Systems and methods for identifying biometric information as trusted and authenticating persons using trusted biometric information

• US 8,914,645 B2
• Filed: 09/30/2013
• Issued: 12/16/2014
• Est. Priority Date: 02/13/2013
• Status: Active Grant

• Current Assignee: Daniel Duncan
• Original Assignee: Daniel Duncan
• Inventors: Duncan, Daniel
• Primary Examiner(s): Paliwal, Yogesh
• Application Number:
  US14/041,264
• Publication Number:
  US 20140230033A1
• Time in Patent Office: 442 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Systems and methods of identifying biometric information as trusted and authenticating persons using trusted biometric information are provided. Biometric information can be identified as trusted by comparing it to other biometric information and/or based on the age of the biometric information and/or receiving correct answers to questions based on personal information. Once biometric information has been identified as trusted it can be used as part of an authentication process by receiving biometric information from a person to be authenticated and comparing the received biometric information with the trusted biometric information.

Claims

1. A method, comprising:

receiving, by a centralized computer, personal information for a first person from a source, wherein the personal information for the first person includes first historical biometric information;

receiving, by the centralized computer, a request to authenticate a person, wherein the request to authenticate includes second biometric information;

comparing, by the centralized computer, the second biometric information with the first historical biometric information;

determining, by the centralized computer, a similarity measure based on the comparison of the second biometric information with the first historical biometric information; and

determining, by the centralized computer, whether to authenticate the person and whether the first and second biometric information is trusted biometric information based on the similarity measure, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is based on the similarity measure and an amount of time between when the first historical biometric was captured and when the received second biometric information was captured, and wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information comprises

comparing, by the centralized computer, the determined similarity measure to a similarity measure threshold, wherein the similarity measure threshold is adjusted based on the amount of time between when the first historical biometric was captured and when the received second biometric information was captured.

2. The method of claim 1, wherein a value of the similarity measure threshold is increased as the amount of time between when the first historical biometric was captured and when the received second biometric information was captured decreases.

3. The method of claim 1, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on an absolute age of one of the first and second biometric information.

4. The method of claim 1, further comprising:

selecting, by the centralized computer, information from the group comprising transaction data, the stored first historical biometric information, the received second biometric information, the determined similarity measure, and non-biometric for the person to be authenticated;

calculating, by the centralized computer using a predictive model, a high-risk transaction probability using the selected information; and

comparing, by the centralized computer, the calculated high-risk transaction probability to a risk threshold, wherein when the high-risk transaction probability is greater than the risk threshold the request to authenticate is further evaluated to identify potential fraud.

5. The method of claim 1, further comprising:

determining, by the centralized computer, whether the received biometric information is fraudulent biometric information; and

adding, by the centralized computer, the fraudulent biometric information to a blacklist.

6. The method of claim 1, wherein the personal information from the source includes non-biometric information and the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on the non-biometric personal information.

7. The method of claim 6, wherein the non-biometric information includes geolocation or distance information.

8. The method of claim 1, wherein after it is determined that the first and second biometric information is not trusted biometric information, additional personal information is received by the centralized computer and the first and second biometric information is determined as trusted based on the received additional personal information.

9. The method of claim 8, wherein the additional personal information is received from the source.

10. The method of claim 8, wherein the additional personal information is information related to an account of the first person.

11. The method of claim 8, wherein the source is one of a plurality of independent sources and the additional personal information is received from a different one of the plurality of independent sources.

12. The method of claim 1, wherein the source is one of a plurality of independent sources, additional non-biometric personal information is received from another one of the plurality of independent sources, and the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on the non-biometric personal information received from the another one of the plurality of independent sources.

13. The method of claim 12, wherein the additional non-biometric information includes geolocation or distance information.

14. The method of claim 1, wherein the second biometric information is received by the centralized computer via an interactive voice response (IVR) system, the method further comprising:

transferring the person to be authenticated from the IVR system to a live agent;

receiving, during an interaction between the live agent and the person to be authenticated, third biometric information; and

comparing the third biometric information with the first historical biometric information and the second biometric information to identify whether there are any anomalies between the compared biometric information.

15. The method of claim 1, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information further comprises:

determining, by the centralized computer, a status of an account for which the person is requesting authentication.

16. A method, comprising:

receiving, by a centralized computer, personal information for a first person from a source, wherein the personal information for the first person includes first historical biometric information;

receiving, by the centralized computer, a request to authenticate a person, wherein the request to authenticate includes second biometric information;

comparing, by the centralized computer, the second biometric information with the first historical biometric information;

determining, by the centralized computer, a similarity measure based on the comparison of the second biometric information with the first historical biometric information; and

determining, by the centralized computer, whether to authenticate the person and whether the first and second biometric information is trusted biometric information based on the similarity measure, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is based on the similarity measure and an amount of time between when the first historical biometric was captured and when the received second biometric information was captured, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information comprises

comparing, by the centralized computer, the determined similarity measure to a similarity measure threshold; and

comparing, by the centralized computer, the amount of time between when the first historical biometric was captured and when the received second biometric information was captured to a time period threshold, wherein the person is authenticated and the first and second biometric information are identified as trusted biometric information when the determined similarity measure is greater than or equal to the similarity measure threshold and the amount of time between when the first historical biometric was captured and when the received second biometric information was captured is greater than or equal to the time period threshold.

17. The method of claim 16, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information further comprises:

determining, by the centralized computer, a status of an account for which the person is requesting authentication.

18. The method of claim 16, wherein the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on an absolute age of one of the first and second biometric information.

19. The method of claim 16, further comprising:

selecting, by the centralized computer, information from the group comprising transaction data, the stored first historical biometric information, the received second biometric information, the determined similarity measure, and non-biometric for the person to be authenticated;

calculating, by the centralized computer using a predictive model, a high-risk transaction probability using the selected information; and

comparing, by the centralized computer, the calculated high-risk transaction probability to a risk threshold, wherein when the high-risk transaction probability is greater than the risk threshold the request to authenticate is further evaluated to identify potential fraud.

20. The method of claim 16, further comprising:

determining, by the centralized computer, whether the received biometric information is fraudulent biometric information; and

adding, by the centralized computer, the fraudulent biometric information to a blacklist.

21. The method of claim 16, wherein the personal information from the source includes non-biometric information and the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on the non-biometric personal information.

22. The method of claim 21, wherein the non-biometric information includes geolocation or distance information.

23. The method of claim 16, wherein after it is determined that the first and second biometric information is not trusted biometric information, additional personal information is received by the centralized computer and the first and second biometric information is determined as trusted based on the received additional personal information.

24. The method of claim 23, wherein the additional personal information is received from the source.

25. The method of claim 23, wherein the additional personal information is information related to an account of the first person.

26. The method of claim 23, wherein the source is one of a plurality of independent sources and the additional personal information is received from a different one of the plurality of independent sources.

27. The method of claim 16, wherein the source is one of a plurality of independent sources, additional non-biometric personal information is received from another one of the plurality of independent sources, and the determination of whether to authenticate the person and whether the first and second biometric information is trusted biometric information is also based on the non-biometric personal information received from the another one of the plurality of independent sources.

28. The method of claim 27, wherein the additional non-biometric information includes geolocation or distance information.

29. The method of claim 16, wherein the second biometric information is received by the centralized computer via an interactive voice response (IVR) system, the method further comprising:

transferring the person to be authenticated from the IVR system to a live agent;

receiving, during an interaction between the live agent and the person to be authenticated, third biometric information; and

comparing the third biometric information with the first historical biometric information and the second biometric information to identify whether there are any anomalies between the compared biometric information.