Pro-active identity verification for authentication of transaction initiated via non-voice channel

• US 10,380,591 B2
• Filed: 03/14/2013
• Issued: 08/13/2019
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Nuance Communications, Inc. (Microsoft Corporation)
• Inventors: Sharp, Robert Douglas
• Primary Examiner(s): Kalinowski, Alexander G
• Assistant Examiner(s): Kloberg, Paul R
• Application Number:
  US13/830,238
• Publication Number:
  US 20140279514A1
• Time in Patent Office: 2,343 Days
• Field of Search: 705 5
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A method of using biometric verification comprises identifying a validation requirement during the execution of a non-voice channel interaction, and initiating a contact to the user, at a pre-registered device. The method further comprises executing a biometric verification of the user'"'"'s identity and possession of the device, via a user interaction at the pre-registered device, and providing the validation when the user is successfully identified.

Claims

1. A method of authenticating a request by initiating biometric based verification, the method comprising:

at least one processor operatively coupled to computer memory, the at least one processor executing;

registering a user for biometric based verification, the registering including;

pre-registering a device of the user and a mobile application configured on the device to utilize biometric based verification;

collecting biometric data from the user;

determining whether the collected biometric data contains a biometric pattern that enables identifying the user, and, if not, recollecting biometric data from the user; and

automatically configuring one or more user-defined triggers of the mobile application, stored in the computer memory, the one or more user-defined triggers configured to initiate the biometric based verification in response to a respective request of the user;

tracking interaction by the user on a non-voice channel, the tracking identifying a request by the user that matches a trigger of the configured one or more user-defined triggers stored in the computer memory;

triggering, based on the matched trigger, contact with the biometric based verification via the mobile application configured at the pre-registered device, the triggering sending a mobile application push notification alerting the mobile application configured at the pre-registered device to initiate a voice biometric based verification dialog with the user, the triggering initiating the contact with the biometric based verification to validate the user'"'"'s identity for a transaction initiated on the non-voice channel, the voice biometric based verification dialog being performed by the mobile application interacting with the user using a form of biometric identification, the biometric based verification;

(i) matching biometric data provided during the initiated contact to the collected biometric pattern and (ii) determining possession of the pre-registered device, via the user contact at the pre-registered device; and

performing the tracked request by the user, in an event the user is successfully identified.

2. The method of claim 1, wherein initiating the contact comprises calling the user at a telephone number associated with the pre-registered device.

3. The method of claim 1, wherein the non-voice channel interaction comprises one of:

a web interaction, an instant messaging interaction, a texting interaction, an interaction via a terminal, a payment interaction, or an interaction at a kiosk.

4. The method of claim 1, wherein the biometric verification comprises one or more of:

a text dependent biometric validation, a text-independent biometric validation, and a liveness test.

5. The method of claim 1, further comprising enabling the registration for the biometric verification by one of:

a telephone number associated with the pre-registered device and downloading of an application to the pre-registered device.

6. The method of claim 5, wherein the registration is completed using the pre-registered device, by registering the user'"'"'s voice print via the pre-registered device.

17. The method of claim 1, wherein confirming the collected biometric data includes at least one of:

verifying that length of a phrase comprising voice biometric data enables validation with a live voice of the user, verifying that clarity of a phrase pattern comprising voice biometric data enables validation with a live voice of the user, and verifying that the collected biometric data contains a variety of phrases to enable validation with a live voice of the user.

7. A biometric authentication system comprising:

at least one processor operatively coupled to computer memory, the at least one processor configured to include;

an enrollment system configured to register a user for biometric based verification, the enrollment system configured to pre-register a device of the user and a mobile application configured on the device to utilize biometric based verification, collect biometric data from the user, determine whether the collected biometric data contains a biometric pattern that enables identifying the user, and, if not, recollect biometric data from the user, and configure one or more user-defined triggers of the mobile application, stored in the computer memory, the one or more user-defined triggers configured to initiate the biometric based verification in response to a respective request of the user;

a validation requirement identifier configured to track interaction by the user on a non-voice channel, the tracking identifying a request by the user that matches a trigger of the configured one or more user-defined triggers stored in the computer memory;

a contact system configured to, based on the matched trigger, trigger contact with the biometric based verification via the mobile application configured at the pre-registered device, the contact system further configured to push a notification triggering the contact with the biometric based verification by alerting the mobile application configured at the pre-registered device to initiate a voice biometric based verification dialog with the user;

a biometric system configured to perform the biometric based verification of the user'"'"'s identity for a transaction initiated on the non-voice channel, the voice biometric based verification dialog being performed by the mobile application interacting with the user using a form of biometric identification, the biometric based verification;

(i) matching biometric data provided during the initiated contact to the collected biometric pattern and (ii) determining possession of the pre-registered device, via the user contact at the pre-registered device; and

a decisioning system configured to validate performing the request by the user in an event the user is successfully identified.

8. The biometric authentication system of claim 7, further comprising:

a calling system configured to initiate contact by calling the user at a telephone number associated with the pre-registered device.

9. The biometric authentication system of claim 7, wherein the non-voice channel interaction comprises a web interaction, an instant messaging interaction, a texting interaction, an interaction via a terminal, a payment interaction, and an interaction at a kiosk.

10. The biometric authentication system of claim 7, wherein the biometric verification comprises one or more of:

a text dependent biometric validation, a text-independent biometric validation, and a liveness test.

11. The biometric authentication system of claim 7, further comprising:

the enrollment system configured to enable the registration for the biometric verification by one of;

a telephone number associated with the pre-registered device, and downloading of an application to the pre-registered device.

12. The biometric authentication system of claim 11, wherein the registration is completed using the pre-registered device, by registering the user'"'"'s voice print via the pre-registered device.

18. The biometric authentication system of claim 7, wherein the enrollment system, when configured to confirm the collected biometric data contains a biometric pattern that enables identifying the user, is further configured to perform at least one of the following operations:

verify that length of a phrase comprising voice biometric data enables validation with a live voice of the user, verify that clarity of a phrase pattern comprising voice biometric data enables validation with a live voice of the user and verify that the collected biometric data contains a variety of phrases to enable validation with a live voice of the user.

13. A system comprising:

at least one processor operatively coupled to computer memory, the at least one processor configured to include;

an enrollment system configured to register a user for biometric based verification, the registering including pre-registering a device of the user and a mobile application configured on the device to utilize biometric based verification, collecting biometric data from the user, determining whether the collected biometric data contains a biometric pattern that enables identifying the user, and, if not, recollecting biometric data from the user, and configuring one or more user-defined triggers of the mobile application stored in the computer memory, the one or more user-defined triggers configured to initiate the biometric based verification in response to a respective transaction by the user;

a non-voice channel configured to initiate a transaction with the user;

a biometric authentication system configured to determine that the transaction with the user matches a trigger of the configured one or more user-defined triggers stored in the computer memory, the biometric authentication system comprising;

a contact system configured to, based on the matched user-defined trigger, initiate contact with the biometric based verification via triggering the mobile application configured at the pre-registered device interacting with the user, the contact system further configured to push a notification triggering the contact with the biometric based verification by alerting the mobile application configured at the pre-registered device to initiate a voice biometric based verification dialog with the user;

a biometric system configured to perform the biometric verification of the user'"'"'s identity for a transaction initiated on a non-voice channel, the voice biometric based verification dialog being performed by the mobile application interacting with the user using a form of biometric identification, the biometric based verification;

(i) matching biometric data provided during the initiated contact to the collected biometric pattern and (ii) determining possession of the pre-registered device, via the user contact at the pre-registered device; and

a decisioning system configured to validate completing the transaction by the user in an event the user is successfully identified; and

the non-voice channel configured to complete the transaction in an event the decision system indicates that the user is successfully identified.

14. The system of claim 13, further comprising:

a calling system configured to initiate contact by calling the user at a telephone number associated with the pre-registered device.

15. The system of claim 13, wherein the non-voice channel comprises one of:

a web interaction, an instant messaging interaction, a texting interaction, an interaction via a terminal, a payment interaction, and an interaction at a kiosk.

16. The system of claim 13, further comprising:

the enrollment system configured to enable the registration of the user into the biometric authentication system, wherein the registration is completed using the pre-registered device, by registering the user'"'"'s voice print via the pre-registered device.

19. The system of claim 13, wherein the enrollment system, in confirming the collected biometric data contains a biometric pattern that enables identifying the user, is further configured to perform at least one of the following operations:

verify that length of a phrase comprising voice biometric data enables validation with a live voice of the user, verify that clarity of a phrase pattern comprising voice biometric data enables validation with a live voice of the user and verify that the collected biometric data contains a variety of phrases to enable validation with a live voice of the user.