System and Method for Providing Secure Access to an Electronic Device Using Facial Biometrics

• US 20130114865A1
• Filed: 12/20/2012
• Published: 05/09/2013
• Est. Priority Date: 06/16/2005
• Status: Active Grant

• Current Assignee: Sensible Vision Incorporated
• Original Assignee: Sensible Vision Incorporated
• Inventors: Azar, Cyrus, Brostoff, George
• Granted Patent: US 8,909,938 B2
• Time in Patent Office: Days
• US Class Current: 382/118
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06T 7/0012 Biomedical image inspection
• CPC Class Codes: G06V 10/772 Determining representative reference patterns, e.g. averaging or distorting patterns; Generating dictionaries
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04N 7/18 Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast

Abstract

A facial biometric recognition system and method (100) for providing security for an electronic device (101) includes a digital camera (105) having a field of view for providing facial biometric images at a predetermined interval from a user of the electronic device (101). A processor (109) is associated with the electronic device (101) for comparing the facial biometric images to biometric image data stored in a database (107). The facial biometric images are continuously compared (111) to those stored in the database (107) or to facial image tracking (113) for providing substantially continuous authentication when the user physically moves about, the camera'"'"'s field of view. The invention may be used with devices such as a personal computer (PC), mobile telephone, personal digital assistant (PDA) or gaming device and provides an efficient means by which to secure information on the device without the need for complex biometric security devices.

Claims

1-49. -49. (canceled)

50. A facial biometric recognition system for providing security for an electronic device comprising:

a digital camera having a field of view for providing a plurality of facial biometric images from a user of the electronic device;

a database for storing facial biometric image data after user authentication;

at least one processor associated with the electronic device for executing the steps of;

comparing the plurality of facial biometric images to biometric image data stored in the database;

updating the database with a new image if authentication has not occurred within a predetermined period of time and the user is later authenticated;

identifying prominent facial features of the user;

tracking the prominent facial features for providing continuous authentication when physically moving about the field of view of the digital camera; and

granting the user operational access to the electronic device during continuous authentication.

51. A facial biometric recognition system as in claim 50, wherein the plurality of facial biometric images are provided by the digital camera in real-time.

52. A facial biometric recognition system as in claim 50, wherein the plurality of facial biometric images include time stamps.

53. A facial biometric recognition system as in claim 50, further comprising the step of:

providing authentication credentials to the at least one processor before user facial biometric images are stored in the database.

54. A facial biometric recognition system as in claim 53, wherein the authentication credentials include both a user name and first password.

55. A facial biometric recognition system as in claim 53, wherein the authentication credentials include additional forms of biometric authentication.

56. A facial biometric recognition system as in claim 50, further comprising the step of:

using a previously stored image for authentication if a real-time facial biometric images cannot be used to provide authentication of the user.

57. A facial biometric recognition system as in claim 56, further comprising the step of:

using a second password before using a previously stored image.

58. A facial biometric recognition system as in claim 50, further comprising the step of:

disabling a display of the electronic device when no authentication is made between the real-time facial biometric images and those stored in the database.

59. A facial biometric recognition system as in claim 50, further comprising the step of:

disabling a display of the electronic device when tracking of the user'"'"'s presence is lost.

60. A facial biometric recognition system as in claim 59, further comprising the step of:

delaying disablement of the display for a predetermined time period if use of a peripheral device has been detected.

61. A facial biometric recognition system as in claim 59, wherein the peripheral device is at least one from the group of a mouse, keyboard or touch screen.

62. A facial biometric recognition system as in claim 50, wherein the electronic device is one from the group of personal computer, personal digital assistant (PDA), mobile telephone or gaming device.

63. A facial biometric recognition system as in claim 50, wherein the step of updating includes the step of:

replacing a biometric image in the database that has resulted in the least success in authentication.

64. A method for providing security for an electronic device using facial biometric information comprising the steps of:

using a plurality of facial biometric images provided from a digital imaging device;

utilizing at least one processor for authenticating the identity of the user;

storing digital imaging information about the user in a database;

updating the database with a new image if authentication has not occurred within a predetermined period of time and the user is later authenticated;

identifying prominent facial features of the user after authentication;

providing continuous user authentication when the user physically moves about a field of view of the digital imaging device by tracking the prominent facial features without providing a facial comparison between biometric images; and

disabling utility of the electronic device if no user authentication is made within a predetermined time period or granting user operational access to the electronic deice during continuous authentication.

65. A method for providing security as in claim 64, wherein the step of providing continuous user authentication includes the step of:

comparing a substantially real-time image from the digital camera with one stored in the database.

66. A method for providing security as in claim 64, wherein the step of providing continuous user authentication includes the step of:

detecting the user'"'"'s presence in field of view of the digital imaging device.

67. A method for providing security as in claim 64, wherein the facial biometric images from the digital imaging device are provided in substantially real-time.

68. A method for providing security as in claim 64, further comprising the step of:

automatically enrolling a user in the database based on an authentication of a plurality of real-time facial biometric images.

69. A method for providing security as in claim 64, further comprising the steps of:

accessing operation to the electronic device by manually entering first authentication credentials; and

populating the database using the plurality of facial biometric images from the digital imaging device obtained after access to the electric device.

70. A method for providing security as in claim 67, further comprising the step of:

providing a time stamp for each of the real-time facial biometric images.

71. A method for providing facial biometric security as in claim 64, wherein the step of updating includes the step of:

replacing a biometric image in the database that has resulted in the least success in authentication.

72. A method for providing facial biometric security as in claim 64, further comprising the step of:

utilizing second authentication credentials independent of the first authentication credentials before updating the database.

73. A method for providing security as in claim 64, further comprising the step of:

delaying the step of disabling if any activity is detected from a peripheral device.

74. A method for providing security as in claim 73, wherein the peripheral device is at least one from the group of keyboard, mouse and touch screen.

75. A method for providing security as in claim 64, wherein the electronic device is at least one from the group of personal computer, personal digital assistant (PDA), mobile telephone or gaming device.

76. A system for providing electronic biometric security for an electronic device comprising:

a camera for providing a plurality of digital images;

a database located in the electronic device for storing digital image information;

at least one microprocessor performing the steps of;

authenticating user identity based on entry of a password;

storing information in the database from at least one digital image of an authenticated user;

updating the database with a current image if authentication has not occurred within a predetermined period of time and the user is later authenticated;

identifying prominent facial features of the user;

tracking the user using the prominent facial features while in a field of view of the camera for providing substantially continuous authentication; and

continuing user access to the electronic device as long as the user remains authenticated within a field of view of the camera.

77. A system for providing electronic security as in claim 76, further comprising the step of:

disabling the tracking step at the option of the user; and

providing a continuous comparison of a substantially real-time image from the camera to an image stored in the database from the authenticated user.

78. A system for providing electronic security as in claim 76, wherein the digital image information includes at least the face of the authenticated user.

79. A system for providing electronic security as in claim 76, further comprising the step of:

disabling the electronic device by using the at least microprocessor if the user is not authenticated.

80. A system for providing electronic security as in claim 79, further comprising the step of:

waiting a predetermined time period before disabling the electronic device.

81. A system for providing electronic security as in claim 79, further comprising the step of:

disabling the electronic display when the electronic device is disabled.

82. A system for providing electronic security as in claim 79, further comprising the step of:

delaying disablement for a predetermined time period if a peripheral device associated with the electronic device is detected.

83. A system for providing electronic security as in claim 76, wherein the step of updating includes the steps of:

time stamping the plurality of digital images when stored in the database;

identifying a digital image stored in the database having an earlier time stamp; and

replacing a digital image in the database that has resulted in the least success in authentication and has the oldest time stamp.

84. A system for providing electronic security as in claim 83, wherein the peripheral device includes at least one from the group of a mouse, keyboard or touch screen.

85. A system for providing electronic security as in claim 76, wherein the electronic device is at least one from the group of personal computer (PC), personal digital assistant (PDA), cellular telephone or gaming device.

86. An electronic device using facial biometric security for providing access to the electronic device comprising:

a digital camera for providing a plurality of user images;

a memory for storing at least one of the plurality of user images after the user has entered valid authentication credentials;

a microprocessor for comparing the plurality of user images with the at least one image stored in the memory for providing user authentication; and

wherein the microprocessor performs the steps of;

granting access to the electronic device when the user is authenticated;

identifying prominent facial features of the user; and

tracking the user using the prominent facial features when physically moving about the field of view of the digital camera for providing a substantially continuous authentication without comparing user images between user images from the digital camera and those stored in memory.

87. An electronic device using facial biometric security as in claim 86, further comprising the step of:

time stamping the plurality of user images.

88. An electronic device as in claim 87, further comprising the step of:

updating the memory after the user has entered valid authentication credentials with the user'"'"'s image having a previous time stamp if the user is not authenticated within a predetermined time period.

89. An electronic device as in claim 88, wherein the step of updating includes the step of:

replacing a biometric image in the database that has resulted in the least success in authentication and has the oldest time stamp.

90. An electronic device as in claim 86, wherein the authentication credentials include at least one password.

91. An electronic device as in claim 86, further comprising the step of:

disabling the functionality of the electronic device if the user is not authenticated within a predetermined time period; and

re-enabling functionality of the device when the user is again authenticated.

92. An electronic device as in claim 91, further comprising the step of:

delaying disablement is delayed if a peripheral device associated with the electronic device is detected as in use.

93. An electronic device as in claim 92, wherein the peripheral device is at least one from the group of mouse, keyboard or touch screen.

94. An electronic device as in claim 86, wherein the electronic device is at least one of a personal computer (PC), personal digital assistant (PDA), cellular telephone or gaming device.

95. A method for providing security for a user of a personal computer (PC) using facial biometrics comprising the steps of:

receiving from a digital camera a plurality of substantially real-time facial biometric images of a user;

manually entering first authentication credentials for providing access to the PC;

enrolling the user with at least one first stored image into a database if the first authentication credentials are valid;

updating the database with a second stored image if authentication has not occurred within a predetermined period of time and the user is later authenticated;

identifying prominent facial features of the user;

tracking the prominent facial features for providing substantially continuous authentication while the user remains substantially within a field of view of the digital camera; and

allowing the user continued access to the PC as long as the user remains authenticated or locking the user from the PC if authentication is lost.

96. A method using the facial biometric images for providing security for a PC as in claim 95, further comprising the step of:

using a facial biometric image as the first stored image.

97. A method for providing security for a PC as in claim 95, further comprising the step of:

updating the at least one first stored image in the database after manually entering second authentication credentials into the PC.

98. A method for providing security for a PC as in claim 95, further comprising the steps of:

utilizing at least one processor in the PC;

time stamping the facial biometric images when stored in the database;

identifying a facial biometric image stored in the database having an earlier time stamp; and

updating the database with the biometric image having the earlier time stamp if a real-time facial biometric image cannot be used to authenticate a user within a predetermined time period.

99. A method for providing security for a PC as in claims 97, wherein the step of updating includes the step of:

replacing a biometric image in the database that has resulted in the least success in authentication and has the oldest time stamp.

100. A method for providing security for a PC as in claim 95, further comprising the step of:

disabling a predetermined functionality of the PC if authentication has not been achieved within a predetermined time period.

101. A method for providing security for a PC as in claim 100, wherein the step of disabling includes providing a substantially non-functional display.

102. A method for providing security for a PC as in claim 101, further comprising the step of:

delaying disablement of the display upon detection of a use of a peripheral device associated with the PC.

103. A method for providing security for a PC as in claim 102, wherein the peripheral device is a keyboard.

104. A method for providing security for a PC as in claim 102, wherein the peripheral device is a mouse.

105. A method for providing security for a PC as in claim 95, wherein the method is embodied in machine readable software code executed on a personal computer.

106. A computer readable medium having computer readable instructions stored thereon for execution by a processor to perform a method comprising the steps of:

using a plurality of facial biometric images provided from a digital imaging device;

utilizing at least one processor for authenticating the identity of the user;

storing digital imaging information about the user in a database;

identifying prominent facial features of the use;

providing continuous user authentication when the user physically moves about a field of view of the digital imaging device by tracking the prominent facial features without comparing facial biometric images; and

allowing the user continued access of the electronic device as long as the user remains authenticated or disabling utility of the electronic device if no user authentication is made within a predetermined time period.

107. A computer readable medium as in claim 106, wherein the step of providing continuous user authentication includes the step of:

comparing a real-time image from the digital camera with one stored in the database; and

updating the database with a new image if authentication has not occurred within a predetermined period of time and the user is later authenticated.

108. A computer readable medium as in claim 106, wherein the step of providing continuous user authentication includes the step of:

detecting the user'"'"'s prominent facial features in field of view of the digital imaging device.

109. A computer readable medium as in claim 106, further comprising the step of:

automatically enrolling a user in the database based on an authentication of a plurality of real-time facial biometric images.

110. A computer readable medium as in claim 106, further comprising the steps of:

accessing operation to the electronic device by manually entering first authentication credentials; and

populating the database using the plurality of facial biometric images from the digital imaging device obtained after access to the electric device.

111. A computer readable medium as in claim 106, further comprising the step of:

providing a time stamp for each of the real-time facial biometric images.

112. A computer readable medium as in claim 111, further comprising the steps of:

identifying a facial biometric image stored in the database having an earlier time stamp; and

updating the database with the biometric image having the earlier time stamp if the real-time facial biometric images cannot be used to authenticate a user within a predetermined time period.

113. A computer readable medium as in claim 112, wherein the step of updating includes the step of:

replacing a biometric image in the database that has resulted in the least success in authentication and has the oldest time stamp.

114. A computer readable medium as in claim 110, further comprising the step of:

utilizing second authentication credentials independent of the first authentication credentials before updating the database.

115. A computer readable medium as in claim 106, further comprising the step of:

delaying the step of disabling if any activity is detected from a peripheral device.

116. A computer readable medium as in claim 106, wherein the peripheral device is at least one from the group of keyboard, mouse and touch screen.

117. A computer readable medium as in claim 106, wherein the electronic device is at least one from the group of personal computer, personal digital assistant (PDA), mobile telephone or gaming device.