Authentication via camera

• US 10,164,975 B1
• Filed: 03/30/2016
• Issued: 12/25/2018
• Est. Priority Date: 03/30/2016
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: Snap, Inc.
• Inventors: Son, Aaron Daniel, Koontz, Matthew
• Primary Examiner(s): Jhaveri, Jayesh M
• Application Number:
  US15/085,033
• Time in Patent Office: 1,000 Days
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2211/003 Mutual Authentication Bi-Directional Authentication, Dialogue, Handshake
• CPC Class Codes: G06K 19/06 characterised by the kind of the digital marking, e.g. shape, nature, code
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06K 19/06103 the marking being embedded in a human recognizable image, e.g. a company logo with an embedded two-dimensional code
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 23/00 Cameras or camera modules comprising electronic image sensors; Control thereof
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Systems and methods for authentication via camera are provided. In example embodiments, an authentication server transmits, to a mobile device, an identity verification image. The authentication server receives, from a computing device, a scanned image, wherein the computing device is different from the mobile device. The authentication server determines whether the scanned image includes data from the identity verification image. The authentication server transits, to a web server accessed by the computing device, an indication that a user'"'"'s identity has been verified upon determining that the scanned image includes the data from the identity verification image.

Claims

1. A method comprising:

receiving, at an authentication server, a request from a mobile device for a user identity verification image;

mapping an optical barcode to a user identity;

generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

transmitting, from the authentication server to the mobile device, the user identity verification image for the user of the mobile device in response to the request;

receiving, at the authentication server a scanned image captured by a computing device, wherein the computing device is different from the mobile device;

determining, at the authentication server, whether the scanned image includes data from the user identity verification image, the data including the optical barcode; and

transmitting, from the authentication server to a web server accessed by the computing device, an indication that the user of the mobile device'"'"'s identity has been verified upon determining that the scanned image includes the data from the user identity verification image and the optical barcode, and the determining further based on the mapping between the optical barcode and the user identity.

2. The method of claim 1, further comprising:

transmitting, from the authentication server to the web server, an indication that the user of the mobile device'"'"'s identity has not been verified upon determining that the scanned image does not include the data from the user identity verification image.

3. The method of claim 1, wherein determining, at the authentication server, whether the scanned image includes data from the user identity verification image comprises:

decoding data encoded in the scanned image; and

determining whether the decoded data corresponds to data which was encoded into the user identity verification image.

4. The method of claim 1, further comprising:

receiving, at the authentication server, an indication of the user'"'"'s identity from the web server or the computing device,

wherein determining, at the authentication server, whether the scanned image includes the data from the user identity verification image comprises;

comparing data from the scanned image with data from the user identity verification image transmitted to the mobile device associated with the user'"'"'s identity.

5. The method of claim 1, further comprising:

identifying, at the authentication server, the user by determining whether the scanned image includes data from one of a plurality of user identity verification images provided to a plurality of users.

6. The method of claim 1, further comprising:

decoding data from a first portion of the scanned image to determine the user'"'"'s identity;

wherein determining whether the scanned image includes data from the user identity verification image comprises;

comparing data decoded from a second portion of the scanned image with data associated with the user identity verification image provided to the mobile device corresponding to the user'"'"'s identity, further wherein the first portion is different from the second portion.

7. The method of claim 1, further comprising mapping an optical barcode to the user'"'"'s identity, and generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape.

8. The method of claim 7, wherein determining whether the scanned image includes the data from the user identity verification image comprises:

decoding encoded information in the optical barcode within the geometric shape based on an orientation of the geometric shape identified by the custom pattern; and

verifying whether the decoded information corresponds to stored identity information of the user.

9. The method of claim 1, further comprising:

transmitting, from the authentication server to the mobile device in conjunction with the user identity verification image, an indication of a validity period for the user identity verification image; and

upon expiration of the validity period, removing, from a memory of the authentication server, data associated with the user identity verification image and foregoing transmitting the indication that the user'"'"'s identity has been verified using the data associated with the user identity verification image.

10. The method of claim 1, wherein the scanned image is generated by the user scanning a display unit of the mobile device into a camera of the computing device;

and

wherein the display unit of the mobile device displays the user identity verification image.

11. The method of claim 1, further comprising:

transmitting, for display at the computing device, an instruction for the user to place the display unit of the mobile device, displaying the user identity verification image, in front of a camera of the computing device for scanning the user identity verification image into the computing device.

12. A non-transitory machine-readable medium comprising instructions which, when executed by one or more hardware processors of a machine, cause the machine to perform operations comprising:

receiving a request from a mobile device for a user identity verification image;

mapping an optical barcode to a user'"'"'s identity, and generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

transmitting, to the mobile device, the user identity verification image for the user of the mobile device in response to the request;

receiving, from a computing device, a scanned image captured by the computing device, wherein the computing device is different from the mobile device;

determining whether the scanned image includes data from the user identity verification image, the data including the optical barcode; and

transmitting, to a web server accessed by the computing device, an indication that the user of the mobile device'"'"'s identity has been verified upon determining that the scanned image includes the data from the user identity verification image and the optical barcode, and the determining further based on the mapping between the optical barcode and the user identity.

13. The machine-readable medium of claim 12, the operations further comprising:

transmitting, to the web server, an indication that the user of the mobile device'"'"'s identity has not been verified upon determining that the scanned image does not include the data from the user identity verification image.

14. The machine-readable medium of claim 12, wherein determining whether the scanned image includes data from the user identity verification image comprises:

decoding data encoded in the scanned image; and

determining whether the decoded data corresponds to data which was encoded into the user identity verification image.

15. The machine-readable medium of claim 12, the operations further comprising:

receiving, at the authentication server, an indication of the user of the mobile device'"'"'s identity from the web server or the computing device,

wherein determining whether the scanned image includes the data from the user identity verification image comprises;

comparing data from the scanned image with data from the user identity verification image transmitted to the mobile device associated with the user of the mobile device'"'"'s identity.

16. The machine-readable medium of claim 12, the operations further comprising:

identifying the user of the mobile device by determining whether the scanned image includes data from one of a plurality of user identity verification images provided to a plurality of users.

17. The machine-readable medium of claim 12, the operations further comprising:

decoding data from a first portion of the scanned image to determine the user of the mobile device'"'"'s identity;

wherein determining whether the scanned image includes data from the user identity verification image comprises;

comparing data decoded from a second portion of the scanned image with data associated with the user identity verification image provided to the mobile device corresponding to the user of the mobile device'"'"'s identity, further wherein the first portion is different from the second portion.

18. The machine-readable medium of claim 12, wherein the user identity verification image includes a geometric shape with a custom pattern and an optical barcode within the geometric shape.

19. The machine-readable medium of claim 18, wherein determining whether the scanned image includes the data from the user identity verification image comprises:

decoding encoded information in the optical barcode within the geometric shape based on an orientation of the geometric shape identified by the custom pattern; and

verifying whether the decoded information corresponds to stored identity information of the user of the mobile device.

20. A system comprising:

one or more hardware processors; and

a memory comprising instructions which, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising;

mapping an optical barcode to a user identity, and generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

receiving a request from a mobile device for a user identity verification image;

transmitting, to a mobile device, the user identity verification image for the user of the mobile device in response to the request;

receiving, from a computing device, a scanned image captured by the computing device, wherein the computing device is different from the mobile device;

determining whether the scanned image includes data from the user identity verification image, the data including the optical barcode; and

transmitting, to a web server accessed by the computing device, an indication that the user of the mobile device'"'"'s identity has been verified upon determining that the scanned image includes the data from the user identity verification image, and the optical barcode, and the determining further based on the mapping between the optical barcode and the user identity.