ID verification

Abstract

The present invention discloses a device implementing a system for verifying an identity document, the device comprising at least one processor configured to receive a request associated with authenticating the authenticity of an identity document from a service provider, and to capture image data of the identity document in response to receiving the request. The at least one processor is further configured to generate a representation based on the image data, the representation including form factor data of the identity document; and compare the representation with a previous representation of the identity document, the previous representation including previous form factor data of the identity document. The at least one processor is further configured to provide a response to the request to the service provider based on comparing the representation with the previous representation.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This patent application claims the benefit of priority to U.S. Provisional Patent Application No. 62 / 822,985, filed on March 24, 2019, and entitled “Identity Document Authentication,” the disclosure of which is incorporated herein by reference in its entirety. Technical Field

[0003] This specification generally relates to identification documents (ID), including verification ID. Background Art

[0004] Some transactions require a user to present a valid ID associated with the transaction. For example, a merchant in a physical store may require a person to present a real ID in order to verify that the person is of legal age to purchase products and / or services. BRIEF DESCRIPTION OF THE DRAWINGS

[0005] Certain features of the subject technology are set forth in the appended claims. However, for purposes of explanation, several embodiments of the subject technology are set forth in the following drawings.

[0006] Figure 1 An exemplary network environment for verifying an identification document (ID) according to one or more implementations is shown.

[0007] Figure 2 Exemplary electronic devices are shown that can implement the subject system for verifying an ID according to one or more implementations.

[0008] Figure 3 An exemplary process for verifying an ID according to one or more implementations is shown.

[0009] Figure 4 Examples of electronic IDs according to one or more implementations are shown.

[0010] Figure 5 Examples of different image data that may be used to verify an ID are shown according to one or more implementations.

[0011] Figure 6 Examples of security features and user information that may be included on an ID according to one or more implementations are shown.

[0012] Figure 7 A flow chart of an exemplary process for verifying an ID according to one or more implementations is shown.

[0013] Figure 8Exemplary electronic systems are shown that can be used to implement various aspects of the subject technology in accordance with one or more implementations. DETAILED DESCRIPTION

[0014] The specific embodiments shown below are intended to be descriptions of various configurations of the subject technology and are not intended to represent the only configuration in which the subject technology can be practiced. The accompanying drawings are incorporated herein and constitute a part of the specific embodiments. The specific embodiments include specific details intended to provide a thorough understanding of the subject technology. However, the subject technology is not limited to the specific details described herein, and one or more other specific implementations can be used to practice. In one or more specific implementations, structures and components are shown in block diagram form to avoid blurring the concepts of the subject technology.

[0015] In a physical store, merchants may have experience distinguishing authentic physical IDs from fake ones. For example, a physical ID may have multiple security features (e.g., watermarks, textures, notches, holograms) that can be detected by trained personnel through observation and touch. However, if an image of the ID is provided to an online merchant (e.g., which may be an automated service), the service may not be able to detect the security features to verify that the ID is authentic, let alone authenticate that the purchaser is the individual to whom the ID was issued.

[0016] The subject system is used to verify a user's physical ID with an identity provider (e.g., an issuer of the ID) to create an electronic ID for a given service or service domain. During the enrollment phase, the user's device captures an image of the ID (e.g., a driver's license, passport, etc.) and sends the image to the issuer of the ID (e.g., an agency that issues the ID, such as an agency that issues a driver's license) and / or a third-party authentication service that can authenticate the authenticity of the ID. In one or more specific implementations, the user's device can capture multiple images of the physical ID, such as an infrared (IR) image and a red, green, and blue (RGB) image.

[0017] For example, the identity provider determines the authenticity of the document by, for example, confirming various security features on the ID. In one or more specific implementations, the identity provider may verify that the personal data listed on the ID corresponds to the individual to whom the ID is issued, such as by checking against an institutional database. After the identity provider verifies the document, the identity provider may provide a signature authentication that authenticates the ID. In addition, an electronic ID may be generated (e.g., by the electronic device 102, the identity provider, and / or a server independent of the identity provider), wherein the electronic ID includes user information that has been authenticated by the identity provider.

[0018] The electronic device may store the electronic ID and use the captured image data to generate a first representation of the ID, which is stored on the device. In one or more specific implementations, the registration process may also include locally authenticating the identity information declared (e.g., provided) by the user using the identity information printed on the physical ID. In one or more specific implementations, the first representation may be strongly linked to the user, such as by associating the first representation with the user's biometric information (such as a fingerprint, a set of points corresponding to a scan of the user's face, etc.).

[0019] The first representation may not include personally identifiable information of the ID. Instead, the first representation may include multiple form factors specific to the user ID (e.g., the position of the common watermark relative to the first / last character in the user's name, address, date of birth, etc.). These form factors enable the first representation to uniquely represent the user's ID without explicitly including the user's identifying information. Therefore, in one or more specific implementations, the first representation may be stored remotely without exposing any personal information of the user.

[0020] The subject system further provides for using the first representation in authenticating the authenticity of a user's physical ID (e.g., with respect to an online transaction). For example, during an online purchase that requires the purchaser to be of a minimum age, the user may take another picture of his / her ID (e.g., a driver's license), and the device may generate a second representation of the ID. Similar to the first representation, the second representation may include various form factors of the most recent picture. The device compares the first representation (corresponding to the verified ID) to the second representation (corresponding to the most recent picture). If the two representations match (e.g., within a certain error threshold), and if the biometric information of the current user of the device matches the biometric information associated with the first representation, the device may notify the merchant that the ID is valid and corresponds to the user, and the merchant may proceed with the transaction (e.g., an online transaction).

[0021] In one or more specific implementations, the user's device may capture an image of the user and / or a facial scan of the user when registering the physical ID. The user's device may use the image and / or facial scan locally to confirm that the user is the same person as the picture in the physical ID. Because the appearance of the user's face may change over time, for example, due to age, the user's device may periodically obtain images of the user over time (e.g., with the user's consent, so that the user's device can calculate a link between the user's current image and the user's image captured at registration). Similarly, the user may allow the device to access previous images of the user (e.g., in a photo library) to link the user's current image back to the image of the user that appeared on the physical ID (which may have been issued several years ago).

[0022] Figure 1An exemplary network environment for verifying an identity document (ID) and authenticating the reliability of the ID according to one or more specific implementations is shown. However, not all of the components depicted can be used in all specific implementations, and one or more specific implementations may include additional or different components compared to those shown in the figures. Changes in the arrangement and type of these components may be made without departing from the essence or scope of the claims listed herein. Additional components, different components, or fewer components may be provided.

[0023] The network environment 100 includes electronic devices 102, 103, and 104 (hereinafter referred to as 102-104), a network 106, an identity provider 108, and a service provider 110. The network 106 can communicatively couple (directly or indirectly) any two or more of the electronic devices 102-104, the identity provider 108, and the service provider 112, for example. In one or more specific implementations, the network 106 can be an interconnected network that can include the Internet and / or devices that are communicatively coupled to the Internet. For the purpose of explanation, the network environment 100 is shown in FIG. Figure 1 1 is shown as including electronic devices 102-104, identity provider 108, and service provider 110; however, network environment 100 may include any number of electronic devices and any number of servers.

[0024] One or more of the electronic devices 102-104 may be, for example, a portable computing device such as a laptop computer, a smart phone, a smart speaker, a peripheral device (e.g., a digital camera, a headset), a tablet device, a wearable device such as a smart watch, a band, etc., or any other suitable device including, for example, one or more wireless interfaces, such as a WLAN radio, a cellular radio, a Bluetooth radio, a Zigbee radio, a near field communication (NFC) radio, and / or other radios. Figure 1 In the embodiment, by way of example, electronic device 102 is depicted as a smart phone, electronic device 103 is depicted as a laptop computer, and electronic device 104 is depicted as a smart watch. Each of electronic devices 102-104 may be and / or may include the following with respect to Figure 2 The devices discussed and / or described below with respect to Figure 8 All or a portion of the electronic system in question.

[0025] Each of the identity provider 108 and the service provider 110 may be and / or may include the following: Figure 8Each of the identity provider 108 and the service provider 110 may include one or more servers, such as a server cloud. For purposes of explanation, a single identity provider 108 and a single service provider 110 are shown and discussed with respect to various operations. However, these operations and other operations discussed herein may be performed by one or more servers, and each different operation may be performed by the same or different servers.

[0026] As follows relative to Figure 3 As further discussed, a user at one of the electronic devices 102-104 may verify his / her ID (e.g., driver's license) to an identity provider 108 (e.g., corresponding to an ID issuer) via a network 106, and locally and / or remotely store a first representation of the ID (e.g., from which user identification information cannot be determined). Later, such as when engaging in a transaction requiring an ID, the user's device (e.g., one of the electronic devices 102-104) may communicate with a service provider 110 (e.g., corresponding to an online merchant) via the network 106. The device may compare a second representation generated from a current picture of the ID with the first representation to authenticate the authenticity of the user's ID for the transaction (e.g., an online transaction).

[0027] Figure 2 An exemplary electronic device that can implement the subject system for verifying an ID according to one or more specific implementations is shown. For the purpose of explanation, this document mainly refers to the electronic device 102. Figure 2 .However, Figure 2 Corresponds to Figure 1 Any of the electronic devices 102-104 of the electronic device. However, not all of the components depicted may be used in all specific implementations, and one or more specific implementations may include additional or different components than those shown in the figures. Changes in the arrangement and type of these components may be made without departing from the spirit or scope of the claims listed herein. Additional components, different components, or fewer components may be provided.

[0028] The electronic device 102 may include a processor 202, a memory 204, a communication interface 206, one or more image sensors 208, and a security processor 210. The processor 202 may include appropriate logic components, circuits, and / or code that enable processing of data and / or control of the operation of the electronic device 102. In this regard, the processor 202 may be enabled to provide control signals to various other components of the electronic device 102. The processor 202 may also control the transmission of data between the various parts of the electronic device 102. In addition, the processor 202 may enable implementation of an operating system or otherwise execute code to manage the operation of the electronic device 102.

[0029] The memory 204 may include suitable logic components, circuits, and / or code to enable storage of various types of information, such as received data, generated data, code, and / or configuration information. The memory 204 may include, for example, a random access memory (RAM), a read-only memory (ROM), flash memory, and / or a magnetic storage device.

[0030] The security processor 210 may be configured to store data securely and may include its own memory. For example, the security processor 210 may correspond to a security element or a secure area processor. In one or more specific implementations, the security processor 210 may be configured to store a representation of a user's ID (e.g., a driver's license, passport, etc.) and / or a private key in a public key-private key pair. As described herein, the representation may include form factor information of the ID, a hash of the ID, or some other representation of the ID from which personally identifiable information cannot be determined. In one or more specific implementations, the processor 202 may be used to store a representation of the user's ID and / or a private key in the memory 204 instead of in the security processor 210.

[0031] The communication interface 206 may include suitable logic, circuitry, and / or code to enable wired or wireless communication, such as between any of the electronic devices 102-104, the identity provider 108, and / or the service provider 110, over the network 106. The communication interface 206 may include, for example, one or more of a Bluetooth communication interface, a cellular interface, an NFC interface, a Zigbee communication interface, a WLAN communication interface, a USB communication interface, or generally any communication interface.

[0032] The image sensor 208 may be used to capture and generate image data corresponding to a subject and / or an object (e.g., a physical ID). The image sensor 208 may correspond to an RGB image sensor and / or an infrared image sensor. The image data captured by the image sensor 208 may indicate the color, depth, 2D, and / or 3D features of the subject.

[0033] In one or more specific implementations, one or more of the processor 202, memory 204, communication interface 206, image sensor 208, security processor 210, and / or one or more portions thereof may be implemented in software (e.g., subroutines and code), in hardware (e.g., an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a programmable logic device (PLD), a controller, a state machine, a gated logic component, a discrete hardware component, or any other suitable device), and / or a combination of both.

[0034] Figure 3An exemplary process of verifying an ID according to one or more specific implementations is shown. For the purpose of explanation, this article mainly refers to Figure 1 The process 300 is described with reference to the electronic device 102, the identity provider 108 and the service provider 110. However, the process 300 is not limited to Figure 1 The electronic device 102, the identity provider 108, and the service provider 110 of the embodiment of the present invention, and one or more blocks (or operations) of the process 300 may be performed by one or more other components and other suitable devices (e.g., any one of the electronic devices 103-104). Further for the purpose of explanation, the blocks of the process 300 are described herein as occurring sequentially or linearly. However, multiple blocks of the process 300 may occur in parallel. In addition, the blocks of the process 300 do not have to be performed in the order shown, and / or one or more blocks of the process 300 do not have to be performed and / or may be replaced by other operations.

[0035] As described above, some in-person transactions require the user to present a valid ID as part of the transaction. However, relative to other transactions (e.g., online transactions, telephone-based transactions), it may be difficult to authenticate the ID. For example, some security features of the ID (e.g., 3D content, such as notches in a polycarbonate ID) may not be represented by a picture captured via the user's camera. In addition, the user may not feel comfortable providing a picture of his / her ID to an online merchant associated with a purchase (e.g., or texting / emailing the picture to a representative when communicating via the phone). For example, the online merchant (e.g., or telephone representative) may store a copy of the user's picture on a server even after the purchase is completed.

[0036] Process 300 includes a registration phase (e.g., blocks 302-316) and a sharing phase (e.g., blocks 318-338). During the registration phase, the user's ID is verified by an identity provider 108 (e.g., an issuer and / or a third-party ID authenticator), which issues a signed authentication to the electronic device 102. The electronic device 102 (e.g., or the identity provider 108, or another server independent of the identity provider 108) generates an electronic ID that is stored locally on the electronic device 102. The electronic device 102 further generates a representation of the ID (from which user identification information cannot be determined) that is stored locally on the device (e.g., or stored on a remote server). During the sharing phase, the user of the electronic device 102 can use the electronic ID to conduct online transactions, provided that the electronic device 102 is able to authenticate that the physical ID held by the user matches a previously verified ID (e.g., based on a comparison with a stored representation of the ID).

[0037] For the registration phase (e.g., blocks 302-316), the electronic device 102 receives user input to verify an ID in order to perform certain online transactions (302). For example, the user may select an option for registering an electronic ID based on the user's physical ID (presented within a user interface displayed on the electronic device 102). The option may be displayed by an application specifically directed to registering / creating an electronic ID in order to use other applications. Alternatively or in addition, the option may be displayed within the other application itself, wherein the user's selection of the option may redirect the user to the application to register an electronic ID.

[0038] In one or more implementations, the electronic ID is a digital certificate that includes user information (e.g., name, address, date of birth) that has been authenticated by identity provider 108. The electronic ID may be generated by electronic device 102 or by another server (e.g., identity provider or another independent service). Figure 4 An example of fields within an electronic ID 400 is shown. The electronic ID 400 may include one or more fields that identify a user and correspond to what is printed on a physical ID (e.g., a driver's license). The one or more fields may include, but are not limited to: an institution / organization 402 that verifies the ID (e.g., identity provider 108); the user's name 404; the user's address 406; the user's date of birth 408; the user's ID number 410 (e.g., a driver's license number, which may appear as "authenticated" or, alternatively, as plain text); the user's signature 412 (e.g., which may appear as "authenticated" or, alternatively, as an image of the user's signature).

[0039] refer to Figure 3 , the electronic device 102 captures first image data of the ID (304). For example, the user may use the electronic device 102 to take a picture of his / her physical ID. More specifically, the image sensor 208 of the electronic device 102 may be used to capture and generate first image data corresponding to the ID. Therefore, the first image data may include RGB data and / or infrared data corresponding to the ID. For example, the first image data may include color, depth, 2D features, and / or 3D features of the ID.

[0040] Figure 5 Examples of different image data that can be used to verify an ID are shown. For example, Figure 5 The ID shown may correspond to a polycarbonate ID, which may include 3D content (eg, notches).

[0041] exist Figure 5In the example of FIG. 5 , the image data includes two images 502, 504 of the same ID. These images 502, 504 can be used to verify the ID. Image 502 corresponds to an RGB image (e.g., captured by an RGB image sensor), and common security features of the ID can be determined from the RGB image (e.g., as described below with respect to Figure 6 Image 504 corresponds to an infrared image (e.g., captured by an infrared image sensor) from which printed information specific to the user (e.g., name, address, date of birth, and / or other data fields corresponding to electronic ID 400) and / or 3D content (e.g., inscriptions) may be determined.

[0042] The electronic device 102 sends a request to verify the ID and the first image data of the ID to the identity provider 108 (306). As described above, the identity provider 108 may correspond to the issuer of the ID (e.g., an institution / organization that issues the ID corresponding to the user ID), or a third-party service that authenticates the ID. The electronic device 102 may sign the request with a private key in a public key-private key pair (e.g., stored in the security processor 210 or stored in the memory 204). The identity provider 108 receives the request and the first image data from the electronic device 102 (308).

[0043] The identity provider 108 verifies the ID (310). In this way, the identity provider 108 can confirm various security features and / or user information appearing on the ID based on the first image data (eg, images 502, 504) provided by the electronic device 102. Figure 6 Examples of security features and user information that may be included on ID 600 are shown according to one or more implementations. Figure 6 In the example of FIG. 6 , ID 600 is a driver's license that includes multiple security features.

[0044] The security features and user information of ID 600 may include, but are not limited to: guilloche security design 602; digital watermark 604; color portrait 606; 3D tactile feature 608; laser engraved signature 610; first digital watermark 612 (e.g., including intentional errors and visible through a magnifying glass); second digital watermark 614 (e.g., visible through a magnifying glass); altered font 616; laser perforation 618; laser engraved tactile signature 620; ghost portrait 622; overlay data 624; and dual ink printing 626. Some of the security features (e.g., elements 602, 604, 608, 612, 614, 616, 618, 626) may be common security features for all IDs issued by an issuer (e.g., identity provider 108). On the other hand, some content (eg, elements 606, 610, 620, 622, 624) may be unique to a particular ID, for example, because they relate to user-specific features.

[0045] like Figure 6 The elements 602-626 shown are examples of security features and / or user information that may be included in the user's ID. Different, fewer, or more security features and / or other user information may be incorporated into the user's ID for verification by the identity provider 108.

[0046] To verify the ID, the identity provider 108 may compare one or more of the security features in the image of the ID provided by the electronic device 102 with a predefined common value. For example, the identity provider 108 may be configured to compare features common to all (or most) IDs issued by the issuer with corresponding features in the received ID. Thus, the identity provider 108 may further determine whether one or more characteristics of the common features, including but not limited to position, color, size, shape, texture and / or depth, match expected values ​​corresponding to the common features (e.g., predefined values).

[0047] In the event that the identity provider 108 determines that the common security feature of the user's ID is authentic (e.g., based on the first image data provided by the electronic device 102), in one or more specific implementations, the identity provider 108 may further confirm the user's personal information appearing on the ID. For example, in the event that the identity provider 108 is the institution that issued the ID, the identity provider 108 may perform optical character recognition (OCR) of the ID. OCR can be used to extract information (e.g., name, address, date of birth, portrait) from the ID that identifies the user. The identity provider can compare this information with values ​​in its own database (e.g., an institutional database) that stores identification information for multiple individuals to whom physical IDs have been issued (e.g., all individuals with driver's licenses in a state). Therefore, the identity provider 108 can be further configured to determine that the information appearing on the ID matches the information corresponding to the ID in the institutional database, such as based on a serial number or unique identifier printed on the ID.

[0048] Based on confirmation that the security features of the ID are authentic and / or that the personal information appearing on the ID matches a record of the individual (e.g., according to an institutional database), the identity provider 108 may indicate that the ID is an authentic ID. For example, the identity provider 108 may provide the electronic device 102 with a signed authentication that authenticates the ID (312). The signed authentication may indicate a public key in a public key-private key pair, such that the signed authentication is explicitly bound to the electronic device 102. The electronic device 102 may generate and store an electronic ID based on the signed authentication (e.g., such as in the security processor 210) (314). As described above with respect to Figure 4 As described, the electronic ID (e.g., element 400) may correspond to a digital certificate that includes user information (e.g., name, address, date of birth) that has been authenticated by the identity provider 108 and may further identify the identity provider (e.g., verify the issuer of the ID).

[0049] As another part of the registration process, the electronic device 102 may then generate a first representation of the ID and store the first representation, such as in a secure processor (e.g., secure processor 210) or memory 204 (316). Alternatively or in addition, the first representation may be stored remotely in a secure manner (e.g., stored on a server). The first representation does not list or display personally identifiable information of the ID. For example, the first representation may correspond to various form factors associated with specific features of the user's ID relative to common security features of the ID. The form factor may correspond to the position of selected characters in the ID relative to common security features (e.g., watermarks and / or other regular designs) in the ID (e.g., the position of the first character and / or last character of text within one or more of the name, address, and / or date of birth fields).

[0050] Using the example of ID 600, the distance from a predefined character position (e.g., the first, middle, or last character of the user's name, address, and / or signature 610, 620) to a common security feature (e.g., elements 602, 604, 608, 612, 614, 616, 618, 626) may be calculated and stored as part of the first representation. Alternatively or in addition, the distance from a predefined portion of the face (e.g., leftmost, rightmost, center, and / or nose, eyes, ears, chin) to a common security feature (e.g., elements 602, 604, 608, 612, 614, 616, 618, 626) may be determined and stored as part of the first representation. In one or more implementations, the first representation may be and / or may include a hash of the image and / or a hash of the form factor.

[0051] In one or more implementations, the form factor may be associated with one or more other measured values ​​specific to the user's ID, e.g., where personally identifiable information cannot be determined from the measured values, instead of or in addition to the measured distance. For example, one or more color measurements at a predefined location on the user's face (e.g., a pixel at the center of the photo), the thickness of a signature line at a predefined location (e.g., the last character), and / or (e.g., engraved and / or raised) depth information of a signature line at a predefined location (e.g., the last character) may be calculated and stored as part of the first representation. Other measurements may also be used and stored as part of the first representation, e.g., using techniques similar to those used in performing biometric processing to uniquely identify a subject.

[0052] Thus, the first representation is a representation of electronic ID 400 that may be unique to the ID (eg, a measured distance and / or other measured value relative to a common feature of the ID). Furthermore, user identification information cannot be determined from the first representation.

[0053] After generating the first representation, the electronic device 102 may store the first representation (e.g., in the security processor 210). For example, the security processor 210 may prevent the user from modifying the first representation, so that the stored first representation is immutable. Alternatively or in addition, the first representation may be stored on a remote server in a secure manner (e.g., so as not to be modified by the user). Figure 3 As shown, the generation and saving of the first representation may correspond to the completion of the registration phase.

[0054] As described above, blocks 318-338 may correspond to a sharing phase, in which the electronic device 102 may share an electronic ID with the service provider 110 in association with performing a transaction with the service provider 110. For example, the electronic device 102 may receive user input to perform an online transaction that requires an ID (318). Examples of such transactions include, but are not limited to: online purchases that require the purchaser to be of a minimum age (e.g., food and beverage, tickets, hotel rooms); opening a bank account; applying for public benefits; applying for a loan (e.g., car, house); phone-based transactions that require a text / email to authenticate the user's identity based on a physical ID; and / or any other service that may require authentication of the user's identity based on a physical ID. Thus, the electronic device 102 initially sends a transaction request to the service provider 110 (320), and the service provider 110 receives the request (322).

[0055] Where the nature of the transaction requires an ID, the service provider 110 sends a request for an ID to the electronic device 102 (324). For example, the service provider 110 may request an electronic ID from the electronic device. In addition, the request for an electronic ID may include a random number to be signed by the electronic device 102 using a private key of the electronic device 102. The electronic device 102 receives the request (326).

[0056] Before providing the electronic ID to the service provider 110, the electronic device 102 may require the user to confirm that the physical ID possessed by the user matches the ID previously verified by the identity provider 108. The electronic device 102 may require the user to retake a photo of his / her ID to compare with the first representation of the ID (e.g., stored in the secure processor 210 of the electronic device 102 and / or stored in a remote storage device). In response, the user may take a current picture of the ID corresponding to the second image data (328) of the ID.

[0057] Similar to the type of data captured with respect to the first image data, the second image data may include RGB image data (e.g., captured by an RGB sensor) and / or infrared image data (e.g., captured by an infrared sensor). The second image data may include common security features of the ID and personal information of the user extracted from the ID.

[0058] In addition, electronic device 102 generates a second representation of the ID based on the second image data (330). Similar to the first representation, the second representation can correspond to various form factors. For example, the form factor can include a measured distance between the common security feature and a specific character and / or a portion of the user's face, a measured color value at a location, and / or thickness / depth information at a predefined location.

[0059] The electronic device 102 compares the first representation to the second representation (332). As described above, the first representation can be stored in a secure processor of the device (e.g., secure processor 210) or remotely in a secure manner so that the measurement results cannot be modified by the user. Therefore, the electronic device can determine whether the second image data (e.g., a recent photo of the ID) matches the first image data (e.g., a verified photo of the ID) with a considerable degree of certainty (e.g., given the immutable nature of the first representation).

[0060] In one or more specific implementations, the electronic device 102 can compare each measurement result (e.g., distance, color, thickness, etc.) in the first representation with the corresponding measurement result in the second representation. A mismatch in these values ​​can indicate that the most recently captured ID is different from the verified ID, or that the most recently captured ID has been modified since verification.

[0061] Therefore, if the measured values ​​do not match each other or are not within a predefined tolerance (e.g., a threshold difference) of each other, the electronic device 102 may determine that the second image data (e.g., a recent photo of the ID) does not correspond to the verified ID. In this case, the electronic device 102 may not provide the electronic signature to the service provider 110.

[0062] If the measured values ​​do match each other or are within a predefined tolerance (e.g., a threshold difference) of each other, the electronic device 102 can determine that the second image data (e.g., a recent photo corresponding to the ID) matches the first image data (e.g., a previous photo corresponding to the verified ID). Therefore, the electronic device 102 can determine that the user has a valid ID sufficient to complete the transaction with the service provider 110. The electronic device 102 can sign the random number using a private key stored on the electronic device 102 (e.g., if provided by the service provider 110). The electronic device 102 provides the electronic ID to the service provider 110 (334), and the service provider 110 receives the electronic ID (336).

[0063] The service provider 110 can determine that the user's current ID is authentic based on the information provided in the electronic ID (e.g., an indication of verification by the issuer, along with the user's name, address, and / or date of birth). Accordingly, the service provider 110 can proceed with the transaction (338) with the electronic device 102 (e.g., completing an online sale of a product / service).

[0064] Figure 7 A flowchart of an exemplary process for verifying an ID according to one or more specific implementations is shown. For the purpose of explanation, this article mainly refers to Figure 1 The process 700 is described with reference to the electronic device 102, the identity provider 108 and the service provider 110. However, the process 700 is not limited to Figure 1 The electronic device 102, the identity provider 108, and the service provider 110 of the embodiment of the present invention, and one or more blocks (or operations) of the process 700 may be performed by one or more other components and other suitable devices (e.g., any one of the electronic devices 103-104). Further for the purpose of explanation, the blocks of the process 700 are described herein as occurring sequentially or linearly. However, multiple blocks of the process 700 may occur in parallel. In addition, the blocks of the process 700 do not have to be performed in the order shown, and / or one or more blocks of the process 700 do not have to be performed and / or may be replaced by other operations.

[0065] The electronic device 102 receives a request associated with authenticating the authenticity of an identity document from a service provider 110 (702). The service provider 110 may be an online merchant.

[0066] Prior to the receiving, the electronic device 102 may: provide a request to authenticate the identification document to the identity provider 108, the request including the previous image data of the identification document; receive an indication from the identity provider 108 that the identification document has been authenticated based on the previous image data; and in response to receiving the indication, generate a previous representation of the identification document based on the previous image data; and store the previous representation. The identity provider 108 may correspond to an organization that issued the identification document corresponding to the identification document.

[0067] The storing may include storing the previous representation in the secure processor 210 (or in the memory 204, or in a remote storage device). The indication that the identity document has been verified may include a signed authentication (e.g., signed by an identity provider) bound to the device by a public key of a public-private key pair, the private key of which is stored on the electronic device 102 (e.g., stored in the secure processor 210 or stored in the memory 204).

[0068] The electronic device 102 captures image data of the identification document in response to receiving the request (704). The electronic device 102 generates a representation based on the image data, the representation including form factor data of the identification document (706).

[0069] The electronic device 102 compares the representation to a previous representation of the identification document, which includes previous form factor data for the identification document (708). The form factor data and the previous form factor data may indicate the location of common security features of the identification document relative to specific features of the identification document.

[0070] Each of the image data and the previous image data may include RGB image data, and the form factor data and the previous form factor data may be based on the corresponding RGB image data. Alternatively or in addition, each of the image data and the previous image data may include infrared image data, and the form factor data and the previous form factor data may be based on the corresponding infrared image data. The electronic device 102 provides a response to the request to the service provider 110 based on comparing the representation with the previous representation (710).

[0071] As described above, one aspect of the present technology is the collection and use of data from specific and legitimate sources to verify an ID. The present disclosure contemplates that, in some instances, the collected data may include personal information data that uniquely identifies or can be used to identify a specific person. Such personal information data may include demographic data, location-based data, online identifiers, phone numbers, email addresses, home addresses, data or records related to a user's health or fitness level (e.g., vital signs measurements, medication information, exercise information), date of birth, or any other personal information.

[0072] The present disclosure recognizes that the use of such personal information data in the present invention technology can be used to benefit users. For example, personal information data can be used to verify IDs. Therefore, the use of such personal information data can facilitate transaction processing (e.g., online transaction processing). In addition, the present disclosure also anticipates other uses of personal information data that are beneficial to users. For example, health and fitness data can be used according to the user's preferences to provide insights into their overall health status, or can be used as positive feedback to individuals who use technology to pursue health goals.

[0073] This disclosure envisions that entities responsible for collecting, analyzing, disclosing, transmitting, storing or otherwise using such personal information data will comply with established privacy policies and / or privacy practices. Specifically, such entities will be expected to implement and consistently apply privacy practices that are generally recognized as meeting or exceeding the requirements of the industry or government that maintain user privacy. Such information about the use of personal data should be prominently and easily accessible to users, and should be updated as the collection and / or use of data changes. The user's personal information should be collected only for legitimate use. In addition, such collection / sharing should only occur after receiving user consent or other legal basis specified in applicable law. In addition, such entities should consider taking any necessary steps to defend and safeguard access to such personal information data and ensure that others who have access to personal information data comply with their privacy policies and processes. In addition, such entities may subject themselves to third-party assessments to demonstrate their compliance with widely accepted privacy policies and practices. In addition, policies and practices should be adjusted for specific types of personal information data collected and / or accessed, and applied to applicable laws and standards, including specific considerations that are exclusive to jurisdictions that can be used to impose higher standards. For example, in the United States, collection or access to certain health data may be governed by federal and / or state laws, such as the Health Insurance Portability and Accountability Act (HIPAA); while health data in other countries may be subject to other regulations and policies and should be handled accordingly.

[0074] Regardless of the foregoing, the present disclosure also contemplates implementation schemes in which users selectively block the use or access of personal information data. That is, the present disclosure contemplates that hardware elements and / or software elements may be provided to prevent or block access to such personal information data. For example, with respect to verification IDs, the technology of the present invention may be configured to allow users to choose to "opt in" or "opt out" to participate in the collection of personal information data during registration for a service or at any time thereafter. In addition to providing "opt-in" and "opt-out" options, the present disclosure contemplates providing notifications related to access or use of personal information. For example, a user may be notified that their personal information data will be accessed when downloading an application, and then be reminded again just before the personal information data is accessed by the application.

[0075] In addition, it is an object of the present disclosure that personal information data should be managed and processed to minimize the risk of unintentional or unauthorized access or use. Risks can be minimized by limiting data collection and deleting data once it is no longer needed. In addition, and when applicable, including in certain health-related applications, data de-identification can be used to protect the privacy of users. De-identification can be facilitated by removing identifiers, controlling the amount or specificity of stored data (e.g., collecting location data at a city level rather than at an address level), controlling how data is stored (e.g., aggregating data across users), and / or other methods such as differential privacy, where appropriate.

[0076] Therefore, while the present disclosure broadly covers the use of personal information data to implement one or more of the various disclosed embodiments, the present disclosure also contemplates that various embodiments may be implemented without access to such personal information data. That is, various embodiments of the present technology will not fail to function properly due to the lack of all or part of such personal information data.

[0077] Figure 8 800 is an example electronic system that can be used to implement various aspects of the subject technology according to one or more specific implementations. Figure 1 to Figure 2 Any electronic device or server of the features and processes described herein and / or may be a part thereof, including but not limited to laptop computers, tablet computers, smart phones, and wearable devices (e.g., smart watches, fitness bands). Electronic system 800 may include various types of computer-readable media and interfaces for various other types of computer-readable media. Electronic system 800 includes permanent storage device 802, system memory 804 (and / or buffer), input device interface 806, output device interface 808, bus 810, ROM 812, one or more processing units 814, one or more network interfaces 816, image sensor 818, and / or subsets and variations thereof.

[0078] The bus 810 generally represents all system buses, peripheral busses, and chipset buses that communicatively connect the various internal devices of the electronic system 800. In one or more specific implementations, the bus 810 communicatively connects one or more processing units 814 with the ROM 812, the system memory 804, and the permanent storage device 802. The one or more processing units 814 retrieve instructions to be executed and data to be processed from these various memory units in order to perform the processes disclosed in the present subject matter. In different specific implementations, the one or more processing units 814 can be a single processor or a multi-core processor.

[0079] ROM 812 stores static data and instructions required by one or more processing units 814 and other modules of the electronic system 800. On the other hand, permanent storage device 802 can be a read-write memory device. Permanent storage device 802 can be a non-volatile memory unit that stores instructions and data even when the electronic system 800 is turned off. In one or more specific implementations, a mass storage device (such as a magnetic disk or optical disk and its corresponding disk drive) can be used as permanent storage device 802.

[0080] In one or more implementations, a removable storage device (such as a floppy disk, a flash drive, and its corresponding disk drive) may be used as the permanent storage device 802. Like the permanent storage device 802, the system memory 804 may be a read-write memory device. However, unlike the permanent storage device 802, the system memory 804 may be a volatile read-write memory, such as a random access memory. The system memory 804 may store any of the instructions and data that one or more processing units 814 may need at runtime. In one or more implementations, the processes disclosed in the subject matter are stored in the system memory 804, the permanent storage device 802, and / or the ROM 812. The one or more processing units 814 retrieve instructions to be executed and data to be processed from these various memory units in order to perform the processes of one or more implementations.

[0081] The bus 810 is also connected to an input device interface 806 and an output device interface 808. The input device interface 806 enables a user to transmit information and select commands to the electronic system 800. Input devices that can be used with the input device interface 806 may include, for example, an alphanumeric keyboard and a pointing device (also referred to as a "cursor control device"). The output device interface 808 may, for example, enable the display of images generated by the electronic system 800. Output devices that can be used with the output device interface 808 may include, for example, a printer and a display device, such as a liquid crystal display (LCD), a light emitting diode (LED) display, an organic light emitting diode (OLED) display, a flexible display, a flat panel display, a solid state display, a projector, or any other device for outputting information.

[0082] One or more implementations may include a device that acts as both an input device and an output device, such as a touch screen. In these implementations, the feedback provided to the user may be any form of sensory feedback, such as visual feedback, auditory feedback, or tactile feedback; and the input from the user may be received in any form, including acoustic, voice, or tactile input.

[0083] The bus 810 is also connected to an image sensor 820. In one or more implementations, the image sensor 820 can be used to capture image data, including but not limited to RGB image data or infrared image data.

[0084] Finally, if Figure 8As shown, bus 810 also couples electronic system 800 to one or more networks and / or to one or more network nodes via the one or more network interfaces 816. In this manner, electronic system 800 may be part of a computer network such as a LAN, a wide area network ("WAN"), or an intranet, or may be part of a network of networks such as the Internet. Any or all components of electronic system 800 may be used with the subject disclosure.

[0085] Implementations within the scope of the present disclosure may be implemented in part or in whole using a tangible computer-readable storage medium (or multiple tangible computer-readable storage media of one or more types) programmed with one or more instructions. Tangible computer-readable storage media may also be non-transitory in nature.

[0086] Computer-readable storage media can be any storage media that can be read, written, or otherwise accessed by a general or special computing device, including any processing electronics and / or processing circuitry capable of executing instructions. For example, without limitation, computer-readable media can include any volatile semiconductor memory, such as RAM, DRAM, SRAM, T-RAM, Z-RAM, and TTRAM. Computer-readable media can also include any non-volatile semiconductor memory, such as ROM, PROM, EPROM, EEPROM, NVRAM, flash memory, nvSRAM, FeRAM, FeTRAM, MRAM, PRAM, CBRAM, SONOS, RRAM, NRAM, racetrack memory, FJG, and Millipede memory.

[0087] In addition, the computer-readable storage medium may include any non-semiconductor memory, such as optical disk storage, magnetic disk storage, magnetic tape, other magnetic storage devices, or any other medium capable of storing one or more instructions. In one or more specific implementations, the tangible computer-readable storage medium may be directly coupled to the computing device, while in other specific implementations, the tangible computer-readable storage medium may be indirectly coupled to the computing device, for example, via one or more wired connections, one or more wireless connections, or any combination thereof.

[0088] Instructions can be directly executable, or can be used to develop executable instructions. For example, instructions can be implemented as executable or non-executable machine code, or can be implemented as high-level language instructions that can be compiled to produce executable or non-executable machine code. In addition, instructions can also be implemented as data, or can include data. Computer executable instructions can also be organized in any format, including routines, subroutines, programs, data structures, objects, modules, applications, applets, functions, etc. As recognized by those skilled in the art, the details including but not limited to the number, structure, sequence and organization of instructions can be significantly different without changing the underlying logic, function, processing and output.

[0089] Although the above discussion mainly involves microprocessors or multi-core processors that execute software, one or more implementations are performed by one or more integrated circuits such as ASICs or FPGAs. In one or more implementations, such integrated circuits execute instructions stored on the circuits themselves.

[0090] Those skilled in the art will recognize that the various illustrative frames, modules, elements, parts, methods and algorithms described herein can be implemented as electronic hardware, computer software or a combination of the two. In order to illustrate this interchangeability of hardware and software, various illustrative frames, modules, elements, parts, methods and algorithms have been generally described above according to functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the entire system. The technician can implement the described functionality in different ways for each specific application. Various parts and frames can be arranged differently (e.g., arranged in different orders, or divided in different ways) without departing from the scope of the subject technology.

[0091] It should be understood that the specific order or the hierarchical structure of the frame in the process disclosed by the present invention are the illustration of exemplary methods. Based on the design preferred requirements, it should be understood that the specific order or the hierarchical structure of the frame in the process can be rearranged or all the frames shown are executed. Any frame in these frames can be executed simultaneously. In one or more specific implementations, multitasking and parallel processing may be advantageous. In addition, the division of each system component in the above-mentioned specific implementation should not be understood as requiring such division in all specific implementations, and it should be understood that program components and systems can be generally integrated together in a single software product or encapsulated in multiple software products.

[0092] As used in this specification and any claims of this patent application, the terms "base station", "receiver", "computer", "server", "processor" and "memory" all refer to electronic devices or other technical devices. These terms exclude people or groups of people. For the purpose of this specification, the term "display" or "displaying" means displaying on an electronic device.

[0093] As used herein, the phrase "at least one of" following a list of items, any of which is separated by the terms "and" or "or", modifies the list as a whole, rather than each member (i.e., each item) of the list. The phrase "at least one of" does not require selection of at least one of each item listed; rather, the phrase allows for a meaning that includes at least one of any one item and / or at least one of any combination of items and / or at least one of each item. For example, the phrases "at least one of A, B, and C" or "at least one of A, B, or C" each refer to only A, only B, or only C; any combination of A, B, and C; and / or at least one of each of A, B, and C.

[0094] The predicate words "configured to," "operable to," and "programmed to" do not imply any particular tangible or intangible modification of a subject matter but are intended to be used interchangeably. In one or more specific implementations, a processor configured to monitor and control an operation or component may also mean that the processor is programmed to monitor and control the operation or that the processor is operable to monitor and control the operation. Likewise, a processor configured to execute code may be interpreted as a processor programmed to execute code or operable to execute code.

[0095] Phrases such as aspect, this aspect, on the other hand, some aspects, one or more aspects, a specific implementation, this specific implementation, another specific implementation, some specific implementations, one or more specific implementations, an embodiment, this embodiment, another embodiment, some embodiments, one or more embodiments, configuration, this configuration, other configurations, some configurations, one or more configurations, subject technology, disclosure, the present disclosure, other variations thereof, etc. are for convenience and do not mean that the disclosure involving such one or more phrases is essential to the subject technology, nor does it mean that such disclosure applies to all configurations of the subject technology. Disclosures involving such one or more phrases may apply to all configurations or one or more configurations. Disclosures involving such one or more phrases may provide one or more examples. Phrases such as aspect or some aspects may refer to one or more aspects and vice versa, and this applies similarly to the other aforementioned phrases.

[0096] The word "exemplary" is used herein to mean "serving as an example, instance, or illustration." Any implementation described herein as "exemplary" or as an "example" is not necessarily to be construed as preferred or advantageous over other implementations. Furthermore, to the extent that the terms "including," "having," and the like are used in the specification or claims, such terms are intended to be inclusive, in a manner similar to the way the term "comprising" is interpreted when used as a transitional word in a claim.

[0097] All structural and functional equivalents to the elements of the various aspects described throughout this disclosure that are known or later become known to those of ordinary skill in the art are expressly incorporated herein by reference and are intended to be covered by the claims. In addition, nothing disclosed herein is intended to be made available to the public regardless of whether the disclosure is explicitly stated in the claims. Pursuant to 35 USC § 112, paragraph 6, no claim element shall be construed unless the element is explicitly stated using the phrase “means for…” or, in the case of a method claim, the element is stated using the phrase “step for…”

[0098] The previous description is provided to enable those skilled in the art to practice the various aspects described herein. Various modifications of these aspects are apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects. Therefore, the claims are not intended to be limited to the aspects shown herein, but are intended to make the full scope consistent with the language claims, wherein reference to elements in singular values ​​is not intended to mean "only one", but refers to "one or more", unless specifically noted. Unless otherwise specifically stated, the term "some" refers to one or more. Male pronouns (e.g., his) include female and neutral (e.g., her and its), and vice versa. Titles and subtitles (if any) are used only for convenience and do not limit the subject disclosure.

Claims

1. A method for providing a response, the method comprising: providing a request to authenticate an identification document to an identity provider, the request including previously captured image data of the identification document; receiving an indication from the identity provider that the identification document has been verified based on the previously captured image data; in response to receiving the indication, generating a previous representation of the identification document based on the previously captured image data; as well as storing the previous representation; After said storing, receiving a request associated with authenticating the authenticity of said identity document from a service provider; In response to receiving the request, capturing image data of the identification document; generating a representation based on the image data, the representation including form factor data of the identification document; comparing the representation to the previous representation of the identification document, the previous representation comprising previous form factor data for the identification document; as well as Based on comparing the representation to the previous representation, a response to the request is provided to the service provider. 2 . The method of claim 1 , wherein the storing comprises storing the previous representation in a secure processor of the device.

3. The method of claim 1, wherein the form factor data indicates a position of a common security feature of the identity document relative to a specific feature of the identity document. 4 . The method of claim 1 , wherein the image data comprises RGB image data, and the form factor data is based on the RGB image data.

5. The method of claim 1, wherein the image data comprises infrared image data and the form factor data is based on the infrared image data. The method of claim 1 , wherein the identity provider corresponds to an organization that issues an identity document corresponding to the identity document.

7. A method according to claim 1, wherein the indication that the identity document has been verified includes a signature authentication, which is bound to the device by a public key in a public-private key pair, and the private key in the public-private key pair is stored on the device. The method of claim 1 , wherein the service provider corresponds to an online merchant.

9. The method of claim 1, wherein the representation and the previous representation do not indicate personally identifiable information.

10. An electronic device, comprising: at least one processor; and a memory comprising instructions that, when executed by the at least one processor, cause the at least one processor to: providing a request to authenticate an identification document to an identity provider, the request including previously captured image data of the identification document; receiving an indication from the identity provider that the identification document has been verified based on the previously captured image data; in response to receiving the indication, generating a previous representation of the identification document based on the previously captured image data; as well as storing the previous representation; receiving, after the previous representation is stored, a request from a service provider associated with authenticating the authenticity of the identification document; In response to receiving the request, capturing image data of the identification document; generating a representation based on the image data, the representation including form factor data of the identification document; comparing the representation to the previous representation of the identification document, the previous representation comprising previous form factor data for the identification document; as well as Based on comparing the representation to the previous representation, a response to the request is provided to the service provider.

11. The electronic device of claim 10, wherein the storing comprises storing the previous representation in a secure processor of the electronic device.

12. The electronic device of claim 10, wherein the form factor data and the previous form factor data indicate a position of a common security feature of the identification document relative to a specific feature of the identification document.

13. The electronic device of claim 10, wherein each of the image data and the previous image data comprises RGB image data, and Wherein the shape factor data and the previous shape factor data are based on corresponding RGB image data.

14. The electronic device of claim 10, wherein each of the image data and the previous image data comprises infrared image data, and Wherein the form factor data and the previous form factor data are based on corresponding infrared image data. 15 . The electronic device according to claim 10 , wherein the identity provider corresponds to an organization for issuing an identity document corresponding to the identity document.

16. An electronic device according to claim 10, wherein the indication that the identification document has been verified includes a signature authentication, which is bound to the electronic device by a public key in a public-private key pair, and the private key in the public-private key pair is stored on the electronic device.

17. The electronic device of claim 10, wherein the service provider corresponds to an online merchant.

18. The electronic device of claim 10, wherein the representation and the previous representation do not indicate personally identifiable information.

19. A computer program product comprising code stored in a non-transitory computer readable storage medium, the code comprising: code for providing a request to a first service to authenticate an identification document, the request comprising first captured image data of the identification document; code for receiving from the first service an indication that the identification document has been verified based on the first captured image data; code for generating a first representation based on the first captured image data in response to receiving the indication; code for storing said first representation; code for receiving, after the first representation is stored, a request from a second service associated with authenticating the authenticity of the identification document; Code for performing the following operations in response to the request: capturing second image data of the identification document, generating a second representation based on the second image data; and code for comparing the second representation with the first representation of the identification document, the first representation comprising first form factor data of the identification document and the second representation comprising second form factor data of the identification document; Code for providing a response to the request to the second service based on the comparison of the first representation and the second representation.

20. The computer program product of claim 19, wherein the first representation and the second representation do not indicate personally identifiable information.

Images