System and method for liveness authentication using an augmented challenge/response scheme

• US 6,851,051 B1
• Filed: 04/12/1999
• Issued: 02/01/2005
• Est. Priority Date: 04/12/1999
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Ratha, Nalini K., Bolle, Rudolf Maarten, Connell, Jonathan Hudson
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US09/290,645
• Time in Patent Office: 2,122 Days
• Field of Search: 713/168, 713/186, 713/182, 713/200, 713/170, 382/115, 705/67
• US Class Current: 713/168
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06V 40/40 Spoof detection, e.g. liveness detection
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

An integrated signal sensor with processing power to augment a challenge from server and compute the response is proposed to guarantee that the sensed signal is live and not stored. The sensor-processor computes the response to the augmented challenge based on the signal charactersitics of the sensed signal and then transmits both the signal and the response. The host or the server can verify the response to authenticate liveness of the input image/signal and reject it if the response is different. Areas of application include automated biometrics and remote medical imaging.

Claims

1. A system for generating a response from an acquired signal and a challenge, the system comprising:

an acquisition device for creating a signal representation of said acquired signal; and

a responder that receives said challenge and generates said response that is a function of said signal representation, wherein said function is defined by said challenge.

2. A system, as in claim 1, where the acquired signal is one of the following:

a biometric signal, a fingerprint image, a face image, an iris image, an audio signal, and a speech signal.

3. A system, as in claim 1, where the acquisition device is one of the following:

a camera, a biometrics sensor, a semiconductor-based fingerprint sensor, a micro-mechanical sensor, and a microphone.

4. A system, as in claim 1, where the responder has two or more selectable functions, the selectable functions being selected by one or more configuration inputs and the selectable functions modifying the challenge.

5. A system, as in claim 4, where the configuration inputs are connected to an external source that selects the selectable function.

6. A system, as in claim 5, where the external source includes one or more of the following:

a set of switches, a jumper block, a clock, a global positioning system signal, an external computer, and a pseudo-random number generator.

7. A system, as in claim 1, where the responder function includes one or more of the following:

a checksum, a pseudo-random sample, a block of contiguous samples, and a function of selected samples of the signal.

8. A system, as in claim 1, where the acquisition device and the responder are both located on a single semiconductor chip.

9. A system, as in claim 1, wherein said challenge identifies said function from two or more functions.

10. A system, as in claim 1, wherein said challenge identifies one or more parameters of said function.

11. The system, as in claim 1, wherein said signal representation can be verified by comparing said response to said function of the signal representation and the challenge.

12. A method for generating a response from an acquired signal and a challenge, comprising the following steps:

creating a signal representation of said acquired signal;

receiving said challenge; and

creating said response that is a function of the signal representation, wherein said function is defined by said challenge.

13. A method, as in claim 12, wherein said challenge identifies said function from two or more functions.

14. A method, as in claim 12, wherein said challenge identifies one or more parameters of said function.

15. A computer product for generating a response from an acquired signal and a challenge that performs the following steps:

creating a signal representation of said acquired signal;

receiving said challenge; and

creating said response that is a function of the signal representation, wherein said function is defined by said challenge.

16. A business process for authenticating an acquired signal, the process comprising the steps of:

creating a signal representation of said acquired signal;

creating a challenge;

creating a response that is a function of the signal representation, wherein said function is defined by said challenge; and

authenticating the signal representation by comparing the response to the function of the acquired signal.

17. A business process, as in claim 16, where the acquired signal includes any one of the following:

a fingerprint, face, iris, and voice.

18. A business process, as in claim 16, where the challenge response functions include any one or more of the following:

signal values at discrete points, a mathematical function of discrete signal values, a hash of the signal values, and a checksum of the signal values in a delimited area.

19. A business process, as in claim 16, wherein said challenge identifies said function from two or more functions.

20. A business process, as in claim 16, wherein said challenge identifies one or more parameters of said function.

21. A system for authenticating an acquired signal, comprising:

a challenge generator for generating a challenge; and

a verifier for authenticating a received signal by comparing a function of the acquired signal, wherein said function is defined by said challenge, to a response generated as a result of said challenge.

22. A system, as in claim 21, wherein said challenge identifies said function from two or more functions.

23. A system, as in claim 21, wherein said challenge identifies one or more parameters of said function.

24. A method for authenticating an acquired signal, comprising the following steps:

creating a challenge; and

authenticating a received signal by comparing a function of the acquired signal, wherein said function is defined by said challenge, to a response generated as a result of said challenge.

25. A method, as in claim 24, wherein said challenge identifies said function from two or more functions.

26. A method, as in claim 24, wherein said challenge identifies one or more parameters of said function.

27. A computer product for authenticating an acquired signal that performs the following steps:

creating a challenge; and

authenticating a received signal by comparing a function of the acquired signal, wherein said function is defined by said challenge, to a response generated as a result of said challenge.