Biometric authentication with smart mobile device

• US 8,752,145 B1
• Filed: 12/30/2011
• Issued: 06/10/2014
• Est. Priority Date: 12/30/2011
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Dotan, Yedidya, Faibish, Sorin, Villa, Yael, Philpott, Robert S., Adams, Samuel
• Primary Examiner(s): Tabor, Amare F
• Assistant Examiner(s): Zoubair, Noura
• Application Number:
  US13/341,160
• Time in Patent Office: 893 Days
• Field of Search: 726/4, 726/6, 726/8, 348/77, 348/222, 235/375, 235/275, 235/379, 382115-118, 382/124, 713/184, 713/186, 340/5.2, 340/5.83
• US Class Current: 726/6
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

An improved authentication technique employs a user'"'"'s mobile device to obtain a picture of the user from which facial geometry is extracted and applied as part of an authentication operation of the user to the remote network. In some examples, a server stores facial geometry for different users along with associated PINs. By matching facial geometry of the user with facial geometry on the server, the user'"'"'s PIN can be obtained, without the user ever having to register or remember the PIN.

Claims

1. A method for authenticating a user to a remote computing network, comprising:

acquiring a picture of the user with a camera of a mobile device;

obtaining picture information from the picture of the user;

sending the picture information to a server that stores picture information in connection with different users of the remote computing network;

receiving a picture match response back from the server, the picture match response indicating whether the picture information from the picture matches the picture information stored on the server; and

using the picture match response as part of an authentication operation of the user to the remote computing network,

wherein receiving the picture match response includes receiving an UNLOCK instruction from the server, and wherein the method further comprises the mobile device displaying, in response to receiving the UNLOCK instruction, a soft token code to the user for accessing the remote computing network, and

wherein the mobile device has a display and the method further comprises;

showing an image on the display corresponding to objects toward which the camera is pointing; and

superimposing an indicator on the image, the indicator showing the user where to place the user'"'"'s face relative to the image when acquiring the picture.

2. The method as in claim 1, wherein sending the picture information includes directing the server to compare the picture information from the picture with picture information stored in different records of a database of the server, wherein each record of the database of the server stores picture information previously acquired from a picture of a respective user of the remote computing network and a personal identification number (PIN) associated with the respective user of the remote computing network.

3. The method as in claim 2, wherein receiving the picture match response from the server includes receiving the user'"'"'s PIN, and wherein the method further includes:

generating a soft token code; and

displaying the soft token code to the user,

wherein the soft token code combined with the PIN form a passcode for accessing the remote computing network.

4. The method as recited in claim 3, further comprising applying a meshing algorithm to combine the soft token code with the PIN to form the passcode for accessing the remote computing network.

5. The method as recited in claim 2, wherein each record of the database further stores a respective mobile device identifier associated with a mobile device of the respective user, and wherein the method further comprises:

receiving, from the server, at least a partial record of the database associated with the identifier of the mobile device, the record including the picture information and the PIN associated with the mobile device of the user; and

receiving multiple additional records each including a PIN that does not correspond to any valid user PIN but that is included as confounding information.

6. The method as recited in claim 2,

wherein acquiring picture information from the picture of the user includes extracting facial geometry pertaining to the user'"'"'s facial features, and

wherein the picture information stored with each record of the database on the server includes facial geometry pertaining to the respective user'"'"'s facial features.

7. The method as recited in claim 6, further comprising:

acquiring additional pictures of the user;

extracting facial geometry pertaining to the user'"'"'s facial features for each of the additional pictures; and

averaging facial geometry obtained from the picture and the additional pictures to produce averaged facial geometry.

8. The method as recited in claim 6, further comprising:

comparing the facial geometry extracted from the picture with the facial geometry stored in the database in association with at least one user; and

verifying a successful match if the degree of similarity between the facial geometry extracted from the picture and the facial geometry stored in the database exceeds a predetermined threshold.

9. The method as recited in claim 8, wherein comparing the facial geometry includes applying a fuzzy logic technique including one of (i) a multivariate analysis of variance, (ii) a non-linear least squares QR decomposition, (iii) an inverse document frequency (IDF) analysis;

and (iv) a single value decomposition (SVD).

10. The method as recited in claim 1, further comprising, prior to acquiring the picture, receiving a Short Message Service (SMS) transmission from an authentication manager of the remote computing network directing the user to take the picture.

11. The method as recited in claim 1, wherein the mobile device includes a cellular telephone, wherein the picture information is sent to the server via a cellular telephone network, and wherein the picture match response is received from the server via the cellular telephone network.

12. The method as recited in claim 1, further comprising issuing an audible signal to indicate when the user'"'"'s face is positioned relative to a field of view of the camera to permit including the user'"'"'s facial features in the picture.

13. The method of claim 1, wherein the acts of sending the picture information to the server and receiving the picture match response back from the server are performed by the mobile device.

14. The method of claim 13, further comprising acquiring multiple pictures and comparing them to detect changes in skin color indicative of the object of the picture having a pulse.

15. The method of claim 13, further comprising detecting infrared light emitted by the object of the picture to confirm that the object is warm.

16. The method of claim 13, further comprising running a soft token generator on the mobile device, wherein the soft token generator generates the soft token code and the mobile device displays the soft token code generated by the soft token generator running on the mobile device in response to receiving the UNLOCK instruction from the server.

17. A mobile device for authenticating a user to a remote computing network, comprising:

memory for storing program code;

a processor, coupled to the memory, for running the program code;

a camera coupled to the processor; and

a network interface, coupled to the processor,

wherein the processor running the program code is constructed and arranged to—

acquire a picture of the user with the camera;

obtain picture information from the picture of the user;

send, via the network interface, the picture information to a server that stores picture information in connection with different users of the remote computing network;

receive, via the network interface, a picture match response back from the server, the picture match response indicating whether the picture information from the picture matches the picture information stored on the server; and

use the picture match response as part of an authentication operation of the user to the remote computing network,

wherein the processor running the program code is further constructed and arranged to—

receive the picture match response by receiving an UNLOCK instruction from the server, and

display, in response to receiving the UNLOCK instruction, a soft token code to the user for accessing the remote computing network, and

wherein, when constructed and arranged to acquire a picture of the user with the camera, the processor running the program code is further constructed and arranged to;

show an image on a display of the mobile device, the image corresponding to objects toward which the camera is pointing; and

superimpose an indicator on the image, the indicator showing the user where to place the user'"'"'s face relative to the image when acquiring the picture.

18. The mobile device as recited in claim 17, further comprising a display, wherein the processor running the program code is further constructed and arranged to—

show an image on the display corresponding to objects toward which the camera is pointing, and

superimpose an indicator on the image, the indicator showing the user where to place the user'"'"'s face relative to the image when acquiring the picture.

19. A non-transitory computer-readable medium including instructions which, when executed by a mobile device, cause the mobile device to perform a method for authenticating a user to a remote computing network, the method comprising:

acquiring a picture of the user with a camera of a mobile device;

obtaining picture information from the picture of the user;

sending the picture information to a server that stores picture information in connection with different users of the remote computing network;

receiving a picture match response back from the server, the picture match response indicating whether the picture information from the picture matches the picture information stored on the server; and

using the picture match response as part of an authentication operation of the user to the remote computing network,

wherein receiving the picture match response includes receiving an UNLOCK instruction from the server, and wherein the method further comprises the mobile device displaying, in response to receiving the UNLOCK instruction, a soft token code to the user for accessing the remote computing network,

wherein the method further comprises;

showing an image on a display of the mobile device, the image corresponding to objects toward which the camera is pointing; and

superimposing an indicator on the image, the indicator showing the user where to place the user'"'"'s face relative to the image when acquiring the picture.