Steganographic image encoding of biometric template information on a card

• US 10,664,941 B1
• Filed: 12/24/2019
• Issued: 05/26/2020
• Est. Priority Date: 12/24/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Osborn, Kevin, Chigurupati, Srinivasa, Rule, Jeffrey
• Primary Examiner(s): Steinle, Andrew J
• Application Number:
  US16/726,565
• Time in Patent Office: 154 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06T 1/005 Robust watermarking, e.g. average attack or collusion attack resistant
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Various embodiments are generally directed to utilizing a steganographically encoded image with an offline and/or online verification or authentication protocol. A method for using the steganographic image can include: receiving or utilizing a steganographic image associated with a user at a third-party device, the steganographically encoded image including an identification of a user steganographically encoded with a fingerprint template of the user, and authenticating the user using the steganographically encoded image.

Claims

1. A method comprising:

communicating, by an application executing on a processor circuit of a computer device and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

performing at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receiving a steganographic image to authenticate a user associated with the computer device, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by;

certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

2. The method of claim 1, further comprising:

authenticating the user using the steganographic image.

3. The method of claim 2, the method further comprising:

comparing a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

4. The method of claim 1, wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises:

receiving, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key; and

subsequent to the verification of the digital signature, receiving a message that the user has been authenticated at the third-party device.

5. The method of claim 1, wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key;

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

6. The method of claim 1, wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises:

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key;

determining if a transaction associated with the communication with the third-party device exceeds a monetary threshold amount; and

if the transaction exceeds the monetary threshold amount, perform an additional security confirmation measure, and

if the transaction does not exceed the monetary threshold amount, receive a message that the user has been authenticated at the third-party device.

7. The method of claim 6, wherein the third-party device includes a fingerprint scanning device, and wherein the additional security confirmation measure comprises:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

8. The method of claim 6, wherein the third-party device includes a fingerprint scanning device and a fingerprint scanning device, and wherein the additional security confirmation measure comprises:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user;

transmitting both the scanned fingerprint template and the received fingerprint template to a server;

comparing, at the server, the scanned fingerprint template to the received fingerprint template for a match; and

receiving, at the third-party device and from the server, an indication confirming the match.

9. The method of claim 1, wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

in response to the communication, scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user;

transmitting both the scanned fingerprint template and the received fingerprint template to a server;

comparing, at the server, the scanned fingerprint template to the received fingerprint template for a match; and

if the scanned fingerprint template and the received fingerprint template match, then initiate a verification transaction comprising;

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key; and

subsequent to the verification of the digital signature, receiving a message that the user has been authenticated at the third-party device.

10. The method of claim 1, further comprising:

storing the steganographic image on a server.

11. The method of claim 10, wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

determining, by the application executing on the processor circuit, that a user has initiated a transaction with the third-party device in order to identify the user;

receiving, by the application, encrypted data from the communications interface of the contactless card, the encrypted data generated based a cryptographic algorithm and a diversified key, the diversified key stored in a memory of the contactless card and generated based on a master key and a counter value stored in the memory of the contactless card;

receiving, by the application from the server, verification of the encrypted data, the server to decrypt the encrypted data based on the cryptographic algorithm and the diversified key stored in a memory of the server to verify the encrypted data, the diversified key stored in the memory of the server generated based on a master key and a counter value stored in the memory of the server; and

receiving, by the application from the server, the steganographic image from the server.

12. The method of claim 11, further comprising:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

13. An apparatus, comprising:

a processor circuit; and

a memory storing instructions which when executed by the processor circuit, cause the processor circuit to;

communicate, by an application executing on the processor circuit and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

perform at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receive a steganographic image to authenticate a user, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by;

certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

14. The apparatus of claim 13, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

authenticate the user using the steganographic image.

15. The apparatus of claim 14, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

compare a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

16. The apparatus of claim 13, wherein the third-party device includes a digital reader, and wherein the instructions to perform the at least one verification operation comprise instructions which when executed by the processor circuit cause the processor circuit to:

receive, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instruct, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receive the digital signature from the card;

verify the digital signature using the public key; and

subsequent to the verification of the digital signature, receive a message that the user has been authenticated at the third-party device.

17. A non-transitory computer-readable storage medium comprising computer-readable instructions executable by a processor circuit to cause the processor circuit to:

communicate, by an application executing on the processor circuit and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

perform at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receive a steganographic image to authenticate a user, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by;

certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

18. The computer-readable storage medium of claim 17, comprising instructions executable by the processor circuit to cause the processor circuit to:

authenticate the user using the steganographic image.

19. The computer-readable storage medium of claim 18, comprising instructions executable by the processor circuit to cause the processor circuit to:

compare a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

20. The computer-readable storage medium of claim 17, wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises instructions executable by the processor circuit to cause the processor circuit to:

receive, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instruct, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receive the digital signature from the card;

verify the digital signature using the public key; and

subsequent to the verification of the digital signature, receive a message that the user has been authenticated at the third-party device.