User authentication and transaction verification via a shared video stream
A user interacts with a remote server via an end-user device, and enters transaction data. A user-facing camera of the end-user device captures a live video feed of the interacting user; which is displayed in real time on the screen of the end-user device while the user is filling-out fields and entering transaction data. The concurrent, real-time, video-feed display of the interacting user, near—or as a background layer behind—the fillable fields of the transaction data, deters at least some cyber-attacks or prevents fraud attempts. Optionally, the screen of the end-user device is also continuously shared, over a secure communication channel, via a locally-installed Screen Sharing Module, with a trusted remote server; which performs continuous biometric authentication of the user, and continuously verifies the integrity of user-provided transaction data against locally-collected data and user interactions. Optionally, a server-side generated QR code or barcode or visual representation, is sent by the trusted remote server and is also displayed on the screen of the end-user device, which is then Screen-Shared back towards the trusted remote server, as an additional security measure.
1 . A method comprising:
while a user interacts with an electronic device to enter transaction data for an electronic transaction intended to be performed online,
activating a user-facing camera of the electronic device,
and capturing a live video feed of the user while he enters transaction data;
and causing said live video feed to be continuously displayed as a dynamically-changing background layer in a particular region of a screen of the electronic device of the user while the user enters transaction data into one or more on-screen fillable data-fields that are concurrently displayed in a foreground layer relative to said live video feed; and enabling the user to type data into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields;
continuously performing Screen Sharing of the screen of the electronic device, with a trusted remote server, while the user is entering transaction data on said electronic device into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields, and while the screen of said electronic device displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user;
wherein a combination of (I) concurrent display of the live video feed from the user-facing camera, as said background layer behind said one or more on-screen fillable data-fields on the screen of the electronic device, while the user enters transaction data for said electronic transaction intended to be performed online, and (II) continuous Screen Sharing of the screen of said electronic device that displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user, reduces cyber-attack attempts of a human attacker or a malware that impersonates said user;
at said trusted remote server, analyzing content of one or more video frames that were received at the trusted server via Screen Sharing by the electronic device, and checking whether (I) data shown in said content via said Screen Sharing matches (II) transaction data transmitted from the electronic device to the trusted remote server.
2 . The method of claim 1 , comprising:
continuously authenticating identity of said user, based on facial recognition of his face that is continuously being captured by the user-facing camera of the electronic device and is shown in the background layer while the user is entering transaction data into one or more fillable data-fields that are shown in the foreground layer and while the electronic device performs continuous Screen Sharing towards the trusted remote server; based on one or more reference images of the face of said user.
3 . The method of claim 1 , comprising:
generating by said trusted remote server a singular sealed record that binds together (i) user authentication data and (ii) transaction integrity data.
4 . The method of claim 3 ,
wherein said generating of the singular sealed record is further based on:
(iii) user-specific behavioral data that is extracted from user gestures and user interactions.
5 . The method of claim 4 ,
wherein said generating of the singular sealed record is further based on:
(iv) one or more device properties of said electronic device,
extracted while said user enters transaction data on said electronic device;
wherein the one or more device properties include at least one of:
device accelerometer data,
device gyroscope data,
device compass-unit data,
device spatial orientation data.
6 . A non-transitory storage medium having stored thereon instructions that, when executed by a machine, cause the machine to perform a method comprising:
while a user interacts with an electronic device to enter transaction data for an electronic transaction intended to be performed online,
activating a user-facing camera of the electronic device,
and capturing a live video feed of the user while he enters transaction data;
and causing said live video feed to be continuously displayed as a dynamically-changing background layer in a particular region of a screen of the electronic device of the user while the user enters transaction data into one or more on-screen fillable data-fields that are concurrently displayed in a foreground layer relative to said live video feed; and enabling the user to type data into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields;
continuously performing Screen Sharing of the screen of the electronic device, with a trusted remote server, while the user is entering transaction data on said electronic device into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields, and while the screen of said electronic device displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user;
wherein a combination of (I) concurrent display of the live video feed from the user-facing camera, as said background layer behind said one or more on-screen fillable data-fields on the screen of the electronic device, while the user enters transaction data for said electronic transaction intended to be performed online, and (II) continuous Screen Sharing of the screen of said electronic device that displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user, reduces cyber-attack attempts of a human attacker or a malware that impersonates said user;
at said trusted remote server, analyzing content of one or more video frames that were received at the trusted server via Screen Sharing by the electronic device, and checking whether (I) data shown in said content via said Screen Sharing matches (II) transaction data transmitted from the electronic device to the trusted remote server.
7 . A system comprising:
one or more hardware processors, configured to execute code;
which are operably associated with one or more memory units that are configured to store data;
wherein the one or more hardware processors are configured to perform a process comprising:
while a user interacts with an electronic device to enter transaction data for an electronic transaction intended to be performed online,
activating a user-facing camera of the electronic device,
and capturing a live video feed of the user while he enters transaction data;
and causing said live video feed to be continuously displayed as a dynamically-changing background layer in a particular region of a screen of the electronic device of the user while the user enters transaction data into one or more on-screen fillable data-fields that are concurrently displayed in a foreground layer relative to said live video feed; and enabling the user to type data into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields;
continuously performing Screen Sharing of the screen of the electronic device, with a trusted remote server, while the user is entering transaction data on said electronic device into said one or more on-screen fillable data-fields while the live video feed is continuously displayed in the background layer behind said one or more on-screen fillable data-fields, and while the screen of said electronic device displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user;
wherein a combination of (I) concurrent display of the live video feed from the user-facing camera, as said background layer behind said one or more on-screen fillable data-fields on the screen of the electronic device, while the user enters transaction data for said electronic transaction intended to be performed online, and (II) continuous Screen Sharing of the screen of said electronic device that displays both (i) the background layer that dynamically shows the live video feed captured by the user-facing camera and (ii) the foreground layer that dynamically shows the transaction data being entered by the user, reduces cyber-attack attempts of a human attacker or a malware that impersonates said user;
at said trusted remote server, analyzing content of one or more video frames that were received at the trusted server via Screen Sharing by the electronic device, and checking whether (I) data shown in said content via said Screen Sharing matches (II) transaction data transmitted from the electronic device to the trusted remote server.