# US 2021/0279316 A1 · Anti-replay authentication systems and methods > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0279316 A1 - Document ID: US20210279316A1 - Status: Published application - Kind: A1 - Application number: 17/183,303 - Filed: 2021-02-23 - Published: 2021-09-09 - Earliest claimed: 2016-07-29 - Assignees: Trusona, Inc. - Applicants: Trusona, Inc. - Inventors: Ori Eisen; Clayton Lengel-Zigich; Nikolas Mangu-Thitu - Web page: https://patentgrep.com/patent/US20210279316A1 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/55: Detecting local intrusion or implementing counter-measures - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06V 10/147: Details of sensors, e.g. sensor lenses (fingerprint or palmprint sensors G06V40/13; vascular sensors G06V40/145; eye sensors G06V40/19) - G06V 10/242: {by image rotation, e.g. by 90 degrees} - G06V 30/40: Document-oriented image-based pattern recognition - G06F 2221/034: Test or assess a computer or a system - G06V 40/172: {Classification, e.g. identification} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING ## Abstract Systems and methods for authentication with resistance to replay attacks are provided. A device may be used to capture image data of a user to authenticate or identify the user. Authentication information may be obtained by processing and analyzing the captured image data. Data about a state of the imaging device and the captured image data may be used for fraud detection. The data may be collected when the image data is processed and analyzed. The state of the imaging device and captured image data are unlikely to be repeated. The detected repetition of a state of the imaging device and captured image data may be a cause for increasing the likelihood that a replay attack is taking place. The device may be used to perform a transaction. ## Claims ### Claim 1 A method for authenticating a user or a transaction, the method comprising: capturing image data of a user using a user device, wherein the image data includes at least a portion of a face of the user; obtaining identification information about the user from the image data; collecting nonce data comprising a characteristic of the image data that is unique to the user device at a moment in time during which the nonce data is collected; and authenticating, with aid of one or more processors, the user or the transaction based on (1) the identification information and (2) the nonce data. ### Claim 2 (depends on 1) The method of claim 1, wherein the nonce data further comprises a checksum value derived from the image data. ### Claim 3 (depends on 2) The method of claim 2, wherein the checksum value is derived based on the characteristic of the image data. ### Claim 4 (depends on 1) The method of claim 1, wherein the characteristic of the image data comprises at least one of the following: (i) one or more parameters produced during image processing, (ii) one or more properties of the raw image data, and (iii) one or more properties of the processed image data. ### Claim 5 (depends on 1) The method of claim 1, wherein the nonce data further comprises a checksum value derived from a physical state of the user device. ### Claim 6 (depends on 5) The method of claim 5, wherein the physical state of the user device comprises data indicative of a physical state of a component of the user device, and wherein the component is selected from the group comprising an imaging device, a power supply unit, a processor, and a memory. ### Claim 7 (depends on 5) The method of claim 5, wherein the physical state of the user device is obtained using sensor data collected by one or more sensors. ### Claim 8 (depends on 1) The method of claim 1, wherein the nonce data is encrypted such that when the nonce data comprises two or more factors, and these factors are not accessible by the one or more processors. ### Claim 9 (depends on 1) The method of claim 1, wherein the nonce data and identification information are compared with a previously collected nonce data and a previously collected identification information to determine a presence of a replay attack. ### Claim 10 (depends on 1) The method of claim 1, wherein the image data of the user is a live image. ### Claim 11 A system for performing authentication of a user or a transaction, the system comprising: a server in communication with a user device configured to permit a user to perform a transaction, wherein the server comprises: (i) a memory for storing a set of software instructions, and (ii) one or more processors configured to execute the set of software instructions to: receive an image data of the user from the user device, wherein the image data includes at least a portion of a face of the user; receive nonce data comprising a characteristic of the image data that is unique to the user device at a moment in time during which the nonce data is collected; obtain identification information about the user from the image data; and authenticate the user or the transaction based on (1) the identification information and (2) the nonce data. ### Claim 12 (depends on 11) The system of claim 11, wherein the nonce data further comprises a checksum value derived from the image data. ### Claim 13 (depends on 12) The system of claim 12, wherein the checksum value is derived based on the characteristic of the image data. ### Claim 14 (depends on 12) The system of claim 12, wherein the checksum value is derived on-board the user device. ### Claim 15 (depends on 12) The system of claim 12, wherein the checksum value is derived on-board the server. ### Claim 16 (depends on 11) The system of claim 11, wherein the characteristic of the image data comprises at least one of the following: (i) one or more parameters produced during image processing, (ii) one or more properties of the raw image data, and (iii) one or more properties of the processed image data. ### Claim 17 (depends on 11) The system of claim 11, wherein the nonce data further comprises a checksum value derived from a physical state of the user device. ### Claim 18 (depends on 17) The system of claim 17, wherein the physical state of the user device comprises data indicative of a physical state of a component of the user device, and wherein the component is selected from the group comprising an imaging device, a power supply unit, a processor, and a memory. ### Claim 19 (depends on 17) The system of claim 17, wherein the physical state of the user device is obtained using sensor data collected by one or more sensors. ### Claim 20 (depends on 11) The system of claim 11, wherein the image data of the user is a live image.