Verification based on input comprising captured images, captured audio and tracked eye movement

• US 9,294,474 B1
• Filed: 11/14/2013
• Issued: 03/22/2016
• Est. Priority Date: 11/15/2012
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Alikhani, Kayvan
• Primary Examiner(s): Shaw, Brian
• Application Number:
  US14/080,290
• Time in Patent Office: 859 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

In one embodiment, a method comprises receiving a verification request, sending one or more patterns for display at one or more specified locations on a screen of a device, receiving verification input responsive to the one or more patterns, and granting or denying the verification request based at least in part on the verification input. The verification input comprises one or more captured images, captured audio and tracked eye movement. The verification request may be generated in conjunction with an attempted launch of a designated application on a first device, with user access to the designated application on the first device being controlled responsive to the granting or denying of the verification request.

Claims

1. A method comprising:

receiving a verification request;

responsive to receiving the verification request, sending one or more randomly generated patterns for display at one or more randomly specified locations on a screen of a device;

responsive to the sending, receiving verification input responsive to the displayed one or more randomly generated patterns, the verification input comprising one or more captured images, captured audio and tracked eye movement, wherein the one or more captured images, the captured audio and the tracked eye movement are concurrently collected from a user of the device; and

granting or denying the verification request based at least in part on the verification input;

wherein granting the verification request comprises verifying liveliness of the user by;

verifying, utilizing the captured audio, that a stored voice profile for the user matches user spoken phrases or digits corresponding to the one or more randomly generated patterns;

verifying, utilizing the tracked eye movement, that one or more locations of the screen the user was viewing while speaking the phrases or digits corresponding to the one or more randomly generated patterns match the one or more randomly specified locations; and

verifying, utilizing the one or more captured images, that a stored facial profile for the user matches a facial profile captured while the user was speaking the phrases or digits corresponding to the one or more randomly generated patterns.

2. The method of claim 1 wherein:

receiving the verification request comprises receiving the verification request from a first device; and

sending the one or more randomly generated patterns comprises sending the one or more randomly generated patterns to a second device different than the first device.

3. The method of claim 2 wherein receiving the verification request, sending the one or more randomly generated patterns, receiving the verification input, and granting or denying the verification request are implemented in a verification platform adapted for communication with the first device and the second device.

4. The method of claim 3 wherein granting of the verification request requires that both the first device and the second device are enrolled in a verification service supported by the verification platform.

5. The method of claim 1 wherein the phrases or digits comprise one or more combinations of phrases and digits.

6. The method of claim 1 wherein the verification request is generated in conjunction with an attempted launch of a designated application on a first device and wherein user access to the designated application on the first device is controlled responsive to the granting or denying of the verification request.

7. An article of manufacture comprising a non-transitory processor-readable storage medium having embodied therein one or more software programs, wherein the one or more software programs when executed by at least one processing device cause the method of claim 1 to be performed.

8. An apparatus comprising:

a verification platform comprising at least one processing device having a processor coupled to a memory;

wherein the verification platform is configured;

to receive a verification request;

responsive to receiving the verification request, to send one or more randomly generated patterns for display at one or more randomly specified locations on a screen of a device;

responsive to sending the one or more randomly generated patterns, to receive verification input responsive to the displayed one or more randomly generated patterns, the verification input comprising one or more captured images, captured audio and tracked eye movement, wherein the one or more captured images, the captured audio and the tracked eye movement are concurrently collected from a user of the device; and

to grant or deny the verification request based at least in part on the verification input;

wherein granting the verification request comprises verifying liveliness of the user by;

verifying, utilizing the captured audio, that a stored voice profile for the user matches user spoken phrases or digits corresponding to the one or more randomly generated patterns;

verifying, utilizing the tracked eye movement, that one or more locations of the screen the user was viewing while speaking the phrases or digits corresponding to the one or more randomly generated patterns match the one or more randomly specified locations; and

verifying, utilizing the one or more captured images, that a stored facial profile for the user matches a facial profile captured while the user was speaking the phrases or digits corresponding to the one or more randomly generated patterns.

9. The apparatus of claim 8 wherein the verification platform is configured to receive the verification request from a first device and send the one or more randomly generated patterns to a second device different than the first device.

10. The apparatus of claim 9 wherein the verification platform comprises:

an application programming interface adapted for communication with verification agents implemented on respective ones of the first and second devices; and

a server coupled to the application programming interface.

11. A communication system comprising the apparatus of claim 9 and the first and second devices.

12. The apparatus of claim 9 wherein granting of the verification request requires that both the first device and the second device are enrolled in a verification service supported by the verification platform.

13. The apparatus of claim 8 wherein the verification request is generated in conjunction with an attempted launch of a designated application on a first device and wherein user access to the designated application on the first device is controlled responsive to the granting or denying of the verification request.

14. A method comprising:

receiving, from a verification platform, a notification regarding a verification request, the notification comprising one or more randomly generated patterns for display at one or more randomly specified locations on a screen of a device; and

responsive to receiving the notification, providing, to the verification platform, verification input responsive to the notification, the verification input comprising one or more captured images, captured audio and tracked eye movement, wherein the one or more captured images, the captured audio and the tracked eye movement are concurrently collected from a user of the device;

wherein the verification request is granted or denied by the verification platform based at least in part on the verification input; and

wherein granting the verification request comprises verifying liveliness of the user by;

verifying, utilizing the captured audio, that a stored voice profile for the user matches user spoken phrases or digits corresponding to the one or more randomly generated patterns;

verifying, utilizing the tracked eye movement, that one or more locations of the screen the user was viewing while speaking the phrases or digits corresponding to the one or more randomly generated patterns match the one or more randomly specified locations; and

verifying, utilizing the one or more captured images, that a stored facial profile for the user matches a facial profile captured while the user was speaking the phrases or digits corresponding to the one or more randomly generated patterns.

15. The method of claim 14, wherein receiving the notification and providing the verification input are implemented in a device configured to operate as a second device relative to a first device, the first device being the source of the verification request.

16. The method of claim 15 wherein granting of the verification request requires that both the first device and the second device are enrolled in a verification service supported by the verification platform.

17. The method of claim 14, further comprising generating the verification request in conjunction with an attempted launch of a designated application on a first device;

wherein user access to the designated application on the first device is controlled responsive to the granting or denying of the verification request; and

wherein receiving the notification from the verification platform and providing the verification input to the verification platform is responsive to invoking an application programming interface of the verification platform using a verification agent on the first device.

18. The method of claim 17 further comprising:

in the event that the verification agent is unable to invoke the application programming interface of the verification platform, starting an internal timer at the first device;

performing local verification at the first device within a given time period specified by the internal timer; and

granting access to the designated application responsive to successful local verification within the given time period, otherwise denying access to the designated application.

19. The method of claim 18 further comprising attempting to invoke the application programming interface of the verification platform after expiration of the internal timer in the event that:

local verification within the given time period is unsuccessful;

or

the first device does is not capable of performing local verification.

20. An article of manufacture comprising a non-transitory processor-readable storage medium having embodied therein one or more software programs, wherein the one or more software programs when executed by at least one processing device cause the method of claim 14 to be performed.