Federated Biometric Identity Verifier

摘要

A federated biometric identity verification system that allows biometric verification of individuals across multiple organizations without sharing access to database content between those organizations. Multiple biometric application databases are securely networked together using public-key infrastructure techniques. Biometric information is collected from a subject, and segregated into applicable subsets or modalities, and searchable templates are generated. The templates are encrypted and searched against each database securely without requiring the comingling of database content. Results are returned for each database searched consistent with the characteristics authorized by the organization controlling the database. No further access to the database is allowed.

主权项

1. A federated biometric verification system, comprising
a plurality of computers, each having a processor and a storage device, each operatively connected to each other, and each associated with one or more public/private key pairs; at least one biometric collector operatively connected to the plurality of computers; a plurality of databases, each stored in the storage device of a separate computer of the plurality of computers; wherein a first computer of the plurality of computers stores the one or more public keys of each other computer of the plurality of computers, and each other computer of the plurality of computers stores the one or more public keys of the first computer; a first program code executable by a processor of the first computer for:
collecting a set of biometric information from a subject through the at least one biometric collector,encrypting, with the public key associated with each of the other computers, the set of biometric information,transmitting each encrypted set of biometric information and a search request to each other computer associated with each applicable public key, anddecrypting the results received by each of the other computers with the public key of each of the other computers; and a second program code executable by a processor of each other computer for:
decrypting the search request and biometric information transmitted by the first computer using the private key associated with each respective computer,searching the set of biometric information against the database stored on each respective computer,encrypting the results of the search with the public key of the first computer, andtransmitting the encrypted results to the first computer.