System and method for verifying liveliness

• US 10,104,072 B2
• Filed: 11/21/2016
• Issued: 10/16/2018
• Est. Priority Date: 02/11/2014
• Status: Active Grant

• Current Assignee: Idemia Identity & Security USA, LLC (Advent International Corporation)
• Original Assignee: Morphotrust USA Incorporated (Advent International Corporation)
• Inventors: Saravanan, Thiagarajan
• Primary Examiner(s): Tran, Tri M
• Application Number:
  US15/356,794
• Publication Number:
  US 20170118209A1
• Time in Patent Office: 694 Days
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A machine-assisted method for verifying a video presence that includes: receiving, at a computing device of an identity provider, an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider; retrieving, from the authentication request, at least a portion of a video stream feed initially from the requester, to the computing device, the portion of video stream feed portraying a face of the requester; extracting the face of the requester from the portion of the video stream feed; providing a directive to the requester soliciting a corresponding gesture; and receiving a response gesture from the requester.

Claims

1. A computer-implemented method for verifying a video presence, comprising:

transmitting, from a user computer of a requester and to a computing device of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between the requester and the computing device of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving, at the user computer, a directive from the computing device of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the identity provider such that

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the identity provider establishes a biometric identity for the requester by storing, at the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

2. The computer-implemented method of claim 1, wherein transmitting the second portion of the video stream feed to the computing device of the identity provider causes a biometric identity for the requester to be established at the computing device of the identity provider.

3. The computer-implemented method of claim 2, wherein transmitting the second portion of the video stream feed causes a biometric identity for the requester to be established at the computing device of the identity provider by storing, at the computing device of the identity provider, data encoding an extracted face of the requester.

4. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

5. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive that is presented verbally on the user computer of the requester.

6. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive that is presented textually on the user computer of the requester.

7. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive that is presented as at least one graphical icon on the user computer of the requester.

8. The computer-implemented method of claim 1, further comprising:

receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

9. The computer-implemented method of claim 8, wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

10. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.

11. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive soliciting a motion of a specific body part of the requester.

12. The computer-implemented method of claim 1, wherein receiving the directive comprises receiving the directive soliciting a facial expression change from the requester.

13. A computer system for a requester to verify a video presence, the computer system comprising a hardware processor configured to perform operations comprising:

transmitting, from a user computer of a requester and to a computing device of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between the requester and the computing device of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving, at the user computer, a directive from the computing device of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the identity provider such that

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the identity provider establishes a biometric identity for the requester by storing, at the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

14. The computer system of claim 13, wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

15. The computer system of claim 13, wherein receiving the directive comprises receiving the directive that is presented verbally.

16. The computer system of claim 13, wherein receiving the directive comprises receiving the directive that is presented textually.

17. The computer system of claim 13, wherein receiving the directive comprises receiving the directive that is presented as graphical icons on the user computer of the requester.

18. The computer system of claim 13, wherein the operations further comprise:

receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

19. The computer system of claim 18, wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

20. The computer system of claim 13, wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.

21. The computer system of claim 13, wherein receiving the directive comprises receiving the directive soliciting a motion of a specific body part of the requester.

22. The computer system of claim 13, wherein receiving the directive comprises receiving the directive soliciting a facial expression change from the requester.