Pupil or iris tracking for liveness detection in authentication processes

1. A method, comprising:

receiving, via a user interface of an electronic device, a user identification from a user for accessing an electronic service;

recording, by a camera communicatively coupled to the electronic device, a video of the user in response to receiving the user identification;

extracting, by the electronic device or a second electronic device, a set of frames from the recorded video of the user;

executing, by the electronic device or the second electronic device, a face matching process that uses the user identification and one or more frames of the set of frames as input;

measuring, by the electronic device or the second electronic device, an amount of movement of a pupil or an iris of an eye of the face of the user over the set of frames, in response to a recorded face of the user in the one or more frames of the set of frames matching stored face data associated with the user identification according to the face matching process; and

determining, by the electronic device or the second electronic device, to perform a security action based on the amount of movement of the pupil or the iris;

wherein the measuring of the amounts of movement of the pupil or iris comprises, for each pupil center and for each frame of the set of frames:

measuring a distance between the pupil center and a lateral corner of the eye comprising the pupil center; and

measuring a distance between the pupil center and a medial corner of the eye comprising the pupil center.

2. The method of claim 1 , further comprising:

measuring, by the electronic device or the second electronic device, an amount of movement of a second pupil or a second iris of a second eye of the face of the user over the set of frames, in response to the recorded face matching the stored face data according to the face matching process; and

determining, by the electronic device or the second electronic device, to perform the security action based on the amount of movement of the pupil or the iris as well as the amount of movement of the second pupil or the second iris.

3. The method of claim 2 , wherein the measuring of the amounts of movement of the first and second pupils or irises comprises locating pupil centers of each pupil of the face and tracking the movements of the pupil centers over the extracted set of frames.

4. The method of claim 3 , wherein the measuring of the amounts of movement of the first and second pupils or irises comprises, for each pupil center and for each frame of the set of frames:

measuring a distance between the pupil center and a lateral palpebral commissure of the eye comprising the pupil center; and

measuring a distance between the pupil center and a medial palpebral commissure of the eye comprising the pupil center.

5. The method of claim 4 , wherein determining to perform the security action based on the amount of movement of the pupil or the iris as well as the amount of movement of the second pupil or the second iris, comprises comparing the measured distances from each frame of the frame set to generate a distance similarity score representative of similarity between the measured distances from frame to frame, and

wherein the method further comprises determining to perform the security action and performing the security action, in response to the distance similarity score being below a distance similarity threshold.

6. The method of claim 4 , wherein determining to perform the security action based on the amount of movement of the pupil or the iris as well as the amount of movement of the second pupil or the second iris comprises:

comparing the measured distances from each frame of the frame set to generate respective distance similarity scores for each eye representative of similarity between the measured distances from frame to frame for each eye; and

determining an average distance similarity score based on the distance similarity score for each eye, and

wherein the method further comprises determining to perform the security action and performing the security action, in response to the average distance similarity score being below a distance similarity threshold.

7. The method of claim 1 , wherein the user identification is manually entered into the user interface by the user or wherein the user identification is stored on or part of a device and automatically entered into the user interface.

8. The method of claim 1 , further comprising:

comparing, by the electronic device or the second electronic device, the amount of measured movement of the pupil or the iris of the user to a threshold to determine whether the measured amount of movement of the pupil or the iris is below the threshold; and

performing, by the electronic device or the second electronic device, the security action in response to the measured amount movement of the pupil or the iris being below the threshold.

9. The method of claim 8 , further comprising:

measuring, by the electronic device or the second electronic device, an amount of movement of a second pupil or a second iris of a second eye of the face of the user over the set of frames, in response to the recorded face matching the stored face data according to the face matching process;

comparing, by the electronic device or the second electronic device, the measured amount of movement of the second pupil or the second iris of the user to the threshold to determine whether the measured amount of movement of the second pupil or the second iris is below the threshold; and

performing, by the electronic device or the second electronic device, a second security action in response to the measured amount movement of the pupil or the iris being below the threshold as well as the measured amount movement of the second pupil or the second iris being below the threshold.

10. The method of claim 8 , wherein the measuring of the amount of movement of the pupil comprises, for each frame in the set of frames:

identifying a first point in the pupil or the iris and a second point in a corner of the eye; and

measuring a distance between the first point and the second point.

11. The method of claim 10 , wherein identifying the second point comprises identifying the second point in a palpebral commissure of the eye.

12. The method of claim 11 , wherein identifying the first point comprises identifying the first point in a central region of the pupil.

13. The method of claim 8 , wherein the measuring of the amount of movement of the pupil or iris comprises, for each frame in the set of frames:

identifying a point in the pupil, a point in a lateral palpebral commissure of the eye, and a point in a medial palpebral commissure of the eye;

measuring a distance between the point in the pupil and the point in the lateral palpebral commissure; and

measuring a distance between the point in the pupil and the point in the medial palpebral commissure.

14. The method of claim 1 , wherein the face matching process comprises:

retrieving, from a database of the electronic service, the stored face data associated with the user identification; and

comparing the stored face data to a recorded image of the face of the user in the one or more frames of the set of frames to identify whether the recorded image of the face of the user matches the stored face data, and

wherein the comparing the stored face data to the recorded image of the face of the user comprises:

segmenting parts of the recorded image prior to comparing the recorded image to the stored face data; and

comparing facial features within the segmented parts of the recorded image to corresponding facial features in the stored face data.

15. The method of claim 1 , further comprising performing, by the electronic device or the second electronic device, the security action in response to determining to perform the security action, wherein the security action comprises either:

tagging, by the electronic device or the second electronic device, the accessing of the electronic service as suspicious; or

blocking, by the electronic device or the second electronic device, the user from accessing the service via the electronic device.

16. The method of claim 1 , further comprising:

initiating, by the electronic device or the second electronic device, an authentication process for the electronic service, in response to receiving the user identification;

inducing, by the user interface of the electronic device, the user to adjust a gaze direction of the eyes of the user, in response to initiating the authentication process; and

recording, by the camera, the video of the user in response to initiating the authentication process for the service and during the inducing of the user to adjust the gaze direction.

17. The method of claim 16 , wherein the security action comprises either:

ending, by the electronic device or the second electronic device, the authentication process of the service;

continuing the authentication process and increasing the number of factors used in the authentication process when the authentication process comprises a multi-factor authentication process; or

continuing the authentication process and changing the authentication process to a multi-factor authentication process when the authentication process initially comprises a single-factor authentication process.

18. A system, comprising:

a user interface of an electronic device, configured to receive a user identification from a user for accessing an electronic service;

a camera communicatively coupled to the electronic device, configured to record a video of the user in response to the electronic device receiving the user identification; and

the electronic device or a second electronic device, configured to:

extract a set of frames from the recorded video of the user;

execute a face matching process that uses the user identification and one or more frames of the set of frames as input;

measure an amount of movement of a pupil or an iris of an eye of the face of the user over the set of frames, in response to a recorded face of the user in the one or more frames of the set of frames matching stored face data associated with the user identification according to the face matching process; and

determine to perform a security action based on the amount of movement of the pupil or the iris;

wherein the measuring of the amounts of movement of the pupil or iris comprises, for each pupil center and for each frame of the set of frames:

measuring a distance between the pupil center and a lateral corner of the eye comprising the pupil center; and

measuring a distance between the pupil center and a medial corner of the eye comprising the pupil center.

19. A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to:

receive, via a user interface, a user identification from a user for accessing an electronic service;

control recording, by a camera, a video of the user in response to receiving the user identification;

extract a set of frames from the recorded video of the user;

execute a face matching process that uses the user identification and one or more frames of the set of frames as input;

measure an amount of movement of a pupil or an iris of an eye of the face of the user over the set of frames, in response to a recorded face of the user in the one or more frames of the set of frames matching stored face data associated with the user identification according to the face matching process; and

determine to perform a security action based on the amount of movement of the pupil or the iris;

wherein the measure of the amounts of movement of the pupil or iris comprises, for each pupil center and for each frame of the set of frames:

measuring a distance between the pupil center and a lateral corner of the eye comprising the pupil center; and

measuring a distance between the pupil center and a medial corner of the eye comprising the pupil center.

20. A system, comprising:

a user interface of an electronic device, configured to receive a user identification from a user for accessing an electronic service;

a camera communicatively coupled to the electronic device, configured to record a video of the user in response to the electronic device receiving the user identification; and

the electronic device or a second electronic device, configured to:

extract a set of frames from the recorded video of the user;

execute a face matching process that uses the user identification and one or more frames of the set of frames as input;

measure an amount of movement of a pupil or an iris of an eye of the face of the user over the set of frames, in response to a recorded face of the user in the one or more frames of the set of frames matching stored face data associated with the user identification according to the face matching process, wherein the measure of the amount of movement of the pupil comprises, for each frame in the set of frames:

identify a first point in the pupil or the iris and a second point in a corner of the eye; and

measuring a distance between the first point and the second point;

determine to perform a security action based on the amount of movement of the pupil or the iris;

compare the amount of measured movement of the pupil or the iris of the user to a threshold to determine whether the measured amount of movement of the pupil or the iris is below the threshold; and

perform the security action in response to the measured amount movement of the pupil or the iris being below the threshold.