Dynamic enrollment using biometric tokenization

Abstract

Various embodiments relate to a dynamic biometric enrollment system. The dynamic biometric enrollment includes a processor and instructions stored in non-transitory machine-readable media. The instructions are configured to cause the server system to receive at least one biometric authentication sample from the user. The at least one tokenized biometric enrollment sample has been generated by tokenizing at least one biometric enrollment sample captured from a user associated with a unique user identifier. At least one biometric authentication sample captured from the user is retrieved. The at least one tokenized biometric enrollment sample is detokenized to retrieve the at least one biometric enrollment sample. The at least one biometric enrollment sample is processed using a biometric processing algorithm to generate a dynamic biometric reference template. It is determined whether the at least one biometric authentication sample matches with the dynamic biometric reference template.

What is claimed: 
     
         1 . A system comprising one or more processors configured to:
 compare at least one biometric authentication sample to a dynamic biometric reference template;   generate a signed data message using cryptographic message syntax;   bind a dynamic biometric reference template identifier to the signed data message, the dynamic biometric reference template identifier uniquely identifying the dynamic biometric reference template; and   in response to determining that the at least one biometric authentication sample matching the dynamic biometric reference template, store the dynamic biometric reference template.   
     
     
         2 . The system of  claim 1 , the processors are further configured to receive a uniform resource identifier associated with the at least one biometric authentication sample, wherein the uniform resource identifier is indicative of an event associated with whether the at least one biometric authentication sample matches the dynamic biometric reference template. 
     
     
         3 . The system of  claim 2 , the processors are further configured to:
 generate an authentication activity event journal entry that comprises the uniform resource identifier and information about the event; and   associate the authentication activity event journal entry with a dynamic enrollment event journal entry.   
     
     
         4 . The system of  claim 3 , wherein the dynamic enrollment event journal entry comprises a user identifier of a user, the at least one biometric authentication sample is received from a device operated by the user. 
     
     
         5 . The system of  claim 1 , the processors are further configured to cryptographically signing a journal comprising the dynamic biometric reference template identifier. 
     
     
         6 . The system of  claim 1 , the processors are further configured to digitally sign a dynamic enrollment event journal entry with a private key, wherein origin authenticity and data integrity of the dynamic enrollment event journal entry can be determined based on each of the digitally signed dynamic enrollment event journal entry and a public key of a public/private key pair including the private key. 
     
     
         7 . The system of  claim 6 , wherein the dynamic enrollment event journal entry comprises a user identifier of a user, the at least one biometric authentication sample is received from a device operated by the user. 
     
     
         8 . A method, comprising:
 comparing at least one biometric authentication sample to a dynamic biometric reference template;   generating a signed data message using cryptographic message syntax;   bind a dynamic biometric reference template identifier to the signed data message, the dynamic biometric reference template identifier uniquely identifying the dynamic biometric reference template; and   in response to determining that the at least one biometric authentication sample matching the dynamic biometric reference template, storing the dynamic biometric reference template.   
     
     
         9 . The method of  claim 8 , further comprising receiving a uniform resource identifier associated with the at least one biometric authentication sample, wherein the uniform resource identifier is indicative of an event associated with whether the at least one biometric authentication sample matches the dynamic biometric reference template. 
     
     
         10 . The method of  claim 9 , further comprising:
 generating an authentication activity event journal entry that comprises the uniform resource identifier and information about the event; and   associating the authentication activity event journal entry with a dynamic enrollment event journal entry.   
     
     
         11 . The method of  claim 10 , wherein the dynamic enrollment event journal entry comprises a user identifier of a user, the at least one biometric authentication sample is received from a device operated by the user. 
     
     
         12 . The method of  claim 9 , further comprising cryptographically signing a journal comprising the dynamic biometric reference template identifier. 
     
     
         13 . The method of  claim 9 , further comprising digitally signing a dynamic enrollment event journal entry with a private key, wherein origin authenticity and data integrity of the dynamic enrollment event journal entry can be determined based on each of the digitally signed dynamic enrollment event journal entry and a public key of a public/private key pair including the private key. 
     
     
         14 . The method of  claim 13 , wherein the dynamic enrollment event journal entry comprises a user identifier of a user, the at least one biometric authentication sample is received from a device operated by the user. 
     
     
         15 . A non-transitory computer-readable medium having computer-executable instructions embodied therein that, when executed by a computing system, causes the computing system to:
 compare at least one biometric authentication sample to a dynamic biometric reference template;   generate a signed data message using cryptographic message syntax;   bind a dynamic biometric reference template identifier to the signed data message, the dynamic biometric reference template identifier uniquely identifying the dynamic biometric reference template; and   in response to determining that the at least one biometric authentication sample matching the dynamic biometric reference template, store the dynamic biometric reference template.   
     
     
         16 . The non-transitory computer-readable medium of  claim 15 , the computing system is further caused to receive a uniform resource identifier associated with the at least one biometric authentication sample, wherein the uniform resource identifier is indicative of an event associated with whether the at least one biometric authentication sample matches the dynamic biometric reference template. 
     
     
         17 . The non-transitory computer-readable medium of  claim 16 , the computing system is further caused to:
 generate an authentication activity event journal entry that comprises the uniform resource identifier and information about the event; and   associate the authentication activity event journal entry with a dynamic enrollment event journal entry.   
     
     
         18 . The non-transitory computer-readable medium of  claim 17 , wherein the dynamic enrollment event journal entry comprises a user identifier of a user, the at least one biometric authentication sample is received from a device operated by the user. 
     
     
         19 . The non-transitory computer-readable medium of  claim 15 , the computing system is further caused to cryptographically signing a journal comprising the dynamic biometric reference template identifier. 
     
     
         20 . The non-transitory computer-readable medium of  claim 15 , the computing system is further caused to digitally sign a dynamic enrollment event journal entry with a private key, wherein origin authenticity and data integrity of the dynamic enrollment event journal entry can be determined based on each of the digitally signed dynamic enrollment event journal entry and a public key of a public/private key pair including the private key.