System, method, and device of detecting identity of a user and authenticating a user

• US 10,395,018 B2
• Filed: 10/17/2016
• Issued: 08/27/2019
• Est. Priority Date: 11/29/2010
• Status: Active Grant

• Current Assignee: Biocatch Ltd.
• Original Assignee: Biocatch Ltd.
• Inventors: Turgeman, Avi
• Primary Examiner(s): Rahman, Mahfuzur
• Assistant Examiner(s): Cruz-Franqui, Richard W
• Application Number:
  US15/294,951
• Publication Number:
  US 20170032114A1
• Time in Patent Office: 1,044 Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2203/0381 Multimodal input, i.e. interface arrangements enabling the user to issue commands by simultaneous use of input devices of different nature, e.g. voice plus gesture on digitizer
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0485 Scrolling or panning
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information

Abstract

System, method, and device of detecting identity of a user and authenticating a user; as well as detecting a possible attacker or impostor, and differentiating among users of an electronic device or of a computerized service. A mobile or portable electronic device is utilized to capture a self-taken image of a user, which is utilized as a user-authentication factor. The accelerometer and gyroscope of the mobile device, sense and measure spatial device properties during, before or after the submission of the self-image authentication factor; and based on such spatial device properties, the system determines liveness of the user, freshness of the submitted self-image, and possibly differentiates between a legitimate user and an attacker. Similarly, spatial device properties that accompany the entry or the submission of a biometric sample, such as fingerprint scan or retina scan, are used to detect liveness or freshness or authenticity of such biometric samples, and are used to differentiate between a legitimate user and an attacker.

Claims

1. A method comprising:

(a) generating a user-authentication process that utilizes at least a combination of;

(I) a self-taken image of a user of an electronic device, together with (II) device spatial-orientation data as derived from image analysis of one or more images captured by a camera of said electronic device and (III) sensing device-acceleration data or device-orientation data of said electronic device, via at least one of;

an accelerometer of said electronic device, and a gyroscope of said electronic device, as an authentication factor for authenticating said user to a computerized service;

(b) in said user-authentication process,

(b1) capturing via the camera of said electronic device, one of;

(i) a set of self-taken image frames, or (ii) a video comprising self-taken image frames;

(b2) performing an analysis of content of at least one frame of said self-taken image frames that were captured via said camera of said electronic device;

(b3) based on said analysis of content, determining non-correspondence of said self-taken image frames to a genuine set of image frames captured by a live person utilizing said electronic device, by detecting in said self-taken image frames lack of movement or shaking;

(b4) sensing said acceleration data or device-orientation data that accompanies the submission by said user of said self-taken image frames;

(b5) determining a mismatch between (i) said acceleration data or device-orientation data as sensed by said electronic device, and (ii) device acceleration data or device-orientation data that is expected to accompany capturing and submission of said self-taken image frames;

(c) based on the determining of steps (b3) and (b5), triggering an alert that said self-taken image is estimated to be a resubmission of a previously-captured image.

2. The method of claim 1, wherein the determining of step (b3) is further based on sensed device-acceleration data, that accompanies the submission by said user of said self-taken image.

3. The method of claim 1, wherein the determining of step (b3) is further based on sensing via a gyroscope of the electronic device, device-orientation data that accompanies the submission by said user of said self-taken image.

4. The method of claim 1, wherein the determining of step (b3) is further based on device-acceleration data that was sensed prior to the submission by said user of said self-taken image.

5. The method of claim 1, wherein the determining of step (b3) is further based on device-orientation data, that was sensed by a gyroscope of said electronic device prior to the submission by said user of said self-taken image.

6. A process comprising:

(a) generating a user-authentication process that utilizes at least a self-taken image of a user of an electronic device, as an authentication factor for authenticating said user to a computerized service;

(b) capturing a reference self-image of the user, to be used subsequently as an authentication factor for authenticating said user;

(c) during and before and after said capturing of the reference self-image of the user, sensing also spatial orientation properties of said electronic device, via at least one of;

an accelerometer of said electronic device, and a gyroscope of said electronic device;

(d) subsequently, receiving from said user a currently-submitted self-image that the user submits as a user-authentication factor;

(e1) determining whether during a first time-period, that is prior to submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed prior to the capturing of the reference self-image in step (c);

(e2) determining whether during a second time-period, that is during submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed during the capturing of the reference self-image in step (c);

(e3) determining whether during a third time-period, that is after submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed after the capturing of the reference self-image in step (c);

(f) based on an analysis that takes into account a mismatch in steps (e1) and (e2) and (e3), triggering an alert that said self-taken image is estimated to be a resubmission of a previously-captured image.

7. The process of claim 6,

wherein step (c) comprises:

during and before and after said capturing of the reference self-image of the user, sensing device-acceleration data of said electronic device, via the accelerometer of said electronic device;

wherein the determining of step (e1), and the determining of step (e2), and the determining of step (e3), are based on sensed acceleration data sensed by the accelerometer of said electronic device.

8. The process of claim 6,

wherein step (c) comprises:

during and before and after said capturing of the reference self-image of the user, sensing device-orientation data of said electronic device, via the gyroscope of said electronic device;

wherein the determining of step (e1), and the determining of step (e2), and the determining of step (e3), are based on sensed device-orientation data sensed by the gyroscope of said electronic device.

9. A process comprising:

(a) generating a user-authentication process that utilizes at least a fingerprint scan of a user of an electronic device, captured via a fingerprint scanner of said electronic device, as an authentication factor for authenticating said user to a computerized service;

(b) capturing a reference fingerprint scan of the user, to be used subsequently as an authentication factor for authenticating said user;

(c) during and before and after said capturing of the reference fingerprint scan, sensing also spatial device-orientation properties of said electronic device, via at least one of;

an accelerometer of said electronic device, and a gyroscope of said electronic device;

(d) subsequently, receiving from said user a currently-submitted fingerprint scan that the user submits as a user-authentication factor;

(e) determining whether during time-periods, that are prior to and during and after submission of the currently-submitted fingerprint scan, the electronic device sensed spatial properties of said electronic device that match the spatial device-orientation properties that were sensed during and before and after the capturing of the reference fingerprint scan in step (c);

(f) in response to determining that during time-periods, that are prior to and during and after submission of the currently-submitted fingerprint scan, the electronic device sensed spatial properties that mismatch the spatial device-orientation properties that were sensed during and before and after the capturing of the reference fingerprint scan in step (c), triggering an alert that the currently-submitted fingerprint scan is estimated to be a resubmission of a previously-captured fingerprint scan.

10. The process of claim 9,

wherein step (c) comprises:

during and before and after said capturing of the reference fingerprint scan of the user, sensing device-acceleration data of said electronic device, via the accelerometer of said electronic device;

wherein step (e) comprises;

determining whether during and before and after submission of the currently-submitted fingerprint scan, the accelerometer of the electronic device sensed device-acceleration data that matches the device-acceleration data that was sensed during and before and after the capturing of the reference fingerprint scan in step (c);

wherein step (f) comprises;

in response to determining that during and before and after submission of the currently-submitted fingerprint scan, the accelerometer of the electronic device sensed device-acceleration data that mismatches the spatial device-orientation properties that were sensed during and before and after the capturing of the reference fingerprint scan in step (c), triggering an alert that said currently-submitted fingerprint scan is estimated to be a resubmission of a previously-captured fingerprint scan.

11. The process of claim 9,

wherein step (c) comprises:

before and during and after said capturing of the reference fingerprint scan of the user, sensing device-orientation data of said electronic device, via the gyroscope of said electronic device;

wherein step (e) comprises;

determining whether before and during and after submission of the currently-submitted fingerprint scan, the gyroscope of the electronic device sensed device-orientation data that matches the spatial device-orientation properties that were sensed before and during and after the capturing of the reference fingerprint scan in step (c);

wherein step (I) comprises;

in response to determining that before and during and after submission of the currently-submitted fingerprint scan, the gyroscope of the electronic device sensed device-orientation data that mismatches the spatial device-orientation properties that were sensed before and during and after the capturing of the reference fingerprint scan in step (c), triggering an alert that said currently-submitted fingerprint scan is estimated to be a resubmission of a previously-captured fingerprint scan.