Out-of-Band Biometric Enrollment and Verification Using Interactive Messaging
A system and method for enabling out-of-band biometric verification is disclosed. The system includes a biometric engine coupled with an interactive messaging system and configured as an identity provider. The biometric identity provider includes a biometric enrollment process using open standard authentication protocols. The identity provider may answer calls generated by a service provider for biometric verification request for a user by sending an interactive message to a wireless mobile device associated to the user. The user captures and sends a biometric input to the identity provider. Biometrics provided by a user are compared by the biometric engine against biometric templates stored for that user in order to verify the user. The identity provider then sends a response back to the service provider. The service provider may grant or deny services to a user depending on the response.
1 . A method for user authentication on a mobile device, the method comprising:
receiving, at a processor, an interactive message from an online service provider, the interactive message being based on a user logging into the online service provider using a single sign-on identity provider;
requesting based on receiving the interactive message, user information, at the processor, the user information being entered at the mobile device;
submitting, at the processor, the requested user information to the single sign-on identity provider; and
receiving, at the processor, instructions for downloading and using a biometric authentication application.
2 . The method of claim 1 , wherein the instructions for downloading and using the biometric authentication application are received, at the processor, via a second interactive message.
3 . The method of claim 1 , wherein the user information further comprises a phone number.
4 . The method of claim 1 , the method further comprising:
downloading, at the processor, the biometric authentication application;
running, at the processor, the biometric authentication application; and
receiving, at the biometric authentication application, a user name, a password, or a combination thereof.
5 . The method of claim 4 , the method further comprising:
receiving, at the biometric authentication application, a request to capture one or more biometric probes; and
submitting, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.
6 . The method of claim 5 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID.
7 . A mobile device configured to perform user authentication, the mobile device comprising:
a memory, the memory being operable to store instructions for a user to download and use a biometric authentication application, the memory being further operable to store the biometric authentication application;
a processor being operable to:
receive an interactive message from an online service provider, the interactive message being based on the user logging into the online service provider using a single sign-on identity provider;
request, based on receiving the interactive message, user information, the user information being entered at the mobile device and being stored in the memory;
submit the requested user information to the single sign-on identity provider; and
receive instructions for downloading and using a biometric authentication application, the instructions being stored in the memory.
8 . The mobile device of claim 7 , wherein the instructions for downloading and using the biometric authentication application are received via a second interactive message.
9 . The mobile device of claim 7 , wherein the user information further comprises a phone number.
10 . The mobile device of claim 7 , the processor being further operable to:
download, to the memory, the biometric authentication application;
run, from the memory, the biometric authentication application; and
receive, at the biometric authentication application, a user name, a password, or a combination thereof.
11 . The mobile device of claim 10 , the processor being further operable to:
receive, at the biometric authentication application, a request to capture one or more biometric probes; and
submit, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.
12 . The mobile device of claim 11 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID.
13 . A computer-readable medium storing instructions that, when executed by a computer, cause the computer to:
receive, at a memory, an interactive message from an online service provider, the interactive message being based on the user logging into the online service provider using a single sign-on identity provider;
request, based on receiving the interactive message, user information, the user information being entered at a mobile device and being stored in the memory;
submit, from the memory, the requested user information to the single sign-on identity provider; and
receive instructions for downloading and using a biometric authentication application, the instructions being stored in the memory.
14 . The computer-readable medium of claim 13 , wherein the instructions for downloading and using the biometric authentication application are received, at the memory, via a second interactive message.
15 . The computer-readable medium of claim 13 , wherein the user information further comprises a phone number.
16 . The computer-readable medium of claim 13 , the instructions further causing the computer to:
download, to the memory, the biometric authentication application;
run, from the memory, the biometric authentication application; and
receive, at the biometric authentication application, a user name, a password, or a combination thereof.
17 . The computer-readable medium of claim 16 , the instructions further causing the computer to:
receive, at the biometric authentication application, a request to capture one or more biometric probes; and
submit, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.
18 . The computer-readable medium of claim 17 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID.