request includes a query biometric template and the second parameter value associated with the user device, wherein the server computer determines a subset of datasets from a plurality of datasets based on the second parameter value, the subset of datasets including more than one dataset and less than the plurality of datasets, each of the subset of datasets corresponding to a different user, and the subset of datasets including the first dataset, the server computer retrieves a subset of reference biometric templates including, for each dataset in the subset of datasets, a corresponding reference biometric template, the server computer identifies a matching reference biometric template from among the subset of reference biometric templates that matches the query biometric template within a predetermined threshold, wherein the matching reference biometric template that matches the query biometric template is the first reference biometric template associated with the first dataset, and the server computer authenticates the query biometric template based on a comparison with the first reference biometric template;
receiving, from the server computer, an authentication approval message that allows the user device to access to the first dataset; and
accessing the first dataset.

11. The user device of claim 10 , wherein the first parameter value is first location, wherein the second parameter value is a second location.

12. The user device of claim 10 , further comprising:
activating an application;
in response to activating the application, prompting a user to provide a biometric;
measuring the biometric; and
generating the query biometric template based on the biometric.

13. The user device of claim 10 , wherein the first dataset is a user account, and wherein the accessing the first dataset includes logging into the user account.

14. The user device of claim 10 , wherein the authentication approval message includes the first reference biometric template in an encrypted form, and further comprising:
decrypting the first reference

Assignees

• Visa Int Service Ass

Inventors

• Sheets John

Classifications

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F16/903

  Querying (for retrieval from the web G06F16/953) · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04W12/065

  Continuous authentication · CPC title

• H04W12/06

  Authentication · CPC title