SECURE BIOMETRIC AUTHENTICATION FROM AN INSECURE DEVICE
Biometric authentication is enhanced by prompting an individual to perform an action challenge. For example, when an individual provides a facial picture for facial recognition to access secure data the individual may be prompted to provide a second picture of the individual performing an action. In one case, the individual is prompted to provide a second picture with an eye closed or an open mouth. The action challenge improves security by preventing attackers from spoofing an individual's biometric information. The enhanced biometric authentication may be used on mobile devices, such as mobile phones and laptop computers, to provide access to secure data, such as bank account information.
1 . A method, comprising:
requesting authentication information for an individual;
receiving authentication information for the individual;
presenting an action challenge to the individual;
receiving a response to the action challenge from the individual; and
authenticating the individual based at least on the authentication information and the action challenge response.
2 . The method of claim 1 , in which the authentication information is at least one of a fingerprint, an iris image, a facial image, and a username and password combination.
3 . The method of claim 1 , in which the action challenge is at least one of a picture challenge, a video challenge, and an audio challenge.
4 . The method of claim 1 , in which the authentication information is a picture of a face of the individual and the action challenge response is a picture of a different side of a head of the individual.
5 . The method of claim 1 , in which the step of requesting authentication information and the step of presenting an action challenge are performed by a client application.
6 . The method of claim 5 , in which the step of authenticating comprises:
transmitting, from the client application, the authentication information and the action challenge response to an authentication server; and
receiving, at the client application, an authentication response from the authentication server.
7 . The method of claim 5 , in which the client application is a mobile client application.
8 . A computer program product, comprising:
a computer-readable medium comprising:
code to request authentication information for an individual;
code to receive authentication information for the individual;
code to present an action challenge to the individual;
code to receive a response to the action challenge from the individual; and
code to authenticate the individual based at least on the authentication information and the action challenge response.
9 . The computer program product of claim 8 , in which the code to receive authentication information receives at least one of a fingerprint, an iris image, and a facial image.
10 . The computer program product of claim 8 , in which the code to receive the action challenge response receives at least one of a picture challenge, a video challenge, and an audio challenge.
11 . The computer program product of claim 8 , in which the code to receive the authentication information receives a picture of a face of the individual and the code to receive the action challenge response receives a picture of a different side of a head of the individual.
12 . The computer program product of claim 8 , in which the medium further comprises code to select an action challenge based on at least one of past history and available authentication data.
13 . The computer program product of claim 12 , in which the code to authenticate comprises:
code to transmit the authentication information and the action challenge response to an authentication server; and
code to receive an authentication response from the authentication server.
14 . An apparatus, comprising:
at least one processor and a memory coupled to the at least one processor, in which the at least one processor is configured:
to request authentication information for an individual;
to receive authentication information for the individual;
to present an action challenge to the individual;
to receive a response to the action challenge from the individual; and
to authenticate the individual based at least on the authentication information and the action challenge response.
15 . The apparatus of claim 14 , further comprising:
a fingerprint scanner coupled to the at least one processor; and
a camera coupled to the at least one processor, in which the at least one processor is further configured:
to receive the authentication information from the fingerprint scanner; and
to receive the action challenge response from the camera.
16 . The apparatus of claim 14 , further comprising a camera, in which the at least one processor is further configured:
to receive the authentication information from the camera; and
to receive the action challenge response from the camera.
17 . The apparatus of claim 14 , further comprising a microphone, in which the at least one processor is further configured:
to receive the action challenge response information; and
to authenticate the individual based, in part, on the audio challenge response information.
18 . The apparatus of claim 16 , further comprises a global positioning system (GPS) receiver, in which the at least one processor is further configured:
to receive position information from the GPS receiver; and
to authenticate the individual based, in part, on the position information.
19 . The apparatus of claim 16 , in which the camera is at least one of a still camera and a video camera.
20 . The apparatus of claim 19 , in which the apparatus is a mobile device, and the at least one processor is configured:
to receive a selection of an action challenge from a remote authentication server;
to transmit the authentication information and the action challenge response to the remote authentication server; and
to receive an authentication response from the remote authentication server.