# US 9,374,364 B2 · Method and system for implementing video two factor authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,374,364 B2
- Document ID: US9374364B2
- Status: Granted
- Kind: B2
- Application number: 14/055,747
- Filed: 2013-10-16
- Published: 2015-04-16
- Granted: 2016-06-21
- Earliest claimed: 2013-10-16
- Assignees: Teleperformance SE
- Applicants: Evan Davis; Mitch Felling; Lyle Hardy; Justin Long
- Inventors: Evan Davis; Mitch Felling; Lyle Hardy; Justin Long
- Web page: https://patentgrep.com/patent/US9374364B2

## CPC

- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- H04L 2463/082: applying multi-factor authentication
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method for authentication includes receiving a log-in request at a first client computer, and capturing user information with the request. The method includes capturing an image of the user, and sending a request for authentication, including the user information and image, to an authentication server. The method includes determining a representative user based on the user information, and determining an authorizing agent responsible for authorizing the representative user. The method includes sending the authentication request to a client computer associated with the authorizing agent, and providing verified identification information of the representative user along with the request so that the authorizing agent can perform authentication of the requesting user based on the user information, the captured image, and the verified identification information. The method includes receiving a result of the authentication, and controlling access by the first client computer to a secure data center based on the result.

## Claims

### Claim 1

A method for authentication, comprising:
receiving a log-in request initiated by a user at a first client computer;
capturing user information associated with said log-in request;
capturing an image of said user from a live feed to said first client computer;
sending in real-time a request for authentication of said user from said first client computer to an authentication server over a network, wherein said request for authentication comprises said user information and said image;
determining a representative user based on said user information at said authentication server;
at said authentication server, accessing verified identification information associated with said representative user;
at said authentication server, determining an authorizing agent responsible for authorizing said representative user;
sending said request for authentication from said authentication server to a second client computer associated with said authorizing agent, wherein said request comprises said user information and said image;
receiving an acceptance of said request at said authentication server from said second client computer;
in response to receipt of said acceptance, providing said verified identification information related to said representative user to said second client computer so that said authorizing agent can perform authentication of said user based on said user information, said image, and said verified identification information;
receiving a result of said authentication at said authentication server from said second client computer; and
controlling access over said network by said first client computer to one or more resources located at a secure data center based on said result.

### Claim 2 (depends on 1)

The method of claim 1, wherein said controlling access further comprises:
granting access based on a successful authentication; and
denying access based on an unsuccessful authentication.

### Claim 3 (depends on 1)

The method of claim 1, wherein said receiving a log-in request comprises:
presenting a log-in window for authorizing access to a desktop operated by said first client computer;
interrupting an authorization process associated with said log-in window;
initiating a video capture on said first client computer, wherein said video capture is configured to capture at least one image; and
requesting a capture of said image.

### Claim 4 (depends on 1)

The method of claim 1, wherein said capturing an image further comprises:
in response to activation of an activator, capturing said image that comprises a facial view of said user as aligned by said user;
determining whether said image meets a threshold; and
attaching said image to said request for authentication when said image meets said threshold.

### Claim 5 (depends on 1)

The method of claim 1, further comprising:
capturing an image of a work environment associated with said user;
sending said image of a work environment to said second client computer associated with said authorizing agent for validation of said work environment;
evaluating said work environment by said authorizing agent;
receiving feedback on said work environment at said second client computer; and
sending said feedback from said second client computer to said first client computer.

### Claim 6 (depends on 5)

The method of claim 5, further comprising:
remotely adjusting from said second client computer a viewpoint of a camera capturing said image of said work environment.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
sending a request for reauthorization from said second client computer to said first client computer;
capturing a second image of said user;
sending said second image to said second client computer;
providing said verified identification information related to said user to said second client computer along with said second image; and
performing re-authentication of said user by said authorizing agent based on said second image, and said verified identification information; and
controlling access by said first client computer based on a result of said re-authentication.

### Claim 8 (depends on 1)

The method of claim 1, wherein said providing verified identification information further comprises:
accessing a previously captured image of said representative user associated with a successful authentication of said representative user, wherein said previously captured image was used for authenticating said user while processing a previous request for authentication; and
attaching said previously captured image to said request for authentication for use in verifying said user in said request for authentication currently processed.

### Claim 9 (depends on 1)

The method of claim 1, further comprising:
authenticating said user information in association with said representative user;
denying access based on an unsuccessful authentication of said user information; and
sending said request for authentication to said second client computer based on a successful authentication of said user information.

### Claim 10 (depends on 1)

The method of claim 1, wherein said first client computer is situated in a work-at-home environment.

### Claim 11 (depends on 1)

The method of claim 1, wherein said first client computer is situated in a physical work station.

### Claim 12 (depends on 1)

The method of claim 1, further comprising:
establishing a remote communication session between said secure data center and said first client computer upon successful authentication of said user.

### Claim 13

A method for authentication, comprising:
receiving a request for real-time authentication from a first client computer over a network, wherein said request comprises user information associated with a log-in request initiated by a user at said first client computer to establish communication with a back-end data center, wherein said back-end data center provides computing resources for said first client computer over said network, and wherein said request comprises an image of said user captured from a live feed at said first client computer;
determining a representative user based on said user information;
accessing verified identification information associate with said representative user;
determining an authorizing agent responsible for authorizing said representative user;
sending said request for real-time authentication to a second client computer associated with said authorizing agent;
receiving an acceptance of said request from said second client computer;
in response to receipt of said acceptance, providing said verified identification information related to said representative user to said second client computer along with said request so that said authorizing agent can perform real-time authentication of said user based on said user information, said image, and said verified identification information;
receiving a result of said real-time authentication from said second client computer; and
controlling access over said network by said first client computer to one or more resources located at said back-end data center based on said result.

### Claim 14 (depends on 13)

The method of claim 13, wherein said providing verified identification information further comprises:
accessing a previously captured image of said representative user associated a successful real-time authentication of said representative user wherein said previously captured image was used for authenticating said user while processing a previous request for authentication; and
attaching said previously captured image to said request for real-time authentication for use in verifying said user in said request for real-time authentication currently processed.

### Claim 15 (depends on 13)

The method of claim 13, further comprising:
storing said captured image in said back-end data center based on a successful result.

### Claim 16 (depends on 13)

The method of claim 13, further comprising:
authenticating said user information in association with said representative user;
denying access based on an unsuccessful authentication of said user information; and
sending said request for authentication to said second client computer based on a successful authentication of said user information.

### Claim 17 (depends on 13)

The method of claim 13, further comprising:
establishing a remote communication session between said secure data center and said first client computer based upon successful authentication of said user.

### Claim 18

A system for authentication, comprising:
a first client computer associated with a user, said first client computer configured to receive a log-in request initiated by said user and capture user information associated with said log-in request;
an image capture device associated with said first client computer and configured to capture a live feed comprising a plurality of images, wherein said image capture device is configured to capture an image of said user from said live feed in association with said log-in request;
a back-end data center, wherein said back-end data center provides computing resources to a plurality of client computers, including said first client computer, wherein said back-end data center is configured and arranged to:
receive a request for real-time authentication over a network from said first client computer, wherein said request for real-time authentication comprises said user information and said image of said user, wherein said request is initiated by a user at said first client computer to establish communication with said back-end data center;
determine a representative user based on said user information;
accessing verified identification information associated with said representative user;
determine an authorizing agent responsible for authorizing said representative user;
send said request for real-time authentication to a second client computer associated with said authorizing agent, wherein said second client computer is supported by said back-end data center;
receive an acceptance of said request from said second client computer;
provide said verified identification information related to said representative user to said second client computer along with said request so that said authorizing agent can perform authentication of said user based on said user information, said captured image, and said verified identification information;
receive results of said authentication from said second client computer; and
control access over said network by said first client computer to one or more resources located at said back-end data center based on said results.

### Claim 19 (depends on 18)

The system of claim 18, wherein said image capture device is configured and adapted to:
in response to activation of a activator, capture said image that comprises a facial view of said user as aligned by said user;
determine whether said image meets a threshold; and
attach said image to said request for authentication when said image meets said threshold.

### Claim 20 (depends on 18)

The system of claim 18, wherein said first client computer is configured and arranged to:
present a log-in window for authorizing access to a desktop operated by said first client computer;
receive said user information;
interrupt an authorization process associated with said log-in window;
initiate said image capture device;
request a capture of said image of said user;
in response to activation of an activator by said user, capturing said image that comprises a facial view of said user as aligned by said user; and
attaching said image to said request for authorization.