Biometric validation process utilizing access device and location determination

Patent metadata

Field	Value
Publication number	US-12088586-B2
Application number	US-202217950975-A
Country	US
Kind code	B2
Filing date	Sep 22, 2022
Priority date	Nov 7, 2017
Publication date	Sep 10, 2024
Grant date	Sep 10, 2024

Abstract

A first biometric sample of a user is received by an access device from a user device. First biometric information is generated in an obscured format, based on the first biometric sample. A plurality of biometric information is received in an obscured format. The plurality of biometric information corresponds to a plurality of users, and was obtained from biometric samples of the plurality of users. The first biometric information in the obscured format is compared to the plurality of biometric information in the obscured format, and a match result is generated based on the comparing. The match result is provided to a server computer. Based on the match result, information indicating that one of the plurality of users that is associated with one of the plurality of biometric information is the user associated with the first biometric information is received.

First claim

What is claimed is:

1. A method comprising:
receiving, by an access device from a user device, a first biometric sample of a user operating the user device, for conducting an interaction;
generating, by the access device, first biometric information in an obscured format, based on the first biometric sample;
transmitting, by the access device to a service provider computer, a request for biometric information associated with a plurality of users whose biometric information was respectively obtained from corresponding biometric samples of the plurality of users and stored in a database by the service provider computer prior to the receiving the first biometric sample;
in response to the request, receiving, by the access device from the service provider computer, a first plurality of biometric information in an obscured format, wherein the first plurality of biometric information respectively corresponds to a first plurality of users operating a first plurality of user devices, which are determined to be within a predetermined distance of the access device based on the request, among a plurality of user devices associated with the plurality of users, wherein the first plurality of biometric information is a subset of the biometric information associated with the plurality of users;
comparing, by the access device, the first biometric information in the obscured format to the first plurality of biometric information in the obscured format;
generating, by the access device, a match result based on the comparing;
providing, by the access device to a server computer, the match result; and
in response to the match result being provided, receiving, by the access device, information indicating that one of the first plurality of users that is associated with one of the first plurality of biometric information is the user associated with the first biometric information.

2. The method of claim 1 , wherein:
the comparing further comprises performing a privacy preserving comparison process between the first biometric information and the first plurality of biometric information, and
the privacy preserving comparison process utilizes at least one from among secure multi-party computation (SMPC), fuzzy logic, and homomorphic encryption.

3. The method of claim 1 , further comprising providing a message indicative of the match result, the message comprising a command for instructing the access device to dispense a resource.

4. The method of claim 1 , wherein the comparing further comprises comparing the first biometric information to the first plurality of biometric information without decrypting the first biometric information and the first plurality of biometric information.

5. The method of claim 1 ,
wherein the biometric information associated with the plurality of users is obtained from the corresponding biometric samples respectively provided by the plurality of users during an enrollment process; and
wherein the biometric information is stored in the obscured format.

6. The method of claim 1 , wherein the first biometric information is an obfuscated circuit.

7. The method of claim 1 , wherein the first biometric information is formed using a cryptographic key.

8. The method of claim 5 , wherein the biometric information is stored in correspondence with an account information of the plurality of users, respectively.

9. The method of claim 8 , further comprising:
receiving a message comprising the account information of the user that is used by the access device to complete the interaction.

10. An access device comprising:
at least one processor; and
a non-transitory computer-readable storage medium comprising code which, when executed by the at least one processor, causes the at least one processor to perform a method including:
receiving, from a user device, a first biometric sample of a user operating the user device, for conducting an interaction;
generating first biometric information in an obscured format, based on the first biometric sample;
transmitting, by the access device to a service provider computer, a request for biometric information associated with a plurality of users whose biometric information was respectively obtained from corresponding biometric samples of the plurality of users and stored in a database by the service provider computer prior to the receiving the first biometric sample;
in response to the request, receiving, by the access device from the service provider computer, a first plurality of biometric information in an obscured format, wherein the first plurality of biometric information respectively corresponds to a first plurality of users operating a first plurality of user devices, which are determined to be within a predetermined distance of the access device based on the request, among a plurality of user devices associated with the plurality of users, wherein the first plurality of biometric information is a subset of the biometric information associated with the plurality of users;
comparing the first biometric information in the obscured format to the first plurality of biometric information in the obscured format;
generating a match result based on the comparing;
providing, to a server computer, the match result; and
in response to the match result being provided, receiving information indicating that one of the first plurality of users that is associated with one of the first plurality of biometric information is the user associated with the first biometric information.

11. The access device of claim 10 , wherein the first biometric information is generated in response to a request to access a resource managed by the access device.

12. The access device of claim 10 , wherein the receiving the information further includes receiving a message indicative of the match result that includes a likelihood value.

13. The access device of claim 12 , wherein the likelihood value comprises a percentage.

14. The access device of claim 12 , wherein the method further includes determining whether to complete the interaction based on the likelihood value.

15. The access device of claim 14 , wherein the determining whether to complete the interaction further includes:
determining to complete the interaction if the likelihood value is greater than an acceptable level of a risk threshold.

16. The access device of claim 15 , wherein the acceptable level of the risk threshold is selected by the user.

17. The access device of claim 15 , wherein the acceptable level of the risk threshold is specific to the access device.

18. The access device of claim 10 , wherein the
biometric information associated with the plurality of users is obtained from the corresponding biometric samples respectively provided by the plurality of users during an enrollment process,
wherein the biometric information is in the obscured format, and
wherein the comparing further includes comparing the first biometric information to the first plurality of biometric information without decrypting the first biometric information and the first plurality of biometric information.

Assignees

• Visa Int Service Ass

Inventors

• Wagner Kim R
• Best-Rowden Lacey
• Sheets John F

Classifications

• H04W12/64

  using geofenced areas · CPC title

• H04W12/06

  Authentication · CPC title

• H04L2209/46

  Secure multiparty computation, e.g. millionaire problem · CPC title

• H04L9/3231

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• H04L9/008

  involving homomorphic encryption · CPC title