Systems, devices, and methods for identifying user data

• US 10,552,697 B2
• Filed: 02/14/2017
• Issued: 02/04/2020
• Est. Priority Date: 02/03/2012
• Status: Active Grant

• Current Assignee: Jumio Inc.
• Original Assignee: Jumio Inc.
• Inventors: Mattes, Daniel, Starkey, Chad
• Primary Examiner(s): Sholeman, Abu S
• Application Number:
  US15/432,831
• Publication Number:
  US 20180234420A1
• Time in Patent Office: 1,085 Days
• Field of Search: 726 1, 726 7, 726 23, 726 24
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 10/95 structured as a network, e.g. client-server architectures
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints
• CPC Class Codes: G06V 40/171 Local features and components; Facial parts eye characteristics G06V40/18; Occluding parts, e.g. glasses; Geometrical relationships
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G06V 40/18 Eye characteristics, e.g. of the iris
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

The various embodiments described herein include methods, devices, and systems for identifying users. In one aspect, a method includes (1) receiving from a server a request to identify a user; (2) in response to the identification request, sending a request for encoded image data corresponding to one or more features of the first user, the request specifying a particular encoding for the image data; (3) receiving encoded image data corresponding to the one or more features of the first user; (4) obtaining stored image data for an authorized user corresponding to one or more features of the authorized user; (5) determining whether the first user is the authorized user based on a comparison of the received encoded image data and the stored image data; and (6) providing to the remote server an identification indicator based on the determination of whether the first user is the authorized user.

Claims

1. A computer-implemented method of identifying a user, the method comprising:

at a server system having one or more processors and memory storing programs for execution by the one or more processors;

receiving from a remote server a request to identify a first user;

in response to receiving an identification request, sending to a client device of the first user a request for encoded image data corresponding to one or more facial features of the first user, wherein;

a respective facial feature of the one or more facial features is a portion, less than all, of a full face, and

the request specifies a particular encoding for the image data;

responsive to the request for the encoded image data, receiving encoded image data from the client device, the received encoded image data corresponding to the one or more facial features of the first user;

obtaining stored image data for an authorized user, the stored image data corresponding to one or more facial features of the authorized user;

determining whether the first user is the authorized user based on a comparison of the received encoded image data and the stored image data; and

providing to the remote server an identification indicator based on the determination of whether the first user is the authorized user.

2. The method of claim 1, wherein the identification indicator indicates that the first user is the authorized user.

3. The method of claim 1, wherein the identification indicator indicates that the first user is not the authorized user, and the method further comprises initiating a remedial process in response to determining that the first user is not the authorized user.

4. The method of claim 3, wherein the remedial process includes one or more of:

sending to the client device a request for second encoded image data;

sending to the client device a request for encoded audio data; and

sending a notification to the client device indicating that the first user was not identified.

5. The method of claim 1, wherein the one or more facial features of the first user comprise a plurality of facial features of the first user and the particular encoding for the plurality of facial features encodes the plurality of facial features in combination with one another.

6. The method of claim 1, wherein the particular encoding for the image data comprises an irreversible compression of the image data.

7. The method of claim 1, wherein the particular encoding for the image data comprises a pseudo-random encoding selected in response to the identification request.

8. The method of claim 1, wherein the encoded image data from the client device includes a timestamp, and the method further comprises:

determining based on the timestamp whether the image data was taken within a preset time period; and

wherein the identification indicator is further based on the determination of whether the image data was taken within the preset time period.

9. The method of claim 1, further comprising:

in response to receiving the identification request, requesting from the client device a current geographical location of the client device;

responsive to the request for location data, receiving geographical location data from the client device;

determining based on the geographical location data whether the client device is in an unexpected location; and

wherein the identification indicator is further based on the determination of whether the client device is in an unexpected location.

10. The method of claim 1, further comprising:

in response to receiving the identification request, requesting from the client device encoded audio data corresponding to the first user speaking one or more words;

responsive to the request for encoded audio data, receiving encoded audio data from the client device; and

wherein determining whether the first user is the authorized user is further based on the encoded audio data.

11. An identification server system, comprising:

one or more processors; and

memory coupled to the one or more processors, the memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for;

receiving from a remote server a request to identify a first user;

in response to receiving an identification request, sending to a client device of the first user a request for encoded image data corresponding to one or more facial features of the first user, wherein;

a respective facial feature of the one or more facial features is a portion, less than all, of a full face, and

the request specifies a particular encoding for the image data;

responsive to the request for the encoded image data, receiving encoded image data from the client device, the received encoded image data corresponding to the one or more facial features of the first user;

obtaining stored image data for an authorized user, the stored image data corresponding to one or more facial features of the authorized user;

determining whether the first user is the authorized user based on a comparison of the received encoded image data and the stored image data; and

providing to the remote server an identification indicator based on the determination of whether the first user is the authorized user.

12. The identification server system of claim 11, wherein the one or more facial features of the first user comprise a plurality of facial features of the first user and the particular encoding for the plurality of facial features encodes the plurality of facial features in combination with one another.

13. The identification server system of claim 11, wherein the particular encoding for the image data comprises an irreversible compression of the image data.

14. The identification server system of claim 11, wherein the particular encoding for the image data comprises a pseudo-random encoding selected in response to the identification request.

15. The identification server system of claim 11, wherein the encoded image data from the client device includes a timestamp, and wherein the one or more programs further include instructions for:

determining based on the timestamp whether the image data was taken within a preset time period; and

wherein the identification indicator is further based on the determination of whether the image data was taken within the preset time period.

16. The identification server system of claim 11, wherein the one or more programs further include instructions for:

in response to receiving the identification request, requesting from the client device a current geographical location of the client device;

responsive to the request for location data, receiving geographical location data from the client device;

determining based on the geographical location data whether the client device is in an unexpected location; and

wherein the identification indicator is further based on the determination of whether the client device is in an unexpected location.

17. The identification server system of claim 11, wherein the one or more programs further include instructions for:

in response to receiving the identification request, requesting from the client device encoded audio data corresponding to the first user speaking one or more words;

responsive to the request for encoded audio data, receiving encoded audio data from the client device; and

wherein determining whether the first user is the authorized user is further based on the encoded audio data.

18. A non-transitory computer-readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by a server system, cause the server system to:

receive from a remote server a request to identify a first user;

in response to receiving an identification request, send to a client device of the first user a request for encoded image data corresponding to one or more facial features of the first user, wherein;

a respective facial feature of the one or more facial features is a portion, less than all, of a full face, and

the request specifies a particular encoding for the image data;

responsive to the request for the encoded image data, receive encoded image data from the client device, the received encoded image data corresponding to the one or more facial features of the first user;

obtain stored image data for an authorized user, the stored image data corresponding to one or more facial features of the authorized user;

determine whether the first user is the authorized user based on a comparison of the received encoded image data and the stored image data; and

provide to the remote server an identification indicator based on the determination of whether the first user is the authorized user.