System and method for verifying liveliness
A machine-assisted method for verifying a video presence that includes: receiving, at a computing device of an identity provider, an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider; retrieving, from the authentication request, at least a portion of a video stream feed initially from the requester, to the computing device, the portion of video stream feed portraying a face of the requester; extracting the face of the requester from the portion of the video stream feed; providing a directive to the requester soliciting a corresponding gesture; and receiving a response gesture from the requester.
1. At least one non-transitory computer readable storage device storing instructions that, when executed by at least one processor on a computing device of an identity provider, cause the at least one processor to perform operations comprising:
receiving an authentication request initially sent from a requester to access an account managed by a relying party, different from the identity provider;
retrieving, from the authentication request, at least a first portion of a video stream feed, to the computing device, the first portion of the video stream feed portraying a face of the requester and operating at a first refresh rate;
extracting the face of the requester from the first portion of the video stream feed;
providing a directive to the requester soliciting a corresponding gesture so that the requester receives an instruction to transition to the corresponding gesture;
receiving a second portion of the video stream feed portraying a response gesture from the requester reacting to the instruction to perform the corresponding gesture, the second portion of the video stream operating at a second refresh rate that is sufficiently higher than the first refresh rate to encode a transition from before the corresponding gesture to the corresponding gesture; and
in response to determining that the response gesture matches the corresponding gesture being solicited, establishing a biometric identity for the requester at the identity provider by storing, at the identity provider, data encoding the extracted face of the requester that is extracted from the first video portion.
2. The device of claim 1 , wherein the operations further comprise: prior to establishing the biometric identity, determining that the requester is not enrolled at the identity provider to be authenticated by the identity provider for accessing the account managed by the relying party.
3. The device of claim 1 , wherein establishing the biometric identity further comprises: receiving the response gesture in the second portion of the video stream feed.
4. The device of claim 1 , wherein establishing the biometric identity further comprises: querying the relying party for a permission to establish the biometric identity of the requester at the identity provider for the requester to access the account managed by the relying party.
5. The device of claim 4 , wherein the operations further comprise: in response to obtaining the permission from the relying party, obtaining the biometric identity of the requester from the second portion of the video stream feed.
6. The device of claim 1 , wherein establishing the biometric identity further comprises: establishing the requester as owning the stored biometric identity provided that the face of the requester furnished by the requester in the second portion of a video stream feed matches the data encoding the extracted face of the requester stored at the identity provider.
7. The device of claim 6 , wherein establishing the biometric identity further comprises: establishing the requester as authorized to access the account managed by the relying party provided that the second portion of the video stream feed is a portion of a live video stream from the requester.
8. The device of claim 1 , wherein the operations further comprise: determining that the requester is enrolled at the identity provider to be authenticated by the identity provider for accessing the account managed by the relying party.
9. The device of claim 8 , wherein the operations further comprise: determining that the face of the requester as extracted from the second portion of the video stream feed matches a face of the requester as encoded in the data already stored at the identity provider.
10. The device of claim 8 , wherein the operations further comprise: scoring the extracted face of the requester to determine a matching degree between (i) data encoding the face of the requester as extracted from the second portion of the video feed and (ii) data, as stored at the identity provider, encoding the face of the requester.
11. The device of claim 9 , wherein the operations further comprise: comparing the scored matching degree to a pre-determined threshold.
12. The device of claim 11 , wherein the operations further comprise: determining that the response gesture from the requester in the video stream feed matches the corresponding gesture being solicited.
13. The device of claim 12 , wherein the operations further comprise: scoring the response gesture from the requester in the video stream feed to determine a match quality between the received response gesture and the corresponding gesture being solicited.
14. The device of claim 13 , wherein the operations further comprise: comparing the scored match quality to a pre-determined threshold.
15. The device of claim 12 , further comprising: in response to determining (i) that the response gesture matches the corresponding gesture being solicited and (ii) that the face of the requester as extracted from the first portion or second portion of the video stream feed matches the face of the requester as portrayed in the data already stored at the identity provider, determining that the requester is authorized to access the account.
16. The device of claim 15 , wherein the operations further comprise: directing the relying party to grant the requester access to the account.
17. The device of claim 10 , wherein the operations further comprise: providing at least one additional directive to the requester soliciting at least one additional corresponding gesture in response.
18. The device of claim 17 , wherein the operations further comprise: receiving at least one additional response gesture from the requester and in the second portion of the video stream feed.
19. The device of claim 18 , wherein the operations further comprise: determining that the received at least one additional response gesture from the requester in the video stream feed matches the at least one additional corresponding gesture being solicited.
20. The device of claim 1 , wherein providing the directive to the requester comprises: providing the directive soliciting the response gesture unpredicted by the requester.
21. The device of claim 1 , wherein providing the directive to the requester comprises: providing the directive soliciting the response gesture not present in earlier responses from the requester in the video stream feed.
22. The device of claim 1 , wherein providing the directive to the requester comprises: providing the directive soliciting the response gesture due within a particular time frame from the requester in the video stream feed.
23. The device of claim 1 , wherein soliciting the corresponding response gesture comprises: soliciting a proximity adjustment from the requester in the video stream feed.
24. The device of claim 1 , wherein soliciting the corresponding response gesture comprises: soliciting a motion of a specific body part of the requester in the video stream feed.
25. The device of claim 1 , wherein soliciting the corresponding response gesture comprises: soliciting a facial expression change from the requester in the video stream feed.