IP Library › Granted Patent US 11,546,390
Granted Patent B1
US 11,546,390 · App. 17/460,493 · Granted Jan 3, 2023

Peer-supervised video conference based account recovery

Inventors: Michael Boodaei (Givatayim, IL); Eldan Ben-Haim (Kiryat Ono, IL)
Assignee: Transmit Security Ltd.
H04L65/1076G06V40/20G06V40/45H04L12/1822H04L63/0861H04L67/02H04N7/15
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,546,390
App. No.
17/460,493
Granted
Jan 3, 2023
Kind
B1
Abstract

Disclosed herein are systems and methods for recovering online services user accounts of users based on verification of the users in video conferences, comprising receiving a request for recovering an account of a user of an online service, establishing one or more video conference sessions between a client device used by the user, client devices used by one or more trustees associated with the user and a bot agent initiated for the video conference session(s), operating the bot agent during the one or more video conference sessions to guide the one or more trustees to verify an identity of the user, and initiating an account recovery process for the account of the user in response to receiving a positive verification verdict from the one or more trustees.

Claims (36)

1. A computer implemented method of recovering an account of a user based on verification of the user in a video conference, comprising:

receiving a request for recovering an account of a user of an online service;

establishing at least one video conference session between a client device used by the user, another client device used by at least one trustee associated with the user and a bot agent initiated for the at least one video conference session;

operating the bot agent during the at least one video conference session to guide the at least one trustee to verify an identity of the user;

operating the bot agent during the at least one video conference session to instruct at least one of the user and the at least one trustee, wherein instructing the user comprises instructing the user to perform at least one gesture and/or to pronounce at least one syllable, and wherein instructing the at least one trustee comprises instructing the at least one trustee to request the user to provide at least one real-world information item relating to the user; and

initiating an account recovery process for the account of the user in response to receiving a positive verification verdict from the at least one trustee.

2. The computer implemented method of claim 1 , further comprising verifying the identity of the user by a plurality of trustees associated with the user by:

establishing at least one another video conference session between the client device used by the user, another client device used by at least one another trustee associated with the user and another bot agent,

operating the another bot agent during the at least one another video conference session to guide the at least one another trustee to verify the identity of the user, and

initiating the account recovery process in response to receiving a positive verification verdict from the at least one trustee and from the at least one another trustee.

3. The computer implemented method of claim 1 , wherein the at least one trustee associated with the user is acquainted with the user.

4. The computer implemented method of claim 1 , wherein the user and his associated at least one trustee are members of a common organization.

5. The computer implemented method of claim 1 , wherein the at least one trustee is invited to the at least one video conference session by transmitting at least one message to the at least one trustee via at least one contact channel predefined for the at least one trustee.

6. The computer implemented method of claim 1 , wherein the at least one trustee is admitted into the at least one video conference session after successfully authenticated.

7. The computer implemented method of claim 1 , wherein the guidance provided by the bot agent comprises presenting the claimed identity of the user to the at least one trustee.

8. The computer implemented method of claim 1 , wherein the guidance provided by the bot agent comprises instructing the at least one trustee to verify the identity of the user based on visual appearance of the user.

9. The computer implemented method of claim 8 , further comprising applying at least one liveness verification algorithm configured to determine the user is genuine.

10. The computer implemented method of claim 9 , further comprising operating the bot agent to instruct the user to perform said at least one gesture, said at least one gesture is visually analyzed to verify liveness of the user.

11. The computer implemented method of claim 9 , further comprising operating the bot agent to instruct the user to pronounce the at least one syllable, said at least one syllable is analyzed to verify liveness of the user.

12. The computer implemented method of claim 1 , wherein the guidance provided by the bot agent further comprising instructing the at least one trustee to request the user to provide the at least one real-world information item relating to the user that is used by the at least one trustee to verify the identity of the user.

13. The computer implemented method of claim 1 , further comprising further verifying the identity of the user, in addition to the verification verdict of the at least one trustee, based on at least one biometric pattern of the user captured during the at least one video conference session compared to a respective biometric signature recorded in the account of the user, the at least one biometric pattern is a member of a group consisting of: a face pattern, an iris pattern, a voice pattern and a fingerprint pattern.

14. The computer implemented method of claim 1 , wherein the account recovery process is initiated by transmitting to the client device used by the user a one-time use link to a recovery site.

15. The computer implemented method of claim 14 , further comprising transmitting a unique secret assigned to the account recovery process to the client device used by the user, the unique secret is provided via the client device when accessing the recovery site.

16. A system for recovering an account of a user based on verification of the user in a video conference, comprising:

at least one processor configured to execute a code, the code comprising:

code instructions to receive a request for recovering an account of a user of an online service;

code instructions to establish at least one video conference session between a client device used by the user, another client device used by at least one trustee associated with the user and a bot agent initiated for the at least one video conference session;

code instructions to operate the bot agent during the at least one video conference session to guide the at least one trustee to verify an identity of the user;

code instructions to operate the bot agent during the at least one video conference session to instruct at least one of the user and the at least one trustee, wherein instructing the user comprises instructing the user to perform at least one gesture and/or to pronounce at least one syllable, and wherein instructing the at least one trustee comprises instructing the at least one trustee to request the user to provide at least one real-world information item relating to the user; and

code instructions to initiate an account recovery process for the account of the user in response to receiving a positive verification verdict from the at least one trustee.

17. A computer program product for recovering an account of a user based on verification of the user in a video conference, comprising a non-transitory medium storing thereon computer program instructions which, when executed by at least one hardware processor, cause the at least one hardware processor to:

receive a request for recovering an account of a user of an online service;

establish at least one video conference session between a client device used by the user, another client device used by at least one trustee associated with the user and a bot agent initiated for the at least one video conference session;

operate the bot agent during the at least one video conference session to guide the at least one trustee to verify an identity of the user;

operate the bot agent during the at least one video conference session to instruct at least one of the user and the at least one trustee, wherein instructing the user comprises instructing the user to perform at least one gesture and/or to pronounce at least one syllable, and wherein instructing the at least one trustee comprises instructing the at least one trustee to request the user to provide at least one real-world information item relating to the user; and

initiate an account recovery process for the account of the user in response to receiving a positive verification verdict from the at least one trustee.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 3, 2021
From: BOODAEI, MICHAEL; BEN-HAIM, ELDAN
To: TRANSMIT SECURITY LTD.
Reel/Frame 057378/0374 →
Cited By (6)
US 12,432,201 US 12,462,788 US 12,519,779 US 12,519,904 US 12,581,033 US 12,657,277