Use of eddy currents in exhaled air for authentication

Abstract

Device, including: - a processor; - a camera that the processor can access; and - a storage device that the processor can access and that contains instructions that can be executed by the processor to: - Receiving at least one image of eddy currents in exhaled air from the camera; - Comparing at least one image with at least one template; and - in response to the comparison, determining whether a user needs to be authenticated; - wherein the at least one template comprises at least one nasal breathing template representing nasal breathing and at least one mouth breathing template representing mouth breathing, wherein the comparison comprises comparing the at least one image with both the at least one nasal breathing template and the at least one mouth breathing template, and wherein the instructions are executable to authenticate the user in response to the fact that the at least one image matches one of the at least one nasal breathing template and the at least one mouth breathing template.

Description

AREA

[0001] The present application generally relates to the use of eddy currents of exhaled air for authentication. BACKGROUND

[0002] As technology advances, so too do malicious hackers who attempt to exploit technological vulnerabilities after bypassing inadequate authentication security measures. As further explained herein, it is possible to generate images of a person's exhaled air using infrared technology.

[0003] Publication US 2002 / 0112177A1 describes an anonymous authentication system that includes a biometric capture device and a second biometric characteristic of a person wishing to exercise a right of use. The second biometric characteristic is captured by the biometric capture device. The anonymous authentication system includes a database containing a large number of first biometric characteristics from individuals authorized to exercise the right of use, which were previously stored in the database by the registration system. The second biometric sample is compared with the first biometric characteristics stored in the database. If the second biometric characteristic matches one of the first biometric characteristics stored in the database, the person is granted the right of use.

[0004] The publication FEI, Jin; PAVLIDIS, Ioannis: Analysis of breathing air flow patterns in thermal imaging; 2006 International Conference of the IEEE Engineering in Medicine and Biology Society, pp. 946-952 analyzes breathing air flow patterns in thermal imaging and proposes using breathing patterns as a novel biometric method.

[0005] Publication US 2012 / 0075463A1 discloses a thermal imaging interface for controlling a computer program that can acquire one or more thermal infrared images of one or more objects using one or more thermal imaging cameras. The images can be analyzed to identify one or more features of the objects. Such features can be used as control input in the computer program.

[0006] Publication JP 2015 - 202 120 A discloses an analysis device comprising a detection device that captures a thermal image of a human face, a calculation device that calculates the extent of temperature change in the nasal and oral region from a multitude of chronologically arranged thermal images, and an identification device that identifies an organ used in respiration based on the extent of temperature change. SUMMARY

[0007] The object of the present invention is to enable improved authentication based on eddy currents in exhaled air.

[0008] This problem is solved by the subject matter of main claim 1 and dependent claims 8 and 14, which define the present invention.

[0009] Preferred embodiments of the present invention are the subject of the dependent claims.

[0010] Accordingly, a device according to one aspect comprises a processor and a memory device to which the processor can access. The memory device contains instructions executable by the processor to receive at least one image of eddy currents in exhaled air, to compare that at least one image with at least one template, and to determine whether a user needs to be authenticated in response to the comparison.

[0011] In some embodiments, the image can be an infrared image. If desired, the instructions can be executed by the processor to filter the image before comparing it to the template, in order to output only image segments in the range of 4130 nm to 4427 nm.

[0012] In some implementations, the instructions can be executable to return "authenticated" in response to a vortex shape in the at least one image matching a vortex shape in at least one template, whereas "unauthenticated" can be returned in response to a vortex shape in the at least one image not matching a vortex shape in at least one template. In other implementations, the instructions can be executable by the processor to return "authenticated" in response to a breathing period in the at least one image matching a breathing period in at least one template, and otherwise return "unauthenticated".In other embodiments, the two tests (breathing period and eddy current shape) can be used, with only one needing to be fulfilled to return "authenticated", or both may need to be fulfilled to return "authenticated".

[0013] The at least one template comprises a nasal breathing template representing nasal breathing and a mouth breathing template representing mouth breathing, and the image is compared to both templates. In response to the image matching at least one of the nasal breathing templates and the mouth breathing template, "authenticated" is returned. It can also be returned "authenticated" if desired if the image matches both the nasal breathing template and the mouth breathing template; however, if only one of the templates matches, "not authenticated" can be returned in this embodiment.

[0014] Another aspect involves a computer-readable storage medium (CRSM) that is not a transitory signal.

[0015] Instructions executable by a processor to compare a first image of a person's breath with a second image, and to return a signal indicating that the person is authenticated in response to determining that the first image meets a match condition with the second image. However, in response to determining that the first image does not meet a match condition with the second image, the instructions are executable to return a signal indicating that the person is not authenticated.

[0016] In another aspect, a procedure involves accessing an infrared (IR) image of a person's breathing and authenticating the person in response to the IR image meeting a match criterion with a pre-stored image. The procedure also includes not authenticating the person in response to the IR image not meeting a match criterion with a pre-stored image.

[0017] The details of these principles, both in terms of their structure and their operation, are best understood with reference to the accompanying drawings, in which the same reference numerals refer to the same parts. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] They show: Fig. 1 a block diagram of an exemplary system in accordance with the present principles; Fig. 2 an exemplary block diagram of a network of devices in accordance with the present principles; Fig. 3. A flowchart of an exemplary logic; Fig. 4 to 8 illustrations that schematically depict various respiratory vortices and periodicities; and Fig. 9. An example user interface (UI) that can be generated if authentication fails. DETAILED DESCRIPTION

[0019] As is recognized herein, just as physiological characteristics, including respiratory features, lung capacity, diaphragmatic strength, etc., vary from person to person, so too do the vortex currents generated by exhaled air, which are influenced by physiological characteristics that can differ from person to person. As is also recognized herein, these vortex currents, which vary from person to person, can be used for authentication.

[0020] Accordingly, the present disclosure relates to improving the security of individual computer systems by authenticating computer users, at least in part, using images of their exhaled air. This authentication is non-invasive, can be used continuously, and may be less susceptible to manipulation than authentication techniques such as facial recognition.

[0021] With regard to any computer systems discussed herein, a system can comprise server and client components connected via a network so that data can be exchanged between the client and server components. The client components can include one or more computing devices, such as televisions (e.g., smart TVs, internet-enabled TVs), computers such as desktop, laptop, and tablet computers, so-called convertible devices (which, for example, have a tablet configuration and a laptop configuration), and other mobile devices, including smartphones. These client devices can, as non-limiting examples, use operating systems from Apple, Google, or Microsoft. A Unix-like or similar operating system, such as Linux, can also be used.These operating systems can run one or more browsers, such as a browser made by Microsoft, Google, or Mozilla, or any other browser program that can access web pages and applications hosted by internet servers over a network, such as the internet, a local intranet, or a virtual private network.

[0022] As the term is used here, instructions refer to computer-implemented steps for processing information within the system. The instructions can be implemented as software, firmware, or hardware; therefore, explanatory components, blocks, modules, circuits, and steps are sometimes described in terms of their functionality.

[0023] A processor can be any conventional general-purpose single- or multi-chip processor capable of executing logic using various lines, such as address lines, data lines, and control lines, as well as registers and shift registers. Furthermore, any logic blocks, modules, and circuits described herein can be implemented or executed in or by a digital signal processor (DSP), a field-programmable gate array (FPGA), or any other logic device, such as an application-specific integrated circuit (ASIC), discrete gate or transistor logic, discrete hardware components, or any combination thereof, designed to perform the functions described herein. A processor can be implemented by a control device, a state machine, or a combination of computer devices.

[0024] Any software and / or applications described herein by means of flowcharts and / or user interfaces may comprise various subroutines, procedures, etc. It is understood that logic said to be executed by, for example, one module, may be redistributed to other software modules and / or combined into a single module and / or made available as a shared library.

[0025] When implemented in software, logic can be written in a suitable language, such as, without limitation, C# or C++, and can be stored in or transmitted via a computer-readable storage medium (that is not, for example, a transient signal), such as main memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), compact disk read-only memory (CD-ROM), or other optical disk storage devices, such as a DVD, magnetic disk storage device, or other magnetic storage devices, including removable USB flash drives, etc.

[0026] In one example, a processor can access information from a data storage device, such as a computer-readable storage medium, via its input lines, and / or the processor can wirelessly access information from an internet server by activating a wireless transceiver to send and receive data. The data is typically converted from analog to digital signals when received, and from digital to analog signals when sent, by circuitry between the antenna and the processor's registers. The processor then processes the data through its shift registers to output computed data on output lines to present the computed data to the device.

[0027] The components included in one embodiment can be used in any suitable combination in other embodiments. For example, any of the various components described herein and / or illustrated in the figures can be combined, exchanged, or excluded from other embodiments.

[0028] The term “circuit” or “circuits” may be used in the abstract, description, and / or claims. As is well known in engineering, the term “circuits” encompasses all levels of available integration, e.g., from discrete logic circuits to the highest level of circuit integration, such as VLSI, and includes programmable logic devices programmed to perform the functions of an embodiment, as well as general-purpose or specific processors programmed with instructions to perform those functions.

[0029] Now, particularly with regard to Fig. Figure 1 shows an exemplary block diagram of an information handling system and / or a computer system 100. It should be noted that in some embodiments, the system 100 may be a desktop computer system, such as one of the ThinkCentre® or ThinkPad® PC series sold by Lenovo (US) Inc. of Morrisville, NC, or a workstation computer, such as the ThinkStation® sold by Lenovo (US) Inc. of Morrisville, NC; however, as is apparent from the present description, a client device, server, or other machine in accordance with these principles may include other features or only some of the features of the system 100. The system 100 may also, for example, be a game console, such as an Xbox®, and / or the system 100 may include a wireless phone, a notebook computer, and / or another portable computing device.

[0030] As in Fig. As shown in Figure 1, the System 100 can include a so-called chipset 110. A chipset refers to a group of integrated circuits or chips designed to work together. Chipsets are usually marketed as individual products (see, for example, the chipsets marketed under the brands INTEL®, AMD®, etc.).

[0031] In the example from Fig. 1. The chipset 110 has a specific architecture that can vary somewhat depending on the brand or manufacturer. The architecture of the chipset 110 comprises a core and memory control group 120 and an I / O control node 150, which exchange information (e.g., data, signals, commands, etc.) via, for example, a Direct Management Interface or a Direct Media Interface (DMI) 142 or a Link Controller 144. In the example from Fig. 1. The DMI 142 is a chip-to-chip interface (occasionally referred to as a link between a "Northbridge" and a "Southbridge").

[0032] The core and memory control group 120 comprises one or more processors 122 (e.g., single-core or multi-core, etc.) and a memory control node 126, which exchange information via a front-side bus (FSB) 124. As described herein, various components of the core and memory control group 120 can be integrated into a single processor chip, for example, to create a chip that replaces the conventional "northbridge" architecture.

[0033] Memory control node 126 interfaces with memory 140. For example, memory control node 126 can provide support for DDR SDRAM memory (e.g., DDR, DDR2, DDR3, etc.). Generally, memory 140 is a type of main memory (RAM). It is often referred to as "system memory."

[0034] The memory control node 126 may also include a low-voltage differential signaling (LVDS) interface 132. The LVDS 132 may be a so-called LVDS display interface (LDI) to support a display device 192 (e.g., a CRT, a flat panel display, a projector, a touch-activated display, etc.). Block 138 includes some examples of technologies that can be supported via the LVDS interface 132 (e.g., serial digital video, HDMI / DVI, DisplayPort). The memory control node 126 also includes one or more PCI Express (PCI-E) interfaces 134, for example, to support discrete graphics 136. Discrete graphics using a PCI-E interface has become an alternative solution to an accelerated graphics port (AGP). For example, the memory control node 126 can include a 16-lane (x16) PCI-E slot for an external PCI-E-based graphics card (including, for example,one of several GPUs). An example system might include AGP or PCI-E to support graphics.

[0035] In examples where it is used, the I / O control node 150 can include various interfaces. The example from Fig. 1 includes a SATA interface 151, one or more PCI-E interfaces 152 (optionally one or more legacy PCI interfaces), one or more USB interfaces 153, a LAN interface 154 (more generally, a network interface for communication over at least one network, such as the Internet, a WAN, a LAN, etc., under the direction of the processor(s) 122), a general-purpose I / O interface (GPIO) 155, a low-pin-count interface (LPC) 170, a power management interface 161, a clock interface 162, an audio interface 163 (e.g., for speakers 194 to output sound), a total cost of ownership (TCO) interface 164, a system management bus interface (e.g., a serial multi-master computer bus interface) 165, and a serial peripheral flash memory / controller interface (SPI flash) 166, which in the example from Fig. 1. The BIOS includes version 168 and boot code 190. Regarding network connectivity, the I / O control node can include 150 integrated Gigabit Ethernet controller lines multiplexed with a PCI-E interface slot. Other network features can function independently of a PCI-E interface.

[0036] The interfaces of the I / O control node 150 can provide communication with various devices, networks, etc. For example, the SATA interface 151, when used, provides reading, writing, or reading and writing information on one or more drives 180, such as HDDs, SSDs, or a combination thereof. It is understood that the drives 180 are physical, computer-readable storage media that do not transmit transient signals. The I / O control node 150 can also include an Advanced Host Controller Interface (AHCI) to support one or more drives 180. The PCI-E interface 152 enables wireless connections 182 to devices, networks, etc. The USB interface 153 provides input devices 184, such as keyboards, mice, microphones, and various other devices (e.g.,Cameras, including both visible spectrum cameras and infrared cameras such as forward infrared (FLIR) cameras, telephones, storage devices, media playback devices, etc.).

[0037] In the example from Fig. 1 The LPC interface 170 provides the use of one or more ASICs 171, a Trusted Platform Module (TPM) 172, a Super I / O 173, a Firmware Node 174, BIOS support 175, and various types of memory 176, such as ROM 177, Flash 178, and non-volatile RAM (NVRAM) 179. With regard to the TPM 172, this module can be in the form of a chip that can be used to authenticate software and hardware devices. For example, a TPM can be capable of performing platform authentication and can be used to verify that a system seeking access is the expected system.

[0038] Upon power-up, the system 100 can be configured to execute the boot code 190 for the BIOS 168, which is stored in the SPI flash memory 166, and subsequently processes data under the control of one or more operating systems and application software (such as those stored in system memory 140). An operating system can be stored in any of several locations and can be accessed, for example, according to the instructions of the BIOS 168.

[0039] In addition, in some embodiments, the system 100 may include a gyroscope that detects and / or measures the orientation of the system 100 and provides a corresponding input to the processor 122, an accelerometer that detects acceleration and / or movement of the system 100 and provides a corresponding input to the processor 122, an audio receiver / microphone that provides the processor 122 with input from the microphone based on sound that is detected, such as from a user providing audible input to the microphone, and a camera, as previously mentioned with reference to the input device 184, that collects one or more visible and / or IR images and provides a corresponding input to the processor 122.The camera can be a thermal imaging camera, an infrared (IR) camera, a digital camera such as a webcam, a three-dimensional (3D) camera, and / or a camera otherwise integrated into the System 100 and controllable by the Processor 122 to capture photos / images and / or video. Furthermore, the System 100 can include a GPS transceiver configured to receive geographic position information from at least one satellite and provide that information to the Processor 122. However, it is understood that a suitable position receiver other than a GPS receiver may be used to determine the location of the System 100, in accordance with these principles.

[0040] It is understood that an example client device or other machine / computer may have fewer or more features than the one described in Fig. The system shown in Figure 1 can comprise System 100. In any case, it is understood, at least based on the foregoing, that System 100 is configured to implement the principles set forth above.

[0041] Now, with reference to Fig. Two exemplary devices are shown that communicate over a 200 network, such as the Internet, according to the present principles. It is understood that each of the devices referred to in relation to Fig. The devices described in section 2 may include at least some of the features, components and / or elements of the previously described system 100.

[0042] Fig. Figure 2 shows a notebook computer and / or a convertible computer 202, a desktop computer 204, a portable device 206, such as a smartwatch, a smart TV (TV) 208, a smartphone 210, a tablet computer 212, and a server 214, such as an internet server, that can provide cloud storage which the devices 202 to 212 can access. It is understood that the devices 202 to 214 are configured to communicate with each other over the network 200 in order to implement these principles.

[0043] With reference to Fig. Figure 3 depicts a logic that can be executed by one of the devices discussed herein, using its own IR camera and processor or the IR camera and / or processor of another device, to authenticate a computer user and to further authenticate the computer user on a continuous or periodic basis at predetermined intervals, as desired.

[0044] Starting with block 300, it may be necessary to enter a secret code to unlock template generation mode. Entering this code may authenticate the current user. Typically, the code is either administrator-level or classified, meaning only authorized users will likely be able to obtain it to generate a template.

[0045] Continuing with Block 302, one or more images of the person's breathing are acquired to create templates for subsequent use, as described below. These images can be acquired using the FLIR technology and Camera 184 described earlier. The template images are acquired for the type of parameters that will subsequently be used for comparison. For example, if the real-time image described below, which is used for comparison with the template, is to be an image of nasal exhalation, then at least one of the templates will be a vortex of nasal exhalation. Similarly, if oral exhalation is used, Block 302 will acquire a template of oral exhalation, and if breathing periodicity is used, Block 302 will acquire multiple template images to establish a baseline breathing periodicity for the person.It should be noted that the templates can be stored in a library containing templates from multiple authorized users.

[0046] After the baseline templates have been established, the computer user can then be monitored, essentially continuously if desired, by the FLIR camera or another imaging device that captures subsequent test images of the user's breathing in Block 304. For example, a test image can be obtained every second to ensure that an authorized user is operating the computer. Or a test image can be generated upon subsequent login.

[0047] When a test pattern is generated, the logic can move from block 304 to block 306 to compare at least one test pattern with the templates generated in block 302. In one example, the test pattern is first passed through a narrowband filter, so that only IR signals in the CO2 absorption band (4130 nm to 4427 nm) remain. The same filtering can be applied to the template images generated in block 302.

[0048] In one example, the test image(s) is / are compared with the template(s) corresponding to the username at login, and with no other templates in the library. In other embodiments, the test image(s) can be compared with all templates in the library in such a way as to authenticate any previously authorized user.

[0049] For example, using image recognition for pattern matching, it is determined whether the test image(s) generated in block 304 matches a template generated in block 302 and / or a template located in the template library. For a "match" to be returned, the test image typically matches the template within the tolerance required by the pattern matching recognition used.

[0050] In response to a match being found at hashtag 308, the logic moves to block 310 to return a signal indicating that the user is, or will remain, authenticated. This authentication allows the user to operate the computer normally, taking into account their other security credentials and access levels.

[0051] On the other hand, in response to the lack of a match at hash 308, the logic proceeds to block 312 to return a signal indicating that the user is not authenticated, or that authentication has failed. Failed authentication restricts computer operation and can completely lock the user from further use of the computer. If desired, the logic can then proceed to block 314 to prompt the user to re-enter the secret code, assuming the user can access it and re-enter the code to unlock the template generation steps in block 302. An example user interface (UI) for this purpose is described in more detail below.

[0052] Under these principles, it is understood that statistical analyses can be used to compensate for simple changes in the user compared to when the baseline template images were obtained, such as a cold / allergies or facial hair growth. Furthermore, if the baseline templates were obtained while the user was resting, and the user subsequently returns to the computer after exercising, the user's breathing pattern will be higher than that of the template images. Other subtle differences, such as a deviated septum, can create unique turbulence during nasal exhalation due to differences in airflow restrictions between the left and right nasal cavities.

[0053] In any case, the step from block 314 can be used instead of statistical analysis to account for any changes to an authorized user that might cause an authorized user's test image to deviate from the authorized user's previous baseline template. If the user is an authorized user and experiences an authentication failure in block 312, such an authorized user is likely to be able to access the secret code and re-enter template generation in blocks 300 and 302, whereas an unauthorized user who fails authentication is unlikely to be able to access the secret code to generate a "fake" template.

[0054] Now, with reference to Fig. Figures 4 to 7 show an exemplary user 400 who exhales nasally through the nose 402 to create a vortex 404 in the air, which can be imaged, for example, using FLIR, due to the body heat warming the exhaled air. Fig. 4. The user inhales, so that in Fig. 5. No exhaled eddy current is shown. The user then exhales again, as in Fig. 6 shown to generate the eddy current 404 again, and breathes as in Fig. 7 again, so that no exhaled vortex current is generated. Both the precise size and the shape of the vortex current 404 (more generally, the size, shape, and relative direction of the airflow or disturbances caused by the person's breathing) can be recorded, either as a baseline template in block 302 in Fig. 3 or as a subsequent test image, as well as the time between successive eddy current images, which is to be used to indicate the respiratory periodicity. It should be noted that although exhaled eddy currents are used, alternatively air disturbances that can be caused by inhalation can be used, although these currents are more difficult to detect against the background.

[0055] In addition to or as an alternative to using the vortex currents created by nasal exhalations, it shows Fig. 8, that the eddy currents 802 caused by mouth exhalation through the mouth 800 of the user can be used. These oral eddy currents are typically larger for analytical purposes and thus more robust than nasal eddy currents.

[0056] It is therefore understood that the logic from Fig. 3 can be used to return "authenticated" in response to a vortex shape in a test image that matches a vortex shape in a template, and otherwise return "unauthenticated". Additionally or alternatively, the logic can consist of Fig. 3. The template is used to return "authenticated" in response to a breathing period in a test image that corresponds to a breathing period in a template, and otherwise to return "unauthenticated". It is further understood that the template may include one or more nasal breathing templates and one or more mouth breathing templates, with the two templates being compared to their respective test images, and that "authenticated" is returned in response to a test image matching either the nasal breathing template or the mouth breathing template. Alternatively, "authenticated" may only be returned if the test images match both the nasal and mouth templates.

[0057] Fig. Figure 9 shows an example UI 900, which is displayed here on one of the displays in response to the logic in block 314. Fig. 3 can be presented. A message 902 can be presented indicating that authentication by breath has failed. A prompt 904 can be presented to enter the secret code into a field 906 to re-enter the template generation phase in block 302. Fig. 3 to allow.

[0058] Furthermore, in some embodiments, a user interface (UI) can be presented on a device display, implementing the present principles to configure the device settings. For example, such a UI may include an option that can be selected to enable eddy current authentication, as disclosed herein, and an option that can be deselected to disable eddy current authentication.

[0059] On its own or in combination with the breathing rhythm, the eddy current mapping described herein creates a unique pattern detectable by infrared-tuned cameras. By employing continuous, non-invasive surveillance technology, the present disclosure enables not only physical presence but also the detection of whether another person is operating the device. This additional layer of authentication can be used to ensure not only that the user is at the system but, based on the airflow eddies and breathing pattern, also that this user is an authenticated user.

[0060] Before concluding, it should be understood that although a software application for implementing these principles may be sold with a device such as System 100, these principles are applicable in cases where such an application is downloaded from a server to a device via a network, such as the Internet. Furthermore, these principles are applicable in cases where such an application is contained on a computer-readable storage medium that is sold and / or made available, where the computer-readable storage medium is not a transitory signal and / or a signal in itself.

[0061] It is understood that although the present principles have been described with reference to some exemplary embodiments, these are not intended to be limiting, and that various alternative arrangements may be used to implement the subject matter claimed herein. The components included in one embodiment may be used in any suitable combination in other embodiments. For example, any of the various components described herein and / or illustrated in the figures may be combined, exchanged, or excluded from other embodiments.

Claims

[1] Device, comprising: - a processor; - a camera that the processor can access; and - a storage device that the processor can access and that contains instructions that can be executed by the processor to: - Receiving at least one image of eddy currents in exhaled air from the camera; - Comparing at least one image with at least one template; and - in response to the comparison, determining whether a user needs to be authenticated; - wherein the at least one template comprises at least one nasal breathing template representing nasal breathing and at least one mouth breathing template representing mouth breathing, wherein the comparison comprises comparing the at least one image with both the at least one nasal breathing template and the at least one mouth breathing template, and wherein the instructions are executable to authenticate the user in response to the fact that the at least one image matches one of the at least one nasal breathing template and the at least one mouth breathing template. [2] Device according to claim 1, wherein the at least one image is an infrared image. [3] Device according to claim 1, wherein the instructions are executable by the processor to: - Before comparison, filtering at least one image to output only image sections in the range of 4130 nm to 4427 nm. [4] Device according to claim 1, wherein the instructions are executable by the processor to: - in response to the fact that a vortex shape in the at least one image matches a vortex shape in the at least one template, user authentication; and - in response to the fact that a vortex shape in the at least one image does not match a vortex shape in the at least one template, refusal to authenticate the user. [5] Device according to claim 1, wherein the instructions are executable by the processor to: - in response to the fact that a breathing period in the at least one image matches a breathing period in the at least one template, user authentication; and - in response to the fact that a breathing period in the at least one image does not match a breathing period in the at least one template, refusal to authenticate the user. [6] Device according to claim 4, wherein the instructions are executable by the processor to: - in response to the fact that a breathing period in the at least one image matches a breathing period in the at least one template, user authentication; and - in response to the fact that a breathing period in the at least one image does not match a breathing period in the at least one template, refusal to authenticate the user. [7] Device according to claim 1, wherein the instructions are executable to authenticate the user in response to the fact that the at least one image matches both the at least one nasal breathing template and the at least one mouth breathing template, and wherein the instructions are executable to refuse authentication of the user in response to the fact that the at least one image does not match either the at least one nasal breathing template or the at least one mouth breathing template. [8] Procedure comprising the following steps: - Accessing at least one image of a person's breath; - Comparing at least one image with at least one template; and - in response to the comparison, determine whether the person needs to be authenticated; - wherein the at least one template comprises at least one nasal breathing template representing nasal breathing and at least one mouth breathing template representing mouth breathing, wherein the comparison comprises comparing the at least one image with both the at least one nasal breathing template and the at least one mouth breathing template, and wherein the instructions are executable to authenticate the person in response to the fact that the at least one image matches one of the at least one nasal breathing template and the at least one mouth breathing template. [9] Method according to claim 8, further comprising non-authenticating the person in response to the fact that the at least one image does not match one of the at least one nasal breathing template and the at least one mouth breathing template. [10] Method according to claim 8, wherein the at least one image is an infrared image. [11] The method of claim 8, further comprising the following steps: - in response to a vortex shape in the at least one image matching a vortex shape in the at least one template, returning a signal indicating that the person is authenticated; and - in response to the fact that a vortex shape in the at least one image does not match a vortex shape in the at least one template, returning a signal indicating that the person is not authenticated. [12] The method of claim 8, further comprising the following steps: - in response to a breathing period in the at least one image matching a breathing period in the at least one template, returning a signal indicating that the person is authenticated; and - in response to the fact that a breathing period in the at least one image does not match a breathing period in the at least one template, returning a signal that represents that the person is not authenticated. [13] The method of claim 8, further comprising the following steps: - in response to accessing the at least one image, filtering the at least one image to output only image segments in the range from 4130 nm to 4427 nm; and - Using the image sections to determine whether the at least one image matches the at least one template. [14] Computer-readable storage medium (CRSM) that is not a transitory signal, wherein the computer-readable storage medium comprises instructions that can be executed by a processor to perform a method according to any one of claims 8 to 13. [15] CRSM according to claim 14, comprising the at least one processor.

Images