US 12,244,590 B2
Access authentication using obfuscated biometrics
Johannes Lutz Schonberger, Zurich (CH); and Marc Andre Leon Pollefeys, Zurich (CH)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Appl. No. 17/997,081
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
PCT Filed Apr. 21, 2021, PCT No. PCT/US2021/070439
§ 371(c)(1), (2) Date Oct. 25, 2022,
PCT Pub. No. WO2021/226615, PCT Pub. Date Nov. 11, 2021.
Claims priority of application No. 2025515 (NL), filed on May 6, 2020.
Prior Publication US 2023/0179596 A1, Jun. 8, 2023
Int. Cl. H04L 9/40 (2022.01); H04L 9/32 (2006.01)
CPC H04L 63/0861 (2013.01) [H04L 63/10 (2013.01); H04L 9/3231 (2013.01)] 13 Claims
OG exemplary drawing
 
1. A method for authorizing access to one or more secured computer resources, the method comprising:
storing an obfuscated reference biometric vector at an authentication computing device, the obfuscated reference biometric vector previously obfuscated from a reference biometric vector using a similarity-preserving obfuscation at a client computing device, wherein the reference biometric vector includes N dimensions, wherein the similarity-preserving obfuscation is a deterministic vector rotation in which a sequence of rotations is applied relative to one or more of the N dimensions, and wherein the sequence of rotations is generated based on a seed value;
receiving an obfuscated authentication biometric vector, the obfuscated authentication biometric vector previously obfuscated from an authentication biometric vector using the similarity-preserving obfuscation at the client computing device;
testing a similarity of the obfuscated reference biometric vector and the obfuscated authentication biometric vector at the authentication computing device; and
based on the similarity being within an authentication threshold, communicating an authentication authorization from the authentication computing device to the client computing device to grant access to the one or more secured computer resources,
wherein the similarity-preserving obfuscation uses a received authentication credential as the seed value for a random number generator to generate the sequence of rotations.