Systems and methods for high fidelity multi-modal out-of-band biometric authentication

Patent metadata

Field	Value
Publication number	US-9760785-B2
Application number	US-201313908618-A
Country	US
Kind code	B2
Filing date	Jun 3, 2013
Priority date	May 8, 2013
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

Systems and methods for high fidelity multi-modal out-of-band biometric authentication are disclosed. According to one embodiment, a method for multi-mode biometric authentication may include (1) receiving, at a computer application executed by an electronic device, a first input from a first input device on the electronic device; (2) receiving, at the computer application, a second data from a second input device on the electronic device; (3) receiving, at the computer application, a third input from a third input device on the electronic device; and (4) communicating, by the computer application and to a server, the first input, the second input, and the third input. The first input, second input and third input may be received within a predetermined time period, such as five seconds.

First claim

We claim:

1. A method for multi-mode authentication of a user to a second electronic device using a first electronic device comprising:
a computer application executed by a first electronic device that is associated with a user receiving a machine-readable code captured by a first input device on the first electronic device, wherein the machine-readable code is presented by a second electronic device and comprises an electronic device identifier for the second electronic device;
the computer application receiving a first biometric from a second input device on the first electronic device;
the computer application receiving a second biometric from a third input device on the first electronic device; and
the computer application repeating the receipt of at least one of the first biometric and the second biometric, in response to the first biometric and the second biometric not being received within a predetermined time period;
the computer application communicating the electronic device identifier, the first biometric and the second biometric to a server independent of the second electronic device for authentication;
wherein the server authenticates the user based on the association of the first electronic device with the user, the first biometric, and the second biometric, and communicates the authentication to the second electronic device associated with the electronic device identifier; and
wherein the second electronic device grants access to the user in response to the authentication.

2. The method of claim 1 , wherein the first input device is a first camera.

3. The method of claim 1 , wherein the second input device is a second camera, and the first biometric is an image of at least a part of the user.

4. The method of claim 3 , wherein the image comprises at least one of the user's eyes.

5. The method of claim 3 , wherein the image comprises at least a portion of the user's face.

6. The method of claim 1 , wherein the third input device is a microphone, and the second biometric comprises a voice biometric.

7. The method of claim 1 , wherein the third input device is touch-sensitive, and the second biometric comprises a finger biometric.

8. The method of claim 1 , wherein the second biometric comprises a behavioral biometric.

9. The method of claim 1 , wherein the second biometric comprises a thermal biometric.

10. The method of claim 1 , wherein the authentication permits the user to access a website on the second electronic device.

11. The method of claim 1 , wherein the authentication permits the user to conduct a transaction using the second electronic device.

12. The method of claim 11 , wherein the transaction has a value above a predetermined value.

13. The method of claim 11 , wherein the transaction has a risk level above a predetermined risk level.

14. The method of claim 1 , wherein the first input device and the second input device are the same device.

15. The method of claim 1 , wherein the authentication permits the user to access a software application on the second electronic device.

16. The method of claim 1 , wherein the authentication permits the user to access an account using the second electronic device.

17. A method for multi-mode authentication of a user to a second electronic device using a first electronic device comprising:
a server comprising at least one computer processor receiving, from a first electronic device that is associated with a user, a machine-readable code captured by a first input device on the first electronic device, wherein the machine-readable code is presented by a second electronic device and comprises an electronic device identifier for the second electronic device;
the server receiving, from the first electronic device and independent of the second electronic device, a first biometric received using a second input device on the first electronic device;
the server receiving, from the first electronic device and independent of the second electronic device, a second biometric received using a second input device on the first electronic device;
the server authenticating the user based on the association of the first electronic device with the user, the first biometric, and the second biometric; and
the server communicating the authentication to the second electronic device associated with the electronic device identifier;
wherein the computer application repeats the receipt of at least one of the first biometric and the second biometric in response to the first biometric and the second biometric not being received within a predetermined time period;
wherein the second electronic device grants access to the user in response to the authentication.

18. The method of claim 17 , wherein the first biometric comprises an image of at least a part of the user image.

19. The method of claim 17 , wherein the second biometric comprises a user biometric.

20. The method of claim 17 , wherein the authentication permits the user to access a website on the second electronic device.

21. The method of claim 17 , wherein the authentication permits the user to conduct a transaction using the second electronic device.

22. The method of claim 21 , wherein the transaction has a value above a predetermined value.

23. The method of claim 21 , wherein the transaction has a risk level above a predetermined risk level.

24. The method of claim 17 , wherein the authentication permits the user to execute a second computer application on the second electronic device.

25. The method of claim 17 , wherein the authentication permits the user to access a software application on the second electronic device.

26. The method of claim 17 , wherein the authentication permits the user to access an account using the second electronic device.

27. The method of claim 17 , further comprising:
the server communicating an indication to at least one of the second electronic device and the first electronic device that the authentication was unsuccessful.

28. A system for multi-mode authentication comprising:
a first electronic device that is associated with a user comprising a first input device, a second input device, and a third input device;
a second electronic device associated with an electronic device identifier and executing an application requiring authentication for the user to access; and
a server comprising at least one computer processor that is in communication with both the first electronic device and the second electronic device;
wherein:
the first electronic device receives a machine-readable code captured by the first input device, wherein the machine-readable code is presented by a second electronic device and comprises the electronic device identifier for the second electronic device;
the first electronic device receives a first biometric from the second input device;
the first electronic device receives a second biometric from the third input device;
the computer application repeating the receipt of at least one of the first biometric and the second biometric, in response to the first biometric and the second biometric not being received within a predetermined time period;
the first electronic device communicates, independently of the second electronic device, the machine-readable code, the first biometric, and the second biometric to the server;
the server authenticating the user based on the association of

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Kursun Eren
• Fernandez Gene
• Berson Alex
• Goodman Brian

Classifications

• G06K9/00892 Primary

  Physics · mapped topic

• G06V40/70 Primary

  Multimodal biometrics, e.g. combining information from different biometric modalities · CPC title