Systems and methods for high fidelity multi-modal out-of-band biometric authentication

• US 9,760,785 B2
• Filed: 06/03/2013
• Issued: 09/12/2017
• Est. Priority Date: 05/08/2013
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Kursun, Eren, Fernandez, Gene, Berson, Alex, Goodman, Brian
• Primary Examiner(s): YANG, JAMES J
• Application Number:
  US13/908,618
• Publication Number:
  US 20140333413A1
• Time in Patent Office: 1,562 Days
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities

Abstract

Systems and methods for high fidelity multi-modal out-of-band biometric authentication are disclosed. According to one embodiment, a method for multi-mode biometric authentication may include (1) receiving, at a computer application executed by an electronic device, a first input from a first input device on the electronic device; (2) receiving, at the computer application, a second data from a second input device on the electronic device; (3) receiving, at the computer application, a third input from a third input device on the electronic device; and (4) communicating, by the computer application and to a server, the first input, the second input, and the third input. The first input, second input and third input may be received within a predetermined time period, such as five seconds.

Claims

1. A method for multi-mode authentication of a user to a second electronic device using a first electronic device comprising:

a computer application executed by a first electronic device that is associated with a user receiving a machine-readable code captured by a first input device on the first electronic device, wherein the machine-readable code is presented by a second electronic device and comprises an electronic device identifier for the second electronic device;

the computer application receiving a first biometric from a second input device on the first electronic device;

the computer application receiving a second biometric from a third input device on the first electronic device; and

the computer application repeating the receipt of at least one of the first biometric and the second biometric, in response to the first biometric and the second biometric not being received within a predetermined time period;

the computer application communicating the electronic device identifier, the first biometric and the second biometric to a server independent of the second electronic device for authentication;

wherein the server authenticates the user based on the association of the first electronic device with the user, the first biometric, and the second biometric, and communicates the authentication to the second electronic device associated with the electronic device identifier; and

wherein the second electronic device grants access to the user in response to the authentication.

2. The method of claim 1, wherein the first input device is a first camera.

3. The method of claim 1, wherein the second input device is a second camera, and the first biometric is an image of at least a part of the user.

4. The method of claim 3, wherein the image comprises at least one of the user'"'"'s eyes.

5. The method of claim 3, wherein the image comprises at least a portion of the user'"'"'s face.

6. The method of claim 1, wherein the third input device is a microphone, and the second biometric comprises a voice biometric.

7. The method of claim 1, wherein the third input device is touch-sensitive, and the second biometric comprises a finger biometric.

8. The method of claim 1, wherein the second biometric comprises a behavioral biometric.

9. The method of claim 1, wherein the second biometric comprises a thermal biometric.

10. The method of claim 1, wherein the authentication permits the user to access a website on the second electronic device.

11. The method of claim 1, wherein the authentication permits the user to conduct a transaction using the second electronic device.

12. The method of claim 11, wherein the transaction has a value above a predetermined value.

13. The method of claim 11, wherein the transaction has a risk level above a predetermined risk level.

14. The method of claim 1, wherein the first input device and the second input device are the same device.

15. The method of claim 1, wherein the authentication permits the user to access a software application on the second electronic device.

16. The method of claim 1, wherein the authentication permits the user to access an account using the second electronic device.

17. A method for multi-mode authentication of a user to a second electronic device using a first electronic device comprising:

a server comprising at least one computer processor receiving, from a first electronic device that is associated with a user, a machine-readable code captured by a first input device on the first electronic device, wherein the machine-readable code is presented by a second electronic device and comprises an electronic device identifier for the second electronic device;

the server receiving, from the first electronic device and independent of the second electronic device, a first biometric received using a second input device on the first electronic device;

the server receiving, from the first electronic device and independent of the second electronic device, a second biometric received using a second input device on the first electronic device;

the server authenticating the user based on the association of the first electronic device with the user, the first biometric, and the second biometric; and

the server communicating the authentication to the second electronic device associated with the electronic device identifier;

wherein the computer application repeats the receipt of at least one of the first biometric and the second biometric in response to the first biometric and the second biometric not being received within a predetermined time period;

wherein the second electronic device grants access to the user in response to the authentication.

18. The method of claim 17, wherein the first biometric comprises an image of at least a part of the user image.

19. The method of claim 17, wherein the second biometric comprises a user biometric.

20. The method of claim 17, wherein the authentication permits the user to access a website on the second electronic device.

21. The method of claim 17, wherein the authentication permits the user to conduct a transaction using the second electronic device.

22. The method of claim 21, wherein the transaction has a value above a predetermined value.

23. The method of claim 21, wherein the transaction has a risk level above a predetermined risk level.

24. The method of claim 17, wherein the authentication permits the user to execute a second computer application on the second electronic device.

25. The method of claim 17, wherein the authentication permits the user to access a software application on the second electronic device.

26. The method of claim 17, wherein the authentication permits the user to access an account using the second electronic device.

27. The method of claim 17, further comprising:

the server communicating an indication to at least one of the second electronic device and the first electronic device that the authentication was unsuccessful.

35. The system of claim 22, wherein the image comprises at least a portion of the user'"'"'s face.

28. A system for multi-mode authentication comprising:

a first electronic device that is associated with a user comprising a first input device, a second input device, and a third input device;

a second electronic device associated with an electronic device identifier and executing an application requiring authentication for the user to access; and

a server comprising at least one computer processor that is in communication with both the first electronic device and the second electronic device;

wherein;

the first electronic device receives a machine-readable code captured by the first input device, wherein the machine-readable code is presented by a second electronic device and comprises the electronic device identifier for the second electronic device;

the first electronic device receives a first biometric from the second input device;

the first electronic device receives a second biometric from the third input device;

the computer application repeating the receipt of at least one of the first biometric and the second biometric, in response to the first biometric and the second biometric not being received within a predetermined time period;

the first electronic device communicates, independently of the second electronic device, the machine-readable code, the first biometric, and the second biometric to the server;

the server authenticating the user based on the association of the first electronic device with the user, the first biometric, and the second biometric

the server communicating the authentication to the second electronic device associated with the electronic device identifier; and

wherein the second electronic device grants access to the user in response to the authentication.

29. The system of claim 28, wherein the first biometric comprises an image of at least a part of the user.

30. The system of claim 28, wherein the second biometric comprises a user biometric.

31. The system of claim 28, wherein the application requiring authentication comprises a computer application.

32. The system of claim 28, wherein the application requiring authentication is a transaction application.

33. The system of claim 28, wherein the application requiring authentication is a logon application.

34. The system of claim 30, wherein the image comprises at least one of the user'"'"'s eyes.