Web-based user authentication techniques and applications
A system, apparatus, method, and machine readable medium are described for performing user authentication. For example, one embodiment of a system comprises: media capture logic implemented as a component within a browser executed on a client, the media capture logic configured to capture a user's voice from a microphone on a client or images of the user's face or other portion of the user's body from a camera on the client, the media capture logic exposing an application programming interface (API); and a web authentication application implemented as another component within the browser for communicating with an authentication server to perform biometric authentication of a user, the web authentication application making calls to the API of the media capture logic to capture raw biometric data comprising the user's voice from the microphone and/or images of the user's face or other portion of the user's body from the camera, the web authentication application to implement a biometric authentication process to authenticate the user with the raw biometric data.
1. A system comprising:
an authentication server;
a client communicatively coupled to the authentication server, the client comprising:
media capture logic implemented as a component within a browser executed on a client, the media capture logic configured to capture a user's voice from a microphone on a client or images of the user's face or other portion of the user's body from a camera on the client, the media capture logic exposing an application programming interface (API); and
a web authentication application implemented as another component within the browser for communicating with the authentication server to perform biometric authentication of a user, the web authentication application making calls to the API of the media capture logic to capture raw biometric data comprising the user's voice from the microphone and/or images of the user's face or other portion of the user's body from the camera, the web authentication application to implement a biometric authentication process to authenticate the user with the raw biometric data.
2. The system as in claim 1 wherein the biometric authentication process comprises:
establishing a communication channel with the authentication server;
providing the raw biometric data to the authentication server, the authentication server comprising a matcher module to compare the raw biometric data with biometric reference data associated with the user to determine a correlation between the raw biometric data and the biometric reference data.
3. The system as in claim 2 wherein a successful authentication is defined based on the correlation being above a specified threshold value.
4. The system as in claim 2 wherein the authentication server further comprises a feature extraction module to extract one or more specified features from the raw biometric data, wherein the matcher module compares the extracted features against corresponding features from the biometric reference data.
5. The system as in claim 4 wherein in response to the authentication server generating a successful authentication indication, the user is provided with access to one or more resources managed by a relying party.
6. The system as in claim 2 wherein the web authentication application is further configured to register with the authentication server using a registration process comprising:
providing the raw biometric data to the authentication server;
a feature extraction module on the authentication server extracting specified features of the raw biometric data to generate biometric reference data; and
storing the biometric reference data in a secure storage accessible by the authentication server.
7. The system as in claim 1 wherein the web authentication application comprises a matcher module to compare the raw biometric data with biometric reference data associated with the user to determine a correlation between the raw biometric data and the biometric reference data.
8. The system as in claim 7 wherein a successful authentication is defined based on the correlation being above a specified threshold value, wherein an indication of a successful authentication is transmitted from the web authentication application to the authentication server.
9. The system as in claim 7 wherein the web authentication application further comprises a feature extraction module to extract one or more specified features from the raw biometric data, wherein the matcher module compares the extracted features against corresponding features from the biometric reference data.
10. The system as in claim 9 wherein in response to the web authentication application generating a successful authentication indication, the user is provided with access to one or more resources managed by a relying party.
11. The system as in claim 7 wherein the web authentication application is further configured to register with the authentication server using a registration process, wherein the web authentication application comprising a feature extraction module to extract specified features of the raw biometric data during registration to generate biometric reference data, the biometric reference data being stored within a secure storage accessible by the matcher module.
12. The system as in claim 11 wherein the registration process further comprises:
generating a public/private key pair on the client; and
transmitting a public key of the key pair to the authentication server, wherein the authentication server associates the public key with an account of the user and stores the public key in a secure storage.
13. A method comprising:
implementing media capture logic as a component within a browser executed on a client,
using the media capture logic to capture a user's voice from a microphone on a client or images of the user's face or other portion of the user's body from a camera on the client, the media capture logic exposing an application programming interface (API); and
making calls to the API of the media capture logic from a web authentication application to capture raw biometric data comprising the user's voice from the microphone and/or images of the user's face or other portion of the user's body from the camera, the web authentication application implemented as another component within the browser for communicating with an authentication server to perform biometric authentication of a user, the web authentication application to implement a biometric authentication process to authenticate the user with the raw biometric data.
14. The method as in claim 13 wherein the biometric authentication process comprises:
establishing a communication channel with the authentication server;
providing the raw biometric data to the authentication server, the authentication server comprising a matcher module to compare the raw biometric data with biometric reference data associated with the user to determine a correlation between the raw biometric data and the biometric reference data.
15. The method as in claim 14 wherein a successful authentication is defined based on the correlation being above a specified threshold value.
16. The method as in claim 14 wherein the authentication server further comprises a feature extraction module to extract one or more specified features from the raw biometric data, wherein the matcher module compares the extracted features against corresponding features from the biometric reference data.
17. The method as in claim 16 wherein in response to the authentication server generating a successful authentication indication, the user is provided with access to one or more resources managed by a relying party.
18. The method as in claim 16 wherein the web authentication application is further configured to register with the authentication server using a registration process comprising:
providing the raw biometric data to the authentication server;
a feature extraction module on the authentication server extracting specified features of the raw biometric data to generate biometric reference data; and
storing the biometric reference data in a secure storage accessible by the authentication server.
19. The method as in claim 13 wherein the web authentication application comprises a matcher module to compare the raw biometric data with biometric reference data associated with the user to determine a correlation between the raw biometric data and the biometric reference data.
20. The method as in claim 19 wherein a successful authentication is defined based on the correlation being above a specified threshold value, wherein an indication of a successful authentication is transmitted from the web authentication application to the authentication server.
21. The method as in claim 19 wherein the web authentication application further comprises a feature extraction module to extract one or more specified features from the raw biometric data, wherein the matcher module compares the extracted features against corresponding features from the biometric reference data.
22. The method as in claim 21 wherein in response to the web authentication application generating a successful authentication indication, the user is provided with access to one or more resources managed by a relying party.
23. The method as in claim 19 wherein the web authentication application is further configured to register with the authentication server using a registration process, wherein the web authentication application comprising a feature extraction module to extract specified features of the raw biometric data during registration to generate biometric reference data, the biometric reference data being stored within a secure storage accessible by the matcher module.
24. The method as in claim 23 wherein the registration process further comprises:
generating a public/private key pair on the client; and
transmitting a public key of the key pair to the authentication server, wherein the authentication server associates the public key with an account of the user and stores the public key in a secure storage.