Fraud resistant biometric financial transaction system and method

• US 8,280,120 B2
• Filed: 10/02/2007
• Issued: 10/02/2012
• Est. Priority Date: 10/02/2006
• Status: Active Grant

• Current Assignee: EyeLock LLC (VOXX International Corporation)
• Original Assignee: EyeLock Inc. (VOXX International Corporation)
• Inventors: Hoyos, Hector T., Hanna, Keith J.
• Primary Examiner(s): STREGE, JOHN B
• Application Number:
  US12/444,018
• Publication Number:
  US 20100014720A1
• Time in Patent Office: 1,827 Days
• Field of Search: 382/117, 382/124, 340/5.53, 340/5.83
• US Class Current: 382/117
• CPC Class Codes: G06V 40/1382 Detecting the live character of the finger, i.e. distinguishing from a fake or cadaver finger
• CPC Class Codes: G06V 40/16 Human faces, e.g. facial parts, sketches or expressions
• CPC Class Codes: G06V 40/18 Eye characteristics, e.g. of the iris
• CPC Class Codes: G06V 40/45 Detection of the body part being alive

Abstract

A method and system for authenticating financial transactions is disclosed wherein biometric data is acquired from a person and the probability of liveness of the person and probability of a match between the person or token and known biometric or token information are calculated, preferably according to a formula D=P(p)*(K+P(m)), wherein K is a number between 0.1 and 100, and authenticating if the value of D exceeds a predetermined value.

Claims

1. A method of authenticating financial transactions comprising acquiring biometric data from a person, calculating probability of liveness, Pp, of the person and probability of a match, Pm, between the person or a token and known biometric or token information respectively, determining a combination of Pp and Pm that emphasizes the contribution of Pp to the combination, and providing an authentication decision, D, based on the determined combination of Pp and Pm.

2. The method of claim 1 wherein an D is calculated as a function of Pm and Pp according to the formula D=P(p)*(K+P(m)), wherein K is a number between 0.1 and 100.

3. The method of claim 1 wherein an authentication decision, D, is calculated as a function of Pm and Pp according to the formula D=P(p)*(K+P(m)), wherein K is a number between 0.5 and 1.5.

4. The method of claim 1 wherein the biometric data is stored and is used for manual verification.

5. The method of claim 1 wherein Pp is determined by steps comprising presenting a first image on a computer screen, wherein the computer screen is oriented to face a user;

positioning at least one camera proximate the computer screen, wherein the at least one camera is oriented to face the user so that light emitted by the computer screen as the first image is reflected by the user and captured by the at least one camera;

obtaining a second image through the at least one camera; and

determining whether at least a portion of the second image includes a representation of the first image on the computer screen reflected by a curved surface consistent with a human eye.

6. The method of claim 1 wherein Pp is calculated by steps comprising presenting a first image on a computer screen positioned in front of a user;

capturing a first reflection of the first image off of the user through a camera;

presenting a second image on the computer screen positioned in front of the user;

capturing a second reflection of the second image off of the user through the camera;

comparing the first reflection of the first image with the second reflection of the second image to determine whether the first reflection and the second reflection were formed by a curved surface consistent with a human eye.

7. The method of claim 1 wherein Pp is calculated by steps comprising obtaining a first image of a user positioned in front of a computer screen from a first perspective;

obtaining a second image of the user positioned in front of the computer screen from a second perspective;

identifying a first portion of the first image and a second portion of the second image containing a representation of a human eye; and

detecting a human eye when the first portion of the first image differs from the second portion of the second image.

8. The method of claim 1 wherein Pp is calculated by steps comprising presenting one or more illuminators, wherein the illuminators are oriented to face a user;

positioning at least one camera proximate the illuminators, wherein the at least one camera is oriented to face the user so that light emitted by the illuminators is reflected by the user and captured by the at least one camera as a first image;

obtaining a second image through the at least one camera at a different time than the first image;

detecting a first position of a reflection in the first image and a second position of a reflection in the second image;

normalizing a positional change of the user in the first image and the second image based upon the first position and the second position, wherein the step of normalizing comprises compensating for motion during the time between the first image and the second image by using at least a translation motion model to detect residual motion of the position of the reflection; and

determining whether a change between at least a portion of the first image and the second image is consistent with reflection by a curved surface consistent with that of a human eye.

9. The method of claim 1 wherein Pp is calculated by steps comprising measuring finger or palm temperature and comparing the resultant measured temperature to expected temperature for a human.

10. The method of claim 1 wherein Pm is calculated by steps comprising iris recognition, fingerprint image recognition, finger vein image recognition, or palm vein image recognition, face recognition, or token match.

11. The method of claim 1 wherein if a person fails authentication, the person is not informed as to whether non-authentication was based on probability of nonliveliness or probability of non-matching of biometric image.

12. The method of claim 1 wherein the accuracy of authentication of an authentic person is improved by the use of Pp.

13. The method of claim 1 wherein biometric data used to calculate Pp is obtained from a web camera connected to a computer.

14. The method of claim 1 wherein biometric data used to calculate Pp is obtained from a cell phone camera.

19. The method of claim 1, comprising moving the authentication decision towards acceptance if Pp comprises a value that is near to 1.

20. The method of claim 1, comprising authenticating the person if Pp comprises a value that is near to 1, and Pm comprises a value of about 0.25 or greater.

21. The method of claim 1, comprising authenticating the person if Pp and Pm are above a threshold, authenticating the person if Pp is above the threshold and Pm is below the threshold, and not authenticating the person if Pp and Pm are below the threshold.

15. A method of authenticating financial transactions comprising acquiring biometric data from a person, calculating probability of liveness, Pp, of the person and probability of a match, Pm, between the person or a token and known biometric or token information, and providing an authentication decision, D, based on a combination of Pp and Pm, wherein D is calculated as a function of Pm and Pp according to the formula D=P(p)*(K+P(m)), wherein K is a constant.

16. A system for authenticating financial transactions comprising means to acquire biometric data from a person and calculate probability of liveness, Pp, of the person and probability of a match, Pm, between the person or token and known biometric or token information, determine a combination of Pp and Pm that emphasizes the contribution of Pp to the combination, and provide an authentication decision, D, based on the determined combination of Pp and Pm.

17. The system of claim 16 wherein the means to calculate comprises a computer programmed to determine Pp, Pm, and to authenticate if the value of D exceeds a predetermined value according to a formula D=P(p)*(K+P(m)), wherein K is a number between 0.1 and 100.

18. The system of 16 wherein the means to calculate comprises a computer programmed to determine Pp, Pm, and to authenticate if the value of D exceeds a predetermined value according to a formula D=P(p)*(K+P(m)), wherein K is a number between 0.5 and 1.5.