Liveness detection
View Patent ↗Biometrics are increasingly used to provide authentication and/or verification of a user in many security and financial applications for example. However, “spoof attacks” through presentation of biometric artefacts that are “false” allow attackers to fool these biometric verification systems. Accordingly, it would be beneficial to further differentiate the acquired biometric characteristics into feature spaces relating to live and non-living biometrics to prevent non-living biometric credentials triggering biometric verification. The inventors have established a variety of “liveness” detection methodologies which can block either low complexity spoofs or more advanced spoofs. Such techniques may provide for monitoring of responses to challenges discretely or in combination with additional aspects such as the timing of user's responses, depth detection within acquired images, comparison of other images from other cameras with database data etc.
1 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein
the process comprises:
providing a sheet of sense trigger elements to a user, each sense trigger element comprising:
an identity; and
a material for elucidating a gustatory perception response of a user;
providing to the user via an output interface of an electronic device associated with the user an element identity;
receiving from the user via an input interface of the electronic device a response established by the user in response to their tasting the material within the sense trigger element having its identity matching the element identity.
2 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein
the process comprises:
providing a sheet of sense trigger elements to a user, each sense trigger element comprising:
an identity; and
a material for elucidating an olfactory response of the user;
providing to the user via an output interface of an electronic device associated with the user an element identity;
receiving from the user via an input interface of the electronic device a response established by the user in response to their smelling the material within the sense trigger element having its identity matching the element identity.
3 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein
the process comprises:
providing to the user a subset of a series of memory challenges;
obtaining responses from the user to the subset of the series of memory challenges;
comparing the obtained responses from the user to the subset of the series of memory challenges with stored responses relating to a registered user to whom the series of memory challenges relate;
the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the registered user was presented with a series of memory challenges and provided the stored responses to the series of memory challenges;
the process further comprises comparing data acquired from the electronic device associated with the user whilst the user provides the responses to the subset of the series of memory challenges with other data acquired from another electronic device associated with the registered user whilst the registered user provided the stored responses to the series of memory challenges;
the data comprises:
at least one of:
an identity of the electronic device; and
a geo-location data of the electronic device; and
at least one of:
one or more other identities, each other identity associated with a device associated with the electronic device; and
one or more network identities, each network identity associated with an identity of a network or an element of network infrastructure associated with the electronic device; and
the other data comprises:
at least one of:
an identity of the another electronic device; and
a geo-location data of the another electronic device; and
at least one of:
one or more other identities, each other identity associated with another device associated with the another electronic device; and
one or more network identities, each network identity associated with an identity of another network or another element of network infrastructure associated with the another electronic device.
4 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein
the process comprises:
establishing data of the user; and
comparing the data of the user with stored data of a registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established; and
the data is relating to at least one of an odor and a scent of the user acquired with a sensor associated with the electronic device; and
the stored data relates to the at least one of the odor and the scent of the user acquired with another sensor associated with another electronic device employed whilst the user completed the registration process.
5 . The method according to claim 4 , wherein
the process further comprises:
presenting the user with a series of liveness challenges of which acquiring the image of the ear of the user was a liveness challenge of the series of liveness challenges; and
comparing other data of the user acquired from the electronic device in responding to those liveness challenges within the series of liveness challenges other than acquiring the image of the user with stored other data of the registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established where the stored other data comprises responses to the liveness challenges within the series of liveness challenges other than acquiring the image of the user.
6 . The method according to claim 4 , wherein
the process further comprises:
presenting the user with a series of liveness challenges; and
comparing other data of the user acquired from the electronic device in responding to the series of liveness challenges with stored other data of the registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established where the stored other data comprises responses to the liveness challenges.
7 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein the process comprises:
establishing data of the user; and
comparing the data of the user with stored data of a registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established;
the data is a typing rhythm of the user; and
the stored data relates to the typing rhythm established whilst the user completed the registration process.
8 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein the process comprises:
establishing data of the user; and
comparing the data of the user with stored data of a registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established;
the data is a typing rhythm of the user established in dependence upon user actions with respect to a keyboard of the electronic device in responding to a subset of a series of liveness challenges; and
the stored data relates to the typing rhythm established whilst the user completed the registration process and established in dependence upon registered user actions with respect to a keyboard of another electronic device upon which the registered user completed the registration process in responding to the series of liveness challenges.
9 . A method comprising:
executing a process to establish whether a user associated with at least one of a verification process, an authorisation process and an authentication process upon an electronic device associated with the user is physically present or their presence is being simulated; wherein
the process comprises:
establishing data of the user; and
comparing the data of the user with stored data of a registered user acquired whilst the registered user completed a registration process for the at least one of the verification process, the authorisation process and the authentication process during which the stored data of the registered user was established;
the data relates to a gait of the user established in dependence upon an accelerometer of the electronic device;
the stored data relates to a gait of the registered user established in dependence upon another accelerometer of another electronic device upon which the user completed the registration process; and
the data relating to the gait of the user was established over a period of time the user was walking prior to the user triggering the at least one of the verification process, the authorisation process and the authentication process upon the electronic device.
10 . The method according to claim 9 , wherein
the process further comprises comparing data acquired from the electronic device associated with the user whilst the user provides the responses to the subset of the series of memory challenges with other data acquired from another electronic device associated with the registered user whilst the registered user provided the stored responses to the series of memory challenges.