MULTIFACTOR MULTIMEDIA BIOMETRIC AUTHENTICATION

• US 20090116703A1
• Filed: 11/07/2007
• Published: 05/07/2009
• Est. Priority Date: 11/07/2007
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Business Network Services, Inc. (Verizon Communications Inc.)
• Inventors: SCHULTZ, Paul T.
• Granted Patent: US 8,189,878 B2
• Time in Patent Office: Days
• US Class Current: 382/118
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A device may receive a request to authenticate a user, automatically establish a multimedia session with the user in response to receiving the request, and capture a group of biometric identifiers for the user from the multimedia session. The device may further perform a group of biometric authentication operations using the analyzed or captured biometric identifiers to obtain a group of authentication scores, determine whether the user is properly authenticated based on the group of authentication scores, and transmit a message representing the determination of whether the user is properly authenticated.

Claims

1. A device comprising:

a memory to store instructions; and

a processor to execute the instructions to;

receive a request to authenticate a user,

automatically establish a multimedia session with the user in response to receiving the request,

capture a plurality of biometric identifiers for the user from the multimedia session,

perform a plurality of biometric authentication operations using the captured plurality of biometric identifiers to obtain a plurality of authentication scores,

determine whether the user is properly authenticated based on the plurality of authentication scores, and

transmit a message representing the determination of whether the user is properly authenticated.

2. The device of claim 1, where the plurality of biometric identifiers includes at least two of a voice biometric, a facial biometric, a fingerprint scan, or an eye scan.

3. The device of claim 1, where, when capturing the plurality of biometric identifiers, the processor is further configured to at least two of:

perform a real-time voice biometric analysis or record a voice of the user during the multimedia session,

perform a real-time facial biometric analysis or record a video of the user during the multimedia session,

perform a real-time fingerprint biometric analysis or receive a fingerprint scan during the multimedia session, or

perform a real-time eye biometric analysis or receive an eye scan during the multimedia session.

4. The device of claim 1, where the plurality of biometric authentication operations includes at least two of a voice biometric operation, a facial biometric operation, a fingerprint biometric operation, or an eye biometric operation.

5. The device of claim 1, where when determining whether the user is properly authenticated, the processor is configured to:

combine the plurality of authentication scores to obtain a multifactor authentication result,

compare the multifactor authentication result to a threshold, and

determine that the user is properly authenticated when the multifactor authentication result exceeds the threshold.

6. The device of claim 1, where the processor is further configured to:

terminate the multimedia session with the user after capturing the plurality of biometric identifiers.

7. The device of claim 1, where the processor is further configured to:

store an identifier for the user, a date and time that the plurality of biometric authentication operations is performed, and the captured plurality of biometric identifiers in a database.

8. The device of claim 7, where the processor is further configured to:

retrieve at least one biometric identifier of the captured plurality of biometric identifiers to verify that at least one biometric authentication operation of the plurality of biometric authentication operations were actually performed for the user.

9. The device of claim 1, where the request includes an identifier of the user and information identifying the plurality of biometric authentication operations.

10. The device of claim 9, where the user identifier includes a telephone number or a network address, and

the processor automatically establishes the multimedia session with the user using the user identifier.

11. A method comprising:

receiving a request to authenticate a user;

establishing a multimedia session with the user;

performing real-time facial biometric analysis or capturing an image of the user during the multimedia session;

performing real-time voice biometric analysis or recording audio of the user during the multimedia session;

performing a facial biometric operation based on at least one of the real-time facial biometric analysis or the captured image to obtain a first authentication score;

performing a voice biometric operation based on at least one of the real-time voice biometric analysis or the recorded audio to obtain a second authentication score;

determining whether the user is properly authenticated based on the first authentication score and the second authentication score; and

transmitting a message representing the determination of whether the user is properly authenticated.

12. The method of claim 11, where determining whether the user is properly authenticated includes:

combining the first authentication score and the second authentication score to obtain a multifactor authentication result,

comparing the multifactor authentication result to a threshold,

determining that the user is properly authenticated when the multifactor authentication result exceeds the threshold, and

determining that the user is not properly authenticated when the multifactor authentication result does not exceed the threshold.

13. The method of claim 11, further comprising:

terminating the multimedia session with the user after analyzing or capturing the image and analyzing and recording the audio.

14. The method of claim 11, further comprising:

storing an identifier for the user, a date and time that the facial authentication operation and voice authentication operation are performed, and the recorded video and audio in a database.

15. The method of claim 11, where the determining includes:

sending the first authentication score and the second authentication score to an external system, and

determining whether the user is properly authenticated at the external system.

16. A method comprising:

receiving a request to authenticate a user;

tapping into an ongoing multimedia session in which the user is involved in response to receiving the request;

capturing a plurality of biometric identifiers for the user from the multimedia session;

performing a plurality of biometric authentication operations using the captured plurality of biometric identifiers to obtain a plurality of authentication scores;

determining whether the user is properly authenticated based on the plurality of authentication scores; and

transmitting a message representing the determination of whether the user is properly authenticated.

17. The method of claim 16, where the ongoing multimedia session occurs between a first device that is associated with the user and a second device, and

where the tapping is performed by a third device that is different than the first device and the second device.

18. The method of claim 16, where the tapping occurs without the knowledge of the user.

19. The method of claim 16, where the capturing the plurality of biometric identifiers includes at least two of:

performing a real-time voice biometric analysis or recording a voice of the user during the ongoing multimedia session,

performing a real-time facial biometric analysis, recording a video of the user, or capturing an image of the user during the ongoing multimedia session,

performing a real-time fingerprint biometric analysis or receiving a fingerprint scan during the ongoing multimedia session, or

performing a real-time eye biometric analysis or receiving an eye scan during the ongoing multimedia session.

20. The method of claim 16, where the performing a plurality of biometric authentication operations includes at least two of:

performing a voice biometric operation,

performing a facial biometric operation,

performing a fingerprint biometric operation, or

performing an eye biometric operation.

21. The method of claim 16, where determining whether the user is properly authenticated includes:

combining the plurality of authentication scores to obtain a multifactor authentication result,

comparing the multifactor authentication result to a threshold, and

determining that the user is properly authenticated when the multifactor authentication result exceeds the threshold.

22. A system comprising:

a computer-implemented device to;

receive a request to authenticate a user,

tap, in response to receiving the request, into an ongoing multimedia session in which the user is involved,

capture a plurality of biometric identifiers for the user from the multimedia session,

perform a plurality of biometric authentication operations using the captured plurality of biometric identifiers to obtain a plurality of authentication scores,

determine whether the user is properly authenticated based on the plurality of authentication scores, and

transmit a message, to a device that is part of the ongoing multimedia session, that represents the determination of whether the user is properly authenticated.

23. The system of claim 22, where the computer-implemented device taps into the ongoing multimedia session without the knowledge of the user.

24. The system of claim 22, where when performing a plurality of biometric authentication operations, the computer-implemented device performs at least two of:

a voice biometric operation,

a facial biometric operation,

a fingerprint biometric operation, or

an eye biometric operation.

25. The system of claim 22, where when determining whether the user is properly authenticated, the computer-implemented device is configured to:

combine the plurality of authentication scores to obtain a multifactor authentication result,

compare the multifactor authentication result to a threshold, and

determine that the user is properly authenticated when the multifactor authentication result exceeds the threshold.