Conditional and situational biometric authentication and enrollment
The present invention provides a system and method for conditionally selecting biometric modalities for biometric authentication at authentication run time. The system and method employ programmatic logic to identify which biometric modalities to use for authenticating a user. The software module for selecting biometric modalities includes, a plurality of rules or conditional logic for selecting one or more biometric modalities required to authenticate a user requesting a secure action.
1. A method for biometric authentication, comprising:
identifying, at a computer processor, an action request of a user of a first device of the plurality of devices;
determining, at the computer processor, a dynamic security level associated with the identified action request of the user of the first device;
determining, at the computer processor, a set of one or more access biometric modalities supported by the first device;
determining, at the computer processor, a set of one or more enrollment biometric modalities that the user has enrolled at a second device of the plurality of devices, wherein the first device and second device are different devices, and wherein the first device and the second device are each configured to capture physical biometric data directly from the user;
updating, at the computer processor in real time or near-real time, the dynamic security level based on information associated with the user and information associated with the identified action request; and
selecting, at the computer processor, based on the determined dynamic security level, a plurality of biometric modalities common to both the determined set of one or more access biometric modalities supported by the first device and the determined set of one or more enrollment biometric modalities that the user has enrolled at the second device; and
determining to dynamically change, at the computer processor, based on the determined dynamic security level, a respective biometric scoring threshold for each one of the selected plurality of biometric modalities.
2. The method of claim 1 , further comprising requesting, at the computer processor, biometrics of the user for each one of the selected plurality of biometric modalities.
3. The method of claim 2 , further comprising receiving, at the computer processor, biometrics of the user for each one of the selected plurality of biometric modalities.
4. The method of claim 3 , further comprising generating, at the computer processor, a biometric score for each one of the received biometrics that is compared to a respective biometric scoring threshold for each of the selected plurality of biometric modalities.
5. The method of claim 4 , further comprising determining, at the computer processor, for each one of the selected number of biometric modalities, whether the respective generated biometric score exceeds the respective determined biometric scoring threshold for each of the selected plurality of biometric modalities.
6. The method of claim 5 , further comprising granting the action request if, for each one of the selected plurality of biometric modalities, the respective generated biometric score exceeds the respective biometric scoring threshold based on the dynamic security level.
7. The method of claim 1 , wherein the step of determining the dynamic security level is based on an identity of the user, a location of the first device of the plurality of devices, or a type of the first device of the plurality of devices.
8. The method of claim 1 , wherein the step of updating the dynamic security level further comprises increasing the dynamic security level.
9. The method of claim 1 , wherein the physical biometric data captured directly from the user is associated with a physical trait selected from the group consisting of voice, face, fingerprint, and iris.
10. A system for biometric authentication, the comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
identifying, at a computer processor, an action request of a user of a first device of the plurality of devices;
determining, at the computer processor, a dynamic security level associated with the identified action request of the user of the first device;
determining, at the computer processor, a set of one or more access biometric modalities supported by the first device;
determining, at the computer processor, a set of one or more enrollment biometric modalities that the user has enrolled at a second device of the plurality of devices, wherein the first device and second device are different devices, and wherein the first device and the second device are each configured to capture physical biometric data directly from the user;
updating, at the computer processor in real time or near-real time, the dynamic security level based on information associated with the user and information associated with the identified action request; and
selecting, at the computer processor, based on the determined dynamic security level, a plurality of biometric modalities common to both the determined set of one or more access biometric modalities supported by the first device and the determined set of one or more enrollment biometric modalities that the user has enrolled at the second device; and
determining to dynamic change, at the computer processor, based on the determined dynamic security level, the respective biometric scoring threshold for each one of the selected plurality of biometric modalities.
11. The system of claim 10 , further comprising requesting, at the computer processor, biometrics of the user for each one of the selected plurality of biometric modalities.
12. The system of claim 11 , further comprising receiving, at the computer processor, biometrics of the user for each one of the selected plurality of biometric modalities.
13. The system of claim 12 , further comprising generating, at the computer processor, a biometric score for each one of the received biometrics that is compared to a respective biometric scoring threshold for each of the selected plurality of biometric modalities.
14. The system of claim 13 , further comprising determining, at the computer processor, for each one of the selected number of biometric modalities, whether the respective generated biometric score exceeds the respective determined biometric scoring threshold for each of the selected plurality of biometric modalities.
15. The system of claim 14 , further comprising granting the action request if, for each one of the selected plurality of biometric modalities, the respective generated biometric score exceeds the respective biometric scoring threshold based on the dynamic security level.
16. The system of claim 10 , wherein the step of determining the dynamic security level is based on an identity of the user, a location of the first device of the plurality of devices, or a type of the first device of the plurality of devices.
17. The system of claim 10 , wherein the step of updating the dynamic security level further comprises increasing the dynamic security level.
18. The system of claim 10 , wherein the physical biometric data captured directly from the user is associated with a physical trait selected from the group consisting of voice, face, fingerprint, and iris.