Systems and methods for an incremental, reversible and decentralized biometric identity management system

• US 10,078,758 B1
• Filed: 08/18/2017
• Issued: 09/18/2018
• Est. Priority Date: 08/18/2017
• Status: Active Grant

• Current Assignee: Keith J. Hanna
• Original Assignee: Keith J. Hanna
• Inventors: Hanna, Keith J.
• Primary Examiner(s): Hoffman, Brandon S
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US15/681,104
• Time in Patent Office: 396 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06F 16/2457 with adaptation to user needs
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

This disclosure describes methods and systems for a biometric identity management system capable of being deployed incrementally one organization at a time, and also reversibly, such that any organization can unsubscribe at any time. A biometric processing engine can perform biometric matching between records from a first database and a second database, whereby the databases have been established independently of each other. Each record comprises a biometric record and a corresponding identifier unique across databases. If a biometric record of a first record and a biometric record of a second record are from a same individual, the first record comprising a first unique identifier and the second record comprising a second unique identifier are linked. Using the first or second unique identifiers, access to information about the individual linked to both the first record in the first database and the second record in the second database is provided.

Claims

1. A method for an identity management system capable of being deployed incrementally, comprising:

performing, by a biometric processing engine executing on at least one server, biometric matching between a first plurality of records from a first database and a second plurality of records from a second database, the first database and the second database comprising health-based databases established independently of each other, wherein each record from the first and second pluralities of records comprises a biometric record, and a corresponding identifier implemented to be unique across databases including the first and second databases;

determining, by the biometric processing engine, that a first biometric record of a first record from the first database and a second biometric record of a second record from the second database, are from a same individual, the first record comprising a first unique identifier and the second record comprising a second unique identifier;

maintaining, by a records arbitrator, in a poly-unique identity table on a storage device responsive to the determination, a link between the first unique identifier of the first record from the first database, and the second unique identifier of the second record from the second database; and

providing, by the records arbitrator via one or more network interfaces to the first and second databases, in response to receiving a request identifying the first unique identifier or the second unique identifier, access to information about the individual linked to or stored with the first record of the first database, and information about the individual linked to or stored with the second record of the second database, according to the link maintained in the poly-unique identity table.

2. The method of claim 1, wherein determining that the first biometric record and the second biometric record are from the same individual comprises determining that a level of matching between the first biometric record and the second biometric record exceeds a predefined threshold.

3. The method of claim 1, wherein each of the first biometric record and the second biometric record includes two types of biometric data.

4. The method of claim 1, further comprising using the first unique identifier or the second unique identifier identified in the received request, to index into the poly-unique identity table to identify the first record of the first database and the second record of the second database.

5. The method of claim 1, wherein the information about the individual linked to the first record and the information about the individual linked to the second record comprise at least one of medical, criminal or credit-score related information.

6. The method of claim 1, further comprising:

performing biometric matching between a third plurality of records from a third database of the databases, and at least one of the first and second pluralities of records, the third database established independently of the first and second databases;

determining that a third biometric record of a third record from the third database is from the same individual, the third record comprising a third unique identifier; and

updating, by the records arbitrator, in the poly-unique identity table responsive to the determination that the third biometric record is from the same individual, the link to include the third unique identifier of the third record from the third database.

7. The method of claim 1, further comprising:

determining that a third biometric record of a third record from the first database is from an individual different from that corresponding to other biometric records in the first and second databases, the third record comprising a third unique identifier; and

maintaining, by the records arbitrator, in the poly-unique identity table, an entry with the third unique identifier of the third record from the first database.

8. The method of claim 1, further comprising removing, by the records arbitrator, from the poly-unique identity table, the link between the first unique identifier of the first record from the first database and the second unique identifier of the second record from the second database, responsive to an instruction to cease providing access to the information stored in the first database.

9. The method of claim 1, wherein the first database, the second database, and the poly-unique identity table are each maintained by a different organization or entity.

10. The method of claim 1, wherein the first database and the poly-unique identity table are maintained by a first organization or entity, and the second database is maintained by a second organization or entity.

11. A system for decentralized identity management, that is capable of being deployed incrementally, the system comprising:

a biometric processing engine executing on at least one server, the biometric processing engine configured to;

perform biometric matching between a first plurality of records from a first database and a second plurality of records from a second database, the first database and the second database comprising health-based databases established independently of each other, wherein each record from the first and second pluralities of records comprises a biometric record, and a corresponding identifier implemented to be unique across databases including the first and second databases;

determine that a first biometric record of a first record from the first database and a second biometric record of a second record from the second database, are from a same individual, the first record comprising a first unique identifier and the second record comprising a second unique identifier;

one or more network interfaces to the first and second databases; and

a records arbitrator configured to;

maintain, responsive to the determination, in a poly-unique identity table on a storage device, a link between the first unique identifier of the first record from the first database, and the second unique identifier of the second record from the second database; and

provide, via the one or more network interfaces, in response to receiving a request identifying the first unique identifier or the second unique identifier, access to information about the individual linked to or stored with the first record of the first database, and information about the individual linked to or stored with the second record of the second database, according to the link maintained in the poly-unique identity table.

12. The system of claim 11, wherein the biometric processing engine is further configured to determine that the first biometric record and the second biometric record are from the same individual, by determining that a level of matching between the first biometric record and the second biometric record exceeds a predefined threshold.

13. The system of claim 11, wherein each of the first biometric record and the second biometric record includes two types of biometric data.

14. The system of claim 11, wherein the records arbitrator is further configured to use the first unique identifier or the second unique identifier identified in the received request, to index into the poly-unique identity table to identify the first record of the first database and the second record of the second database.

15. The system of claim 11, wherein the information about the individual linked to the first record and the information about the individual linked to the second record comprise at least one of medical, criminal or credit-score related information.

16. The system of claim 11, wherein

the biometric processing engine is further configured to:

perform biometric matching between a third plurality of records from a third database of the databases, and at least one of the first and second pluralities of records, the third database established independently of the first and second databases; and

determine that a third biometric record of a third record from the third database is from the same individual, the third record comprising a third unique identifier; and

the records arbitrator is further configured to update, in the poly-unique identity table responsive to the determination that the third biometric record is from the same individual, the link to include the third unique identifier of the third record from the third database.

17. The system of claim 11, wherein

the biometric processing engine is further configured to determine that a third biometric record of a third record from the first database is from an individual different from that corresponding to other biometric records in the first and second databases, the third record comprising a third unique identifier;

and

the records arbitrator is further configured to maintain, in the poly-unique identity table, an entry with the third unique identifier of the third record from the first database.

18. The system of claim 11, wherein the records arbitrator is further configured to remove, from the poly-unique identity table, the link between the first unique identifier of the first record from the first database and the second unique identifier of the second record from the second database, responsive to an instruction to cease providing access to the information stored in the first database.

19. The system of claim 11, wherein the first database, the second database, and the poly-unique identity table are each maintained by a different organization or entity.

20. The system of claim 11, wherein the first database and the poly-unique identity table are maintained by a first organization or entity, and the second database is maintained by a second organization or entity.