System for electronic authentication with live user determination

• US 10,574,650 B2
• Filed: 05/17/2017
• Issued: 02/25/2020
• Est. Priority Date: 05/17/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Wallace, Matthew Joseph, Cantley, Kerry Michelle, Correro, Greg M., DeGrammont, Jeantou Alphonse, Funk, Michael Lee, Hupfer, Glenn Edward, Sampath, Murali, Shannon, Donna Lynne
• Primary Examiner(s): King, John B
• Assistant Examiner(s): Dhruv, Darshan I
• Application Number:
  US15/598,074
• Publication Number:
  US 20180337917A1
• Time in Patent Office: 1,014 Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/45 Detection of the body part being alive
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

Systems, computer products, and methods are described herein for improved authentication utilizing two factor authentication of a user. The two factors include a verified identification and a liveness identification. The verified identification may be a governmental verified identification, and the liveness identification may be a video of the user. The user may capture the verified identification and the liveness identification using the user'"'"'s mobile device. The organization may authenticate the user by identifying the user from the verified identification image and identifying that the user is active by identifying movement from the liveness identification image. Additional authentication may include requiring and/or identifying an identifier from the liveness identification image (e.g., movement, object, characters, or the like), and/or capture image data related to a time or a location at which the images were captured.

Claims

1. A system for authentication using a live user determination, the system comprising:

one or more memory devices having computer readable code store thereon; and

one or more processing devices operatively coupled to the one or more memory devices, wherein the one or more processing devices are configured to execute the computer readable code to;

receive a request from a user through a user application to access an organization application, wherein the user application is located on a user computer system and the request is received from the user computer system;

provide authentication requirements to the user application for the authentication of the user, wherein the authentication requirements include requiring at least a verified identification image and a liveness identification image and providing the user one or more characters, keywords, or phrases to recite in the liveness identification image, and wherein the authentication requirements are provided to the user application through the user computer system;

receive the verified identification image from the user application, wherein the verified identification image is an image of a government issued identification card, wherein the verified identification image is captured using an image capture device of the user computer system, and wherein the verified identification image is received through the user computer system;

receive the liveness identification image from the user application, wherein the liveness identification image is a video of the user and comprises at least an image of the user, wherein the liveness identification image is captured using an image capture device of the user computer system, and wherein the liveness identification image is received through the user computer system;

receive a verified identification image time stamp and a verified identification image location stamp for the verified identification image from the user computer system;

receive a liveness image time stamp and a liveness identification image location stamp from the user computer system; and

determine the authentication of the user based on determining that the verified identification image and the liveness identification image include the user, the verified identification image time stamp and the liveness image time stamp both occur within a time period, the verified identification image location stamp and the liveness identification image location stamp occur within a location requirement, and that the one or more characters, the keywords, or the phrases are included in the video before the authentication.

2. The system of claim 1, wherein determining the authentication of the user comprises:

capturing first user information from the verified identification image, wherein the first user information comprises at least a name of the user; and

capturing an identifier from the liveness identification image, wherein the identifier comprises movement of the user in the video indicating that the user is active.

3. The system of claim 2, wherein the movement is a specific movement of the user and the specific movement is compared to a stored movement for the authentication of the user, and wherein the user selects the stored movement for the authentication.

4. The system of claim 1, wherein determining the authentication of the user comprises:

capturing first user information from the verified identification image, wherein the first user information comprises at least a name of the user; and

capturing one or more identifiers from the liveness identification image, wherein the one or more identifiers comprise a movement of the user in the video indicating that the user is active and an object included in the video.

5. The system of claim 1, wherein determining the authentication of the user comprises:

capturing first user information from the verified identification image, wherein the verified identification image is a first image of the user from the government issued identification card;

capturing second user information from the liveness identification image, wherein the liveness identification image is a second image of the user captured using the image capture device of the user computer system;

wherein the first user information and the second user information are images of the user'"'"'s face; and

comparing the first user information and the second user information for the authentication of the user.

6. The system of claim 1, wherein determining the authentication of the user comprises:

identifying electronic capture data from the verified identification image and from the liveness identification image; and

comparing the electronic capture data of the verified identification image and the liveness identification image with the authentication requirements.

7. The system of claim 6, wherein the verified identification image time stamp, the verified identification image location stamp, the liveness image time stamp, and the liveness identification image location stamp are captured by the user using the user computer system, and wherein the verified identification image time stamp, the verified identification image location stamp, the liveness image time stamp, and the liveness identification image location stamp are coupled to the verification identification image and the liveness identification image.

8. The system of claim 1, wherein the location requirement for the verified identification image or the liveness identification image include the user'"'"'s work, home, or previously specified location.

9. The system of claim 1, wherein after determining the authentication of the user the one or more processing devices are further configured to execute the computer readable code to:

receive an indication from the user of an authentication identifier in the video that should be used for future authentication;

store the authentication identifier for the user for the future authentication;

receive a request from the user for a second action;

receive a second video from the user;

determine a current identifier of the user from the second video;

determine a second authentication of the user for the second action based on the current identifier matching the authentication identifier.

10. The system of claim 9, wherein the authentication identifier and the current identifier are movements of the user in the video.

16. The system of claim 1, wherein the one or more processing devices are further configured to execute the computer readable code to:

receive an indication from the user of an object in the video that should be used for future authentication, wherein the object is different than a movement of the user; and

store object information for the authentication;

wherein determining the future authentication of the user is further based on determining a current object from the liveness identification image and determining that the current object matches the object information.

11. A computer implemented method for authentication using a live user determination, the method comprising:

receiving, by one or more processors, a request from a user through a user application to access an organization application, wherein the user application is located on a user computer system and the request is received from the user computer system;

provide, by the one or more processors, authentication requirements to the user application for the authentication of the user, wherein the authentication requirements include requiring at least a verified identification image and a liveness identification image and providing the user one or more characters, keywords, or phrases to recite in the liveness identification image, and wherein the authentication requirements are provided to the user application through the user computer system;

receive, by the one or more processors, the verified identification image from the user application, wherein the verified identification image is an image of a government issued identification card, wherein the verified identification image is captured using an image capture device of the user computer system, and wherein the verified identification image is received through the user computer system;

receive, by the one or more processors, the liveness identification image from the user application, wherein the liveness identification image is a video of the user and comprises at least an image of the user, wherein the liveness identification image is captured using an image capture device of the user computer system, and wherein the liveness identification image is received through the user computer system;

receive, by the one or more processors, a verified identification image time stamp and a verified identification image location stamp for the verified identification image;

receive, by the one or more processors, a liveness image time stamp and a liveness identification image location stamp; and

determine, by the one or more processors, the authentication of the user based on determining that the verified identification image and the liveness identification image include the user, the verified identification image time stamp and the liveness image time stamp both occur within a time period, the verified identification image location stamp and the liveness identification image location stamp occur within a location requirement, and that the one or more characters, the keywords, or the phrases are included in the video before the authentication.

12. The method of claim 11, wherein determining the authentication of the user comprises:

capturing first user information from the verified identification image, wherein the first user information comprises at least a name of the user; and

capturing an identifier from the liveness identification image, wherein the identifier comprises movement of the user in the video indicating that the user is active.

13. The method of claim 12, wherein the movement is a specific movement of the user and the specific movement is compared to a stored movement for the authentication of the user.

14. The method of claim 11, wherein determining the authentication of the user comprises:

capturing first user information from the verified identification image, wherein the first user information comprises at least a name of the user; and

capturing an identifier from the liveness identification image, wherein the identifier comprises an object included in the video.

15. A computer program product for authentication using a live user determination, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:

an executable portion configured to receive a request from a user through a user application to access an organization application, wherein the user application is located on a user computer system and the request is received from the user computer system;

an executable portion configured to provide authentication requirements to the user application for the authentication of the user, wherein the authentication requirements include requiring at least a verified identification image and a liveness identification image and providing the user one or more characters, keywords, or phrases to recite in the liveness identification image, and wherein the authentication requirements are provided to the user application through the user computer system;

an executable portion configured to receive the verified identification image from the user application, wherein the verified identification image is an image of a government issued identification card, wherein the verified identification image is captured using an image capture device of the user computer system, and wherein the verified identification image is received through the user computer system;

an executable portion configured to receive the liveness identification image from the user application, wherein the liveness identification image is a video of the user and comprises at least an image of the user, wherein the liveness identification image is captured using an image capture device of the user computer system, and wherein the liveness identification image is received through the user computer system; and

an executable portion configured to receive a verified identification image time stamp and a verified identification image location stamp for the verified identification image;

an executable portion configured to receive a liveness image time stamp and a liveness identification image location stamp;

an executable portion configured to determine the authentication of the user based on determining that the verified identification image and the liveness identification image include the user, the verified identification image time stamp and the liveness image time stamp both occur within a time period, the verified identification image location stamp and the liveness identification image location stamp occur within a location requirement, and that the one or more characters, the keywords, or the phrases are included in the video before the authentication.