Biometric metadata bureau

• US 10,033,733 B2
• Filed: 03/25/2016
• Issued: 07/24/2018
• Est. Priority Date: 03/25/2016
• Status: Active Grant

• Current Assignee: Experian Health, Inc. (Experian plc)
• Original Assignee: Experian Health, Inc. (Experian plc)
• Inventors: Baltzer, Matthew, Katz, Elazar
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/081,683
• Publication Number:
  US 20170279799A1
• Time in Patent Office: 851 Days
• CPC Class Codes: G06V 40/1359 Extracting features related to ridge properties; Determining the fingerprint type, e.g. whorl or loop
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

Biometric markers are seen as a secure and convenient way to control an individual'"'"'s access to systems. The data that comprise these access controls, however, can be spoofed by nefarious third parties. Therefore, systems and methods are provided that track metadata related to the usage of biometric markers as access control devices to improve the security of systems using biometric markers for access control and to improve the speed and efficiency for systems when re-granting access for an individual in the event that access was revoked or suspended. A bureau collects metadata related to the authentication of individuals via biometric markers and the activities of the individual and the systems accessed. These metadata are used by the bureau to alert affected parties of potential misuse of biometric data and to reduce the processing requirements, storage requirements, and number of communications to on-board or re-authenticate an individual.

Claims

1. A system for improving speed, efficiency, and security of authenticators that use biometric markers for access control, comprising:

a processor; and

a memory device including instructions, which when executed by the processor are operable to provide;

a bureau, located remotely from the authenticators, for collecting metadata on the biometric markers being used for access control and managing use of the biometric markers, wherein the bureau further comprises;

a bureau receiver, in communication with the authenticators, to receive communications from the authenticators regarding access conditions for using the biometric markers for access control;

a bureau database, to store a meta dataset including information regarding the access conditions for using the biometric markers for access control;

a bureau analyzer to extract the metadata from the communications to build the meta dataset, determine a use deviation for a biometric marker associated with a biometric dataset for a given individual when compared to the meta dataset, and prevent future use of the biometric marker associated with the given biometric dataset according to the use deviation; and

a bureau transmitter, in communication with the authenticators and the bureau analyzer, to transmit an alert to the authenticators when the use deviation is detected to prevent the future use of the biometric marker associated with the given biometric dataset.

2. The system of claim 1, wherein the bureau is further operable to generate reports regarding the access conditions for using the biometric markers, wherein the reports specify an organization scheme chosen from:

organized by an individual;

organized by a domain to which access is granted;

organized by a general biometric marker in general for the domain; and

organized by a specific biometric marker from the individual.

3. The system of claim 1, wherein the alert requests a different biometric marker from an individual than the biometric markers involved in the use deviation.

4. The system of claim 1, wherein the meta dataset is built from an initial on-boarding of the biometric markers for granting access control.

5. The system of claim 1, wherein the meta dataset is extracted from header information in the communications.

6. The system of claim 1, wherein an authenticator comprises a local portion, from which the bureau receives datasets for the biometric markers, and a remote portion, to which the datasets for the biometric markers grant access.

7. The system of claim 6, wherein the bureau acts as a clearing house, forwarding messages between the local portion and the remote portion.

8. The system of claim 6, wherein authentication requirements for the remote portion are transmitted by the bureau to the local portion to enable the local portion to transmit the datasets for the biometric markers in formats acceptable to the remote portion.

9. A method for improving speed, efficiency, and security of authenticators that use biometric markers for access control, comprising:

receiving on-boarding information at a bureau, including a biometric dataset for a biometric marker of an individual, and an authentication dataset, specifying how the individual was identified for on-boarding;

collecting, at the bureau, current usage information of the biometric dataset in relation to a remote system to build a meta dataset, wherein the meta dataset comprises historic usage information related to access conditions surrounding usage of the biometric marker;

determining, based on comparing the current usage information to the historic usage information, whether the current usage information indicates a deviation in use of the biometric marker associated with the biometric dataset for the remote system for the individual;

preventing future use of the biometric marker associated with the given biometric dataset according to the use deviation;

transmitting an alert of the use deviation when the current usage information indicates the use deviation to prevent the future use of the biometric marker associated with the given biometric dataset for the remote system; and

continue collecting usage information when the current usage information does not indicate the use deviation.

10. The method of claim 9, further comprising transmitting the alert to the individual.

11. The method of claim 10, wherein the alert includes a request for an alternate authentication from the individual.

12. The method of claim 11, wherein the alternate authentication from the individual is chosen from:

a password;

a personal identification number;

a pattern;

a security question and response pair; and

a different biometric marker.

13. The method of claim 9, further comprising transmitting the alert to all remote systems known to the bureau to use the biometric marker involved in the deviation in use of the biometric marker.

14. The method of claim 9, wherein the deviation in use is a data breach of the remote system.

15. The method of claim 9, wherein the remote system includes authentication requirements, specifying the access conditions required by the remote system to accept the biometric dataset to grant access to the remote system, which are transmitted to the individual by the bureau to ensure that the authentication dataset meets the authentication requirements.

16. The method of claim 9, further comprising:

providing, from the bureau to the individual, a list of remote systems that use a given biometric dataset.

17. A system for improving speed, efficiency, and security of authenticators that use biometric markers for access control, comprising:

a memory;

a remote portion of an authenticator, including a remote system to which access is granted via a biometric dataset;

a local portion of the authenticator, including a biometric scanner operable to scan the biometric markers to produce the biometric dataset, wherein the local portion is in communication with the remote portion via a network to request access to the remote system; and

a bureau disposed between the local portion and the remote portion, monitor communications between the local portion and the remote portion over the network to collect a meta dataset on access conditions for how the biometric dataset is used, wherein the meta dataset includes information on a location where the local portion is located when access to the remote system is requested, a time when the access to the remote system is requested, and how the biometric dataset was on-boarded and associated with an individual for the remote system;

wherein the bureau determines from the communications between the local portion and the remote portion that a use deviation has occurred for a biometric marker associated with the biometric dataset when the communications include metadata that do not match the information stored in the meta dataset to prevent future use of the biometric marker associated with the given biometric dataset according to the use deviation, and generate an alert in response to the use deviation to prevent the future use of the biometric marker associated with the given biometric dataset.

18. The system of claim 17, wherein the alert is transmitted by the bureau to the local portion of the authenticator and indicates the metadata that did not match the information stored in the meta dataset.

19. The system of claim 18, wherein the bureau is operable to receive from the local portion a command to accept the use deviation as acceptable, wherein the metadata that did not match the information stored in the meta dataset is added to the meta dataset.

20. The system of claim 17, wherein the alert is transmitted by the bureau to the remote portion of the authenticator with a command to terminate an access granted to the remote portion by a biometric marker in response to the use deviation.