Systems and methods for secure and efficient enrollment into a federation which utilizes a biometric repository

• US 8,819,793 B2
• Filed: 09/20/2011
• Issued: 08/26/2014
• Est. Priority Date: 09/20/2011
• Status: Active Grant

• Current Assignee: Csidentity Corporation (Experian plc)
• Original Assignee: Csidentity Corporation (Experian plc)
• Inventors: Gottschalk, Harold E. Jr.
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US13/236,687
• Publication Number:
  US 20130074166A1
• Time in Patent Office: 1,071 Days
• Field of Search: 726/6, 713/186, 380/277
• US Class Current: 726/6
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method includes receiving data related to an individual, the data comprising a plurality of elements of personally-identifying information (PII). The method further includes building, via the plurality of elements of the PII, a compositional key for the individual. In addition, the method includes storing the compositional key and a biometric print for the individual as a biometric record in a biometric repository. The method also includes, via the compositional key, providing a plurality of federated entity (FE) computer systems with access to the biometric repository.

Claims

1. A method comprising:

receiving data related to an individual, the data comprising a plurality of elements of personally-identifying information (PII);

creating a compositional key for the individual via a one-way hashing function, the one-way hashing function using the plurality of elements of PII as input;

storing the compositional key and a biometric print for the individual as a biometric record in a biometric repository;

via the compositional key, providing a plurality of federated entity (FE) computer systems with access to the biometric repository;

receiving a request for biometric verification of an unverified individual from an FE computer system, the request comprising a representation that the unverified individual has an assigned compositional key that is not known, the request comprising PII;

building, via the PII from the request, a candidate compositional key;

identifying one or more compositional keys in the biometric repository that at least partially match the candidate compositional key; and

verifying a biometric sample for the individual against a biometric print associated with each of the one or more compositional keys.

2. The method of claim 1, wherein the receiving comprises receiving the PII and the biometric print from an FE computer system of the plurality of FE computer systems.

3. The method of claim 2, comprising returning the compositional key to the FE computer system.

4. The method of claim 2, wherein the biometric record does not include the PII.

5. The method of claim 1, wherein the biometric print is selected from the group consisting of:

a voiceprint;

a fingerprint;

a retinal print;

a facial print; and

a DNA print.

6. The method of claim 1, wherein the biometric print comprises a voiceprint.

7. The method of claim 1, comprising:

receiving an asserted compositional key from an FE computer system in connection with a biometric-verification request;

verifying whether the asserted compositional key matches an existing compositional key in the biometric repository; and

verifying a biometric sample against a biometric print associated with the existing compositional key.

8. The method of claim 7, wherein the biometric-verification request is made in connection with a request for enrollment into the FE computer system.

9. The method of claim 1, comprising:

responsive to the biometric sample for the individual matching exactly one biometric print in the verifying step;

considering the unverified individual to be verified; and

returning a record to the FE computer system, the record comprising a matching one of the one or more compositional keys.

10. The method of claim 1, wherein the request for biometric verification is in connection with a request for enrollment into the FE computer system.

11. A computer-program product comprising a non-transitory computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method comprising:

receiving data related to an individual, the data comprising a plurality of elements of personally-identifying information (PII);

creating a compositional key for the individual via a one-way hashing function, the one-way hashing function using the plurality of elements of PII as input;

storing the compositional key and a biometric print for the individual as a biometric record in a biometric repository; and

via the compositional key, providing a plurality of federated entity (FE) computer systems with access to the biometric repository

receiving a request for biometric verification of an unverified individual from an FE computer system, the request comprising a representation that the unverified individual has an assigned compositional key that is not known, the request comprising PII;

building, via the PII from the request, a candidate compositional key;

identifying one or more compositional keys in the biometric repository that at least partially match the candidate compositional key; and

verifying a biometric sample for the individual against a biometric print associated with each of the one or more compositional keys.

12. The computer-program product of claim 11, wherein the receiving comprises receiving the PII and the biometric print from an FE computer system of the plurality of FE computer systems.

13. The computer-program product of claim 12, wherein the method comprises returning the compositional key to the FE computer system.

14. The computer-program product of claim 12, wherein the biometric record does not include the PII.

15. The computer-program product of claim 11, wherein the biometric print is selected from the group consisting of:

a voiceprint;

a fingerprint;

a retinal print;

a facial print; and

a DNA print.

16. The computer-program product of claim 11, wherein the biometric print comprises a voiceprint.

17. The computer-program product of claim 11, wherein the method comprises:

receiving an asserted compositional key from an FE computer system in connection with a biometric-verification request;

verifying whether the asserted compositional key matches an existing compositional key in the biometric repository; and

verifying a biometric sample against a biometric print associated with the existing compositional key.

18. The computer-program product of claim 17, wherein the biometric-verification request is in connection with a request for enrollment into the FE computer system.

19. The computer-program product of claim 11, wherein the method comprises:

responsive to the biometric sample for the unverified individual matching exactly one biometric print in the verifying step;

considering the unverified individual to be verified; and

returning a record to the FE computer system, the record comprising a matching one of the one or more compositional keys.

20. The computer-program product of claim 11, wherein the request for biometric verification is in connection with a request for enrollment into the FE computer system.