SYSTEM FOR GENERATING PERSONALIZED SERVICE CONTENT

• US 20200136818A1
• Filed: 10/25/2018
• Published: 04/30/2020
• Est. Priority Date: 10/25/2018
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: JIANG, Shun, DUAN, Xiaonan, MEGAHED, Aly, NAZEEM, Ahmed
• Application Number:
  US16/171,312
• Publication Number:
  US 20200136818A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 9/008 involving homomorphic encryption
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system may include registration devices configured to generate, in a trusted environment, respective fully homomorphic encryption (FHE) biometric image registration records for first users. A registration data storage device may, in a non-trusted environment, store the FHE biometric image registration records and associated service context data. Capture devices may, in a less-trusted environment, generate respective FHE biometric image recognition records for second users at least partially overlapping the first users. A recognition data storage device may, in a non-trusted environment, store the FHE biometric image recognition records, and a recognition device, in a non-trusted environment, calculates encrypted distances between each FHE biometric image recognition and registration records, and retrieves respective service context data based upon the encrypted distances. Service provider devices may, in a non-trusted environment, generate personalized service content for the second plurality of users based upon the encrypted distances and the retrieved service context data.

Claims

1. A system for generating personalized service content comprising:

a plurality of registration devices configured to generate, in a trusted environment, respective fully homomorphic encryption (FHE) biometric image registration records for a first plurality of users;

a registration data storage device configured to, in a non-trusted environment, store the FHE biometric image registration records and associated service context data;

a plurality of capture devices configured to, in a less-trusted environment, generate respective FHE biometric image recognition records for a second plurality of users at least partially overlapping the first plurality of users;

a recognition data storage device configured to, in a non-trusted environment, store the FHE biometric image recognition records;

a recognition device configured to, in a non-trusted environment, calculate a plurality of encrypted distances between each FHE biometric image recognition record and the FHE biometric image registration records, and retrieve respective service context data for the FHE biometric image recognition records based upon the plurality of encrypted distances; and

a plurality of service provider devices configured to, in a non-trusted environment, generate personalized service content for the second plurality of users based upon the plurality of encrypted distances and the retrieved service context data.

2. The system of claim 1 comprising a protection device configured to, in a trusted environment, generate an encryption key;

and wherein each registration device is configured to receive the service context data, capture and extract biometric image features, and encrypt the biometric image features using the encryption key to generate each FHE biometric image registration record.

3. The system of claim 1 comprising a protection device configured to, in a trusted environment, generate an encryption key;

and wherein each capture device is configured to capture and extract biometric image features, and encrypt the biometric image features using the encryption key to generate each FHE biometric image recognition record.

4. The system of claim 1 wherein the recognition device is configured to retrieve respective service context data for the FHE biometric image recognition records based upon a plurality of lowest encrypted distances.

5. The system of claim 4 wherein the recognition device is configured to generate a respective index corresponding to each of the plurality of lowest encrypted distances;

and wherein the plurality of service provider devices is configured to generate the personalized service content for the second plurality of users based upon the respective indexes.

6. The system of claim 1 comprising a protection device in a trusted environment;

and wherein the recognition device is configured to communicate the plurality of encrypted distances to the protection device.

7. The system of claim 1 wherein the plurality of capture devices comprises at least one camera.

8. The system of claim 1 further comprising a display cooperating with a respective one of the plurality of service provider devices to display respective personalized service content.

9. The system of claim 1 wherein the recognition device is configured to retrieve respective service context data for the FHE biometric image recognition records using deep learning based upon the plurality of encrypted distances.

10. The system of claim 1 wherein the service context data comprises geographical location data.

11. A method of generating personalized service content, the method comprising:

using a registration data storage device to, in a non-trusted environment, store fully homomorphic encryption (FHE) biometric image registration records and associated service context data, respective FHE biometric image registration records being generated for a first plurality of users, in a trusted environment, by a plurality of registration devices;

using a recognition data storage device to, in a non-trusted environment, store FHE biometric image recognition records, respective FHE biometric image recognition records being generated for a second plurality of users at least partially overlapping the first plurality of users, in a less-trusted environment, by a plurality of capture devices; and

using a recognition device to, in a non-trusted environment, calculate a plurality of encrypted distances between each FHE biometric image recognition record and the FHE biometric image registration records, and retrieve respective service context data for the FHE biometric image recognition records based upon the plurality of encrypted distances so that a plurality of service provider devices, in a non-trusted environment, generate the personalized service content for the second plurality of users based upon the plurality of encrypted distances and the retrieved service context data.

12. The method of claim 11 further comprising using a protection device to, in a trusted environment, generate an encryption key;

and wherein each registration device receives the service context data, captures and extracts biometric image features, and encrypts the biometric image features using the encryption key to generate each FHE biometric image registration record.

13. The method of claim 11 further comprising using a protection device to, in a trusted environment, generate an encryption key;

and wherein each capture device is configured to capture and extract biometric image features, and encrypt the biometric image features using the encryption key to generate each FHE biometric image recognition record.

14. The method of claim 11 wherein using the recognition device comprises using the recognition device to retrieve respective service context data for the FHE biometric image recognition records based upon a plurality of lowest encrypted distances.

15. The method of claim 14 wherein using the recognition device comprises using the recognition device to generate a respective index corresponding to each of the plurality of lowest encrypted distances;

and wherein the plurality of service provider devices generate the personalized service content for the second plurality of users based upon the respective indexes.

16. The method of claim 11 wherein using the recognition device comprises using the recognition device to retrieve respective service context data for the FHE biometric image recognition records using deep learning based upon the plurality of encrypted distances.

17. A computer readable medium for generating personalized service content, the computer readable medium comprising computer executable instructions that when executed by a processor cause the processor to perform operations comprising:

in a non-trusted environment, storing fully homomorphic encryption (FHE) biometric image registration records and associated service context data in a registration data storage device, respective FHE biometric image registration records being generated for a first plurality of users, in a trusted environment, by a plurality of registration devices;

in a non-trusted environment, storing FHE biometric image recognition records in a recognition data storage device, respective FHE biometric image recognition records being generated for a second plurality of users at least partially overlapping the first plurality of users, in a less-trusted environment, by a plurality of capture devices; and

in a non-trusted environment, calculating a plurality of encrypted distances between each FHE biometric image recognition record and the FHE biometric image registration records, and retrieving respective service context data for the FHE biometric image recognition records based upon the plurality of encrypted distances so that a plurality of service provider devices, in a non-trusted environment, generate the personalized service content for the second plurality of users based upon the plurality of encrypted distances and the retrieved service context data.

18. The computer readable medium of claim 17 wherein the operations comprise, in a trusted environment, generating an encryption key;

and wherein each registration device receives the service context data, capture and extract biometric image features, and encrypt the biometric image features using the encryption key to generate each FHE biometric image registration record.

19. The computer readable medium of claim 17 wherein the operations comprise, in a trusted environment, generating an encryption key;

and wherein each capture device is configured to capture and extract biometric image features, and encrypt the biometric image features using the encryption key to generate each FHE biometric image recognition record.

20. The computer readable medium of claim 17 wherein the operations comprise retrieving respective service context data for the FHE biometric image recognition records based upon a plurality of lowest encrypted distances.