Biometric Authentication Using Selected Manipulation of Biometric Samples

• US 20200134146A1
• Filed: 10/31/2018
• Published: 04/30/2020
• Est. Priority Date: 10/31/2018
• Status: Active Grant

• Current Assignee: RSA Security LLC (Symphony Technology Group LLC)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Mullins, Brian
• Granted Patent: US 11,062,005 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Biometric authentication techniques are provided using selected manipulations of biometric samples. An exemplary method comprises obtaining enrollment information from a user, wherein the enrollment information comprises first manipulations to a first biometric sample of the user; initiating a challenge to the user in connection with an authentication request by the user to access a protected resource; processing second manipulations by the user of a second biometric sample of the user submitted in response to the challenge, and wherein the processing comprises determining a likelihood that the second manipulations of the second biometric sample of the user submitted in response to the challenge matches the first manipulations to the first biometric sample of the user submitted by the user with the enrollment information; and resolving the authentication request based on the likelihood. The first manipulations comprise, for example, applying selected filters, selected markings and/or selected overlays to specified portions of the first biometric sample.

Claims

1. A method, comprising:

obtaining enrollment information from a user, wherein the enrollment information comprises one or more first manipulations to a first biometric sample of the user;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing, using at least one processing device, one or more second manipulations by the user of a second biometric sample of the user submitted in response to the challenge, and wherein the processing comprises determining a likelihood that the one or more second manipulations of the second biometric sample of the user submitted in response to the challenge matches the one or more first manipulations to the first biometric sample of the user submitted by the user with the enrollment information; and

resolving, using the at least one processing device, the authentication request based on the likelihood.

2. The method of claim 1, wherein the first biometric sample and the second biometric sample comprise one or more of a faceprint, an eyeprint, an earprint, a hand geometry, a vein image and a voice print.

3. The method of claim 1, wherein the one or more first manipulations comprise applying one or more selected filters to one or more specified portions of the first biometric sample of the user.

4. The method of claim 1, wherein the one or more first manipulations comprise applying one or more selected markings to one or more specified portions of the first biometric sample of the user.

5. The method of claim 1, wherein the one or more first manipulations comprise applying one or more selected overlays to one or more specified portions of the first biometric sample of the user.

6. The method of claim 5, wherein the one or more selected virtual overlays are selected from a catalog.

7. The method of claim 1, further comprising the step of performing a biometric evaluation of the second biometric sample of the user.

8. The method of claim 1, wherein one or more of the first manipulations to the first biometric sample of the user expire according to an expiration policy.

9. The method of claim 1, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a minimum number of the first manipulations that must be selected;

an ordering of the selected first manipulations;

a placement of the first manipulations with respect to the first biometric sample;

a state of one or more of the first manipulations with respect to the first biometric sample;

a physical surrounding of the first biometric sample and characteristics of the first biometric sample.

10. A system, comprising:

a memory; and

at least one processing device, coupled to the memory, operative to implement the following steps;

obtaining enrollment information from a user, wherein the enrollment information comprises one or more first manipulations to a first biometric sample of the user;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing one or more second manipulations by the user of a second biometric sample of the user submitted in response to the challenge, and wherein the processing comprises determining a likelihood that the one or more second manipulations of the second biometric sample of the user submitted in response to the challenge matches the one or more first manipulations to the first biometric sample of the user submitted by the user with the enrollment information; and

resolving the authentication request based on the likelihood.

11. The system of claim 10, wherein the one or more first manipulations comprise applying one or more of selected filters, selected markings and selected overlays to one or more specified portions of the first biometric sample of the user.

12. The system of claim 11, wherein the one or more selected virtual overlays are selected from a catalog.

13. The system of claim 10, further comprising the step of performing a biometric evaluation of the second biometric sample of the user.

14. The system of claim 10, wherein one or more of the first manipulations to the first biometric sample of the user expire according to an expiration policy.

15. The system of claim 10, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a minimum number of the first manipulations that must be selected;

an ordering of the selected first manipulations;

a placement of the first manipulations with respect to the first biometric sample;

a state of one or more of the first manipulations with respect to the first biometric sample;

a physical surrounding of the first biometric sample and characteristics of the first biometric sample.

16. A computer program product, comprising a tangible machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed by at least one processing device perform the following steps:

obtaining enrollment information from a user, wherein the enrollment information comprises one or more first manipulations to a first biometric sample of the user;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing one or more second manipulations by the user of a second biometric sample of the user submitted in response to the challenge, and wherein the processing comprises determining a likelihood that the one or more second manipulations of the second biometric sample of the user submitted in response to the challenge matches the one or more first manipulations to the first biometric sample of the user submitted by the user with the enrollment information; and

resolving the authentication request based on the likelihood.

17. The computer program product of claim 16, wherein the one or more first manipulations comprise applying one or more of selected filters, selected markings and selected overlays to one or more specified portions of the first biometric sample of the user.

18. The computer program product of claim 16, further comprising the step of performing a biometric evaluation of the second biometric sample of the user.

19. The computer program product of claim 16, wherein one or more of the first manipulations to the first biometric sample of the user expire according to an expiration policy.

20. The computer program product of claim 16, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a minimum number of the first manipulations that must be selected;

an ordering of the selected first manipulations;

a placement of the first manipulations with respect to the first biometric sample;

a state of one or more of the first manipulations with respect to the first biometric sample;

a physical surrounding of the first biometric sample and characteristics of the first biometric sample.