Method and system to verify identity
Systems and methods for authenticating a user in an authentication system using a computing device configured to capture authentication biometric identity information. The authentication biometric identify information captured during an authentication session. The authentication biometric identify information may comprise or be derived from one or more images of the user being authenticated. The authentication biometric identify information is compared to root identify biometric information. The root identify biometric information is captured from a trusted source, such as trusted devices located at trusted locations, such as a government entity, financial institution, or business. Identity verification may occur by comparing the trusted root identify biometric information to the biometric identify information captured during an authentication session. Liveness determination may also occur to verify the user is a live person. Liveness determination may include comparing two images of the user such that the two images are captured at different distances from the user.
1. A method for verifying biometric authentication comprising:
receiving root biometric identity information, corresponding to a user, from a trusted biometric information source to establish the root biometric identity information which is trusted and verified;
storing the root biometric identity information in a database;
subsequently, during an authentication process:
capturing a first image with an authentication camera, the first image captured when the user is a first distance from the authentication camera;
capturing a second image with the authentication camera, the second image captured when the user is a second distance from the authentication camera, such that the first distance is different than the second distance, wherein the first image or the second image is distorted due to the camera changing distance relative to the user;
processing the first image to create first authentication biometric information;
processing the second image to create second authentication biometric information;
comparing the first authentication biometric information to the second authentication biometric information;
comparing the root biometric identity information with the first authentication biometric information, the second authentication biometric information, or both;
authenticating the user when:
the comparing determines that the first authentication biometric information matches the second authentication biometric information within a threshold, but are not identical;
the comparing determines that the root biometric identity information matches the first authentication biometric information, the second authentication biometric information, or both within a threshold.
2. The method of claim 1 wherein the authentication camera is one of the following type cameras: camera in a user's mobile device, camera in a user's computer, camera at an ATM machine, camera at a business point of sale, and camera at a financial institution.
3. The method of claim 2 wherein the trusted biometric information source is a first camera at a trusted source.
4. The method of claim 3 wherein the first camera is located at a financial institution.
5. The method of claim 3 wherein the first camera is located at a government agency office.
6. The method of claim 3 wherein an authentication server receives the root biometric identity information, the first authentication biometric information, and the second authentication biometric information and the authentication server performs the comparing.
7. The method of claim 1 wherein the first image and the second image are of the user's face.
8. The method of claim 7 wherein the distortion is barrel distortion.
9. The method of claim 1 further comprising performing one or more additional liveness tests on the first image or the second image to verify the user is a live person during the authentication process.
10. An identity authentication system comprising:
a first computing device configured to request and receive root biometric identity information, for a user, from a trusted source, the trusted source comprising a government affiliated entity or a financial institution;
a second computing device configured to, during an authentication session:
create authentication biometric information captured from the user during the authentication session, wherein the authentication biometric information is derived from at least a first image and a second image which are captured by a camera associated with the second computing device, the first image captured by the camera located at a first distance from the user and the second image captured by the camera located at a second distance from the user, the second distance less than the first distance, and the liveness determination comprises determining the second image has distortion as compared to the first image;
compare the authentication biometric information to the root biometric identity information;
perform a liveness determination on the user during the authentication session using the authentication biometric information;
responsive to the comparing and performing, authenticate the user if:
the comparing determines the authentication biometric information matches the root biometric identity information within a threshold; and
the liveness determination determines the user is a live person.
11. The system of claim 10 wherein the root biometric identity information is derived from an image.
12. The system of claim 11 wherein an image of the user can not be re-created from the root biometric identity information.
13. The system of claim 10 wherein the first computing device and the second computing device are the same computing device.
14. The system of claim 10 wherein the distortion is barrel distortion.
15. A method for verifying biometric authentication comprising:
receiving root biometric identity information, corresponding to a user, from a trusted biometric information source to establish the root biometric identity information which is trusted and verified;
storing the root biometric identity information in a database;
subsequently, during an authentication process:
capturing a first image with an authentication camera, the first image captured when the user is a first distance from the authentication camera;
capturing a second image with the authentication camera, the second image captured when the user is a second distance from the authentication camera, such that the first distance is different than the second distance;
performing one or more additional liveness tests on the first image or the second image to verify the user is a live person during the authentication process;
processing the first image to create first authentication biometric information;
processing the second image to create second authentication biometric information;
comparing the first authentication biometric information to the second authentication biometric information;
comparing the root biometric identity information with the first authentication biometric information, the second authentication biometric information, or both;
authenticating the user when:
the comparing determines that the first authentication biometric information matches the second authentication biometric information within a threshold, but are not identical;
the comparing determines that the root biometric identity information matches the first authentication biometric information, the second authentication biometric information, or both within a threshold.
16. The method of claim 15 wherein the authentication camera is one of the following type cameras: camera in a user's mobile device, camera in a user's computer, camera at an ATM machine, camera at a business point of sale, and camera at a financial institution.
17. The method of claim 15 wherein the trusted biometric information source is a first camera at a trusted source.
18. The method of claim 15 wherein an authentication server receives the root biometric identity information, the first authentication biometric information, and the second authentication biometric information and the authentication server performs the comparing.
19. The method of claim 15 wherein the first image and the second image are of the user's face.