System and method for verifying liveliness

• US 10,129,251 B1
• Filed: 02/11/2015
• Issued: 11/13/2018
• Est. Priority Date: 02/11/2014
• Status: Active Grant

• Current Assignee: Idemia Identity & Security USA, LLC (Advent International Corporation)
• Original Assignee: Morphotrust USA Incorporated (Advent International Corporation)
• Inventors: Saravanan, Thiagarajan
• Primary Examiner(s): Tran, Tri
• Application Number:
  US14/619,886
• Time in Patent Office: 1,371 Days
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A machine-assisted method for verifying a video presence that includes: receiving, at a computing device of an identity provider, an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider; retrieving, from the authentication request, at least a portion of a video stream feed initially from the requester, to the computing device, the portion of video stream feed portraying a face of the requester; extracting the face of the requester from the portion of the video stream feed; providing a directive to the requester soliciting a corresponding gesture; and receiving a response gesture from the requester.

Claims

1. A computer-implemented method for verifying a video presence, comprising:

receiving, at a computing device of an identity provider, an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider;

retrieving, from the authentication request, at least a first portion of a video stream feed, to the computing device, the first portion of video stream feed portraying a face of the requester and operating at a first refresh rate;

extracting the face of the requester from the first portion of the video stream feed;

providing a directive to the requester soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

receiving a second portion of the video stream feed portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to encode a transition from before the corresponding gesture to the corresponding gesture, and

in response to determining that the response gesture matches the corresponding gesture being solicited, establishing a biometric identity for the requester at the identity provider by storing, at the identity provider, data encoding the extracted face of the requester.

2. The method of claim 1, further comprising:

prior to establishing the biometric identity, determining that the requester is not enrolled at the identity provider to be authenticated by the identity provider for accessing the account managed by the relying party.

3. The method of claim 1, wherein establishing the biometric identity further comprises:

receiving the response gesture in the second portion of the video stream feed.

4. The method of claim 1, wherein establishing the biometric identity further comprises:

querying the relying party for a permission to establish the biometric identity of the requester at the identity party for the requester to access the account managed by the relying party.

5. The method of claim 4, further comprising:

in response to obtaining the permission from the relying party, obtaining the biometric identity of the requester from the second portion of the video stream feed.

6. The method of claim 1, wherein establishing the biometric identity further comprises:

establishing the requester as the owner of the stored biometric identity provided that the face of the requester furnished by the requester in the second portion of a video stream feed matches the data encoding the extracted face of the requester stored at the identity provider.

7. The method of claim 6, wherein establishing the biometric identity further comprises:

establishing the requester as authorized to access the account managed by the relying party provided that the second portion of the video stream feed is a portion of a live video stream from the requester.

8. The method of claim 1, further comprising:

determining that the requester is enrolled at the identity provider to be authenticated by the identity provider for accessing the account managed by the relying party.

9. The method of claim 8, further comprising:

determining that the face of the requester as extracted from the second portion of the video stream feed matches a face of the requester as encoded in the data already stored at the identity provider.

10. The method of claim 9, further comprising:

scoring the extracted face of the requester to determine a matching degree between (i) data encoding the face of the requester as extracted from the second portion of the video feed and (ii) data, as stored at the identity provider, encoding the face of the enrolled requester.

11. The method of claim 9, further comprising:

comparing the scored matching degree to a pre-determined threshold.

12. The method of claim 11, further comprising:

determining that the received response gesture from the requester in the video stream feed matches the corresponding gesture being solicited.

13. The method of claim 12, further comprising:

scoring the received response gesture from the requester in the video-stream feed to determine a match quality between the received response gesture and the corresponding gesture being solicited.

14. The method of claim 13, further comprising:

comparing the scored match quality to a pre-determined threshold.

15. The method of claim 12, further comprising:

in response to determining (i) that the received response gesture matches the corresponding gesture being solicited and (ii) that the face of the requester as extracted from the first portion or second portion of the video stream feed matches the face of the requester as portrayed in the data already stored at the identity provider, determining that the requester is authorized to access the account.

16. The method of claim 15, further comprising:

directing the relying party to grant the requester access to the account.

17. The method of claim 10, further comprising:

providing at least one additional directive to the requester soliciting at least one additional corresponding gesture in response.

18. The method of claim 17, further comprising:

receiving at least one additional response gesture from the requester and in the second portion of the video stream feed.

19. The method of claim 18, further comprising:

determining that the received at least one additional response gesture from the requester in the video-stream feed matches the at least one additional corresponding gesture being solicited.

20. The method of claim 1, wherein providing the directive to the requester comprises:

providing the directive soliciting the response gesture unpredicted by the requester.

21. The method of claim 1, wherein providing the directive to the requester comprises:

providing the directive soliciting the response gesture not present in earlier responses from the requester in the video stream feed.

22. The method of claim 1, wherein providing the directive to the requester comprises:

providing the directive soliciting the response gesture due within a particular time frame from the requester in the video stream feed.

23. The method of claim 1, wherein soliciting the corresponding response gesture comprises:

soliciting a proximity adjustment from the requester in the video stream feed.

24. The method of claim 1, wherein soliciting the corresponding response gesture comprises:

soliciting a motion of a specific body part of the requester in the video stream feed.

25. The method of claim 1, wherein soliciting the corresponding response gesture comprises:

soliciting a facial expression change from the requester in the video stream feed.