Methods and systems for multiple factor authentication using gaze tracking and iris scanning
AssigneeUniversity of Alaska
InventorsBogdan Hoanca, Kenrick Mock
Life of this patent
Estimating the term…
Abstract
Methods and systems for multiple factor authentication combining eye tracking hardware with iris scanning. The resulting multiple factor authentication is a highly secure and highly accurate authentication procedure. Iris scanning provides excellent identification and eye tracking provides the information that the iris is live and provides identification capabilities based on the eye movement itself while enabling gaze-based password entry.
Claims21
A method for multiple factor authentication of a user comprising:
- a. performing, by a computer, iris recognition for user authentication;
- b. performing, by the computer, biometric eye tracking for user authentication;
- c. performing, by the computer, password entry via eye tracking for user authentication, wherein performing password entry via eye tracking for user authentication comprises;
- determining a plurality of estimated locations where an eye of the user is focused in a series,
- receiving data associated with the plurality of estimated locations,
- comparing the received data with a reference password,
- implementing error correction, wherein the implementing error correction comprises,
- determining whether the plurality of estimated locations follows a pattern that comprises k<S occurrences of event A and S−k occurrences of event N, wherein k is the number of locations correctly identified by the user, S is the total number of the plurality of estimated locations, A is an event wherein the estimated location is at a correct location, and N is an event wherein the estimated location is at a neighbor location,
- determining an authentication probability given by
- p
- A
-
- (
- k
- )
- =
- p
-
- (
- k
- )
- p
-
- (
- s
- )
- ,
- comparing the authentication probability to a probability that the occurrence of the pattern is due to a random try, and
- successfully authenticating the user if the authentication probability is greater than the probability that the occurrence of the pattern is due to a random try,
- successfully authenticating, by the computer, the user if the received data matches the reference password;
- and
- d. authenticating, by the computer, the user upon successful authentication of a-c.
A system for multiple factor authentication of a user comprising:
- a display device configured for displaying an image to the user;
- an eye imaging device configured for taking an image of an iris of the user and for tracking movement of an eye of the user;
- a memory configured for storing a reference image, a reference password, a velocity and a pupil diameter of a known user;
- and
- a processor coupled to the display device, the eye imaging device and the memory, the processor configured for
- a. performing iris recognition for user authentication,
- b. performing biometric eye tracking for user authentication;
- c. performing password entry via eye tracking for user authentication, wherein performing password entry via eye tracking for user authentication comprises;
- determining a plurality of estimated locations where an eye of the user is focused in a series,
- receiving data associated with the plurality of estimated locations,
- comparing the received data with a reference password,
- implementing error correction, wherein the implementing error correction comprises,
- determining whether the plurality of estimated locations follows a pattern that comprises k<S occurrences of event A and S−k occurrences of event N, wherein k is the number of locations correctly identified by the user, S is the total number of the plurality of estimated locations, A is an event wherein the estimated location is at a correct location, and N is an event wherein the estimated location is at a neighbor location,
- determining an authentication probability given by
- p
- A
-
- (
- k
- )
- =
- p
-
- (
- k
- )
- p
-
- (
- s
- )
- ,
- comparing the authentication probability to a probability that the occurrence of the pattern is due to a random try, and
- successfully authenticating the user if the authentication probability is greater than the probability that the occurrence of the pattern is due to a random try,
- successfully authenticating the user if the received data matches the reference password;
- and
- d. authenticating the user upon successful authentication of a-c.
A non-transitory computer readable storage medium for multiple factor authentication of a user comprising computer executable instruction embodied thereon comprising:
- a. performing iris recognition for user authentication,
- b. performing biometric eye tracking for user authentication;
- c. performing password entry via eye tracking for user authentication, wherein performing password entry via eye tracking for user authentication comprises;
- determining a plurality of estimated locations where an eye of the user is focused in a series,
- receiving data associated with the plurality of estimated locations,
- comparing the received data with a reference password,
- implementing error correction, wherein the implementing error correction comprises,
- determining whether the plurality of estimated locations follows a pattern that comprises k<S occurrences of event A and S−k occurrences of event N, wherein k is the number of locations correctly identified by the user, S is the total number of the plurality of estimated locations, A is an event wherein the estimated location is at a correct location, and N is an event wherein the estimated location is at a neighbor location,
- determining an authentication probability given by
- p
- A
-
- (
- k
- )
- =
- p
-
- (
- k
- )
- p
-
- (
- s
- )
- ,
- comparing the authentication probability to a probability that the occurrence of the pattern is due to a random try, and
- successfully authenticating the user if the authentication probability is greater than the probability that the occurrence of the pattern is due to a random try,
- successfully authenticating, by the computer, the user if the received data matches the reference password;
- and
- d. authenticating the user upon successful authentication of a-c.
A method for multiple factor authentication of a user comprising:
- a. performing, by a computer, iris recognition for user authentication;
- b. performing, by the computer, biometric eye tracking for user authentication;
- c. performing, by the computer, password entry via eye tracking for user authentication, wherein performing password entry via eye tracking for user authentication comprises,
- determining a plurality of estimated locations where an eye of the user is focused in a series,
- receiving data associated with the plurality of estimated locations,
- comparing the received data with a reference password,
- implementing error correction, wherein the implementing error correction comprises,
- determining a probability over successive authentication sessions that a given pattern of events A and N is due to a user encountering random errors, wherein A is an event wherein the estimated location is at a correct location, and N is an event wherein the estimated location is at a neighbor location, and
- successfully authenticating the user if the probability of the pattern being caused by errors is above a predetermined threshold wherein the predetermined threshold is prand(k)=CSkpk(1−p)S-k, where
- p
- =
- 1
- n
- ,
- n being the number of possible locations on a where screen, and CSk is the number of combinations of k elements out of a set of S, and
- successfully authenticating the user if the received data matches the reference password;
- and
- d. authenticating, by the computer, the user upon successful authentication of a-c.
Dependencies are inferred from the claim text.