Patent ID: 11902416
Assignee: THE GOVERNMENT OF THE UNITED STATES OF AMERICA, AS REPRESENTED BY THE SECRETARY OF HOMELAND SECURITY
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system comprising:
a reference gallery of homomorphic encryption (HE) biometric information;
a third-party computer;
HE biometric matching logic;
an access control device;
a kiosk comprising a scanner connected to the reference gallery via a cloud resource; the scanner configured to:
generate biometric information to store in the reference gallery;
scan a user and generate biometric information identifying the user from the scan;
generate HE encrypted information containing biometric data using an HE encryption algorithm;

the system configured to:
store the generated HE encrypted biometric information in a library;
distribute the HE encrypted biometric information to the third-party computer;

an HE encryption logic configured to construct, based on the reference gallery, HE encrypted reference information;
the HE Encryption logic configured to store HE encrypted information in the reference gallery;
the third-party computer comprising HE biometric matching logic configured to perform a HE biometric matching process;
the HE biometric matching logic configured to perform a matching comparison of the HE encrypted information from the library against HE encrypted biometric information in the reference gallery to identify matching HE encrypted reference information;
the HE biometric matching logic configured to perform the HE biometric matching process without decrypting or having a capacity to decrypt the HE encrypted information;
the third-party computer configured to process biometric information used for biometric matching, without access to underlying biometric information of the user;
the third-party computer configured to transmit a message to the access control device;
the access control device programmed to execute an access granted process when the message indicates a positive match based on the matching comparison; and
the access control device programmed to execute an access denied process when the message does not indicate a positive match based on the matching comparison.