Systems and methods for high fidelity multi-modal out-of-band biometric authentication with human cross-checking

• US 10,235,508 B2
• Filed: 08/21/2013
• Issued: 03/19/2019
• Est. Priority Date: 05/08/2013
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Kursun, Eren, Fernandez, Gene, Berson, Alex, Goodman, Brian
• Primary Examiner(s): Lim, Steven
• Assistant Examiner(s): Adnan, Muhammad
• Application Number:
  US13/972,556
• Publication Number:
  US 20140333415A1
• Time in Patent Office: 2,036 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 30/00 Commerce

Abstract

Systems and methods for high fidelity multi-modal out-of-band biometric authentication with cross-checking are disclosed. According to one embodiment, a method for integrated biometric authentication may include (1) receiving, from a user, biometric data; (2) at least one computer processor performing machine-based biometric matching on the biometric data; (3) the at least one computer processor determining that human identity confirmation is necessary; (4) the at least one computer processor processing the biometric data; (5) the at least one computer processor identifying at least one contact for human identity confirmation; (6) the at least one computer processor sending at least a portion of the processed biometric data for the user to the at least one contact; (7) receiving, from the at least one contact, human confirmation information; and (8) the at least one computer processor authenticating the user based on the machine-based biometric matching and the human confirmation information.

Claims

1. A method for integrated biometric authentication, comprising:

receiving, from a user, biometric data;

at least one computer processor performing machine-based biometric matching on the biometric data;

based on the machine-based biometric matching the at least one computer processor determining that human confirmation of the user'"'"'s identity is necessary;

the at least one computer processor identifying at least one contact from a confirmation list comprising a plurality of contacts that know the user for human confirmation of the user'"'"'s identity;

the at least one computer processor sending at least a portion of the biometric data for the user to the at least one contact based on the at least a portion of the biometric data for the user;

receiving, from the at least one contact, human identity confirmation information; and

the at least one computer processor authenticating the user based on both the machine-based biometric matching and the human identity confirmation information.

2. The method of claim 1, wherein the machine-based biometric matching comprises:

the at least one computer processor using at least one algorithm to compare the biometric data to a stored biometric profile for the user.

3. The method of claim 1, wherein the step of determining that human confirmation of the user'"'"'s identity is necessary comprises:

the at least one computer processor determining a reliability of at least one algorithm in comparing the biometric data to a stored biometric profile of the user; and

the at least one computer processor initiating human confirmation of the user'"'"'s identity in response to the reliability of at least one algorithm being below a predetermined threshold.

4. The method of claim 1, wherein the step of determining that human confirmation of the user'"'"'s identity is necessary comprises:

the at least one computer processor determining the risk or value of a transaction associated with the authentication; and

the at least one computer processor initiating human confirmation of the user'"'"'s identity in response to the risk or value being above a predetermined threshold.

5. The method of claim 1, wherein the step of determining that human confirmation of the user'"'"'s identity is necessary comprises:

the at least one computer processor determining the presence of an anomaly in the biometric data.

6. The method of claim 1, further comprising:

the at least one computer processor removing background data from the biometric data.

7. The method of claim 1, further comprising:

the at least one computer processor removing background noise from the biometric data.

8. The method of claim 1, further comprising:

the at least one computer processor removing non-biometric data from the biometric data.

9. The method of claim 1, further comprising:

the at least one computer processor generating at least one snippet from the biometric data.

10. The method of claim 9, wherein the at least one snippet comprises biometric data from a portion of the user'"'"'s face.

11. The method of claim 9, wherein the at least one snippet comprises biometric data from a portion of a voice submission from the user.

12. The method of claim 9, wherein the at least one snippet is generated based on at least one machine-created marker flag.

13. The method of claim 1, wherein the confirmation list is automatically generated based on connectivity information for the user and the contacts known to the user.

14. The method of claim 1, wherein each contact on the confirmation list is associated with a connectivity score based on the contact'"'"'s connection with the user.

15. The method of claim 14, wherein the connectivity score is based on at least one of a relationship between the user and the contact, a length of a relationship between the user and the contact, a date of the last in-person interaction between the user and the contact, and a location of the user and the contact.

16. The method of claim 14, wherein each contact on the confirmation list is further associated with a confidence factor based on the individual'"'"'s history of confirmation.

17. The method of claim 1, wherein the step of receiving, from the at least one contact, human identity confirmation information comprises:

receiving, from the contact, a response and the contact'"'"'s confidence level in the response.

18. The method of claim 17, wherein the step of authenticating the user based on the machine-based biometric matching and the human identity confirmation information comprises:

the at least one computer processor weighting each response based on at least one of a connectivity score for the user and the contact and the confidence level.

19. A method for multi-party authentication, comprising:

receiving, from a first party, a request for authentication and first party biometric data;

at least one computer processor machine authenticating the first party using the first party biometric data;

receiving, from a second party, a request for authentication and second party biometric data;

the at least one computer processor machine authenticating the second party using the second party biometric data, wherein the second party knows the first party for human confirmation of the first party;

the at least one computer processor processing the first party biometric data;

the at least one computer processor sending at least a portion of the processed first party biometric data to the second party;

receiving, from the second party, second party human confirmation information of the first party'"'"'s identity; and

the at least one computer processor authenticating the first party based on both the machine authentication of the first party and the second party human confirmation information of the first party'"'"'s identity.

20. The method of claim 19, further comprising:

receiving, from a third party, a request for authentication and third party biometric data;

the at least one computer processor machine authenticating the third party using the third party biometric data;

the at least one computer processor processing the second party biometric data;

the at least one computer processor sending at least a portion of the processed second party biometric data to the third party;

receiving, from the third party, third party human confirmation information of the second party'"'"'s identity; and

the at least one computer processor authenticating the second party based on the machine authentication of the second party and the third party human confirmation information of the second party'"'"'s identity.

21. The method of claim 19, further comprising:

the at least one computer processor sending at least a portion of the processed second party biometric data to a fourth party;

receiving, from the fourth party, fourth party human confirmation information of the second party'"'"'s identity; and

the at least one computer processor further authenticating the second party based on the machine authentication of the second party and the fourth party human confirmation information of the second party'"'"'s identity.