Multi-level authentication

• US 9,147,061 B1
• Filed: 05/29/2014
• Issued: 09/29/2015
• Est. Priority Date: 11/22/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: McClendon, Brian, Vincent, Luc
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Kanaan, Simon
• Application Number:
  US14/290,168
• Time in Patent Office: 488 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 20/647 by matching two-dimensional images to three-dimensional objects
• CPC Class Codes: G06V 20/653 by matching three-dimensional models, e.g. conformal mapping of Riemann surfaces
• CPC Class Codes: G06V 30/248 involving plural approaches, e.g. verification by template match; Resolving confusion among similar patterns, e.g. "O" versus "Q" G06V30/242 takes precedence
• CPC Class Codes: G06V 40/167 using comparisons between temporally consecutive images
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

Aspects of the disclosure relate generally to using a primary and secondary authentication to provide a user with access to protected information or features. To do so, a computing device may generate depth data based on a plurality of images of a user. The computing device may then compare the generated depth data to pre-stored depth data that was generated based on a pre-stored plurality of images. If authentication is successful, the user may be granted access to features of the computing device. If authentication is unsuccessful, then a secondary authentication may be performed. The secondary authentication may compare facial features of a captured image of the user to facial features of a pre-stored image of the user. If authentication is successful, then the primary authentication may be performed again. This second time, the user may be granted access if authentication is successful, or denied access if authentication is unsuccessful.

Claims

1. A method for authenticating a user, the method comprising:

receiving, by one or more computing devices, a request for access to a protected feature;

generating, by the one or more computing devices, depth data based at least in part on a plurality of images;

comparing, by the one or more computing devices, the depth data to pre-stored depth data corresponding to the user in order to authenticate the user as part of a primary authentication;

when the user is not authenticated as part of the primary authentication, identifying, by the one or more computing devices, a single image;

comparing, by the one or more computing devices, the identified image to a pre-stored image of the user in order to authenticate the user as part of a secondary authentication;

when the user is authenticated as part of the secondary authentication, generating, by the one or more computing devices, new depth data corresponding to the user;

comparing, by the one or more computing devices, the new depth data to the pre-stored depth data in order to authenticate the user as part of a tertiary authentication;

when the user is authenticated as part of the tertiary authentication, providing, by the one or more computing devices, access to the protected feature.

2. The method of claim 1, wherein the plurality of images are image frames from a captured video.

3. The method of claim 1, wherein the new depth data is generated based on the plurality of images.

4. The method of claim 1, further comprising:

receiving a second plurality of images of the user; and

generating the new depth data based on the received second plurality of images.

5. The method of claim 1, wherein, when the identified single image is not authenticated, denying access to the protected feature of the client device.

6. The method of claim 1, wherein, when the new generated depth data as part of the tertiary authentication is not authenticated, denying access to the protected feature of the client device.

7. The method of claim 1, wherein identifying the identified single image includes selecting an image from the plurality of images.

8. The method of claim 1, wherein identifying the identified single image includes requesting an image of the user and receiving the single image in response to the request.

9. A system comprising one or more computing devices configured to:

receive a request for access to a protected feature;

generate depth data based at least in part on a plurality of images;

compare the depth data to pre-stored depth data corresponding to the user in order to authenticate the user as part of a primary authentication;

when the user is not authenticated as part of the primary authentication, identify a single image;

compare the identified image to a pre-stored image of the user in order to authenticate the user as part of a secondary authentication;

when the user is authenticated as part of the secondary authentication, generate new depth data corresponding to the user;

compare the new depth data to the pre-stored depth data in order to authenticate the user as part of a tertiary authentication;

when the user is authenticated as part of the tertiary authentication, provide access to the protected feature.

10. The system of claim 9, wherein the plurality of images are image frames from a captured video.

11. The system of claim 9, wherein the new depth data is generated based on the plurality of images.

12. The system of claim 9, wherein the one or more computing devices are further configured to:

receive a second plurality of images of the user; and

generate the new depth data based on the received second plurality of images.

13. The system of claim 9, wherein, when the identified single image is not authenticated, denying access to the protected feature of the client device.

14. The system of claim 9, wherein, when the new generated depth data as part of the tertiary authentication is not authenticated, denying access to the protected feature of the client device.

15. The system of claim 9, wherein identifying the identified single image includes selecting an image from the plurality of images.

16. The system of claim 9, wherein identifying the identified single image includes requesting an image of the user and receiving the single image in response to the request.

17. A non-transitory tangible computer-readable storage medium on which computer readable instructions of a program are stored, the instructions, when executed by one or more processors, cause the one or more processors to perform a method, the method comprising:

receiving, by one or more computing devices, a request for access to a protected feature;

generating, by the one or more computing devices, depth data based at least in part on a plurality of images;

comparing, by the one or more computing devices, the depth data to pre-stored depth data corresponding to the user in order to authenticate the user as part of a primary authentication;

when the user is not authenticated as part of the primary authentication, identifying, by the one or more computing devices, a single image;

comparing, by the one or more computing devices, the identified image to a pre-stored image of the user in order to authenticate the user as part of a secondary authentication;

when the user is authenticated as part of the secondary authentication, generating, by the one or more computing devices, new depth data corresponding to the user;

comparing, by the one or more computing devices, the new depth data to the pre-stored depth data in order to authenticate the user as part of a tertiary authentication;

when the user is authenticated as part of the tertiary authentication, providing, by the one or more computing devices, access to the protected feature.

18. The medium of claim 17, wherein the plurality of images are image frames from a captured video.

19. The medium of claim 17, wherein the new depth data is generated based on the plurality of images.

20. The medium of claim 17, further comprising:

receiving a second plurality of images of the user; and

generating the new depth data based on the received second plurality of images.