CPC H04L 9/30 (2013.01) [G06F 21/32 (2013.01); G06K 7/10722 (2013.01); G06K 7/1417 (2013.01); G06V 40/171 (2022.01); G06V 40/172 (2022.01); H04L 9/088 (2013.01); H04L 63/0861 (2013.01)] | 18 Claims |
1. A method comprising:
maintaining, by an authentication server, a plurality of authentication profiles for respective users, each authentication profile of the plurality of authentication profiles including one or more profile images and a device key linked to a respective client device of a respective user for the authentication profile, the device key generated by an authentication service for the respective client device;
receiving, by the authentication server from a client device of a user, via a session between the authentication server and the authentication service executing on the client device, a request to authenticate the user to a resource server, the request including the device key of the client device and a biometric image captured during the session by a camera of the client device, the authentication service controlling the camera to capture the biometric image and obtain, via at least one of a platform or operating system feature of the client device, a cryptographic assertion for the biometric image responsive to capturing the biometric image;
authenticating, by the authentication server, the biometric image as captured by the camera of the client device during the session, based on the cryptographic assertion received from the authentication service;
identifying, by the authentication server, the authentication profile corresponding to the user based on the device key included in the authentication profile matching the device key included in the request;
comparing, by the authentication server, one or more features extracted from the biometric image to one or more features extracted from the one or more profile images included in the plurality of authentication profiles;
authenticating, by the authentication server, the user to the resource server, responsive to determining that the one or more features extracted from the biometric image matches one or more features extracted from at least one of the one or more profile images included in the authentication profile; and
storing, by the authentication server, in the authentication profile, the biometric image in a chain of images comprising the biometric image and the one or more profile images, responsive to determining that the one or more features extracted from the biometric image matches the one or more features extracted from at the least one of the one or more profile images included in the authentication profile.
|