Multi-modal verification and authentication system and methods

Patent metadata

Field	Value
Publication number	US-12511362-B2
Application number	US-202418623034-A
Country	US
Kind code	B2
Filing date	Apr 1, 2024
Priority date	Apr 1, 2024
Publication date	Dec 30, 2025
Grant date	Dec 30, 2025

Abstract

A multi-modal verification and authentication system can be used for customer onboarding and repeat customer access/interactions. The multi-modal verification and authentication system provides very low friction, highly secure, verification and authentication system. The multi-modal verification and authentication system is scalable and adaptable to perform serval types of identity verification which results in a high degree of certainty and accuracy for identification and authorization. The multi-modal verification and authentication system includes a multi-modal biometric identifier, a multiple multi-modal liveness detector and a multi-modal anti-spoofing detector used in user registration authentication processes.

First claim

What is claimed is:

1 . A computer-implemented method comprising:
receiving, using one or more processors, device information for a device associated with a user; receiving, using the one or more processors, physical biometric information of the user; receiving, using the one or more processors, behavioral biometric information of the user; performing, using the one or more processors, liveness analysis on the physical biometric information and the behavioral biometric information; determining whether the user is authentic based upon the liveness analysis; capturing, using the one or more processors, document information related to a document of the user; performing, using the one or more processors, a liveness check on the document information; determining whether the document is authentic based upon the liveness check; and in response to determining that the user is authentic, and the document is authentic, registering the user in an identity registry; further comprising: performing file system authentication using the device information; determining whether the file system authentication satisfies a threshold; and responsive to the file system authentication not satisfying the threshold, rejecting registration of the user and the device.

2 . The computer-implemented method of claim 1 , wherein registering the user in the identity registry includes creating an identity assembly object including the device information, the physical biometric information, and the behavioral biometric information and storing the identity assembly object in a database that is the identity registry.

3 . The computer-implemented method of claim 1 , wherein:
the physical biometric information is one or more from a first group of a face, a voice, an iris, a sclera, eye color, hair color, aging, a palm, a signature, a fingerprint, a finger length, left-handed or right-handed, a gender, ethnicity, and DNA parameters; and the behavioral biometric information is one or more from a second group of body movement, device-based gestures, a voice pattern, and other behavioral biometric information that can be derived from the device information.

4 . The computer-implemented method of claim 1 , further comprising:
determining whether the physical biometric information satisfies a first quality threshold; determining whether the behavioral biometric information satisfies a second quality threshold; responsive to the physical biometric information not satisfying the first quality threshold, capturing additional biometric information; and responsive to the behavioral biometric information not satisfying the second quality threshold, capturing additional behavioral information.

5 . The computer-implemented method of claim 1 , further comprising:
performing an anti-spoofing analysis on the physical biometric information and the behavioral biometric information; determining whether the user is authentic based upon the liveness analysis and the anti-spoofing analysis; and responsive to determining that the user is not authentic, rejecting registration of the user and the device.

6 . The computer-implemented method of claim 1 , wherein capturing the document information related to the user further comprises:
capturing an image of the document related to identification of the user; determining whether the image of the document satisfies a threshold; and responsive to determining that the image of the document does not satisfy the threshold, capturing another document image.

7 . The computer-implemented method of claim 6 , further comprising:
responsive determining that the image of the document satisfies the threshold, performing a document liveness check on the image of the document; determining whether the document is authentic based upon the document liveness check; and responsive to determining that the document is not authentic, rejecting registration of the user and the device.

8 . The computer-implemented method of claim 1 , further comprising:
detecting an image injection attack from the physical biometric information and the behavioral biometric information of the user; detecting a device injection attack based on the device information of the user; and responsive to detecting the image injection attack or the device injection attack, rejecting registration of the user and the device.

9 . The computer-implemented method of claim 1 , further comprising:
detecting a device risk based on the device information of the user; and responsive to detecting the device risk, rejecting registration of the user and the device.

10 . The computer-implemented method of claim 1 , further comprising:
querying a third party data base using the document information to retrieve queried data; comparing the queried data to the document information; determining whether the queried data matches the document information within a predefined threshold; and responsive to determining that the queried data does not match the document information within the predefined threshold, rejecting registration of the user and the device.

11 . The computer-implemented method of claim 1 , further comprising:
detecting a re-registration condition; responsive to detecting re-registration, blocking any authorization approvals for the user; performing a re-registration process; determining whether an identity of the user is confirmed by the re-registration process; and responsive to determining the identity of the user is confirmed, allowing an authorization approval.

12 . The computer-implemented method of claim 1 , wherein a re-registration condition includes one or more from a group of: a change in the physical biometric information, the behavioral biometric information, or the device information; an identity being compromised; a presence of biometric information on a dark web; and a request for re-registration.

13 . A computer-implemented method comprising:
receiving, using one or more processors, device information for a device associated with a user; receiving, using the one or more processors, physical biometric information of the user; receiving, using the one or more processors, behavioral biometric information of the user; performing, using the one or more processors, liveness analysis on the physical biometric information and the behavioral biometric information; determining whether the user is authentic based upon the liveness analysis; retrieving user information from an information assembly object; comparing the user information to the physical biometric information; determining whether the physical biometric information matches the user information from the information assembly object; and responsive to the physical biometric information matching the user information, approving the user as authentic; further comprising: performing file system authentication using the device information; determining whether the file system authentication satisfies a threshold; and responsive to the file system authentication not satisfying the threshold, sending a notification to the device of the user to perform re-registration.

14 . The computer-implemented method of claim 13 , further comprising:
determining whether the physical biometric information satisfies a first quality threshold; determining whether the behavioral biometric information satisfies a second quality threshold; responsive to the physical biometric information not satisfying the first quality threshold, capturing additional biometric information; and responsive to the behavioral biometric information not satisfying the second

Assignees

• Jumio Corp

Inventors

• Huff Daryl
• Kaul Jeetendra
• Krump Thomas
• Balogh Attila
• Melchy Alix
• Wells Stuart
• Danzer-Stauffer Lukas

Classifications

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title