Offline User Identification

• US 20180114219A1
• Filed: 10/20/2016
• Published: 04/26/2018
• Est. Priority Date: 10/20/2016
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Setchell, William, Palczewski, Michal, Zhao, Yichen, Duong, Thai, Valverde, Thiago
• Granted Patent: US 11,062,304 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A service provider system registers with a service system. A user establishes an account with the service system and the service system establishes a facial template associated with the user account. The service system transmits, to a service provider device at a location, identification information and transmits a shared encryption key to a user computing device associated with the user. The user enters the merchant location carrying the user computing device. The service device receives the encryption key from the user device and decrypts the identification information associated with the user using the encryption key. The user initiates a service request and the service provider device verifies the identity of the user via the facial template associated with the user by generating a facial template based on an image captured of the user to compare against the facial template associated with the user. The service device processes the service request.

Claims

1. A computer-implemented method to identify users via encrypted information, comprising:

receiving, by a provider computing device, encrypted identification information associated with a user;

at a time after receiving the encrypted identification information, receiving, by the provider computing device and from a user computing device that has entered a location associated with the provider computing device, a cryptographic key, the user computing device being associated with the user;

decrypting, by the provider computing device and using the cryptographic key, the encrypted identification information to access unencrypted identification information;

verifying, by the provider computing device and using the unencrypted identification information, an identity of the user;

processing, by the provider computing device, a request in response to verifying the identify of the user.

2. The method of claim 1, further comprising:

detecting, by the user computing device, that the user computing device entered the location associated with the provider computing device; and

in response to detecting, by the user computing device, that the user computing device entered the location associated with the provider computing device, communicating, by the user computing device, the encryption key to the provider computing device.

3. The method of claim 1, further comprising, receiving, by the provider computing device at a time before receiving the cryptographic key from the user computing device, a plurality of encrypted identification information associated with a plurality of respective users, including the encrypted identification information associated with the user;

and

storing, by the provider computing device, the plurality of received encrypted identification information.

4. The method of claim 1, wherein the encrypted identification information comprises a facial template of the user, and wherein verifying, using the unencrypted identification information, the identity of the user comprises:

capturing, by a camera associated with the provider computing device, a video feed of an environment external to the computing device;

extracting, by the provider computing device, a facial image of the user from the video feed;

generating, by the provider computing device, a facial template based on the extracted facial image, the facial template comprising a representation of the extracted facial image;

retrieving, by the provider computing device, one or more stored facial templates associated with users located at the location;

determining, by the provider computing device, a similarity between the generated facial template and each of the one or more stored facial templates; and

identifying, by the provider computing device, a particular stored facial template that corresponds to the generated facial template based on a determination that the similarity between the generated facial template and the stored facial template exceeds a similarly threshold.

5. The method of claim 1, wherein processing the request comprises granting access to a secure location.

6. The method of claim 1, wherein processing the request comprises granting, to the user computing device, access to data.

7. The method of claim 1, further comprising:

receiving, by the provider computing device, payment account information at a time after receiving the cryptographic key from the user computing device,

wherein the request comprises a request to process a transaction, and wherein processing the request comprises processing, by the provider computing device, the requested transaction by communicating with a computing device of an issuer system associated with the payment account information.

8. The method of claim 1, wherein the provider computing device receives the encrypted identification information associated with the user based on a determination that a likelihood of the user visiting the location associated with the provider computing device is greater than a threshold likelihood.

9. A computer program product, comprising:

a non-transitory computer-readable medium having computer-readable program instructions embodied thereon that when executed by a computer cause the computer to identify users, the computer-readable program instructions comprising;

computer-readable program instructions to receive, from one or more computing devices, encrypted identification information associated with a user account comprising a facial template of the user, the facial template comprising a representation of a facial image of the user;

at a time after receiving the encrypted identification information, computer-readable program instructions to receive, from a user computing device that has entered a location associated with the computer, a cryptographic key, the user computing device being associated with the user;

computer-readable program instructions to decrypt, using the cryptographic key, the encrypted identification information to access unencrypted identification information;

computer-readable program instructions to capture, by a camera device, a video feed of an environment external to the computing device;

computer-readable program instructions to extract a facial image of the user from the video feed;

computer-readable program instructions to generate a facial template based on the facial image, the facial template comprising a representation of the facial image;

computer-readable program instructions to retrieve one or more stored facial templates associated with users located at a merchant location;

computer-readable program instructions to determine a similarity between the generated facial template and each of the one or more stored facial templates;

computer-readable program instructions to identify a particular stored facial template that corresponds to the generated facial template based on a determination that the similarity between the generated facial template and the stored facial template exceeds a similarly threshold; and

computer-readable program instructions to process a service request for the user account associated with the identified particular stored facial template in response to identifying the particular stored facial template.

10. The computer program product of claim 9, further comprising:

computer-readable program instructions to receive, from the one or more computing devices at a time before receiving the cryptographic key from the user computing device, one or more encrypted identification information associated with one or more respective user accounts including the encrypted identification information associated with the user account; and

computer-readable program instructions to store the one or more received encrypted identification information.

11. The computer program product of claim 10, wherein each encrypted identification information comprises a facial template of the respective user associated with the respective user account and wherein verifying, using the identification information an identity of the user associated with the user account comprises:

capturing a video feed of an environment external to the computing device;

extracting a facial image of the user from the video feed;

generating a facial template based on the facial image, the facial template comprising a representation of the facial image;

retrieving one or more stored facial templates associated with users located at a merchant location;

determining a similarity between the generated facial template and each of the one or more stored facial templates;

identifying a particular stored facial template that corresponds to the generated facial template based on a determination that the similarity between the generated facial template and the stored facial template exceeds a similarly threshold.

12. The method of claim 9, wherein processing the service request comprises granting access to a secure location.

13. The computer program product of claim 9, further comprising:

detecting, by the user computing device, that the user computing device entered the location associated with the provider computing device; and

in response to detecting, by the user computing device, that the user computing device entered the location associated with the provider computing device, communicating, by the user computing device, the encryption key to the computer.

14. The computer program product of claim 9, further comprising:

computer-readable program instructions to receive payment account information from the one or more computing devices at a time before receiving the cryptographic key from the user computing device,

wherein the service request comprises a request to process a transaction and wherein processing the service request comprises processing, by the computing device, the requested transaction by communicating with a computing device of an issuer system associated with the payment account information.

15. The computer program product of claim 9, wherein the one or more computing devices transmit the encrypted identification information associated with the user account based on a determination that the likelihood of the user of visiting a location is greater than a threshold likelihood.

16. A system to identify users, comprising:

a storage device; and

a processor communicatively coupled to the storage device, wherein the processor executes application code instructions that are stored in the storage device to cause the system to;

receive, from one or more computing devices, encrypted identification information associated with a user account comprising a facial template of the user, the facial template comprising a representation of a facial image of the user;

at a time after receiving the encrypted identification information, receive, from a user computing device associated with the user account that has entered a location associated with the system, a cryptographic key;

decrypt, using the cryptographic key, the encrypted identification information to access the identification information;

capture, by a camera device, a video feed of an environment external to the computing device;

extract a facial image of the user from the video feed;

generate a facial template based on the facial image, the facial template comprising a representation of the facial image;

retrieve one or more stored facial templates associated with users located at a merchant location;

determine a similarity between the generated facial template and each of the one or more stored facial templates;

identify a particular stored facial template that corresponds to the generated facial template based on a determination that the similarity between the generated facial template and the stored facial template exceeds a similarly threshold; and

process a service request for the user account associated with the identified particular stored facial template in response to identifying the particular stored facial template.

17. The system of claim 16, wherein the processor is figured to execute computer-executable program instructions to cause the system to:

receive, from the one or more computing devices at a time before receiving the cryptographic key from the user computing device, one or more encrypted identification information associated with one or more respective user accounts including the encrypted identification information associated with the user account; and

store the one or more received encrypted identification information.

18. The system of claim 16, wherein each encrypted identification information comprises a facial template of the respective user associated with the respective user account and wherein verifying, using the identification information an identity of the user associated with the user account comprises:

capturing, by a camera, a video feed of an environment external to the computing device;

extracting a facial image of the user from the video feed;

generating a facial template based on the facial image, the facial template comprising a representation of the facial image;

retrieving one or more stored facial templates associated with users located at a merchant location;

determining a similarity between the generated facial template and each of the one or more stored facial templates;

identifying a particular stored facial template that corresponds to the generated facial template based on a determination that the similarity between the generated facial template and the stored facial template exceeds a similarly threshold.

19. The system of claim 16, wherein processing the service request comprises granting access to a secure location or granting the user computing device access to data.

20. The system of claim 16, further comprising computer-readable program instructions that when executed by the processor cause the system to:

detecting, by the user computing device, that the user computing device entered the location associated with the system; and

in response to detecting, by the user computing device, that the user computing device entered the location associated with the system, communicating, by the user computing device, the encryption key to the system.