SECURITY APPROACHES FOR VIRTUAL REALITY TRANSACTIONS

• US 20170364920A1
• Filed: 06/16/2016
• Published: 12/21/2017
• Est. Priority Date: 06/16/2016
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Anand, Vishal
• Application Number:
  US15/184,759
• Publication Number:
  US 20170364920A1
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

One embodiment of the invention is directed to a computer-implemented method comprising, receiving an indication that an avatar of a user has initiated a transaction in a virtual reality environment. The method further comprises obtaining a first biometric sample from the user interacting with the virtual reality hardware. The method further comprises generating a partial biometric template based at least in part on the first biometric sample. The method further comprises providing the partial biometric template and personal authentication information for the avatar to an authentication computer where the personal authentication information and the partial biometric template are used to authenticate the avatar.

Claims

1. A computer-implemented method, comprising:

receiving, by a processor associated with virtual reality hardware, an indication that an avatar of a user has initiated a transaction in a virtual reality environment, the virtual reality environment presented by the virtual reality hardware to the user;

obtaining, by the processor, a first biometric sample from the user interacting with the virtual reality hardware;

generating, by the processor, a partial biometric template based at least in part on the first biometric sample; and

providing, by the processor, the partial biometric template and personal authentication information for the avatar to an authentication computer, wherein the personal authentication information and the partial biometric template are used to authenticate the avatar.

2. The computer-implemented method of claim 1, further comprising:

obtaining, by the processor, a second biometric sample from the user via an associated computer device other than the virtual reality hardware; and

receiving an authentication response message, from the authentication computer, that is based in part on a machine learning algorithm comparing a risk score generated using the partial biometric template and the second biometric sample to a threshold.

3. The computer-implemented method of claim 2, wherein the authentication response message is provided to a resource provider associated with the transaction.

4. The computer-implemented method of claim 3, further comprising providing a transaction code to the avatar of the user to complete the transaction in response to providing the authentication response message to the resource provider.

5. The computer-implemented method of claim 1, wherein receiving the indication that the avatar of the user has initiated the transaction in the virtual reality environment includes presentation by the avatar of a unique identifier to a resource provider in the virtual reality environment.

6. The computer-implemented method of claim 5, wherein the unique identifier includes a barcode or a representation of an access device in the virtual reality environment.

7. Virtual reality hardware comprising:

a processor; and

a memory including instructions that, when executed with the processor, cause the virtual reality hardware to, at least;

receive an indication that an avatar of a user has initiated a transaction in a virtual reality environment, the virtual reality environment presented by the virtual reality hardware to the user;

obtain a first biometric sample from the user interacting with the virtual reality hardware;

generate a partial biometric template based at least in part on the first biometric sample; and

provide the partial biometric template and personal authentication information for the avatar to an authentication computer, wherein the personal authentication information and the partial biometric template are used to authenticate the avatar.

8. The virtual reality hardware of claim 7, wherein the personal authentication information includes one or more of a password, an answer to a security question, or a unique alpha-numeric string.

9. The virtual reality hardware of claim 7, wherein the instructions, when executed with the processor further cause the virtual reality hardware to present a prompt in the virtual reality environment to confirm the transaction.

10. The virtual reality hardware of claim 7, wherein the transaction is associated with access to secure data or a secure area of a resource provider.

11. The virtual reality hardware of claim 7, wherein the instructions, when executed with the processor further cause the virtual reality hardware to:

generate a first incomplete set of eigenvalues based in part on the first biometric sample;

salt the first incomplete set of eigenvalues using the personal authentication information; and

provide the salted first incomplete set of eigenvalues to the authentication computer that is used to authenticate the avatar.

12. The virtual reality hardware of claim 11, wherein generating the first incomplete set of eigenvalues includes using a particular number of characteristics of a set of eigenvalues based in part on a type of the transaction.

13. The virtual reality hardware of claim 7, wherein the personal authentication information is provided by the user prior to initiating the transaction in the virtual reality environment.

14. The virtual reality hardware of claim 7, wherein the first biometric sample is obtained from the user in response to receiving the indication that the avatar of the user has initiated the transaction in the virtual reality environment.

15. A computer-implemented method, comprising:

receiving, by an authentication computer, a first biometric sample and personal authentication information associated with a user initiating a transaction in a virtual reality environment, the personal authentication information provided by an avatar of the user in the virtual reality environment;

generating, by the authentication computer, a partial biometric template based at least in part on the first biometric sample;

generating, by the authentication computer, a value based at least in part on the partial biometric template and the personal authentication information, the value representing a risk level associated with the transaction; and

authenticating, by the authentication computer, the transaction based at least in part on the value and a threshold associated with the transaction.

16. The computer-implemented method of claim 15, further comprising providing an authentication response message to a resource provider computer associated with the transaction.

17. The computer-implemented method of claim 15, further comprising:

receiving, by the authentication computer, a second biometric sample of the user, the second biometric sample being different than the first biometric sample; and

generating, by the authentication computer, a first incomplete set of eigenvalues based in part on the first biometric sample, and a second incomplete set of eigenvalues based in part on the second biometric sample, wherein authenticating the transaction is further based at least in part on comparing a profile generated from the first incomplete set of eigenvalues and the second incomplete set of eigenvalues to an aggregate profile associated with the transaction.

18. The computer-implemented method of claim 17, wherein the value is generated further based in part on a machine learning algorithm using the first incomplete set of eigenvalues and the second incomplete set of eigenvalues.

19. The computer-implemented method of claim 15, further comprising providing a transaction code to the avatar of the user in the virtual reality environment enabling the user to complete the transaction.

20. The computer-implemented method of claim 15, further comprising presenting a prompt to the avatar of the user in the virtual reality environment to confirm the transaction.