System and method for verifying liveliness

• US 10,735,413 B2
• Filed: 08/31/2018
• Issued: 08/04/2020
• Est. Priority Date: 02/11/2014
• Status: Active Grant

• Current Assignee: Idemia Identity & Security USA, LLC (Advent International Corporation)
• Original Assignee: Morphotrust USA Incorporated (Advent International Corporation)
• Inventors: Saravanan, Thiagarajan
• Primary Examiner(s): Tran, Tri M
• Application Number:
  US16/118,625
• Publication Number:
  US 20190014110A1
• Time in Patent Office: 704 Days
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A machine-assisted method for verifying a video presence that includes: receiving, at a computing device of an identity provider, an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider; retrieving, from the authentication request, at least a portion of a video stream feed initially from the requester, to the computing device, the portion of video stream feed portraying a face of the requester; extracting the face of the requester from the portion of the video stream feed; providing a directive to the requester soliciting a corresponding gesture; and receiving a response gesture from the requester.

Claims

1. At least one non-transitory computer readable storage device storing instructions that, when executed by at least one processor, cause the at least one processor to perform operations comprising:

transmitting, by a user computing device of a requester and to a computing system of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between the requester and the computing system of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving a directive from the computing system of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the computing system of the identity provider such that;

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the identity provider establishes a biometric identity for the requester by storing, at the computing system of the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

2. The device of claim 1, wherein transmitting the second portion of the video stream feed to the computing system of the identity provider causes a biometric identity for the requester to be established at the computing system of the identity provider.

3. The device of claim 2, wherein transmitting the second portion of the video stream feed causes a biometric identity for the requester to be established at the computing system of the identity provider by storing, at the computing system of the identity provider, data encoding an extracted face of the requester.

4. The device of claim 1, wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

5. The device of claim 1, wherein receiving the directive comprises receiving the directive that is presented verbally on the user computing device of the requester.

6. The device of claim 1, wherein receiving the directive comprises receiving the directive that is presented textually on the user computing device of the requester.

7. The device of claim 1, wherein receiving the directive comprises receiving the directive that is presented as at least one graphical icon on the user computing device of the requester.

8. The device of claim 1, further comprising:

receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

9. The device of claim 8, wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

10. The device of claim 1, wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.

11. The device of claim 1, wherein receiving the directive comprises receiving the directive soliciting a motion of a specific body part of the requester.

12. The device of claim 1, wherein receiving the directive comprises receiving the directive soliciting a facial expression change from the requester.

13. A mobile computing device, comprising:

one or more processors;

one or more non-transitory media operably connectable to the one or more processors and storing instructions that, when executed, perform operations comprising;

transmitting, from the mobile computing device and to a computing system of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between a requester and the computing system of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving, at the mobile computing device, a directive from the computing system of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the identity provider such that;

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the computing system of the identity provider establishes a biometric identity for the requester by storing, at the computing system of the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

14. The mobile computing device of claim 13, wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

15. The mobile computing device of claim 13, wherein receiving the directive comprises receiving the directive that is presented verbally.

16. The mobile computing device of claim 13, wherein receiving the directive comprises receiving the directive that is presented textually.

17. The mobile computing device of claim 13, wherein receiving the directive comprises receiving the directive that is presented as graphical icons on the mobile computing device.

18. The mobile computing device of claim 13, wherein the operations further comprise:

receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

19. The mobile computing device of claim 18, wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

20. The mobile computing device of claim 13, wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.