Biometric based user authentication with syndrome codes

• US 20060123239A1
• Filed: 12/07/2004
• Published: 06/08/2006
• Est. Priority Date: 12/07/2004
• Status: Abandoned Application

• Current Assignee: Mitsubishi Electric Research Laboratories, Inc. (Mitsubishi Electric Corporation)
• Original Assignee: Mitsubishi Electric Research Laboratories, Inc. (Mitsubishi Electric Corporation)
• Inventors: Vetro, Anthony, Martinian, Emin
• Application Number:
  US11/006,308
• Publication Number:
  US 20060123239A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

Biometric parameters acquired from human faces, voices, fingerprints, and irises are used for user authentication and access control. Because the biometric parameters are continuous and vary from one reading to the next, syndrome codes are applied to determine biometric syndromes. The biometric syndromes can be stored securely, while tolerating an inherent variability of biometric data. The stored biometric syndrome is decoded during user authentication using biometric parameters acquired at that time. Specifically, during enrollment, enrollment biometric parameters are acquired from a user and encoded as a syndrome. A hash function is applied to the syndrome to produce an enrollment hash. The syndrome and hash as stored in a database. During user authentication, the enrollment syndrome is decoded using a syndrome decoder and authentication biometric parameters of the user to produce decoded biometric parameters. The hash function is applied to the decoded biometric parameters to produce an authentication hash. The authentication hash and the enrollment hash are compared to determine whether user access is granted.

Claims

1. A method securely storing biometric parameters in a database, comprising:

encoding enrollment biometric parameters of a user using a syndrome encoder to produce an enrollment syndrome;

applying a hash function to the enrollment syndrome to produce an enrollment hash; and

storing the enrollment syndrome and the enrollment hash in a database.

2. The method of claim 1, further comprising:

acquiring enrollment biometric data from a user; and

extracting the enrollment biometric parameters from the enrollment biometric data.

3. The method of claim 2, in which the enrollment biometric data is an image of a face.

4. The method of claim 2, in which the enrollment biometric data is a recording of a voice.

5. The method of claim 2, in which the enrollment biometric data is an image of a fingerprint.

6. The method of claim 2, in which the enrollment biometric data is an image of an iris.

7. The method of claim 1, in which the hash function is a cryptographic hash function.

8. The method of claim 1, in which the syndrome encoder is a Slepian-Wolf encoder.

9. The method of claim 1, in which the syndrome encoder is a Wyner-Ziv encoder.

10. The method of claim 1, in which the syndrome encoder uses a serially concatenated accumulate code.

11. The method of claim 1, in which the enrollment biometric parameters have integer values.

12. The method of claim 1, in which the syndrome code is a compression of the enrollment biometric parameters.

13. The method of claim 1, in which the syndrome encoder is rate-adaptive.

14. The method of claim 1, in which the syndrome encoder is incremental.

15. The method of claim 1, further comprising:

acquiring authentication biometric parameters from the user;

decoding the enrollment syndrome using a syndrome decoder and the authentication biometric parameters to produce decoded biometric parameters;

applying the hash function to the decoded biometric parameters to produce an authentication hash; and

comparing the authentication hash and the enrollment hash to determine whether access is granted.

16. The method of claim 15, further comprising:

comparing the authentication biometric parameters to the decoded enrollment biometric parameters to confirm whether access is granted.

17. The method of claim 15, in which the syndrome decoder uses belief propagation.

18. The method of claim 15, in which the syndrome decoder uses turbo codes.

19. The method of claim 15, in which the syndrome decoding uses a Viterbi algorithm.

20. A system for securely storing biometric parameters in a database, comprising:

means for acquiring enrollment biometric parameters from a user;

a syndrome encoder configured to encode the enrollment biometric parameters as an enrollment syndrome;

a hash function configured to produce an enrollment hash from the enrollment syndrome; and

a database configured to store the enrollment syndrome and the enrollment hash.

21. The system of claim 20, further comprising:

means for acquiring authentication biometric parameters from the user;

a decoder configured to decode the enrollment syndrome using the authentication biometric parameters to produce decoded biometric parameters;

means for applying the hash function to the decoded biometric parameters to produce an authentication hash; and

means for comparing the authentication hash and the enrollment hash to determine whether access is granted.

22. A method for securely storing biometric parameters in a database and authenticating users, comprising:

encoding enrollment biometric parameters of a user using a syndrome encoder to produce an enrollment syndrome;

applying a hash function to the enrollment syndrome to produce an enrollment hash;

decoding the enrollment syndrome using a syndrome decoder and authentication biometric parameters of the user to produce decoded biometric parameters;

applying the hash function to the decoded biometric parameters to produce an authentication hash; and

comparing the authentication hash and the enrollment hash to determine whether access is granted.