Authentication via camera

• US 10,498,730 B1
• Filed: 11/09/2018
• Issued: 12/03/2019
• Est. Priority Date: 03/30/2016
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: Snap, Inc.
• Inventors: Son, Aaron Daniel, Koontz, Matthew
• Primary Examiner(s): Jhaveri, Jayesh M
• Application Number:
  US16/186,236
• Time in Patent Office: 389 Days
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2211/003 Mutual Authentication Bi-Directional Authentication, Dialogue, Handshake
• CPC Class Codes: G06K 19/06 characterised by the kind of the digital marking, e.g. shape, nature, code
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06K 19/06103 the marking being embedded in a human recognizable image, e.g. a company logo with an embedded two-dimensional code
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 23/00 Cameras or camera modules comprising electronic image sensors; Control thereof
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Systems and methods for authentication via camera are provided. In example embodiments, an authentication server transmits, to a mobile device, an identity verification image. The authentication server receives, from a computing device, a scanned image, wherein the computing device is different from the mobile device. The authentication server determines whether the scanned image includes data from the identity verification image. The authentication server transits, to a web server accessed by the computing device, an indication that a user'"'"'s identity has been verified upon determining that the scanned image includes the data from the identity verification image.

Claims

1. A system for user authentication using images, comprising:

hardware processing circuitry;

a hardware memory storing instructions that when executed configure the hardware processing circuitry to perform operations comprising;

receiving, at an authentication server, a request from a mobile device for a user identity verification image corresponding to a user identity of a user of the mobile device;

mapping an optical barcode to the user identity;

generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

transmitting, from the authentication server to the mobile device, the user identity verification image in response to the request;

receiving, at the authentication server a scanned image captured by a computing device, wherein the computing device is different from the mobile device;

determining, at the authentication server, the scanned image includes data from the user identity verification image, the data including the optical barcode; and

instructing, by the authentication server, a web server accessed by the computing device, that the user identity has been verified based on the determining and the mapping between the optical barcode and the user'"'"'s identity.

2. The system of claim 1, the operations further comprising instructing, by the authentication server, the web server that a second user'"'"'s identity has not been verified upon determining that a second scanned image does not include second data from a second user identity verification image.

3. The system of claim 1, wherein determining, at the authentication server, that the scanned image includes data from the user identity verification image comprises:

decoding data encoded in the scanned image; and

determining the decoded data corresponds to data which was encoded into the user identity verification image.

4. The system of claim 1, the operations further comprising:

receiving, at the authentication server, an indication of the user'"'"'s identity from the web server or the computing device,

wherein determining, at the authentication server, the scanned image includes the data from the user identity verification image comprises comparing data from the scanned image with data from the user identity verification image transmitted to the mobile device associated with the user'"'"'s identity.

5. The system of claim 1, the operations further comprising identifying, at the authentication server, the user by determining whether the scanned image includes data from one of a plurality of user identity verification images provided to a plurality of users.

6. The system of claim 1, the operations further comprising decoding data from a first portion of the scanned image to determine the user'"'"'s identity, wherein determining the scanned image includes data from the user identity verification image comprises comparing data decoded from a second portion of the scanned image with data associated with the user identity verification image provided to the mobile device corresponding to the user'"'"'s identity, wherein the first portion is different from the second portion.

7. The system of claim 1, the operations further comprising mapping an optical barcode to the user'"'"'s identity, and generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape.

8. The system of claim 7, wherein determining the scanned image includes the data from the user identity verification image comprises:

decoding encoded information in the optical barcode within the geometric shape based on an orientation of the geometric shape identified by the custom pattern; and

verifying whether the decoded information corresponds to stored identity information of the user.

9. The system of claim 1, the operations further comprising:

transmitting, from the authentication server to the mobile device in conjunction with the user identity verification image, an indication of a validity period for the user identity verification image; and

upon expiration of the validity period, removing, from a memory of the authentication server, data associated with the user identity verification image and foregoing instructing the web server that the indication that the user'"'"'s identity has been verified using the data associated with the user identity verification image.

10. The system of claim 1, wherein the scanned image is generated by the user scanning a display unit of the mobile device into a camera of the computing device, wherein the display unit of the mobile device displays the user identity verification image.

11. A method for user authentication using images, comprising:

receiving, at an authentication server, a request from a mobile device for a user identity verification image corresponding to a user identity of a user of the mobile device;

mapping an optical barcode to the user identity;

generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

transmitting, from the authentication server to the mobile device, the user identity verification image in response to the request;

receiving, at the authentication server a scanned image captured by a computing device, wherein the computing device is different from the mobile device;

determining, at the authentication server, the scanned image includes data from the user identity verification image, the data including the optical barcode; and

instructing, by the authentication server, a web server accessed by the computing device, that the user identity has been verified based on the determining and the mapping between the optical barcode and the user'"'"'s identity.

12. The method of claim 11, further comprising instructing, by the authentication server, the web server that a second user'"'"'s identity has not been verified upon determining that a second scanned image does not include second data from a second user identity verification image.

13. The method of claim 11, wherein determining, at the authentication server, that the scanned image includes data from the user identity verification image comprises:

decoding data encoded in the scanned image; and

determining the decoded data corresponds to data which was encoded into the user identity verification image.

14. The method of claim 11, further comprising:

receiving, at the authentication server, an indication of the user'"'"'s identity from the web server or the computing device,

wherein determining, at the authentication server, the scanned image includes the data from the user identity verification image comprises comparing data from the scanned image with data from the user identity verification image transmitted to the mobile device associated with the user'"'"'s identity.

15. The method of claim 11, further comprising identifying, at the authentication server, the user by determining whether the scanned image includes data from one of a plurality of user identity verification images provided to a plurality of users.

16. The method of claim 11, further comprising decoding data from a first portion of the scanned image to determine the user'"'"'s identity, wherein determining the scanned image includes data from the user identity verification image comprises comparing data decoded from a second portion of the scanned image with data associated with the user identity verification image provided to the mobile device corresponding to the user'"'"'s identity, wherein the first portion is different from the second portion.

17. The method of claim 11, further comprising mapping an optical barcode to the user'"'"'s identity, and generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape, wherein determining the scanned image includes the data from the user identity verification image comprises:

decoding encoded information in the optical barcode within the geometric shape based on an orientation of the geometric shape identified by the custom pattern; and

verifying whether the decoded information corresponds to stored identity information of the user.

18. The method of claim 11, further comprising:

transmitting, from the authentication server to the mobile device in conjunction with the user identity verification image, an indication of a validity period for the user identity verification image; and

upon expiration of the validity period, removing, from a memory of the authentication server, data associated with the user identity verification image and foregoing instructing the web server that the indication that the user'"'"'s identity has been verified using the data associated with the user identity verification image.

19. A non-transitory computer readable storage medium comprising instructions for user authentication using images, that when executed configure hardware processing circuitry to perform operations comprising:

receiving, at an authentication server, a request from a mobile device for a user identity verification image corresponding to a user identity of a user of the mobile device;

mapping an optical barcode to the user identity;

generating, by the authentication server, the user identity verification image to include a geometric shape with a custom pattern and the optical barcode within the geometric shape;

transmitting, from the authentication server to the mobile device, the user identity verification image in response to the request;

receiving, at the authentication server a scanned image captured by a computing device, wherein the computing device is different from the mobile device;

determining, at the authentication server, the scanned image includes data from the user identity verification image, the data including the optical barcode; and

instructing, by the authentication server, a web server accessed by the computing device, that the user identity has been verified based on the determining and the mapping between the optical barcode and the user'"'"'s identity.

20. The non-transitory computer readable storage medium of claim 19, the operations further comprising:

receiving, at the authentication server, an indication of the user'"'"'s identity from the web server or the computing device,

wherein determining, at the authentication server, the scanned image includes the data from the user identity verification image comprises comparing data from the scanned image with data from the user identity verification image transmitted to the mobile device associated with the user'"'"'s identity.