Authenticating access to a computing resource using facial recognition based on involuntary facial movement

1. An authentication system comprising memory operable to store instructions and processing circuitry operable to execute the instructions, whereby the authentication system is operable to:

provide a first stimulus that causes a first involuntary facial movement of a user;

receive first user data in response to the first stimulus, the first user data depicting the first involuntary facial movement of the user;

provide a second stimulus that causes a second involuntary facial movement of the user, wherein the second stimulus comprises at least one property that is different than that of the first stimulus;

receive second user data in response to the second stimulus, the second user data depicting the second involuntary facial movement of the user;

select validation data to compare to the first and second user data from a plurality of validation data candidates, wherein:

each validation data candidate is associated with a respective stimulus; and

the authentication system is operable to select the validation data candidate to compare to corresponding user data based on correlating the stimulus associated with the selected validation data candidate with the stimulus that was used to prompt receipt of the user data; and

perform authentication based on comparing the first user data to first selected validation data associated with the user and further based on comparing the second user data to second selected validation data associated with the user, the first selected validation data comprising a previously validated depiction of the first involuntary facial movement caused by exposing the user to the first stimulus, and the second selected validation data comprising a previously validated depiction of the second involuntary facial movement caused by exposing the user to the second stimulus.

2. The authentication system of claim 1 , wherein to perform the authentication, the authentication system is further operable to:

determine a confidence level based on comparing the first and second user data to the first and second selected validation data, respectively; and

authenticate the user if the confidence level exceeds a pre-defined threshold.

3. The authentication system of claim 1 , wherein the first stimulus comprises one or more electrical pulses configured to cause involuntary movement of the user's facial muscles.

4. The authentication system of claim 1 , wherein the first stimulus comprises a light configured to cause involuntary movement of the user's eyes.

5. The authentication system of claim 1 , wherein the first stimulus comprises an optical lens configured to cause involuntary movement of the user's eyes in response to pressure or an electrical pulse.

6. A method, comprising:

providing a first stimulus that causes a first an involuntary facial movement of a user;

receiving first user data in response to the first stimulus, the first user data depicting the first involuntary facial movement of the user;

providing a second stimulus that causes a second involuntary facial movement of the user, wherein the second stimulus comprises at least one property that is different than that of the first stimulus;

receiving second user data in response to the second stimulus, the second user data depicting the second involuntary facial movement of the user;

selecting validation data to compare to the first and second user data from a plurality of validation data candidates, wherein:

each validation data candidate is associated with a respective stimulus; and

selecting the validation data candidate to compare to corresponding user data is based on correlating the stimulus associated with the selected validation data candidate with the stimulus that was used to prompt receipt of the user data; and

performing authentication based on comparing the first user data to first selected validation data associated with the user and further based on comparing the second user data to second selected validation data associated with the user, the first selected validation data comprising a previously validated depiction of the first involuntary facial movement caused by exposing the user to the first stimulus, and the second selected validation data comprising a previously validated depiction of the second involuntary facial movement caused by exposing the user to the second stimulus.

7. The method of claim 6 , wherein performing the authentication further comprises:

determining a confidence level based on comparing the first and second user data to the first and second validation data, respectively; and

authenticating the user if the confidence level exceeds a pre-defined threshold.

8. The method of claim 6 , wherein the first stimulus comprises one or more electrical pulses configured to cause involuntary movement of the user's facial muscles.

9. The method of claim 6 , wherein the first stimulus comprises a light configured to cause involuntary movement of the user's eyes.

10. The method of claim 6 , wherein the first stimulus comprises an optical lens configured to cause involuntary movement of the user's eyes in response to pressure or an electrical pulse.

11. A non-transitory computer readable medium comprising logic that, when executed by processing circuitry, causes the processing circuitry to perform actions comprising:

providing a first stimulus that causes a first involuntary facial movement of a user;

receiving first user data in response to the first stimulus, the first user data depicting the first involuntary facial movement of the user;

providing a second stimulus that causes a second involuntary facial movement of the user, wherein the second stimulus comprises at least one property that is different than that of the first stimulus;

receiving second user data in response to the second stimulus, the second user data depicting the second involuntary facial movement of the user;

selecting validation data to compare to the first and second user data from a plurality of validation data candidates, wherein:

each validation data candidate is associated with a respective stimulus; and

selecting the validation data candidate to compare to corresponding user data is based on correlating the stimulus associated with the selected validation data candidate with the stimulus that was used to prompt receipt of the user data; and

performing authentication based on comparing the first user data to first selected validation data associated with the user and further based on comparing the second user data to second selected validation data associated with the user, the first selected validation data comprising a previously validated depiction of the first involuntary facial movement caused by exposing the user to the first stimulus, and the second selected validation data comprising a previously validated depiction of the second involuntary facial movement caused by exposing the user to the second stimulus.

12. The non-transitory computer readable medium of claim 11 , wherein to perform the authentication, the actions further comprise:

determining a confidence level based on comparing the first and second user data to the first and second validation data, respectively; and

authenticating the user if the confidence level exceeds a pre-defined threshold.

13. The non-transitory computer readable medium of claim 11 , wherein the first stimulus comprises one or more electrical pulses configured to cause involuntary movement of the user's facial muscles.

14. The non-transitory computer readable medium of claim 11 , wherein the first stimulus comprises a light configured to cause involuntary movement of the user's eyes.