Turing test based user authentication and user presence verification system, device, and method

摘要

A password-less method for authenticating a user includes capturing one or more images of a face of the user and comparing the one or more images with a previously collected face template. Randomly selected colored light and randomized blinking patterns are used to capture the images of the user. Such captured images are compared to previously collected face templates, thereby thwarting spoof attacks. A secret image, known only to the user and the device, is moved from one area of the display to another randomly selected area, using the movements of the user's head or face, thereby providing a Turing based challenge. Protected audio video path (PAVP) enabled devices and components are used to protect the challenge from malware attacks.

主权项

1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, operate to perform a password-less method for authenticating a user, the method comprising:
capturing one or more first images of a face of a user; comparing the one or more first images with a previously collected face template; capturing one or more second images of the face of the user; presenting a password-less challenge to the user on a display based on the one or more second images; randomly selecting a colored light from a plurality of colored light options; flashing at least one of the display and a flash with the randomly selected colored light; and capturing one or more third images of the face of the user while flashing with the randomly selected colored light.