Granted Patent B2

US 12,659,151 · App. 19/191,981 · Granted Jun 16, 2026

Inventors: Ross Rowland Kinder (Ann Arbor, MI); David Christopher Adrian (Denver, CO); Andrew Justin Caird (Ann Arbor, MI)

Assignee: Nametag Inc.

H04L9/30G06F21/32G06K7/10722G06K7/1417G06V40/171G06V40/172H04L9/088H04L63/0861

Abstract

Claims (81)

1 . A method, comprising:

establishing, by one or more servers, at a first time instance, an account associated with a user for an authentication service, wherein establishing the account comprises:

receiving, by the one or more servers, one or more images of an identification document (ID), at least one of the one or more images including a representation of a face of the user included on the ID;

receiving, by the one or more servers, a first biometric image of the user captured from a camera of a device;

determining, by the one or more servers, based on the first biometric image, a liveness condition of the user is satisfied when capturing the first biometric image;

determining, by the one or more servers, a biometric match between the first biometric image of the user and the representation of the face of the user included on the ID; and

establishing, by the one or more servers, the account for the user, the account including a computational representation of the first biometric image;

receiving, by the one or more servers, at a second time instance, a request to authenticate the user, the request including a second biometric image of the user;

determining, by the one or more servers, based on the second biometric image, the liveness condition of the user is satisfied when capturing the second biometric image;

validating, by the one or more servers, the second biometric image as being associated with the user, based on the second biometric image and the computational representation of the first biometric image satisfying a match condition; and

authenticating, by the one or more servers, the user responsive to validating the second biometric image.

2 . The method of claim 1 , wherein the computational representation comprises a feature set of the first biometric image.

3 . The method of claim 1 , wherein receiving the first biometric image comprises receiving the first biometric image of the user captured from a forward-facing camera of the device.

4 . The method of claim 1 , wherein establishing the account for the user comprises storing, by the one or more servers, in one or more data structures, an association between the computational representation of the first biometric image and an account identifier for the account.

5 . The method of claim 1 , wherein the request to authenticate the user corresponds to a request to bind the account of the user with a second device of the user, the method further comprising:

generating, by the one or more servers, a device key for the second device of the user, responsive to authenticating the user; and

storing, by the one or more servers, the device key in association with the account of the user.

6 . The method of claim 1 , wherein the request to authenticate the user corresponds to a request to recover the account of the user, the request including a first device key, the method further comprising:

determining, by the one or more servers, responsive to validating the second biometric image as being associated with the user, that the first device key is not associated with the account of the user; and

binding, by the one or more servers, the first device key to the account of the user.

7 . The method of claim 1 , wherein the request to authenticate the user corresponds to a request to authenticate the user to a third-party resource server, the method further comprising:

receiving, by the one or more servers, from the third-party resource server, a signal to authenticate the user of the third-party resource server;

receiving, by the one or more servers, at least the second biometric image of the user; and

transmitting, by the one or more servers, data corresponding to an authentication status to the third-party resource server responsive to the signal and based on the second biometric image.

8 . The method of claim 1 , wherein establishing the account further comprises:

verifying, by the one or more servers, the ID as a valid ID, based on:

a barcode represented on the ID being validated;

identity information encoded in the barcode matching corresponding identity information represented on the ID and determined using optical character recognition (OCR); and

the one or more images are live captured images of the ID.

9 . The method of claim 1 , wherein establishing the account further comprises:

computing, by the one or more servers, a value based on a match between the first biometric image and the representation of the user included on the ID,

wherein the biometric match between the first biometric image and the representation of the face of the user included on the ID is determined based on the value satisfying a match threshold.

10 . A system, comprising:

one or more servers configured to:

receive, responsive to a request to enroll a user with an authentication service, a plurality of images comprising one or more first images of an identification document (ID) and a selfie of the user, wherein the one or more first images including a representation of a face of the user included on the ID, identification information of the user included as text on the ID, and a barcode encoding identification information;

verify the ID as a valid ID, based on:

determining a liveness condition corresponding to capturing of the one or more first images is satisfied;

validating the barcode represented on the ID;

extracting, using optical character recognition (OCR), the identification information included as text on the ID;

determining, based on analysis of the barcode, the encoded identification information; and

determining a match between the extracted identification information included as text on the ID and the encoded information from the barcode;

determine the liveness condition of the user is satisfied when capturing the selfie;

compute a value based on a match between the representation of the face of the user included on the ID and the selfie; and

establish an account for the user with the authentication service, the account including a computational representation of the selfie, the account established responsive to the value satisfying a match threshold and the ID being verified as a valid ID.

11 . The system of claim 10 , wherein the selfie comprises a first selfie, wherein the one or more servers are further configured to:

receive a request to authenticate the user using the authentication service, the request including a second selfie of the user;

determine, based on the second selfie, the liveness condition of the user is satisfied when capturing the second selfie;

validate the second selfie as being associated with the user, based on the second selfie and the computational representation of the first selfie satisfying the match threshold; and

authenticate the user responsive to validating the second selfie.

12 . The system of claim 11 , wherein the request to authenticate the user corresponds to a request to bind the account of the user with a second device of the user, wherein the one or more servers are further configured to:

generate a device key for the second device of the user, responsive to authenticating the user; and

store the device key in association with the account of the user.

13 . The system of claim 11 , wherein the request to authenticate the user corresponds to a request to recover the account of the user, the request including a first device key, wherein the one or more servers are further configured to:

determine, responsive to validating the second selfie as being associated with the user, that the first device key is not associated with the account of the user; and

bind the first device key to the account of the user.

14 . The system of claim 11 , wherein the request to authenticate the user corresponds to a request to authenticate the user to a third-party resource server, wherein the one or more servers are further configured to:

receive, from the third-party resource server, a signal to authenticate the user of the third-party resource server;

receive at least the second selfie of the user; and

transmit data corresponding to an authentication status to the third-party resource server responsive to the signal and based on the second selfie.

15 . The system of claim 10 , wherein the computational representation comprises a feature set of the selfie.

16 . The system of claim 10 , wherein to establish the account for the user, the one or more servers are configured to store, in one or more data structures, an association between the computational representation of the selfie and an account identifier for the account.

17 . A method comprising:

receiving, by one or more servers from a client device of a user, via a session between the one or more servers and an service executing on the client device, based on a request to establish an account for the user, a plurality of images comprising:

a first image corresponding to a first side of a physical identification document (ID) captured using one or more image capture devices of the client device, a portion of the first image including a representation of the user depicted on the physical ID;

a second image corresponding to a second side of the physical ID captured using the one or more image capture devices of the client device; and

a third image of a face of the user captured using the one or more image capture devices;

determining, by the one or more servers, based on the third image, that the third image satisfies a liveness condition;

determining, by the one or more servers, based on the portion of the first image and the third image, that the face of the user included in the third image matches the representation of the user included in the portion of the first image; and

storing, by the one or more servers, in one or more data structures, an association between an account identifier for the user and a computational representation of the user, responsive to determining that i) the third image of the face of the user and ii) the third image, that the face of the user included in the third image matches the first portion.

18 . The method of claim 17 , further comprising:

receiving, by the one or more servers, subsequent to storing the association between the account identifier and the computational representation, a request to authenticate the user, the request including a fourth image of the face of the user captured using the one or more image capture devices;

determining, by the one or more servers, based on the fourth image, the liveness condition of the user is satisfied;

validating, by the one or more servers, the fourth image as being associated with the user, based on the fourth image and the computational representation of the user satisfying a match condition; and

authenticating, by the one or more servers, the user responsive to validating the fourth image.

19 . The method of claim 18 , wherein the request to authenticate the user corresponds to a request to bind the account of the user with a second device of the user, the method further comprising:

generating, by the one or more servers, a device key for the second device of the user, responsive to authenticating the user; and

storing, in the one or more data structures, the device key in association with the account identifier.

20 . The method of claim 18 , wherein the request to authenticate the user corresponds to a request to authenticate the user to a third-party resource server, the method further comprising:

receiving, by the one or more servers, from the third-party resource server, a signal to authenticate the user of the third-party resource server;

receiving, by the one or more servers, at least the fourth image; and

transmitting, by the one or more servers, to the third-party resource server, data corresponding to an authentication status responsive to the signal and based on the fourth image.

Assignments (1)

Continuity (4)

References Cited (26)