EFFICIENT PREVENTION FRAUD

• US 20130212655A1
• Filed: 03/15/2013
• Published: 08/15/2013
• Est. Priority Date: 10/02/2006
• Status: Abandoned Application

• Current Assignee: EyeLock LLC (VOXX International Corporation)
• Original Assignee: Hector T. Hoyos
• Inventors: Hanna, Keith J., HOYOS, HECTOR T.
• Application Number:
  US13/837,167
• Publication Number:
  US 20130212655A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/1382 Detecting the live character of the finger, i.e. distinguishing from a fake or cadaver finger
• CPC Class Codes: G06V 40/18 Eye characteristics, e.g. of the iris
• CPC Class Codes: G06V 40/45 Detection of the body part being alive

Abstract

This disclosure is directed to methods and systems for managing difficulty of use and security for a transaction. A transaction manager operating on a computing device may determining a range of possible steps for a transaction comprising security measures available for the transaction. The transaction manager may identify a threshold for a security metric to be exceeded for authorizing the transaction, the security metric to be determined based on performance of steps selected for the transaction. The transaction manager may select for the transaction at least one step from the range of possible steps, based on optimizing between (i) a difficulty of use quotient of the transaction from subjecting a user to the at least one step, and (ii) the security metric relative to the determined threshold, the optimization including a preference for inclusion of a step for liveness detection or biometric deterrence if available.

Claims

1. A method of managing difficulty of use and security for a transaction, the method comprising:

(a) determining, by a transaction manager operating on a computing device, a range of possible steps for a transaction comprising security measures available for the transaction;

(b) identifying a threshold for a security metric to be exceeded for authorizing the transaction, the security metric to be determined based on performance of steps selected for the transaction; and

(c) selecting, for the transaction, at least one step from the range of possible steps, based on optimizing between (i) a difficulty of use quotient of the transaction from subjecting a user to the at least one step, and (ii) the security metric relative to the determined threshold, the optimization including a preference for inclusion of a step for liveness detection or biometric deterrence if available.

2. The method of claim 1, comprising calculating the difficulty of use quotient based on the at least one step selected, each of the at least one step assigned a score based on at least one of:

an amount of action expected from the user, an amount of attention expected from the user, and an amount of time expected of the user, in performing the respective step.

3. The method of claim 1, comprising updating the difficulty of use quotient based on a modification in remaining steps of the transaction, the modification responsive to a failure to satisfy a requirement of at least one selected step.

4. The method of claim 1, comprising identifying the threshold for the security metric based on at least one of:

a value of the transaction, risk associated with a person involved in the transaction, risk associated with a place or time of the transaction, risk associated with a type of the transaction, and security measures available for the transaction.

5. The method of claim 1, wherein (c) comprises selecting the at least one step from the range of possible steps such that successful performance of the at least one step results in the identified threshold being exceeded.

6. The method of claim 1, comprising updating the security metric responsive to a failure to satisfy a requirement of at least one selected step.

7. The method of claim 1, comprising updating the security metric responsive to a modification in remaining steps of the transaction.

8. The method of claim 1, comprising acquiring biometric data as part of the selected at least one step, the biometric data comprising at least one of:

iris, face and fingerprint.

9. The method of claim 1, comprising acquiring biometric data as part of the selected at least one step, the biometric data for at least one of liveness detection and biometric matching.

10. The method of claim 1, comprising acquiring biometric data as a prerequisite of one of the selected at least one step.

11. The method of claim 1, comprising performing biometric matching as a prerequisite of one of the selected at least one step.

12. The method of claim 1, comprising at least requiring a step for acquiring a first type of biometric data, in the event of a failure to satisfy a requirement of at least one selected step.

13. The method of claim 1, comprising at least requiring a step for acquiring a second type of biometric data if a first type of biometric data is unavailable, of insufficient quality, or fails a liveness detection or biometric matching.

14. The method of claim 1, comprising performing liveness detection as part of the selected at least one step.

15. The method of claim 1, comprising performing liveness detection as a prerequisite of one of the selected at least one step.

16. The method of claim 1, comprising at least requiring a step for performing liveness detection, in the event of a failure to satisfy a requirement of at least one selected step.

17. The method of claim 1, comprising performing a deterrence activity as part of the selected at least one step.

18. The method of claim 1, comprising performing a deterrence activity as a prerequisite of one of the selected at least one step.

19. The method of claim 1, comprising at least requiring a deterrence activity, in the event of a failure to satisfy a requirement of at least one selected step.

20. A system for managing difficulty of use and security for a transaction, the system comprising:

a transaction manager operating on a computing device, determining a range of possible steps for a transaction comprising security measures available for the transaction;

identifying a threshold for a security metric to be exceeded for authorizing the transaction, the security metric to be determined based on performance of steps selected for the transaction; and

selecting, for the transaction, at least one step from the range of possible steps, based on optimizing between (i) a difficulty of use quotient of the transaction from subjecting a user to the at least one step, and (ii) the security metric relative to the determined threshold, the optimization including a preference for inclusion of a step for liveness detection or biometric deterrence if available.