System, method, and device of detecting identity of a user and authenticating a user

Patent metadata

Field	Value
Publication number	US-10395018-B2
Application number	US-201615294951-A
Country	US
Kind code	B2
Filing date	Oct 17, 2016
Priority date	Nov 29, 2010
Publication date	Aug 27, 2019
Grant date	Aug 27, 2019

Abstract

System, method, and device of detecting identity of a user and authenticating a user; as well as detecting a possible attacker or impostor, and differentiating among users of an electronic device or of a computerized service. A mobile or portable electronic device is utilized to capture a self-taken image of a user, which is utilized as a user-authentication factor. The accelerometer and gyroscope of the mobile device, sense and measure spatial device properties during, before or after the submission of the self-image authentication factor; and based on such spatial device properties, the system determines liveness of the user, freshness of the submitted self-image, and possibly differentiates between a legitimate user and an attacker. Similarly, spatial device properties that accompany the entry or the submission of a biometric sample, such as fingerprint scan or retina scan, are used to detect liveness or freshness or authenticity of such biometric samples, and are used to differentiate between a legitimate user and an attacker.

First claim

The invention claimed is:

1. A method comprising:
(a) generating a user-authentication process that utilizes at least a combination of: (I) a self-taken image of a user of an electronic device, together with (II) device spatial-orientation data as derived from image analysis of one or more images captured by a camera of said electronic device and (III) sensing device-acceleration data or device-orientation data of said electronic device, via at least one of: an accelerometer of said electronic device, and a gyroscope of said electronic device, as an authentication factor for authenticating said user to a computerized service;
(b) in said user-authentication process,
(b1) capturing via the camera of said electronic device, one of: (i) a set of self-taken image frames, or (ii) a video comprising self-taken image frames;
(b2) performing an analysis of content of at least one frame of said self-taken image frames that were captured via said camera of said electronic device;
(b3) based on said analysis of content, determining non-correspondence of said self-taken image frames to a genuine set of image frames captured by a live person utilizing said electronic device, by detecting in said self-taken image frames lack of movement or shaking;
(b4) sensing said acceleration data or device-orientation data that accompanies the submission by said user of said self-taken image frames;
(b5) determining a mismatch between (i) said acceleration data or device-orientation data as sensed by said electronic device, and (ii) device acceleration data or device-orientation data that is expected to accompany capturing and submission of said self-taken image frames;
(c) based on the determining of steps (b3) and (b5), triggering an alert that said self-taken image is estimated to be a resubmission of a previously-captured image.

2. The method of claim 1 , wherein the determining of step (b3) is further based on sensed device-acceleration data, that accompanies the submission by said user of said self-taken image.

3. The method of claim 1 , wherein the determining of step (b3) is further based on sensing via a gyroscope of the electronic device, device-orientation data that accompanies the submission by said user of said self-taken image.

4. The method of claim 1 , wherein the determining of step (b3) is further based on device-acceleration data that was sensed prior to the submission by said user of said self-taken image.

5. The method of claim 1 , wherein the determining of step (b3) is further based on device-orientation data, that was sensed by a gyroscope of said electronic device prior to the submission by said user of said self-taken image.

6. A process comprising:
(a) generating a user-authentication process that utilizes at least a self-taken image of a user of an electronic device, as an authentication factor for authenticating said user to a computerized service;
(b) capturing a reference self-image of the user, to be used subsequently as an authentication factor for authenticating said user;
(c) during and before and after said capturing of the reference self-image of the user, sensing also spatial orientation properties of said electronic device, via at least one of: an accelerometer of said electronic device, and a gyroscope of said electronic device;
(d) subsequently, receiving from said user a currently-submitted self-image that the user submits as a user-authentication factor;
(e1) determining whether during a first time-period, that is prior to submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed prior to the capturing of the reference self-image in step (c);
(e2) determining whether during a second time-period, that is during submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed during the capturing of the reference self-image in step (c);
(e3) determining whether during a third time-period, that is after submission of the currently-submitted self-image, the electronic device sensed a set of spatial device properties that match the spatial orientation properties that were sensed after the capturing of the reference self-image in step (c);
(f) based on an analysis that takes into account a mismatch in steps (e1) and (e2) and (e3), triggering an alert that said self-taken image is estimated to be a resubmission of a previously-captured image.

7. The process of claim 6 ,
wherein step (c) comprises: during and before and after said capturing of the reference self-image of the user, sensing device-acceleration data of said electronic device, via the accelerometer of said electronic device;
wherein the determining of step (e1), and the determining of step (e2), and the determining of step (e3), are based on sensed acceleration data sensed by the accelerometer of said electronic device.

8. The process of claim 6 ,
wherein step (c) comprises: during and before and after said capturing of the reference self-image of the user, sensing device-orientation data of said electronic device, via the gyroscope of said electronic device;
wherein the determining of step (e1), and the determining of step (e2), and the determining of step (e3), are based on sensed device-orientation data sensed by the gyroscope of said electronic device.

9. A process comprising:
(a) generating a user-authentication process that utilizes at least a fingerprint scan of a user of an electronic device, captured via a fingerprint scanner of said electronic device, as an authentication factor for authenticating said user to a computerized service;
(b) capturing a reference fingerprint scan of the user, to be used subsequently as an authentication factor for authenticating said user;
(c) during and before and after said capturing of the reference fingerprint scan, sensing also spatial device-orientation properties of said electronic device, via at least one of: an accelerometer of said electronic device, and a gyroscope of said electronic device;
(d) subsequently, receiving from said user a currently-submitted fingerprint scan that the user submits as a user-authentication factor;
(e) determining whether during time-periods, that are prior to and during and after submission of the currently-submitted fingerprint scan, the electronic device sensed spatial properties of said electronic device that match the spatial device-orientation properties that were sensed during and before and after the capturing of the reference fingerprint scan in step (c);
(f) in response to determining that during time-periods, that are prior to and during and after submission of the currently-submitted fingerprint scan, the electronic device sensed spatial properties that mismatch the spatial device-orientation properties that were sensed during and before and after the capturing of the reference fingerprint scan in step (c), triggering an alert that the currently-submitted fingerprint scan is estimated to be a resubmission of a previously-captured fingerprint scan.

10. The process of claim 9 ,
wherein step (c) comprises: during and before and after said capturing of the reference fingerprint scan of the user, sensing device-acceleration data of said electronic device, via the accelerometer of said electronic device;
wherein step (e) comprises: determining whether during and before and after submission of the currently-submitted fingerprint scan, the accelerometer of the electronic device sensed device-acceleration data that matches the device-acceleration data that was sensed during and before and after the capturing of the

Assignees

• Biocatch Ltd

Inventors

• Turgeman Avi

Classifications

• G06F3/04883

  for inputting data by handwriting, e.g. gesture or text · CPC title

• G06F3/0485

  Scrolling or panning · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04W4/027

  using movement velocity, acceleration information · CPC title