Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06V—IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
  • G06V40/00—Recognition of biometric, human-related or animal-related patterns in image or video data
  • G06V40/10—Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
  • G06V40/16—Human faces, e.g. facial parts, sketches or expressions
  • G06V40/161—Detection; Localisation; Normalisation
  • G06V40/166—Detection; Localisation; Normalisation using acquisition arrangements
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06V—IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
  • G06V30/00—Character recognition; Recognising digital ink; Document-oriented image-based pattern recognition
  • G06V30/10—Character recognition
  • G06V30/14—Image acquisition
  • G06V30/142—Image acquisition using hand-held instruments; Constructional details of the instruments
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06V—IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
  • G06V30/00—Character recognition; Recognising digital ink; Document-oriented image-based pattern recognition
  • G06V30/10—Character recognition
  • G06V30/22—Character recognition characterised by the type of writing
  • G06V30/224—Character recognition characterised by the type of writing of printed characters having additional code marks or containing code marks
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06V—IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
  • G06V40/00—Recognition of biometric, human-related or animal-related patterns in image or video data
  • G06V40/10—Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
  • G06V40/18—Eye characteristics, e.g. of the iris
  • G06V40/19—Sensors therefor

Definitions

• the present invention relates to multi-factor authentication of a user and/or a mobile authentication device, wherein the use of a mobile telephone as the authentication device is particularly preferred.
• an authentication object such as a smart card, an authentication calculator, a mobile device equipped with a suitable software
• a biometric factor scanned by a specialized device (e.g., a fingerprint reader).
• Secret information entered by the user such as PIN, password, touch screen pattern, or otherwise acquired from the environment is commonly used as a second factor. This information entered by the user or otherwise acquired from the environment is called the second factor.
• the currently commercially available mobile devices such as phones or tablets, are equipped with two cameras, one camera being located on the side of the display (a so-called “selfie” camera), and the other camera being located on the opposite side of the device.
• Some devices also feature stereo cameras.
• the present invention provides a method for authenticating a user and/or a mobile device by means of an authentication image and of a mobile authentication device provided with a display and with at least two cameras located on mutually opposite sides of the mobile device, wherein the authentication image is scanned by a first camera of the mobile device located on a side which is opposite to the side comprising the mobile device display, and at the same time a biometric authentication factor from the head and/or body of the user is scanned/captured by a second camera of the mobile device located on the side comprising the mobile device display; the thus obtained data are then evaluated and, if the evaluation result is positive, the user and/or the mobile device are authenticated.
• the authentication image is an image destined for machine reading, such as a barcode, a QR code.
• the authentication image may be placed on a document or an object, or displayed on an electronic device display (e.g., a computer, a tablet, a mobile phone).
• the authentication image for displaying on an electronic device display can be obtained, for example, by generating an image by a target application or by another computer program.
• the user When scanning the authentication image, the user takes his mobile device and points its first camera to the authentication image to be scanned. Authentication software in the mobile device recognizes the image and initiates the authentication process. Softwares for scanning a machine-readable image, such as a QR code, usually display the image, which is being scanned, on the mobile device display, and the user visually checks on the display the correct location of the authentication image before and during scanning. This visual check is naturally performed by the user at roughly the same position of the body, head, face, eyes to the display and to the camera, respectively, to the entire device, while being in the field of vision of the second camera located on the side of the mobile device display.
• Softwares for scanning a machine-readable image such as a QR code
• the biometric authentication factor can be any biometric characteristic that can be scanned from the head and/or body of the user, in particular from the face or eyes of the user.
• this biometric authentication characteristic is scanned together (at the same time) with scanning the authentication image
• the present invention benefits from the fact that the user automatically assumes the same position of the body, the head, and parts thereof, such as the face and/or eyes while scanning the authentication image and checking its image and/or location on the mobile device display, and the user is in the field of vision of the second camera located on the side of the display.
• the user does not have to focus or force himself to assume a special position to scan the biometric authentication factor.
• the authentication mobile device is a mobile phone or a tablet.
• a vast majority of commercially available mobile phones and tablets are currently provided with two cameras suitable for performing the method of the invention.
• the biometric authentication factor and the authentication image can be scanned independently from each other in any suitable electromagnetic radiation wavelength range, i.e. visible light range, or invisible radiation such as IR, UV radiation.
• electromagnetic radiation wavelength range i.e. visible light range, or invisible radiation such as IR, UV radiation.
• Commercially available are also mobile devices equipped with stereo cameras for 3D image scanning. These cameras can also be advantageously used to scan both the biometric authentication factor and the authentication image.
• the advantages of the present invention include the fact that commonly available mobile devices can be used as authentication devices. Therefore, the user does not need to purchase any especially dedicated single-use biometric factor scanning devices. The user's activity in scanning both factors at the same time is natural; the method prevents unnecessary burdening of the user during the scanning of the biometric factor and does not impose any additional requirements on the user. Furthermore, the security of authentication is increased, and the potential attacker is in a more complicated situation than when any other way of scanning biometric data is used for authentication. It will be apparent to those skilled in the art that this method can be combined with the use of other authentication factors.
• the authentication image and the biometric factor, and optionally other authenticated factors scanned or inputted, are evaluated for authentication purposes by known methods. If the result of the evaluation is positive, the user is authenticated, i.e., it is confirmed that it is the authorized mobile device and that an authorized person operates the mobile device.
• a positive result of evaluation can typically include: compliance with predetermined reference values, or a positive result of a cryptographic operation such as verification of electronic signature value, or a predetermined minimum compliance with predefined reference values, or a positive result of evaluation of various partial positive evaluations.
• the authentication mobile device processes the biometric authentication factor data (e.g., the image of the head, face, eyes, or other part of the head, body, or a part thereof), and evaluates the processed data.
• the authentication mobile device then transmits the result of the evaluation to the authentication server. This can be done using known algorithms and methods of evaluation of biometric data.
• the authentication mobile device transmits the scanned image of the head, face, eyes, or other parts of the head, body, or a part thereof, carrying the biometric information, for processing to the authentication server as part of the authentication process.
• the authentication server evaluates the scanned image, using known algorithms and methods of evaluation of biometric data.
• the authentication mobile device processes the scanned image of the head, face, eyes, or other parts of the head, body, or a part thereof, carrying the biometric information, and performs a numerical transformation of the scanned image into a set of derived data, so-called descriptors.
• descriptors Known algorithms and methods of transforming biometric data may be used for the transformation.
• the computed descriptors are then transmitted by the authentication mobile device for evaluation to the authentication server as part of the authentication process.
• the authentication mobile device processes the scanned image of the head, face, eyes, or other parts of the head, body or a part thereof, carrying biometric information, and performs numerical transformation of the scanned image into a set of descriptors.
• the authentication mobile device modifies the computed descriptors by a pseudo-random authenticated shared secret and transmits the data resulting from the modification to the authentication server as part of the authentication process.
• the authentication server uses the authenticated shared secret for evaluation of the descriptors.
• the authentication mobile device processes the scanned image of the head, face, eyes or other parts of the head, body, or a part thereof, carrying biometric information, by means of a parametric transformation using a pseudo-random authenticated shared secret, and transmits the result of the transformation for processing to the authentication server as part of the authentication process.
• the authentication server reconstructs the scanned image by means of inverse parametric transformation using the pseudo-random authenticated shared secret, and evaluates the scanned image data. This can be done by known algorithms and methods of evaluation of biometric data.
• the authentication mobile device evaluates the scanned image of the head, face, eyes or other parts of the head, body, or a part thereof, carrying biometric information (this can be done by known algorithms and methods of evaluation of biometric data), and transmits the result of the evaluation to the authentication server.
• the target application or service provider may allow the user, for example, to access data, perform secure operations, and/or transmit data by an authenticated channel.
• the invention further includes a data processing device comprising means for carrying out the steps of the method of the invention.
• the invention further includes a computer program product comprising instructions which, when the program is executed by a mobile authentication device and/or by an authentication server, cause the mobile authentication device and/or the authentication server to carry out the steps of the method of the invention. Example of carrying out the invention
• a user uses as the authentication device a mobile phone with a display and two cameras located on mutually opposite sides of the mobile phone.
• the authentication image is a QR code printed on a document.
• the user launches on the mobile phone an authentication application that uses the QR Code Reader application.
• the user then directs a first camera, located on the opposite side of the mobile device than the side on which the display is located, to the printed QR code.
• the QR Code Reader application displays on the mobile device display the QR code and a frame in which the QR code must be placed during scanning.
• the authentication application uses a second camera, located on the same side of the mobile phone as the display, scans/captures the image of the user's face and reads or calculates biometric characteristics from the face image.
• the user naturally assumes the same face position to the mobile phone, so the scanning of the biometric characteristics does not imply any additional burden or any additional procedure for the user.
• the data obtained by scanning the QR code and by scanning the biometric characteristics of the user's face are then evaluated by known means and, when the evaluation result is positive, the user and/or the mobile device is authenticated.
• the present invention provides a method of multi-factor authentication of a user and/or a mobile authentication device, usable in particular when a mobile phone is used as the authentication means (or electronic identification means).
• the application or service provider may allow the user, for example, to access data, perform secure operations, and/or transmit data by an authenticated channel.

Landscapes

• Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Multimedia (AREA)
• Theoretical Computer Science (AREA)
• Health & Medical Sciences (AREA)
• General Health & Medical Sciences (AREA)
• Human Computer Interaction (AREA)
• Computer Vision & Pattern Recognition (AREA)
• Oral & Maxillofacial Surgery (AREA)
• Ophthalmology & Optometry (AREA)
• Collating Specific Patterns (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=61070240

Family Applications (1)

Country Status (2)

Cited By (1)

Citations (3)

Family Cites Families (3)

• 2016
  • 2016-12-23 CZ CZ2016-832A patent/CZ307156B6/cs not_active IP Right Cessation
• 2017
  • 2017-12-20 WO PCT/CZ2017/050062 patent/WO2018113803A1/en active Application Filing

Patent Citations (4)

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events