Systems and methods for authenticating a user based on a biometric model associated with the user

• US 10,135,821 B2
• Filed: 11/27/2017
• Issued: 11/20/2018
• Est. Priority Date: 03/01/2013
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Jakobsson, Bjorn Markus
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/823,506
• Publication Number:
  US 20180145975A1
• Time in Patent Office: 358 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06V 40/11 Hand-related biometrics; Hand pose recognition
• CPC Class Codes: G06V 40/67 by interactive indications to the user
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Systems and methods as provided herein may create a biometric model associated with a user. The created biometric model may be used to generate challenges that are presented to the user for authentication purposes. A user response to the challenge may be compared to an expected response, and if the user response matches within a predetermined error of the expected response, the user may be authenticated. The systems and methods may further generate challenges that are adaptively designed to address weaknesses or errors in the created model such that the model is more closely associated with a user and the user is more likely to be the only person capable of successfully responding to the generated challenges.

Claims

1. A device, comprising:

a non-transitory memory;

one or more sensors configured to detect biometric responses; and

one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the device to perform operations comprising;

providing a challenge to a user, the challenge generated by a biometric model application configured to create a biometric model tailored to the device and the user;

detecting, from the one or more sensors, a response from the user to the provided challenge;

fitting the response to the biometric model to result in a fitted biometric model;

determining whether the fitted biometric model is within a predetermined degree of accuracy to identify the user; and

storing, in response to the fitted biometric model being within the predetermined degree of accuracy, the fitted biometric model.

2. The device of claim 1, wherein the operations further comprise:

determining an error in response to determining that the fitted biometric model is not within the predetermined degree of accuracy; and

providing a subsequent challenge to the user, the subsequent challenge being provided to address the error.

3. The device of claim 2, wherein the operations further comprise:

repeating the providing the subsequent challenge to the user, receiving the response, fitting the response, and determining whether the fitted biometric model is within the predetermined degree of accuracy until the fitted biometric model is within the predetermined degree of accuracy.

4. The device of claim 2, wherein the error is at least one of a missing distance value or a missing angle value.

5. The device of claim 1, wherein the operations further comprise:

tailoring the challenge to a type of the one or more sensors of the device, wherein the one or more sensors of the device includes one or more biometric sensors, one or more optical sensors, one or more other sensors, or a combination thereof.

6. The device of claim 1, wherein the operations further comprise:

modifying the stored biometric model in response to a change with respect to the user, the modifying including providing one or more additional challenges to the user.

7. The device of claim 1, wherein the storing further comprises storing the biometric model on a remote server.

8. A method for creating a biometric model, comprising:

providing, by one or more processors of a device, a challenge to a user, the challenge generated by a biometric model application configured to create a biometric model tailored to the device and the user;

detecting, from one or more sensors of the device configured to detect biometric responses, a response from the user to the provided challenge;

determining, by the one or more processors, whether the response fits the biometric model within a predetermined degree of accuracy to identify the user; and

storing, by the one or more processors, the biometric model in response to determining that the response fits the biometric model within the predetermined degree of accuracy.

9. The method of claim 8, further comprising:

determining, by the one or more processors, an error in response to determining that the response fits the biometric model outside the predetermined degree of accuracy; and

providing, by the one or more processors, a subsequent challenge to the user, the subsequent challenge being provided to address the error.

10. The method of claim 9, further comprising:

repeating the providing the subsequent challenge to the user, receiving the response, fitting the response, and determining whether the response fits the biometric model within the predetermined degree of accuracy until the response fits the biometric model to the subsequent challenge within the predetermined degree of accuracy.

11. The method of claim 9, wherein the error is at least one of a missing distance value or a missing angle value.

12. The method of claim 8, further comprising:

tailoring, by the one or more processors, the challenge to a type of the one or more sensors of the device, wherein the one or more sensors of the system includes one or more biometric sensors, one or more optical sensors, one or more other sensors, or a combination thereof.

13. The method of claim 8, further comprising:

modifying, by the one or more processors, the stored biometric model in response to a change with respect to the user, the modifying including providing one or more additional challenges to the user.

14. A device for creating a biometric model, comprising:

a non-transitory memory;

one or more sensors configured to detect biometric responses; and

one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the device to perform operations comprising;

providing a challenge to a user, the challenge generated by a biometric model application configured to create a biometric model tailored to the device and the user;

detecting, from the one or more sensors, a response from the user to the provided challenge;

fitting the response to the biometric model to result in a fitted biometric model;

determining whether the fitted biometric model is within a predetermined degree of accuracy to identify the user;

determining an error in response to determining that the fitted biometric model is not within the predetermined degree of accuracy; and

providing a subsequent challenge to the user to address the error.

15. The device of claim 14, wherein the operations further comprise:

storing, in response to the fitted biometric model being within the predetermined degree of accuracy, the fitted biometric model.

16. The device of claim 15, wherein the storing further comprises storing the fitted biometric model on a remote server.

17. The device of claim 14, wherein the operations further comprise:

repeating the providing the subsequent challenge to the user, receiving the response, fitting the response, and determining whether the response fits the biometric model within the predetermined degree of accuracy until the response fits the biometric model within the predetermined degree of accuracy.

18. The device of claim 14, wherein the error is at least one of a missing distance value or a missing angle value.

19. The device of claim 14, wherein the operations further comprise:

tailoring the challenge to a type of the one or more sensors of the device, wherein the one or more sensors of the device includes one or more biometric sensors, one or more optical sensors, one or more other sensors, or a combination thereof.

20. The device of claim 14, wherein the operations further comprise:

modifying the stored fitted biometric model in response to a change with respect to the user, the modifying including providing one or more additional challenges to the user.