System and method for verifying liveliness

1. At least one non-transitory computer readable storage device storing instructions that, when executed by at least one processor, cause the at least one processor to perform operations comprising:

transmitting, by a user computing device of a requester and to a computing system of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between the requester and the computing system of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving a directive from the computing system of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the computing system of the identity provider such that:

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the identity provider establishes a biometric identity for the requester by storing, at the computing system of the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

2. The device of claim 1 , wherein transmitting the second portion of the video stream feed to the computing system of the identity provider causes a biometric identity for the requester to be established at the computing system of the identity provider.

3. The device of claim 2 , wherein transmitting the second portion of the video stream feed causes a biometric identity for the requester to be established at the computing system of the identity provider by storing, at the computing system of the identity provider, data encoding an extracted face of the requester.

4. The device of claim 1 , wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

5. The device of claim 1 , wherein receiving the directive comprises receiving the directive that is presented verbally on the user computing device of the requester.

6. The device of claim 1 , wherein receiving the directive comprises receiving the directive that is presented textually on the user computing device of the requester.

7. The device of claim 1 , wherein receiving the directive comprises receiving the directive that is presented as at least one graphical icon on the user computing device of the requester.

8. The device of claim 1 , further comprising: receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

9. The device of claim 8 , wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

10. The device of claim 1 , wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.

11. The device of claim 1 , wherein receiving the directive comprises receiving the directive soliciting a motion of a specific body part of the requester.

12. The device of claim 1 , wherein receiving the directive comprises receiving the directive soliciting a facial expression change from the requester.

13. A mobile computing device, comprising:

one or more processors;

one or more non-transitory media operably connectable to the one or more processors and storing instructions that, when executed, perform operations comprising:

transmitting, from the mobile computing device and to a computing system of an identity provider, an authentication request to access an account managed by a relying party by (i) establishing a video stream feed between a requester and the computing system of the identity provider, and (ii) generating a first portion of the video stream feed, the first portion of the video stream portraying a face of the requester and operating at a first refresh rate;

receiving, at the mobile computing device, a directive from the computing system of the identity provider, the directive soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;

generating a second portion of the video stream feed, the second portion of the video stream portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to include at least one frame that encodes a transition from before the corresponding gesture to the corresponding gesture; and

transmitting the second portion of the video stream feed to the identity provider such that:

in response to determining that (i) the response gesture matches the corresponding gesture being solicited and (ii) the requester is not yet enrolled at the identity provider, the computing system of the identity provider establishes a biometric identity for the requester by storing, at the computing system of the identity provider, data encoding the face of the requester, and

in response to determining that the response gesture matches the corresponding gesture being solicited, the requester is allowed access to the account at the relying party.

14. The mobile computing device of claim 13 , wherein receiving the directive comprises receiving the directive soliciting the corresponding gesture due within a particular time frame after the directive has been received.

15. The mobile computing device of claim 13 , wherein receiving the directive comprises receiving the directive that is presented verbally.

16. The mobile computing device of claim 13 , wherein receiving the directive comprises receiving the directive that is presented textually.

17. The mobile computing device of claim 13 , wherein receiving the directive comprises receiving the directive that is presented as graphical icons on the mobile computing device.

18. The mobile computing device of claim 13 , wherein the operations further comprise: receiving at least one additional directive soliciting at least one additional response gesture for the requester to perform the at least one additional response gesture.

19. The mobile computing device of claim 18 , wherein soliciting at least one additional response gesture comprises soliciting at least one additional response gesture that is not present in earlier response gestures.

20. The mobile computing device of claim 13 , wherein receiving the directive comprises receiving the directive soliciting a proximity adjustment from the requester.