Granted Patent B1

US 9,740,920 · App. 14/849,622 · Granted Aug 22, 2017

Abstract

Claims (49)

1. A computer-implemented method for securely authenticating users via facial recognition, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

identifying a request from a user to complete an authentication process on the computing device via a facial-recognition system;

sending, to a separate computing device controlled by the user, a randomized animated QR code for the user to display to a camera on the computing device;

simultaneously observing, via the camera on the computing device, both the user and the randomized animated QR code displayed on the separate computing device controlled by the user; and

authenticating the observed user in response to determining both that the observed user's facial characteristics match facial characteristics of the user stored in the facial-recognition system and that the observed randomized animated QR code matches the randomized animated QR code sent to the separate computing device controlled by the user.

2. The computer-implemented method of claim 1 , further comprising:

expiring the randomized animated QR code after a predetermined period of time; and

failing to authenticate the observed user in response to determining that the animated QR code has expired.

3. The computer-implemented method of claim 1 , further comprising storing a representation of the randomized animated QR code in a stored set of representations of previously sent randomized animated QR codes.

4. The computer-implemented method of claim 3 , wherein sending the user the randomized animated QR code comprises checking the representation of the randomized animated QR code against the stored set of representations of previously sent randomized animated QR codes in order to avoid re-sending a previously sent randomized animated QR code.

5. The computer-implemented method of claim 3 , further comprising removing the representation of the randomized animated QR code from the stored set of previously sent randomized animated QR codes after a predetermined period of time has passed since the randomized animated QR code was sent to the user.

6. The computer-implemented method of claim 1 , wherein

sending, to a separate computing device controlled by the user, the randomized animated QR code comprises displaying the randomized animated QR code on the separate computing device in proximity to the user; and

observing both the user and the randomized animated QR code comprises observing the randomized animated QR code displayed on the separate computing device.

7. The computer-implemented method of claim 1 , further comprising:

sending the user instructions for performing a gesture; and

observing both the user and the randomized animated QR code comprises observing the user performing the gesture.

8. A system for securely authenticating users via facial recognition, the system comprising:

an identification module, stored in memory, that identifies a request from a user to complete an authentication process on the computing device via a facial-recognition system;

a sending module, stored in memory, that sends, to a separate computing device controlled by the user, a randomized animated QR code to display to a camera on the computing device;

an observation module, stored in memory, that simultaneously observes, via the camera on the computing device, both the user and the randomized animated QR code displayed on the separate computing device controlled by the user;

an authentication module, stored in memory, that authenticates the observed user in response to determining both that the observed user's facial characteristics match facial characteristics of the user stored in the facial-recognition system and that the observed randomized animated QR code matches the randomized animated QR code sent to the separate computing device controlled by the user; and

at least one physical processor configured to execute the identification module, the sending module, the observation module, and the authentication module.

9. The system of claim 8 , wherein:

the sending module expires the randomized animated QR code after a predetermined period of time; and

the authentication module fails to authenticate the observed user in response to determining that the randomized animated QR code has expired.

10. The system of claim 8 , wherein the sending module stores a representation of the randomized animated QR code in a stored set of representations of previously sent randomized animated QR codes.

11. The system of claim 10 , wherein the sending module sends the user the randomized animated QR code by checking the representation of the randomized animated QR code against the stored set of representations of previously sent randomized animated QR codes in order to avoid re-sending a previously sent randomized animated QR code.

12. The system of claim 10 , wherein the sending module removes the representation of the randomized animated QR code from the stored set of previously sent randomized animated QR codes after a predetermined period of time has passed since the randomized animated QR code was sent to the user.

13. The system of claim 8 , wherein:

the sending module sends the user the randomized animated QR code by displaying the randomized animated QR code on an additional computing device in proximity to the user; and

the observation module observes both the user and the randomized animated QR code by observing the randomized animated QR code displayed on the additional computing device.

14. The system of claim 8 , wherein:

the sending module further sends the user instructions for performing a gesture; and

the observation module observes both the user and the randomized animated QR code by observing the user performing the gesture.

15. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify a request from a user to complete an authentication process on the computing device via a facial-recognition system;

send, to a separate computing device controlled by the user, a randomized animated QR code to display to a camera on the computing device;

simultaneously observe, via the camera on the computing device, both the user and the randomized animated QR code displayed on the separate computing device controlled by the user; and

authenticate the observed user in response to determining both that the observed user's facial characteristics match facial characteristics of the user stored in the facial-recognition system and that the observed randomized animated QR code matches the randomized animated QR code sent to the separate computing device controlled by the user.

16. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to:

expire the randomized animated QR code after a predetermined period of time; and

fail to authenticate the observed user in response to determining that the randomized animated QR code has expired.

17. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to store a representation of the randomized animated QR code in a stored set of representations of previously sent randomized animated QR codes.

18. The non-transitory computer-readable medium of claim 17 , wherein the one or more computer-readable instructions cause the computing device to send the user the randomized animated QR code by checking the representation of the randomized animated QR code against the stored set of representations of previously sent randomized animated QR codes in order to avoid re-sending a previously sent randomized animated QR code.

19. The non-transitory computer-readable medium of claim 17 , wherein the one or more computer-readable instructions cause the computing device to remove the representation of the randomized animated QR code from the stored set of previously sent randomized animated QR codes after a predetermined period of time has passed since the randomized animated QR code was sent to the user.

20. The non-transitory computer-readable medium of claim wherein:

sending, to a separate computing device controlled by the user, the randomized animated QR code comprises displaying the randomized animated QR code on the separate computing device in proximity to the user;

observing both the user and the randomized animated QR code comprises observing the randomized animated QR code displayed on the additional computing device.

Assignments (6)