SYSTEM AND METHOD OF ENCODING CONTENT AND AN IMAGE

• US 20140281946A1
• Filed: 03/14/2013
• Published: 09/18/2014
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Artificial Intelligence Research Group Limited
• Original Assignee: Artificial Intelligence Research Group Limited
• Inventors: Avni, Yossi, Suchard, Eytan
• Granted Patent: US 9,563,926 B2
• Time in Patent Office: Days
• US Class Current: 715/268
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G06T 1/0028 Adaptive watermarking, e.g. Human Visual System [HVS]-based watermarking
• CPC Class Codes: G06V 40/376 Acquisition
• CPC Class Codes: G06V 40/388 Sampling; Contour coding; Stroke extraction
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A method of verifying the identity of a user at an authentication server that includes receiving user data relating to a signature gesture entered by a user at a computing device, the user data having a plurality of sample points, verifying the user data at the authentication server by comparing to reference signature data, encoding a verification message within a digital image, and notifying the user that their identity has been verified on the basis of the user data received from the computing device.

Claims

1. A method of verifying the identity of a user at an authentication server comprising:

receiving user data relating to a signature gesture entered by a user at a computing device, the user data comprising a plurality of sample points;

verifying the user data at the authentication server by comparing to reference signature data;

encoding a verification message within a digital image; and

notifying the user that their identity has been verified on the basis of the user data received from the computing device.

2. The method of claim 1, wherein the signature gesture is entered at an input device associated with the computing device

3. The method of claim 2, wherein the user data is encoded with the digital image.

4. The method of claim 3, wherein the digital image comprises a background portion and a representation of the signature gesture.

5. The method of claim 4, wherein encoding the user data within the digital image comprises encoding the user data within pixels of the digital image.

6. The method of claim 5, wherein the encoded pixels are located within the background portion of the digital image.

7. The method of claim 5, wherein the encoded pixels are located within the representation of the signature gesture.

8. The method of claim 5, wherein user data is encoded into the pixels of the digital image by a steganography method.

9. The method of claim 3, wherein the digital image is sent to the user during the notification step.

10. The method of claim 3, wherein the digital image is stored at the authentication server.

11. The method of claim 1, wherein the digital image is applied to an electronic document.

12. The method of claim 11, wherein the electronic document is signed via a digital certificate process once the digital image has been applied in order to prevent amendments of the electronic document.

13. The method of claim 1, wherein the user data comprises a plurality of sample points.

14. The method of claim 13, further comprising:

sampling a user-device touch point from a touch sensitive surface of the computing device during the verification action to obtain a sample point from the plurality of sample points.

15. The method of claim 14, wherein the sample points comprise positional information of the touch point and temporal data.

16. The method of claim 15, wherein the sample points further comprise a touch/no touch indication to indicate when the user is not in contact with the touch sensitive surface during the verification action capture period.

17. The method of claim 13, further comprising:

sampling a user gesture from a gesture control input device of the computing device during the verification action.

18. The method of claim 17, wherein the sample points comprise positional information of the user during the user gesture and temporal data.

19. The method of claim 18, wherein the positional information comprises three dimensional positional information.

20. A method for verifying the identify of a user, the method comprising:

receiving a sign-in request from a first computing device at an authentication server; and

sending an instruction from the authentication server to a first computing device to provide signature data from a selected computing device wherein the signature data is entered at the selected computing device.

21. The method of claim 20, wherein the selected computing device is the first computing device.

22. The method of claim 20, wherein the selected computing device is a second computing device.

23. The method of claim 22, second computing device is a mobile computing device.

24. The method of claim 20, wherein the first computing device is a computer or a mobile computing device.

27. A system for verifying the identity of a user, comprising:

a computing device arranged to capture user data as a user enters a signature gesture at the computing device, the user data comprising a plurality of sample points; and

a computing device output arranged to send the user data to an authentication server according to claim 24.

31. The method of claim 27, wherein the signatures gestures are stored in a data store associated with the authentication server.

25. An authentication server for verifying the identity of a user comprising:

inputs for receiving user data relating to a signature gesture entered by a user at a computing device, the user data comprising a plurality of sample points;

a processor arranged to verify the user data by comparing to reference signature data and to encode a verification message within a digital image; and

outputs arranged to notify the user that their identity has been verified on the basis of the user data received from the computing device.

26. A method of verifying the identity of a user comprising:

capturing user data as a user enters a signature gesture at a computing device, the user data comprising a plurality of sample points;

sending the user data to an authentication server;

verifying the user data at the authentication server by comparing to reference signature data;

encoding a verification message within a digital image; and

notifying the user that their identity has been verified on the basis of the user data received from the computing device.

28. A registration method for an identity verification system, the method comprising:

receiving n signature gestures from a user, each of the n signature gestures representing a different form of the user'"'"'s signature;

storing each signature gesture within a user profile as a reference signature gesture; and

associating each of the n signatures with a different security level defined within a security policy.

29. The method of claim 28, wherein the signature gestures are received at an authentication server from a computing device.

30. The method of claim 29, wherein the signature gestures received from the user are in the form of user data captured as the user enters the signature gesture at the computing device, the user data comprising a plurality of sample points

32. The method of claim 29, wherein the authentication server comprises a processor arranged to compare subsequently received signature gestures with one or more of the n stored reference signature gestures in order to verify the identity of the user.

33. An authentication server for an identity verification system, the server comprising:

inputs arranged to receive n signature gestures from a user, each of the n signature gestures representing a different form of the user'"'"'s signature;

a data store arranged to store each signature gesture within a user profile as a reference signature gesture;

a processor arranged to associate each of the n signatures with a different security level defined within a security policy.

34. The authentication server of claim 33, wherein the authentication server further comprises:

inputs for receiving user data relating to a signature gesture entered by a user at a computing device, the user data comprising a plurality of sample points;

a processor arranged to verify the user data by comparing to reference signature data and to encode a verification message within a digital image; and

outputs arranged to notify the user that their identity has been verified on the basis of the user data received from the computing device.

36. The method of claim 34, wherein the required signature gesture is received in the form of user data captured as the user performs the required signature gesture at a computing device, the user data comprising a plurality of sample points.

37. The method of claim 34, wherein, in the event that the user is not verified on the basis of the received signature gesture, but the comparison result is within a predefined tolerance of a required tolerance level, the user is granted access to the restricted resource at a lower security level than the level requested.

35. A method of verifying the identity of a user and granting access to a restricted resource on the basis of a pre-defined security policy, the method comprising:

receiving a request for access to the restricted resource;

determining a security level associated with the received request on the basis of the pre-defined security policy;

accessing a user profile, the user profile comprising a stored reference signature gesture associated with each security level within the predefined security policy;

determining the appropriate reference signature gesture depending on the received access request;

notifying the user of signature gesture sign-in requirements based on the access request and the determined security level;

receiving the required signature gesture from the user; and

,

comparing the received signature gesture with the reference signature gesture to determine the identity of the user and in the event that the user is verified to grant access to the restricted resource.

38. A method of verifying the identity of a user on the basis of a signature gesture captured via a computing device having an input device and a display screen comprising:

prior to capturing the signature gesture with the input device, displaying an animation to the user via the display screen

capturing the signature gesture with the input device; and

verifying the identity of the user on the basis of the captured signature gesture.

39. The method of claim 38, further comprising ensuring the user views the animation by tracking the direction of gaze of the user via an image capture device.