Methods and systems for improving the security of secret authentication data during authentication transactions
A method for improving the security of secret authentication data during authentication transactions is provided that includes converting the secret authentication data of a user into scrambled secret authentication data by associating a different text-string with each item of information included in the secret authentication data. The method also includes capturing the scrambled secret authentication data with a communications device, and conducting an authentication transaction with the captured authentication data.
1. A method for conducting authentication transactions comprising:
pressing, by a user, keys displayed on a communications device to enter a pass-phrase into the communications device, each key being included in a keypad displayed by the device and including key data corresponding to a character included in a user pass-phrase;
capturing, using the device, during said pressing step face biometric data of the user as a video;
analyzing frames in the video to determine whether at least one frame includes an eye-blink;
when an eye-blink is detected, identifying the at least one frame in which the eye-blink was detected; and
extracting user face biometric data from the identified at least one frame.
2. A method in accordance with claim 1 , wherein the communications device is a smart phone.
3. A method in accordance with claim 1 , further comprising deciding that the user is live when an eye-blink is detected in the video.
4. A method in accordance with claim 1 , further comprising:
comparing the entered pass-phrase against a user enrollment pass-phrase;
after deciding the entered and enrollment pass-phrases match, comparing the extracted user face biometric data against user enrollment face biometric data; and
successfully authenticating the user when the extracted and enrollment face biometric data match.
5. A method in accordance with claim 1 further comprising conducting a multi-factor authentication transaction with the entered pass-phrase and the extracted user face biometric data.
6. A method in accordance with claim 1 , further comprising:
comparing the entered pass-phrase against a user enrollment pass-phrase;
after deciding the entered and enrollment pass-phrases match, creating a template from the extracted face biometric data;
comparing the template against user enrollment biometric template; and
successfully authenticating the user when the templates match.
7. A communications device for conducting authentication transactions comprising:
a processor; and
a memory configured to store data, said communications device being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when executed by said processor, cause said processor to:
capture face biometric data of a user as a video while the user presses keys displayed by said communications device to enter a pass-phrase into said communications device, each key being included in a keypad displayed by said communications device and including key data corresponding to a character included in a user pass-phrase;
analyze frames in the video to determine whether at least one frame includes an eye-blink;
when an eye-blink is detected, identify the at least one frame in which the eye-blink was detected; and
extract user face biometric data from the identified at least one frame.
8. A communications device in accordance with claim 7 , wherein the instructions when executed by said processor, further cause said processor to conduct a multi-factor authentication transaction with the entered pass-phrase and the extracted face biometric data.
9. A communications device in accordance with claim 7 , wherein the instructions when executed by said processor, further cause said processor to decide the user is live when an eye-blink is detected in the video.
10. A communications device in accordance with claim 7 , wherein the instructions when executed by said processor, further cause said processor to:
compare the entered pass-phrase against a user enrollment pass-phrase;
after deciding the entered and enrollment pass-phrases match, compare the extracted user face biometric data against user enrollment face biometric data; and
successfully authenticate the user when the extracted and enrollment face biometric data match.
11. A communications device in accordance with claim 7 , wherein the instructions when executed by said processor, further cause said processor to:
compare the entered pass-phrase against a user enrollment pass-phrase;
after deciding the entered and enrollment pass-phrases match, create a template from the extracted face biometric data;
compare the template against a user enrollment biometric template; and
successfully authenticate the user when the templates match.
12. A computer program recorded on a non-transitory computer-readable recording medium included in a computing device for conducting authentication transactions, the computer program being comprised of instructions, which when read and executed by the computing device, cause the computing device to:
capture face biometric data of a user as a video while the user presses keys displayed by said computing device to enter a pass-phrase into said computing device, each key being included in a keypad displayed by said computing device and including key data corresponding to a character included in a user pass-phrase;
analyze frames in the video to determine whether at least one frame includes an eye-blink;
when an eye-blink is detected, identify the at least one frame in which the eye-blink was detected; and
extract user face biometric data from the identified at least one frame.