Identity verification system
Methods, systems, and storage media are described for identity management and identity verification is provided in which users authenticate their identities during an enrollment process, and may access and modify their identity information via a secure portal. The enrollment process includes collecting various identifying data and biometric data of a user. A live interview portion during the enrollment process is used to check the liveness and verify the collected identifying data and biometric data. Other embodiments may be described and/or claimed.
1. A computer system to provide identity verification service, comprising:
network interface circuitry arranged to obtain primary biometric data and secondary biometric data different than the primary biometric data from a client system over an end-to-end encrypted tunnel (EET) between the computer system and the client system; and
processor circuitry communicatively coupled with the network interface circuitry, wherein the processor circuitry is arranged to:
control the network interface circuitry to establish the EET between the computer system and the client system in response to receipt of a request to verify an identity of a user of the client system,
identify one or more matching users from among a set of other users based on the primary biometric data,
determine a set of candidate identities via refinement of the one or more matching users based on the secondary biometric data,
calculate a confidence score for each candidate identity of the set of candidate identities, and
control the network interface circuitry to:
send a resume enrollment message to the client system when a user identifier (ID) matching a candidate identity having a highest calculated confidence score among calculated confidence scores of the set of candidate identities has begun an enrollment process for enrolling in the identity verification service,
send a new enrollment message to the client system when the user ID matching the candidate identity having the highest calculated confidence score has not begun the enrollment process, and
send a member authentication indicator message to the client system when the user ID matching the candidate identity having the highest calculated confidence score is a member of the identity verification service.
2. The computer system of claim 1 , wherein the primary biometric data includes one of image or video data of a face of the user, image or video data of a palm of the user, and a voiceprint of the user, and the secondary biometric data includes one of image or video data of the face of the user, image or video data of a palm of the user, and a voiceprint of the user different than the primary biometric data.
3. The computer system of claim 1 , wherein the processor circuitry is arranged to identify the one or more matching users prior to receipt of the secondary biometric data.
4. The computer system of claim 1 , wherein the primary biometric data comprises image or video data of a face of the user, and the processor circuitry is arranged to extract one or more object features from the image or video data, and compare the extracted object features with extracted object features of primary biometric data of users among the set of other users.
5. The computer system of claim 4 , wherein:
the secondary biometric data comprises audio data captured by the client system, and the processor circuitry is arranged to extract one or more audio features from the audio data, and compare the extracted audio features with extracted audio features of secondary biometric data of the set of other users; or
the secondary biometric data comprises image or video data of a palm of the user, and the processor circuitry is arranged to extract one or more object features from the image or video data, and compare the extracted object features with extracted object features of secondary biometric data of users among the set of other users.
6. The computer system of claim 5 , wherein the audio data includes a recorded voice of the user, and the processor circuitry is arranged to generate a voiceprint based on the audio data.
7. The computer system of claim 1 , wherein the network interface circuitry is to: send the set of candidate identities to an interviewer agent during or prior to a live interview to be conducted by the interviewer agent with the user of the client system during the enrollment process.
8. The computer system of claim 7 , wherein the interviewer agent is an autonomous artificial intelligence agent operated by the processor circuitry or operated by another computer system.
9. The computer system of claim 1 , wherein:
the network interface circuitry is arranged to receive a message from the client system, the message to request a one-time authorization code and instructions indicating selected identity data items to be disclosed to a selected service provider platform; and
the processor circuitry is arranged to generate the one-time authorization code according to the instructions, associate the one-time authorization code to the selected identity data items, and control the network interface circuitry to send the generated one-time authorization code to the selected service provider platform or the client system.
10. The computer system of claim 9 , wherein the message is a first message, the one-time authorization code is to be sent to the service provider platform, and wherein:
the network interface circuitry is arranged to receive a second message from the service provider platform, the second message to include the one-time authorization code; and
the processor circuitry is arranged to grant access to the selected identity data associated with the one-time authorization code, and control the network interface circuitry to send a third message to the service provider platform, the third message to indicate that access has been granted to the selected identity data items or the third message is to include the selected identity data items.
11. One or more non-transitory computer-readable media (NTCRM) comprising instructions, wherein execution of the instructions by one or more processors of a computer system is to cause the computer system to:
establish an end-to-end encrypted tunnel (EET) between the computer system and a client system in response to receipt of a request to verify an identity of a user of the client system;
obtain primary biometric data from the client system over the EET;
identify one or more matching users from among a set of other users based on the primary biometric data;
obtain secondary biometric data different than the primary biometric data from the client system over the EET before, during, or after identification of the one or more matching users;
determine a set of candidate identities via refinement of the one or more matching users based on the secondary biometric data;
calculate a confidence score for each candidate identity of the set of candidate identities;
when a candidate identity having a highest calculated confidence score among calculated confidence scores of the set of candidate identities does not meet or exceed a threshold, send a new enrollment message to the client system when a user identifier (ID) matching the candidate identity having the highest calculated confidence score has not begun an enrollment process for joining an identity verification service; and
when the candidate identity having the highest calculated confidence score meets or exceeds the threshold,
send a resume enrollment message to the client system when the user ID matching the candidate identity having the highest calculated confidence score among calculated confidence scores of the set of candidate identities has begun the enrollment process; and
send a member authentication indicator message to the client system when the user ID matching the candidate identity having the highest calculated confidence score is a member of the identity verification service.
12. The one or more NTCRM of claim 11 , wherein execution of the instructions is to cause the computer system to:
identify the one or more matching users prior to receipt of the secondary biometric data.
13. The one or more NTCRM of claim 11 , wherein the primary biometric data includes one of image or video data of a face of the user, image or video data of a palm of the user, and a voiceprint of the user, and the secondary biometric data includes one of image or video data of the face of the user, image or video data of a palm of the user, and a voiceprint of the user different than the primary biometric data.
14. The one or more NTCRM of claim 11 , wherein the primary biometric data comprises image or video data of a face of the user, and execution of the instructions is to cause the computer system to:
extract one or more object features from the image or video data, and compare the extracted object features with extracted object features of primary biometric data of users among the set of other users.
15. The one or more NTCRM of claim 14 , wherein the secondary biometric data comprises image or video data of a palm of the user, and execution of the instructions is to cause the computer system to:
extract one or more object features from the image or video data; and
compare the extracted object features with extracted object features of secondary biometric data of users among the set of other users.
16. The one or more NTCRM of claim 14 , wherein the secondary biometric data comprises audio data captured by the client system, the audio data including a recorded voice of the user, and execution of the instructions is to cause the computer system to:
generate a voiceprint based on the audio data;
extract one or more audio features from the voiceprint;
compare the extracted audio features with extracted audio features of secondary biometric data of the set of other users.
17. The one or more NTCRM of claim 11 , wherein an interviewer agent is an autonomous artificial intelligence agent operated by the computer system or operated by another computer system, and execution of the instructions is to cause the computer system to:
send the set of candidate identities to an interviewer agent during or prior to a live interview to be conducted by the interviewer agent with the user of the client system during the enrollment process.
18. The one or more NTCRM of claim 11 , wherein the new enrollment message is to cause the client system to render a graphical user interface for starting the enrollment process.
19. The one or more NTCRM of claim 11 , wherein the resume enrollment message indicates a point in the enrollment process that was completed by a user of the client system, and the resume enrollment message includes instruction or source code and data to cause the client system to render a graphical user interface to continue the enrollment process at the indicated point in the enrollment process.
20. The one or more NTCRM of claim 11 , wherein the member authentication indicator message is to cause the client system to render a graphical user interface of a secure portal that allows a user of the client system to access and utilize identity data of the user.