Defense mechanism against component-wise hill climbing using synthetic face generators
AssigneeVisa International Service Association
InventorsSunpreet Arora, Kim Wagner, Saman Sarraf
Life of this patent
Estimating the term…
Abstract
Described herein are a system and techniques for identifying and preventing certain fraud attacks that may be used to defeat facial recognition systems. In embodiments of the system described herein, biometric data may be segregated into regions, which are then processed separately and in parallel. Likeness scores are determined for each of the separate regions. By tracking individual region likeness scores used in access requests in accordance with embodiments of the disclosure, the system is able to identify potential fraud attacks that cannot be detected using conventional systems.
Claims17
1-18. (canceled)
A method comprising:
- providing, by a client device to a biometric authentication server, an access request pertaining to a user, the access request providing a biometric sample, wherein the biometric authentication server is configured to:
- identify a plurality of regions within the biometric sample;
- determine, for each of the plurality of regions within the biometric sample, a likelihood value that the region matches a corresponding region within biometric information stored in association with the user;
- and
- determine, by the biometric authentication server based on the likelihood values and past likelihood values for each of the plurality of regions, a likelihood that the access request is associated with an attack by determining whether a majority of the regions of the plurality of regions of the biometric sample has a variance between past and current likelihood values within a threshold variance, and that a small number of the regions has a variance between past and current likelihood values that exceeds the threshold variance;
- and
- receiving, by the client device from the biometric authentication server, a response to the access request indicative of the determination of the likelihood that the access request is associated with the attack.
A system comprising:
- a client device comprising:
- a processor;
- and
- a memory including instructions that, when executed with the processor, cause the client device to, at least:
- provide, to a biometric authentication server, an access request pertaining to a user, the access request providing a biometric sample, wherein the biometric authentication server is configured to:
- identify a plurality of regions within the biometric sample;
- determine, for each of the plurality of regions within the biometric sample, a likelihood value that the region matches a corresponding region within biometric information stored in association with the user;
- and
- determine, by the biometric authentication server based on the likelihood values and past likelihood values for each of the plurality of regions, a likelihood that the access request is associated with an attack by determining that a majority of the regions of the plurality of regions of the biometric sample has a variance between past and current likelihood values within a threshold variance, and that a small number of the regions has a variance between past and current likelihood values that exceeds the threshold variance;
- and
- receive, from the biometric authentication server, a response to the access request indicative of the determination of the likelihood that the access request is associated with the attack;
- and
- the biometric authentication server.
Dependencies are inferred from the claim text.