Unobtrusive authentication system
User authentication is performed using a camera to capture the user's identifying information (such as facial features) but the camera remains concealed until needed, thereby eliminating (or at least reducing) anxiety and privacy concerns. For example, the camera, when unneeded for authentication, may be hidden behind a retractable shutter or “smart” barrier that can change its state from translucent to transparent and vice versa.
1. A security system for a multi-factor authentication of a user, the system comprising:
a camera for acquiring identifying information of a user, the camera being concealed from the user prior to occurrence of a triggering event for authentication, the triggering event comprising receipt of a first authentication factor from the user;
adjustment means for causing the camera to be concealed from or revealed to the user; and
a controller configured to:
detect the triggering event and, only when the first authentication factor is verified, thereupon cause the adjustment means to reveal the camera to the user;
acquire a second authentication factor by causing the camera to acquire images of the identifying information of the user; and
based on the acquired identifying information, determine whether to authenticate the user.
2. The security system of claim 1 , wherein the adjustment means is mechanical.
3. The security system of claim 2 , wherein the adjustment means comprises a shutter and an adjustment mechanism for controlling relative orientations of the shutter and the camera.
4. The security system of claim 1 , wherein the adjustment means is optical.
5. The security system of claim 4 , wherein the adjustment means comprises (i) a barrier having a selectable opacity level and comprising at least one of an electrochromic material, a photochromic material, a thermochromic material, suspended particles, polymer-dispersed liquid crystals or metal blinds and (ii) a signal source for setting the opacity level of the barrier.
6. The security system of claim 1 , wherein the triggering event for authentication further comprises presence of the user.
7. The security system of claim 1 , wherein the triggering event for authentication is determined by a security policy.
8. The security system of claim 6 , further comprising a presence-detection sensor including at least one of an infrared sensor, a heat sensor, a proximity sensor, a pressure sensor, an acoustic sensor, an RF sensor or a motion sensor for detecting the presence of the user.
9. The security system of claim 1 , further comprising at least one of an identifying information reader or a user interface for receiving the first authentication factor from the user.
10. The security system of claim 1 , wherein the first authentication factor comprises at least one of a personal identification number, a token, a password, a bar code, a quick response code, or a fingerprint.
11. The security system of claim 1 , wherein the controller is further configured to:
determine whether a predetermined time interval has expired; and
upon determining that the predetermined time interval has expired, cause the adjustment means to conceal the camera from the user.
12. The security system of claim 1 , wherein the controller is further configured to:
upon determining authentication of the user, cause the adjustment means to conceal the camera from the user.
13. The security system of claim 1 , wherein the controller is further configured to:
following a predetermined number of unsuccessful authentication attempts, cause the adjustment means to conceal the camera from the user.
14. A method of performing a multi-factor authentication of a user, the method comprising:
detecting occurrence of a triggering event for authentication, the triggering event comprising receiving a first authentication factor from the user;
only when the first authentication factor is verified, thereupon revealing to the user a camera previously concealed from the user prior to occurrence of the triggering event;
acquiring a second authentication factor from the user by causing the now-revealed camera to acquire images associated with identifying information of the user; and
based on the acquired identifying information, determining whether to authenticate the user.
15. The method of claim 14 , wherein revealing the camera to the user comprises adjusting relative orientations of the camera and a shutter located in front the camera so as to cause the camera to be visible to the user.
16. The method of claim 14 , wherein revealing the camera to the user comprises applying a signal to a variable-opacity element that (i) comprises at least one of an electrochromic material, a photochromic material, a thermochromic material, suspended particles, polymer-dispersed liquid crystals or metal blinds and (ii) is disposed in front of the camera so as to cause the camera to be visible to the user at a low opacity level.
17. The method of claim 14 , wherein the triggering event for authentication further comprises presence of the user.
18. The method of claim 14 , wherein the triggering event for authentication is determined by a security policy.
19. The method of claim 17 , further comprising detecting the presence of the user with at least one of an infrared sensor, a heat sensor, a proximity sensor, a pressure sensor or a motion sensor.
20. The method of claim 14 , wherein receiving the first authentication factor from the user comprises causing at least one of an information reader or a user interface to receive the first authentication factor from the user.
21. The method of claim 14 , wherein the first authentication factor comprises at least one of a personal identification number, a token, a password, a bar code, a quick response code, or a fingerprint.
22. The method of claim 14 , further comprising:
determining whether a predetermined time interval for allowing the camera to be visible to the user has expired; and
upon determining that the predetermined time interval has expired, causing the camera to be concealed from the user.
23. The method of claim 14 , further comprising:
upon authenticating the user, causing the camera to be concealed from the user.
24. The method of claim 14 , further comprising:
following a predetermined number of unsuccessful authentication attempts, causing the camera to be concealed from the user.
25. The method of claim 14 , wherein determining whether to authenticate the user comprises recognizing facial features of the user in the acquired images.
26. The method of claim 14 , wherein determining whether to authenticate the user comprises recognizing, in the acquired images, a trinket selected by or provided to the user.