Automated identity assessment method and system

• US 9,917,826 B2
• Filed: 02/07/2017
• Issued: 03/13/2018
• Est. Priority Date: 08/02/2010
• Status: Active Grant

• Current Assignee: 3fish Ltd.
• Original Assignee: 3fish Ltd.
• Inventors: Wyn-Harris, Jeremy
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US15/426,359
• Publication Number:
  US 20170149759A1
• Time in Patent Office: 399 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method, system and software for assessing an entity (15) at a first user terminal (13) connected to a data network (10). A control system (11) is used to receive an access request (101) from the entity (15) or an assessing user (16) at a second user terminal (14). The control system (11) invokes or facilitates transmission of a time-delimited sequence of unpredictable prompts (18) to the entity (15) for a performance of visible prompted actions (20). A video recording (21) of the prompted action performance is stored in a data store (61) and the control system performs an automated assessment of the video recording (21) by a gesture recognition system (67d) and generates an assessment signal respectively including a positive or negative indication of whether or not said entity (15) validly performed said prompted actions.

Claims

1. A method of assessing an entity at a first user terminal, the method for use in authenticating an entity that has requested recovery of a password, the first user terminal being connected to a data network, the data network including one or more user records collectively forming a “

user account”

in a database in a data store accessible by a control system and wherein the user account includes a set of identifying characteristics relating to a registered user, the control system including a gesture recognition system, said control system operable to perform the method of assessing an entity, the method including;

receiving an access request from the entity, the access request including a request to recover a password;

invoking or facilitating transmission of a time-delimited sequence of unpredictable prompts to said entity for prompting a performance of visible prompted actions, wherein the prompts describe or portray the visible prompted actions to be performed;

invoking or facilitating storage of at least one video recording of the prompted action performance from the entity to the gesture recognition system,

performing an automated assessment of said video recording,

generating an assessment signal indicative of said assessment, herein said automated assessment includes assessment by the gesture recognition system, the assessment signal respectively including a positive or negative indication of whether or not the entity validly performed at least one of the prompted actions.

2. The method as claimed in claim 1, wherein a data store for storing the recording is provided separately to a user data store containing a database of user account records.

3. The method as claimed in claim 1, wherein said control system makes a negative classification after a predetermined number of negative assessment signals are generated.

4. The method as claimed in claim 3, wherein said control system performs at least one of the following procedures:

records to an accessed user account that the entity has had a negative classification;

invokes a warning notification for other users attempting to communicate with the entity that a negative classification has occurred;

blocks the entity from communication with other users;

suspends or cancels an accessed user account;

sends a warning notification to a network administrator or other authority to investigate the entity and/or negative assessment;

selectively restricts the type of communication allowed between the entity and other users;

selectively restricts the type of access allowed or the extent of access.

5. The method as claimed in claim 1, wherein the prompts include one or more instructions to perform visible response actions, the recording is a video recording and the recognition system includes a gesture recognition system analysing the recording to identify the visible response actions performed by the entity.

6. The method as claimed in claim 5, wherein the prompts include one or more instructions to perform movements or gestures of the face, body or head, or parts thereof.

7. The method as claimed in claim 1, wherein the prompts include one or more instructions to perform audible response actions, the recording includes an audio recording and the recognition system includes a voice recognition system analysing the audio recording to interpret the audible response actions performed by the entity.

8. The method as claimed in claim 1, wherein the control system includes one or more user identification systems selected from the group including:

fingerprint scanner

iris scanner

facial recognition system

fingerprint identification

hand geometry

palm vein authentication

retina scanner

voice recognition system

anatomical geometry recognition

any combination or permutation of the above.

9. The method as claimed in claim 1, wherein the recording is a live-stream temporarily recorded in a storage medium.

10. The method as claimed in claim 1, wherein the data network is a financial institution, financial organisation, or financial transaction entity, the method including restricting access to the user account if a negative classification is made.

11. The method as claimed in claim 1, wherein the data network is a financial transaction network, the method including restricting access to the user account if a negative classification is made.

12. The method as claimed in claim 1, wherein the data network is a social network formed from connections between multiple users connected to the data network, said social network embodied in related data records in a database, each data record corresponding to a registered user or a user terminal.

13. The method as claimed in claim 1, wherein the first user terminal includes the control system.

14. The method as claimed in claim 1, wherein the first user terminal is a mobile computing device.

15. The method as claimed in claim 1, wherein the recognition system includes a facial recognition system and the method of assessing the entity is used to provide liveness detection.

16. The method as claimed in claim 1, wherein the assessment is conducted after each individual prompt and corresponding recording.