US 11,991,282 B2
Distributed private key recovery
Vinjith Nagaraja, Pflugerville, TX (US); Minghua Xu, Austin, TX (US); Karankumar Hiteshbhai Patel, Austin, TX (US); Shengfei Gu, San Francisco, CA (US); Sikhar Patranabis, San Francisco, CA (US); Saikrishna Badrinarayanan, Los Angeles, CA (US); Pratyay Mukherjee, Sunnyvale, CA (US); Peter Rindal, San Francisco, CA (US); and Shan Jin, Austin, TX (US)
Assigned to VISA INTERNATIONAL SERVICE ASSOCIATION, San Francisco, CA (US)
Filed by Visa International Service Association, San Francisco, CA (US)
Filed on Jul. 30, 2021, as Appl. No. 17/390,649.
Prior Publication US 2023/0050481 A1, Feb. 16, 2023
Int. Cl. H04L 9/08 (2006.01); H04L 9/00 (2022.01); H04L 9/32 (2006.01)
CPC H04L 9/0897 (2013.01) [H04L 9/085 (2013.01); H04L 9/3231 (2013.01); H04L 9/0861 (2013.01); H04L 9/50 (2022.05); H04L 2209/08 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising performing, by a user device:
generating a secret that is used to access an electronic resource;
measuring, by a sensor of the user device, a biometric template of a user operating the user device, the biometric template comprising a template vector;
generating a plurality of secret shares of the secret;
generating a plurality of biometric template shares of the biometric template;
distributing, to each of a plurality of recovery devices, one or more of the plurality of secret shares of the secret and one or more of the plurality of biometric template shares of the biometric template;
receiving a request to initiate a recovery of the secret;
measuring, by the sensor of the user device, a biometric measurement of the user operating the user device, the biometric measurement comprising a measurement vector;
transmitting data of the biometric measurement to each of the plurality of recovery devices;
receiving, from each of the plurality of recovery devices, a plurality of partial computations determined based on the measured biometric measurement of the user and the biometric template shares of the biometric template, wherein each of the plurality of partial computations comprises a similarity measure share of the measured biometric measurement of the user and a respective biometric template share;
verifying that the biometric template and the biometric measurement match using the partial computations of the plurality of recovery devices, wherein the biometric template and the biometric measurement match when a total similarity measure of the similarity measure shares are within a threshold value;
responsive to verifying the biometric template and the biometric measurement match, receiving the secret shares of the secret from the plurality of recovery devices; and
reconstructing the secret using the secret shares.