Methods, systems, and media for anti-spoofing using eye-tracking
AssigneeElement Inc.
InventorsFengjun Lv, Dushyant Goyal, Yang Wang
Life of this patent
Estimating the term…
Abstract
Provided herein is are computer-implemented methods, computer-implemented systems, and non-transitory computer-readable storage media for registering a user's eye gaze profile via a mobile device having a screen and a front facing camera. Also provided herein is are computer-implemented methods, computer-implemented systems, and non-transitory computer-readable storage media for determining a spoofing attempt by a user during a request to access a resource via a mobile device.
Claims25
A computer-implemented method of determining a spoofing attempt by a user during a request to access a resource via a mobile device having a screen and a front facing camera,the method comprising:
- (a) receiving a user eye gaze profile comprising a plurality of registration eye gaze images of the user, wherein two or more of the plurality of registration eye gaze images differ in a registration gaze location, a registration gaze display period, or both;
- (b) displaying a sequence of two or more authentication eye gaze icons, wherein the sequence of authentication eye gaze icons are displayed with a random authentication gaze location, a random authentication gaze display period, a random number of subsequent authentication gaze locations, or any combination thereof on the screen of the mobile device;
- (c) determining that the user's gaze is directed towards the authentication gaze location of at least a portion of the authentication gaze icons during the display of the authentication eye gaze icons based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (d) capturing a plurality of authentication eye gaze images of the user, using the front facing camera, wherein each authentication eye gaze image is captured during the display of one of the plurality of authentication gaze icons;
- and
- (e) determining that a spoofing attempt has occurred if at least a portion of the authentication eye gaze images has a similarity score below an authentication threshold with the registration eye gaze images associated with the registration display location that is equivalent to the authentication gaze location of the authentication eye gaze icons;
- wherein the user's eye gaze profile is registered by steps comprising:
- (f) displaying a registration eye gaze icon, wherein the registration eye gaze icon is displayed in a different registration display location on the screen of the mobile device;
- (g) determining that the user's gaze is directed towards the registration display location of the registration gaze icon during the display of the registration eye gaze icon based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (h) capturing the registration eye gaze image of the user, wherein the registration eye gaze image is captured during the display of the registration gaze icon;
- and
- (i) creating the user's eye gaze profile comprising the captured registration eye gaze image of the user during the display of the registration gaze icon, wherein the captured registration eye gaze image is associated with the registration display location of the registration gaze icon.
A computer-implemented system comprising:
- a digital processing device comprising:
- at least one processor, an operating system configured to perform executable instructions, a memory, and a computer program including instructions executable by the digital processing device to create an application to determine a spoofing attempt by a user during a request to access a resource via a mobile device having a screen and a front facing camera, the application comprising:
- (a) a module receiving a user eye gaze profile comprising a plurality of registration eye gaze images of the user, wherein two or more of the plurality of registration eye gaze images differ in a registration gaze location, a registration gaze display period, or both;
- (b) a module displaying a sequence of two or more authentication eye gaze icons, wherein the sequence of authentication eye gaze icons are displayed with a random authentication gaze location, a random authentication gaze display period, a random number of subsequent authentication gaze locations, or any combination thereof on the screen of the mobile device;
- (c) a module determining that the user's gaze is directed towards the authentication gaze location of at least a portion of the authentication gaze icons during the display of the authentication eye gaze icons based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (d) a module capturing a plurality of authentication eye gaze images of the user, wherein each authentication eye gaze image is captured during the display of one of the plurality of authentication gaze icons;
- and
- (e) a module determining that a spoofing attempt has occurred if at least a portion of the authentication eye gaze images has a similarity score below an authentication threshold with the registration eye gaze images associated with the registration display location that is equivalent to the authentication gaze location of the authentication eye gaze icons;
- wherein the user's eye gaze profile is registered by:
- (f) a module displaying a registration eye gaze icon, wherein the registration eye gaze icon is displayed in a different registration display location on the screen of the mobile device;
- (g) a module determining that the user's gaze is directed towards the registration display location of the registration gaze icon during the display of the registration eye gaze icon based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (h) a module capturing the registration eye gaze image of the user, wherein the registration eye gaze image is captured during the display of the registration gaze icon;
- and
- (i) a module creating the user's eye gaze profile comprising the captured registration eye gaze image of the user during the display of the registration gaze icon, wherein the captured registration eye gaze image is associated with the registration display location of the registration gaze icon.
A non-transitory computer-readable storage media encoded with a computer program including instructions executable by a processor to create an application to determine a spoofing attempt by a user during a request to access a resource via a mobile device having a screen and a front facing camera, the application comprising:
- (a) a module receiving a user eye gaze profile comprising a plurality of registration eye gaze images of the user, wherein two or more of the plurality of registration eye gaze images differ in a registration gaze location, a registration gaze display period, or both;
- (b) a module displaying a sequence of two or more authentication eye gaze icons, wherein the sequence of authentication eye gaze icons are displayed with a random authentication gaze location, a random authentication gaze display period, a random number of subsequent authentication gaze locations, or any combination thereof on the screen of the mobile device;
- (c) a module determining that the user's gaze is directed towards the authentication gaze location of at least a portion of the authentication gaze icons during the display of the authentication eye gaze icons based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (d) a module capturing a plurality of authentication eye gaze images of the user, wherein each authentication eye gaze image is captured during the display of one of the plurality of authentication gaze icons;
- and
- (e) a module determining that a spoofing attempt has occurred if at least a portion of the authentication eye gaze images has a similarity score below an authentication threshold with the registration eye gaze images associated with the registration display location that is equivalent to the authentication gaze location of the authentication eye gaze icons;
- wherein the user's eye gaze profile is registered by:
- (f) a module displaying a registration eye gaze icon, wherein the registration eye gaze icon is displayed in a different registration display location on the screen of the mobile device;
- (g) a module determining that the user's gaze is directed towards the registration display location of the registration gaze icon during the display of the registration eye gaze icon based on a position of the user's eyes, a path of the user's eyes, or both, with respect to the mobile device and independently of a position of the user's head and a movement of the user's head with respect to the mobile device;
- (h) a module capturing the registration eye gaze image of the user, wherein the registration eye gaze image is captured during the display of the registration gaze icon;
- and
- (i) a module creating the user's eye gaze profile comprising the captured registration eye gaze images of the user during the display of the registration gaze icon, wherein the captured registration eye gaze image is associated with the registration display location of the registration gaze icon.
Dependencies are inferred from the claim text.