US 11,943,363 B2
Server-assisted privacy protecting biometric comparison
John F. Sheets, San Francisco, CA (US); Kim R. Wagner, Sunnyvale, CA (US); Sunpreet Singh Arora, San Mateo, CA (US); Lacey Best-Rowden, San Mateo, CA (US); and Chunxi Jiang, San Francisco, CA (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Appl. No. 16/769,425
Filed by Visa International Service Association, San Francisco, CA (US)
PCT Filed Jul. 25, 2018, PCT No. PCT/US2018/043656
§ 371(c)(1), (2) Date Jun. 3, 2020,
PCT Pub. No. WO2019/112650, PCT Pub. Date Jun. 13, 2019.
Claims priority of provisional application 62/596,250, filed on Dec. 8, 2017.
Prior Publication US 2021/0367786 A1, Nov. 25, 2021
Int. Cl. H04L 9/32 (2006.01); H04L 9/00 (2022.01); H04L 9/08 (2006.01)
CPC H04L 9/3231 (2013.01) [H04L 9/008 (2013.01); H04L 9/0825 (2013.01); H04L 9/0894 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a first server computer, authentication data for a user from a user device including user identification data that identifies the user;
determining, by the first server computer, a biometric identifier as a random number or string of characters that does not reveal information about the user, to be associated with the authentication data;
transmitting, by the first server computer, the biometric identifier to a second server computer along with a first encrypted biometric template associated with the user;
upon receiving a request for the biometric identifier, transmitting, by the first server computer to the user device, the biometric identifier encrypted with an encryption key corresponding to a decryption key, wherein having by the user device the decryption key enables the user device to decrypt the encrypted biometric identifier, wherein the decrypting the encrypted biometric identifier by the user device causes the second server computer to subsequently receive a second encrypted biometric template and the biometric identifier from the user device, wherein the second server computer generates an encrypted match value data file by comparing the first encrypted biometric template and the second encrypted biometric template based on the biometric identifier;
receiving, by the first server computer, the encrypted match value data file;
decrypting, by the first server computer, the encrypted match value data file to determine a decrypted match value data file; and
determining, from the decrypted match value data file, a match likelihood value.