System and method for biometric authentication using social network

• US 10,291,610 B2
• Filed: 12/15/2015
• Issued: 05/14/2019
• Est. Priority Date: 12/15/2015
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Chang, Michael, Goldberg, Luba, Mumm, Neil, Tsimis, Stephanie
• Primary Examiner(s): Steinle, Andrew J
• Application Number:
  US14/970,361
• Publication Number:
  US 20170171195A1
• Time in Patent Office: 1,246 Days
• Field of Search: None
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Techniques described herein include systems and methods for biometric authentication utilizing a dynamically updated biometric template derived from social media content of a user. In some embodiments, a service provider computer receives an authentication request that comprises biometric data provided by the user utilizing a user device. Social media content associated with the user may be received by the service provider computer from a social network service computer. In embodiments, the service provider computer may generate a biometric template for the user based on the received social media content where the biometric template is continually updated based on new social media content shared by the user. The service provider computer may determine a confidence score based on a comparison of the biometric data and the biometric template. The service provider computer may verify the authentication request for the user based at least in part on the confidence score.

Claims

1. A method for biometric authentication, comprising:

receiving, by a server computer, an authentication request, the authentication request comprising biometric data provided by the user;

transmitting, by the server computer, the biometric data to a social network server computer, wherein the social network server computer thereafter compares the biometric data of the user to a biometric template to calculate a confidence score based at least in part on first information indicating a level of activity of the user with a Web Site provided by the social network server computer and second information identifying environmental variations in how social media content is shared by the user on the Web Site, the biometric template dynamically generated in response to receiving the biometric data and based at least in part on the social media content shared by the user on the Web Site provided by the social network server computer, the biometric template configured to update based at least in part on updated social media content shared by the user, wherein the environmental variations include a type of data file and facial expressions of the user, the type of data file comprising image content, video content, audio content, or uploaded content;

receiving, by the server computer, the confidence score from the social network server computer;

identifying, by the server computer, a threshold from one or more thresholds based at least in part on a plurality of characteristics associated with the authentication request, the plurality of characteristics including a time period between the authentication request using a particular type of the biometric data and previous authentication requests using the particular type of the biometric data, and further including a current location of the user during the authentication request; and

verifying the authentication request based at least in part on the confidence score and the threshold.

2. The method of claim 1, further comprising:

creating a fraud score based at least in part on the confidence score and a fraud threshold; and

updating a fraud database using the fraud score, the fraud database maintained by the server computer.

3. The method of claim 1, wherein the authentication request is received from an access device, and wherein the authentication request is in a form of an authorization request message that requests authorization for a transaction, and wherein the method further includes transmitting, by the server computer, an authorization response message to the access device.

4. The method of claim 3, further comprising determining, by the server computer, the threshold for the transaction.

5. The method of claim 4, wherein the threshold is updated based at least in part on the social media content shared by the user.

6. The method of claim 1, wherein the social media content shared by the user on the Web Site includes at least one of the video content, the audio content, the image content, text content, user provided input, or user provided activity with the Web Site.

7. The method of claim 1, wherein the biometric data is provided by the user via a user device.

8. An electronic device comprising:

a processor; and

a memory including instructions that, when executed with the processor, cause the system to, at least;

receive an authentication request comprising biometric data provided by a user;

receive, from a social network server computer, social media content associated with the user of the electronic device, first information, and second information, the social media content being shared on a social networking Web Site provided by the social network server computer, the first information indicating a level of activity of the user with the social networking Web Site, the second information identifying environmental variations in how the social media content is shared by the user on the social networking Web Site, the environmental variations including a type of data file and facial expressions of the user, the type of data file comprising image content, video content, audio content, or uploaded content;

generate a biometric template based at least in part on the social media content of the user, the biometric template dynamically updated based on new social media content associated with the user;

determine a confidence score for a comparison of the biometric data to the biometric template based at least in part on an authentication request for the user, the first information, and the second information the confidence score representing a similarity between the biometric data and the biometric template;

identify a threshold from one or more thresholds based at least in part on a plurality of characteristics associated with the authentication request, the plurality of characteristics including a time period between the authentication request using a particular type of the biometric data and previous authentication requests using the particular type of the biometric data, and further including a current location of the user during the authentication request; and

verify the authentication request for the user based at least in part on the confidence score and the threshold.

9. The electronic device of claim 8, wherein the instructions when executed with the processor cause the system to further at least request, from a particular social network server computer, the social media content associated with the user, the particular social network server providing particular social networking software.

10. The electronic device of claim 8, wherein the dynamically updated biometric template is stored in a protected area of the memory of the electronic apparatus.

11. The electronic device of claim 10, wherein the instructions when executed with the processor cause the system to further at least receive a selection by the user of particular social media content to utilize when generating the biometric template.

12. The electronic device of claim 8, wherein the biometric data includes at least one of a voice sample, an iris scan, hand geometry, or a facial image sample.

13. The electronic device of claim 8, wherein generating the biometric template occurs during an offline mode or based on network connection conditions for the electronic device.

14. A method for biometric authentication, comprising:

receiving, at a server computer, an authentication request for a user associated with an access device, the authentication request comprising biometric data provided by the user;

receiving, by the server computer and from a social network service computer, social media content associated with the user, first information indicating a level of activity of the user with the social network service computer, and second information identifying environmental variations in how the social media content is shared by the user on the social network service computer, the environmental variations including a type of data file and facial expressions of the user, the type of data file comprising image content, video content, audio content, or uploaded content;

generating, by the server computer, a biometric template for the user based at least in part on the social media content, the biometric template continually updated based at least in part on new social media content associated with the user;

determining, by the server computer, a confidence score based at least in part on a comparison of the biometric data and the biometric template, the first information, and the second information;

identifying, by the server computer, a threshold from one or more thresholds based at least in part on a plurality of characteristics associated with the authentication request, the plurality of characteristics including a time period between the authentication request using a particular type of the biometric data and previous authentication requests using the particular type of the biometric data, and a current location of the user during the authentication request; and

verifying the authentication request for the user based at least in part on the confidence score and the threshold.

15. The method of claim 14, wherein the information identifying the characteristics of the authentication request includes at least one of user device information about the user device utilized to provide the biometric data from the user, a first time period between authentication requests, or a location of the user device utilized to provide the biometric data from the user.

16. The method of claim 14, wherein the biometric template is pre-generated by the social network service computer and wherein the server computer updates the biometric template by incorporating the pre-generated biometric template.

17. The method of claim 14, wherein generating the biometric template comprises updating the biometric template at periodic intervals.