Biometric based self-sovereign information management based on reverse information search
The present teaching relates to method, system, medium, and implementations for authenticating a user. A first request is received to set up authentication information with respect to a user, wherein the first request specifies a type of information to be used for future authentication of the user. It is determined whether the type of information related to the user poses risks based on a reverse information search result. The type of information for being used for future authentication of the user is rejected when the type of information is determined to pose risks.
1. A method, implemented on a machine having at least one processor, storage, and a communication platform for authenticating a user, comprising:
receiving a first request to set up authentication information with respect to a user, wherein the authentication information specifies a type of biometric information to be used for future authentication of the user;
performing, in response to receiving the first request, a reverse information search by:
searching biometric information related to the user from at least one publicly accessible source, and
determining that the searched biometric information comprises the type of biometric information to be used for future authentication of the user;
making a decision with the respect to the first request based on the searched biometric information in terms of whether the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information;
receiving a second request from a person for authenticating that the person is the user, wherein the second request includes the type of biometric information submitted by the person for the authentication;
determining whether the type of biometric information is a valid type of information for authenticating the user based on the reverse information search result; and
rejecting the person to be the user if the type of biometric information submitted by the person is not a valid type of information for authenticating the user.
2. The method of claim 1 , further comprising:
determining, based on the reverse information search, whether the type of biometric information related to the user poses risks.
3. The method of claim 2 , wherein the decision comprises:
if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, rejecting the type of biometric information for being used for future authentication of the user.
4. The method of claim 2 , wherein the decision comprises:
if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, replacing the type of biometric information with another type of information related to the user for being used for future authentication of the user.
5. The method of claim 1 , further comprising:
analyzing the searched biometric information to extract the type of biometric information;
assessing whether the type of biometric information is adequate to be used for authentication of the user; and
if the type of biometric information is adequate to be used for authentication of the user, designating the type of biometric information as a type that is not to be used by the user for authentication purposes.
6. The method of claim 1 , wherein the type of biometric information comprises one or more of a face, an iris, a fingerprint, a palm, a vein, a password, or a pair of question and answer.
7. Machine readable and non-transitory medium having information recorded thereon for authenticating a user, wherein the information, when read by the machine, causes the machine to perform the following:
receiving a first request to set up authentication information with respect to a user, wherein the authentication information specifies a type of biometric information to be used for future authentication of the user;
performing, in response to receiving the first request, a reverse information search by:
searching biometric information related to the user from at least one publicly accessible source, and
determining that the searched biometric information comprises the type of biometric information to be used for future authentication of the user;
making a decision with the respect to the first request based on the searched biometric information in terms of whether the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information;
receiving a second request from a person for authenticating that the person is the user, wherein the second request includes the type of biometric information submitted by the person for the authentication;
determining whether the type of biometric information is a valid type of information for authenticating the user based on the reverse information search result; and
rejecting the person to be the user if the type of biometric information submitted by the person is not a valid type of information for authenticating the user.
8. The machine readable and non-transitory medium of claim 7 , wherein the information, when read by the machine, causes the machine to further perform:
determining, based on the reverse information search, whether the type of biometric information related to the user poses risks.
9. The machine readable and non-transitory medium of claim 8 , wherein the decision comprises:
if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, rejecting the type of biometric information for being used for future authentication of the user.
10. The machine readable and non-transitory medium of claim 8 , wherein the decision comprises:
if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, replacing the type of biometric information with another type of information related to the user for being used for future authentication of the user.
11. The machine readable and non-transitory medium of claim 7 , wherein the information, when read by the machine, causes the machine to further perform:
analyzing the searched biometric information to extract the type of biometric information;
assessing whether the type of biometric information is adequate to be used for authentication of the user; and
if the type of biometric information is adequate to be used for authentication of the user, designating the type of biometric information as a type that is not to be used by the user for authentication purposes.
12. The machine readable and non-transitory medium of claim 7 , wherein the type of biometric information comprises one or more of a face, an iris, a fingerprint, a palm, a vein, a password, or a pair of question and answer.
13. A system for authenticating a user, comprising:
an authentication information set up computer hardware configured for receiving a first request to set up authentication information with respect to a user, wherein the authentication information specifies a type of biometric information to be used for future authentication of the user; and
an authentication configuration computer hardware configured for
performing, in response to receiving the first request, a reverse information search by:
searching biometric information related to the user from at least one publicly accessible source, and
determining that the searched biometric information comprises the type of information to be used for future authentication of the user;
making a decision with the respect to the first request, based on the searched biometric information in terms of whether the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information;
receiving a second request from a person for authenticating that the person is the user, wherein the second request includes the type of biometric information submitted by the person for the authentication;
determining whether the type of biometric information is a valid type of information for authenticating the user based on the reverse information search result; and
rejecting the person to be the user if the type of biometric information submitted by the person is not a valid type of information for authenticating the user.
14. The system of claim 13 , wherein the authentication configuration computer hardware is further configured for:
determining, based on the reverse information search, whether the type of biometric information related to the user poses risks.
15. The system of claim 14 , wherein the decision comprises: if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, rejecting the type of biometric information for being used for future authentication of the user.
16. The system of claim 14 , wherein the decision comprises:
if the searched biometric information includes adequate information to enable generation of fraudulent biometric authentication information, replacing the type of biometric information with another type of information related to the user for being used for future authentication of the user.
17. The system of claim 13 , wherein the authentication configuration computer hardware is further configured for:
analyzing the searched biometric information to extract the type of biometric information;
assessing whether the type of biometric information is adequate to be used for authentication of the user; and
if the type of biometric information is adequate to be used for authentication of the user, designating the type of biometric information as a type that is not to be used by the user for authentication purposes.
18. The system of claim 13 , wherein the type of biometric information comprises one or more of a face, an iris, a fingerprint, a palm, a vein, a password, or a pair of question and answer.