System and method of encoding content and an image

• US 9,563,926 B2
• Filed: 03/14/2013
• Issued: 02/07/2017
• Est. Priority Date: 03/14/2013
• Status: Expired due to Fees

• Current Assignee: Artificial Intelligence Research Group Limited
• Original Assignee: Applied Materials Technologies Incorporated
• Inventors: Avni, Yossi, Suchard, Eytan
• Primary Examiner(s): Rahmjoo, Manuchehr
• Application Number:
  US13/831,158
• Publication Number:
  US 20140281946A1
• Time in Patent Office: 1,426 Days
• Field of Search: 382/119
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G06T 1/0028 Adaptive watermarking, e.g. Human Visual System [HVS]-based watermarking
• CPC Class Codes: G06V 40/376 Acquisition
• CPC Class Codes: G06V 40/388 Sampling; Contour coding; Stroke extraction
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A method of verifying the identity of a user at an authentication server that includes receiving user data relating to a signature gesture entered by a user at a computing device, the user data having a plurality of sample points, verifying the user data at the authentication server by comparing to reference signature data, encoding a verification message within a digital image, and notifying the user that their identity has been verified on the basis of the user data received from the computing device.

Claims

1. A registration method for verifying the identity of a user and granting access to a restricted resource on the basis of a pre-defined security policy, the method comprising:

receiving, at an authentication server from a computing device n signature gestures from a user, each of the n signature gestures representing a different level of signature complexity, and where the n signature gestures comprise at least a full form and a partial form of the user'"'"'s signature;

storing in a data store associated with the authentication server each of the n signature gestures within a user profile as a reference signature gesture; and

associating at a processor of the authentication server, in a registration step, each of the n reference signature gestures with a different security level defined within a security policy, wherein the processor is operable to subsequently compare received signature gestures associated with a user request for access to the restricted resource with one or more of the stored n reference signature gestures in order to verify the identity of the user, and, in the event the that the user is verified, to grant access to the restricted resource.

2. The method of claim 1, wherein the signature gestures received from the user are in the form of user data captured as the user enters the signature gesture at the computing device, the user data comprising a plurality of sample points.

3. The method of claim 1, wherein the authentication server, during an enrolment process, receives a number of samples of each of the n signature gestures from the user, comprising at least a number of samples of a full form of the user'"'"'s signature and a number of samples of a partial form of the user'"'"'s signature, and wherein the processor characterises and defines each of the n signature gestures using the number of samples of each of the n signature gestures received from the user.

4. An authentication server for verifying the identity of a user and granting access to a restricted resource on the basis of a pre-defined security policy, the authentication server comprising:

inputs arranged to receive n signature gestures from a user, each of the n signature gestures representing a different level of signature complexity, and comprising at least a full form and a partial form of the user'"'"'s signature;

a data store associated with the authentication server arranged to store each of the n signature gestures within a user profile as a reference signature gesture;

a processor arranged to associate each of the n reference signature gestures with a different security level defined within the security policy;

inputs arranged to receive user data relating to a signature gesture entered by a user at a computing device, the user data associated with a user request for access to the restricted resource, the user data comprising a plurality of sample points, wherein the processor is operable to verify the user data by comparing the user data to the reference signature gestures, and to encode a verification message within a digital image; and

outputs arranged to notify the user that the identity of the user has been verified on the basis of the user data received from the computing device.

5. A method of verifying the identity of a user and granting access to a restricted resource on the basis of a pre-defined security policy, the method comprising:

receiving a request for access to the restricted resource;

determining a security level associated with the received request on the basis of the pre-defined security policy;

accessing a user profile, the user profile comprising a stored reference signature gesture associated with each security level within the predefined security policy;

determining the stored reference signature gesture associated with the security level associated with the received access request;

notifying the user of signature gesture sign-in requirements based on the access request and the determined security level;

receiving the required signature gesture from the user; and

comparing the received signature gesture with the reference signature gesture to determine the identity of the user and in the event that the user is verified to grant access to the restricted resource.

6. The method of claim 5, wherein the required signature gesture is received in the form of user data captured as the user performs the required signature gesture at a computing device, the user data comprising a plurality of sample points.

7. The method of claim 5, wherein, in the event that the user is not verified on the basis of the received signature gesture, but the comparison result is within a predefined tolerance of a required tolerance level, the user is granted access to the restricted resource at a lower security level than the level requested.