Patent Application
20120114196
The present invention relates in general to person's verification online using photographs on officially issued identification documents.
A network is a collection of links and nodes (e.g., multiple computers and/or other devices connected together) arranged so that information may be passed from one part of the network to another over multiple links and through various nodes. Examples of networks include the Internet, the public switched telephone network, the global Telex network, computer networks (e.g., an intranet, an extranet, a local-area network, or a wide-area network), wired networks, and wireless networks.
The Internet is a worldwide network of computers and computer networks arranged to allow the easy and robust exchange of information between computer users. Hundreds of millions of people around the world have access to computers connected to the Internet via Internet Service Providers (ISPs). Content providers place multimedia information (e.g., text, graphics, audio, video, animation, and other forms of data) at specific locations on the Internet referred to as webpages. Websites comprise a collection of connected, or otherwise related, webpages. The combination of all the websites and their corresponding webpages on the Internet is generally known as the World Wide Web (WWW) or simply the Web.
For Internet users and businesses alike, the Internet continues to be increasingly valuable. People are increasingly using the Web for everyday tasks such as social networking, shopping, banking, paying bills, and consuming media and entertainment. E-commerce is growing, with businesses delivering more services and content across the Internet, communicating and collaborating online, and inventing new ways to connect with each other.
Some Internet users, typically those that are larger and more sophisticated, may provide their own hardware, software, and connections to the Internet. But many Internet users either do not have the resources available or do not want to create and maintain the infrastructure necessary to host their own websites. To assist such individuals (or entities), hosting companies exist that offer website hosting services. These hosting providers typically provide the hardware, software, and electronic communication means necessary to connect multiple websites to the Internet. A single hosting provider may literally host thousands of websites on one or more hosting servers.
Websites may be created using HyperText Markup Language (HTML) to generate a standard set of tags that define how the webpages for the website are to be displayed. Users of the Internet may access content providers' websites using software known as an Internet browser, such as MICROSOFT INTERNET EXPLORER or MOZILLA FIREFOX. After the browser has located the desired webpage, it requests and receives information from the webpage, typically in the form of an HTML document, and then displays the webpage content for the user. The user then may view other webpages at the same website or move to an entirely different website using the browser.
Browsers are able to locate specific websites because each website, resource, and computer on the Internet has a unique Internet Protocol (IP) address. Presently, there are two standards for IP addresses. The older IP address standard, often called IP Version 4 (IPv4), is a 32-bit binary number, which is typically shown in dotted decimal notation, where four 8-bit bytes are separated by a dot from each other (e.g., 64.202.167.32). The notation is used to improve human readability. The newer IP address standard, often called IP Version 6 (IPv6) or Next Generation Internet Protocol (IPng), is a 128-bit binary number. The standard human readable notation for IPv6 addresses presents the address as eight 16-bit hexadecimal words, each separated by a colon (e.g., 2EDC:BA98:0332:0000:CF8A:000C:2154:7313).
IP addresses, however, even in human readable notation, are difficult for people to remember and use. A Uniform Resource Locator (URL) is much easier to remember and may be used to point to any computer, directory, or file on the Internet. A browser is able to access a website on the Internet through the use of a URL. The URL may include a Hypertext Transfer Protocol (HTTP) request combined with the website's Internet address, also known as the website's domain name. An example of a URL with a HTTP request and domain name is: http://www.companyname.com. In this example, the “http” identifies the URL as a HTTP request and the “companyname.com” is the domain name.
Domain names are much easier to remember and use than their corresponding IP addresses. The Internet Corporation for Assigned Names and Numbers (ICANN) approves some Generic Top-Level Domains (gTLD) and delegates the responsibility to a particular organization (a “registry”) for maintaining an authoritative source for the registered domain names within a TLD and their corresponding IP addresses. For certain TLDs (e.g., .biz, .info, .name, and .org) the registry is also the authoritative source for contact information related to the domain name and is referred to as a “thick” registry. For other TLDs (e.g., .com and .net) only the domain name, registrar identification, and name server information is stored within the registry, and a registrar is the authoritative source for the contact information related to the domain name. Such registries are referred to as “thin” registries. Most gTLDs are organized through a central domain name Shared Registration System (SRS) based on their TLD.
The process for registering a domain name with .com, .net, .org, and some other TLDs allows an Internet user to use an ICANN-accredited registrar to register their domain name. For example, if an Internet user, John Doe, wishes to register the domain name “mycompany.com,” John Doe may initially determine whether the desired domain name is available by contacting a domain name registrar. The Internet user may make this contact using the registrar's webpage and typing the desired domain name into a field on the registrar's webpage created for this purpose. Upon receiving the request from the Internet user, the registrar may ascertain whether “mycompany.com” has already been registered by checking the SRS database associated with the TLD of the domain name. The results of the search then may be displayed on the webpage to thereby notify the Internet user of the availability of the domain name. If the domain name is available, the Internet user may proceed with the registration process. Otherwise, the Internet user may keep selecting alternative domain names until an available domain name is found. Domain names are typically registered for a period of one to ten years with first rights to continually re-register the domain name.
An individual or entity's domain name is increasingly the anchor around which their online presence is maintained. For example, a company's website (www.companyname.com) and email system (john.doe@companyname.com) utilize the company's domain name as an integral part of their architecture. Similarly, many Internet users use their email address, and therefore their domain name, as a means of identification on social websites, which have proliferated in recent years. Social websites are social networking services that focus on building and verifying online social networks for communities of people who share interests and activities, or who are interested in exploring the interests and activities of others, and which necessitates the use of software. Most social websites are Internet based and provide a collection of various ways for users to interact, such as chat, messaging, email, video, voice chat, personal information sharing, image sharing, video sharing, file sharing, status updates, blogging, discussion groups, commentary, etc. The main types of social networking services are those which contain directories of some categories (such as former classmates), means to connect with friends (usually with self-description pages), and/or recommendation systems linked to trust. Popular methods now combine many of these, with MYSPACE, BEBO, FACEBOOK, TWITTER, YOUTUBE, LINKEDIN, PHOTOBUCKET, SNAPFISH, WINDOWS LIVE PHOTOS, WEBSHOTS, and FLICKR being but a few examples.
Such social websites often post their members' public webpages for all Internet users to view, without authentication or login. Conversely, members' private webpages may only be accessed and viewed by the member. The private webpages generally require member authentication and provide the member with tools to manage his public webpage, communicate with other members, and/or otherwise manage his social website membership.
Many social websites, typically those that receive or share sensitive information (as well as websites associated with banks, credit card companies, and online businesses), may require Internet users to login to the website with a secure username and password before accessing the website's content.
The username/password system is a common form of secret authentication data used to control website access. The username/password is kept secret from those not allowed access. Those wishing to gain access are tested on whether or not they have a valid (recognized) username and whether they know the associated password. Internet users are granted or denied access to websites accordingly.
Many social websites have different rules governing the creation of usernames and passwords. Some require passwords that include a complex combination of letters, numbers, and other characters. Others have no restrictions whatsoever. With the proliferation of login-access websites, Internet users often must remember dozens (or more) different username/password combinations, one for each secure website they wish to access. This has resulted in what has come to be known as “password fatigue.”
Partly in response to these issues, the concept of the “digital identity” has evolved. A digital identity is a set of characteristics by which a person or thing is recognizable or distinguished in the digital realm. Digital identity allows for the electronic recognition of an individual or thing without confusing it for someone or something else.
There are many applications for an Internet user's digital identity, including authenticating the user before permitting access to a website. One method for such authentication includes the use of a URL. URL-based digital identity systems (such as OPENID) utilize a framework based on the concept that any individual or entity can identify themselves on the Internet with a URL provided by a Digital Identity Provider (e.g., johndoe.openid.com). The Digital Identity Provider maintains an Identity Server on which a Digital Identity Database (a database of provided digital identity URLs and the corresponding authentication passwords) is stored.
Once obtained, the Internet user may utilize their digital identity URL to access various websites. For example, to login to an OpenID-enabled website, the user enters their OpenID (e.g., johndoe.openid.com) in the username box. The user is then momentarily redirected to the user's Digital Identity Provider's website (or an authentication window appears) to login using whatever password they have set up with their Digital Identity Provider. Once authenticated, the Digital Identity Provider sends the participating website an encrypted message (a token) confirming the identity of the person logging in. There are currently numerous Digital Identity Providers offering URL-based (OpenID) digital identity services, meaning they offer digital identity URLs and servers to authenticate them.
One of the problems facing companies doing business online is verifying that digital identity actually belongs to a real human being (person) and that this particular real human being is not impersonating somebody else. Most validation systems today do it by sending an email message to person's email address. The email message typically contains a unique link or code that person should provide back to the verifier (often via a verifier's website). These systems are not able to validate the real identity of a person because the systems only check whether the requester has control over the email account.
Applicant has noticed that presently-existing systems and methods do not allow for efficient and robust matching of digital identities with the actual human persons. For the foregoing reason, there is a need for the systems and methods that would allow for establishing and verifying identity of a human person.
Therefore, new systems and methods are needed to overcome the limitations of the current systems and methods.
The present invention will now be discussed in detail with regard to the attached drawing figures which were briefly described above. In the following description, numerous specific details are set forth illustrating the Applicant's best mode for practicing the invention and enabling one of ordinary skill in the art of making and using the invention. It will be obvious, however, to one skilled in the art that the present invention may be practiced without many of these specific details. In other instances, well-known machines and method steps have not been described in particular detail in order to avoid unnecessarily obscuring the present invention. Unless otherwise indicated, like parts and method steps are referred to with like reference numerals.
For the purpose of this disclosure the term “Verifier” refers a commercial company, a non-profit organization, a governmental agency, a business operator, a business owner, a person, an entity, a management of an entity. The term “Verifier” also includes a person or entity acting on behalf of the above mentioned parties. Further, the term “Verifier” includes a computer system ran by above mentioned parties.
One of the objectives of the present invention is to find a new way to validate a person if he/she is able to supply an identification document that contains a photograph of a face of that person (e.g., Photo ID). The approach used in the invention for validating identify of the person includes comparing the provided photograph on the photo ID against the images that are available through various websites, including image sharing and social networks websites. Among such websites may be mentioned MYSPACE, BEBO, FACEBOOK, TWITTER, YOUTUBE, LINKEDIN, PHOTOBUCKET, SNAPFISH, WINDOWS LIVE PHOTOS, WEBSHOTS, FLICKR, etc. Many users upload pictures of themselves or other users to these websites. The user's personal information may be used to find relevant images displaying the person who needs to be verified.
Referring to
The Network 110 is a computer network. It may include a LAN (Local Area Network), WLAN (Wireless Local Area Network), WAN (Wide Area Network), MAN (Metropolitan Area Network), a global network, etc. The Internet is a widely-used global computer network. The Network 110 may support a variety of a network layer protocols, such as, DHCP (Dynamic Host Configuration Protocol), DVMRP (Distance Vector Multicast Routing Protocol), ICMP/ICMPv6 (Internet Control Message Protocol), IGMP (Internet Group Management Protocol), IP (Internet Protocol version 4), IPv6 (Internet Protocol version 6), MARS (Multicast Address Resolution Server), PIM and PIM-SM (Protocol Independent Multicast-Sparse Mode), RIP2 (Routing Information Protocol), RIPng for IPv6 (Routing Information Protocol for IPv6), RSVP (Resource ReSerVation setup Protocol), VRRP (Virtual Router Redundancy Protocol), etc. Further, the Network 110 may support a variety of a transport layer protocols, such as, ISTP (Internet Signaling Transport Protocol), Mobile IP (Mobile IP Protocol), RUDP (Reliable UDP), TALI (Transport Adapter Layer Interface), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), Van Jacobson (compressed TCP), XOT (X.25 over TCP), etc. In addition, the Network 110 may support a variety of an application layer protocols, such as, COPS (Common Open Policy Service), FANP (Flow Attribute Notification Protocol), Finger (User Information Protocol), FTP (File Transfer Protocol), HTTP (Hypertext Transfer Protocol), IMAP and IMAP4 (Internet Message Access Protocol, rev 4), IMPPpre (Instant Messaging Presence Protocol), IMPPmes (Instant Messaging Protocol), IPDC (IP Device Control), IRC (Internet Relay Chat Protocol), ISAKMP (Internet Message Access Protocol version 4rev1), ISP, NTP (Network Time Protocol), POP and POP3 (Post Office Protocol, version 3), Radius (Remote Authentication Dial In User Service), RLOGIN (Remote Login), RTSP (Real-time Streaming Protocol), SCTP (Stream Control Transmission Protocol), S-HTTP or HTTPS (Secure Hypertext Transfer Protocol), SLP (Service Location Protocol), SMTP (Simple Mail Transfer Protocol), SNMP (Simple Network Management Protocol), SOCKS (Socket Secure Server), TACACS+(Terminal Access Controller Access Control System), TELNET (TCP/IP Terminal Emulation Protocol), TFTP (Trivial File Transfer Protocol), WCCP (Web Cache Coordination Protocol), X-Window (X Window), etc. The Network 110 supports digital interactions between the Verifier 105, the Requester 115, and the Sources 120.
An exemplary embodiment of interactions between the system components is shown in
If the collection of personal information and obtaining a digital copy of a photo ID from the Requester 115 is enabled via a web-based graphical user interface, the web-based graphical user interface is typically a website or a webpage. The web-based graphical user interface is achieved by a first computer-readable code on a server computer of the Verifier 105 and by a second computer-readable code on a desktop/remote computer of the Requester 115. The first computer-readable code may comprise, for example, SGML, HTML, DHTML, XML, XHTML, CSS, server-side programming languages and scripts, such as, Perl, PHP, ASP, ASP.NET, Java, JavaScript, Visual J++, J#, C, C++, C#, Visual Basic, VB.Net, VBScript, server-side databases, etc. The second computer-readable code may comprise, for example, SGML (Standard Generalized Markup Language), HTML (HyperText Markup Language), DHTML (Dynamic HTML), XML (eXtensible Markup Language), XHTML (eXtensible HTML), CSS (Cascading Style Sheet), client-side programming scripts, such as, JavaScript and VBScript, client-side databases, etc. Both the first computer-readable code and the second computer-readable code can support embedded objects, such as, audio and video elements, ActiveX controls, etc. Alternatively, collection of personal information from the Requester 115 may be enabled via other means, e.g., a desktop software or an application on a mobile device. The server computer of the Verifier 105 can be running a variety of operating systems, such as, MICROSOFT WINDOWS, APPLE MAC OS X, UNIX, LINUX, GNU, BSD, FreeBSD, SUN SOLARIS, NOVELL NETWARE, OS/2, TPF, eCS (eComStation), VMS, Digital VMS, OpenVMS, AIX, z/OS, HP-UX, OS-400, etc. The web-based graphical user interface may be provided by a web-server software running on the server computer of the Verifier 105. The web-server software may include MICROSOFT IIS (Internet Information Services/Server), APACHE HTTP SERVER, APACHE TOMCAT, nginx, GWS (GOOGLE WEB SERVER), SUN JAVA SYSTEM WEB SERVER, etc.
The Verifier 105 computer systems can contain one or more physical servers. The physical servers can play different roles in the system of the invention, e.g., a Web Server, a Mail Server, an Application Server, a Database Server, a DNS (Domain Name System) Server, etc. The Verifier 105 computer systems can be based on a variety of hardware platforms, such as, x86, x64, INTEL, ITANIUM, IA64, AMD, SUN SPARC, IBM, HP, etc.
The Requester 115 computer systems are electronic devices suitable for interaction over the Network 110. The Requester 115 computer systems may contain, for example, a personal computer, a desktop computer, a laptop computer, a notebook computer, a tablet computer, a cell phone, a smart phone, a PDA, a palmtop computer, a handheld computer, a pocket computer, a touch screen device, an IBM PC-compatible electronic device, an APPLE MAC-compatible electronic device, a computing device, a digital device, or another electronic device or combination thereof.
The Verifier 105, the Requester 115, and the Sources 120 are communicatively connected to the Network 110 via the Communication Links 125, 130, and 135. The Communication Links 125, 130, and 135 are wired or wireless connections suitable for exchange of digital information. The Communication Links 125, 130, and 135 may include telephone line, copper twisted pair, power-line, fiber-optic, cellular, satellite, dial-up, Ethernet, DSL, ISDN, T-1, DS-1, Wi-Fi, etc.
The Verifier 105 computer systems may be located in a physical datacenter, in a virtual datacenter, in a variety of countries or territories, on a floating device, be connected to the Internet backbone, be connected to a power grid, etc. The floating device may be a marine or naval vessel or ship. Verifier 105 computer systems may be cooled by air or liquid, such as water, including ocean or sea water.
An exemplary embodiment of a method of present invention is shown in
The personal information may include name, mailing address, home address, electronic mail address, telephone number, date of birth of the requester, login name to a website (e.g., social network or image sharing website), a password of the requester to a website (e.g., social network or image sharing website), and a variety of other information that may be associated with the requester.
The computer network may be the Internet.
Obtaining the digital copy of an identification document from the requester may be performed in a variety of ways. For example, the requester can scan the identification document on a scanner, take a digital picture of the identification document with a digital camera, take a digital picture of the identification document with a mobile device (e.g. smart phone, such as IPHONE, BLACKBERRY, DROID/ANDROID, HTC, PALM), etc. The requester may email the digital copy (scan/digital picture) of the identification document to the verifier, upload it on a website, or use an application on a mobile device to transmit the digital copy to the verifier.
The identification document may include a government issued identification document, driver's license, passport, state or province identification card, corporate identification card, and variety of other documents issued to the requester and containing requester's photograph.
The isolating the requester's photograph from the digital copy of the identification document may include analyzing the digital copy of the identification document using an optical face detection algorithm and identifying an area of the digital copy of the identification document containing facial features. Some types of identification documents are pretty common, thus their formats and the location of the photograph on them are known as well. Therefore, an algorithm can be applied to the digital copy of the identification document to determine the type of the document. The photograph's location (predetermined area) corresponding with that particular type of the document may be recalled from a database, and requester's photograph may be extracted from the predetermined area of the digital copy of the identification document.
The computer network information sources may include a website, a webpage, an online blog, a social network website, an image sharing website, and a variety of other digital sources.
The method may utilize a variety of mechanisms to select the images from the computer network information sources. For example, images posted onto the computer network information sources from an account of the requester, or images tagged with a name of the requester, or images appearing in a social network account of the requester may be selected. A variety of other mechanisms may be utilized that select the images with some probability that a facial depiction of the requester is appearing on the image.
The method further may extract a first set of facial features from the requester's photograph and a second set of facial features from the images obtained from the computer network information sources.
The first set of facial features from the requester's photograph and the second set of facial features from the images obtained from the computer network information sources may be compared utilizing a predetermined algorithm. The predetermined algorithm may include the principal component analysis with eigenface, the linear discriminate analysis, elastic bunch graph matching fisherface, the Hidden Markov model, the neuronal motivated dynamic link matching, skin texture analysis, face hallucination (low-resolution images enhancement), and many others.
The statistical rating of a likelihood that the requester's photograph and the image obtained from the computer network information sources display the same person may be calculated in various ranges. It may be a range of real numbers from 0 to 1, where value 0 indicates the lowest likelihood and value 1 indicates the highest likelihood that the requester's photograph and the image obtained from the computer network information sources display the same person. In one embodiment, the statistical rating of value 0.5 and above indicates that the requester's photograph and the image obtained from the computer network information sources display the same person. In an embodiment, the statistical rating is calculated as an integer number of 0 or 1.
Referring to
The personal information may include name, mailing address, home address, electronic mail address, telephone number, date of birth of the requester, login name to a website (e.g., social network or image sharing website), a password of the requester to a website (e.g., social network or image sharing website), and a variety of other information that may be associated with the requester.
The computer network may be the Internet.
The means for obtaining a digital copy of an identification document from the requester may include an email server, a website, an application on a mobile device, etc. The requester can scan the identification document on a scanner, take a digital picture of the identification document with a digital camera, take a digital picture of the identification document with a mobile device (e.g. smart phone, such as IPHONE, BLACKBERRY, DROID/ANDROID, HTC, PALM), etc. The requester may email the digital copy (scan/digital picture) of the identification document to the verifier, upload it on the website, or use the application on a mobile device to transmit the digital copy to the verifier.
The identification document may include a government issued identification document, driver's license, passport, state or province identification card, corporate identification card, and variety of other documents issued to the requester and containing requester's photograph.
The means for isolating the requester's photograph from the digital copy of the identification document may include means for analyzing the digital copy of the identification document using an optical face detection algorithm and means for identifying an area of the digital copy of the identification document containing facial features. Some types of identification documents are pretty common, thus their formats and the location of the photograph on them are known as well. Therefore, an algorithm can be applied to the digital copy of the identification document to determine the type of the document. The photograph's location (predetermined area) corresponding with that particular type of the document may be recalled from a database, and requester's photograph may be extracted from the predetermined area of the digital copy of the identification document.
The computer network information sources may include a website, a webpage, an online blog, a social network website, an image sharing website, and a variety of other digital sources.
The system may utilize a variety of mechanisms to select the images from the computer network information sources. For example, images posted onto the computer network information sources from an account of the requester, or images tagged with a name of the requester, or images appearing in a social network account of the requester may be selected. A variety of other mechanisms may be utilized that select the images with some probability that a facial depiction of the requester is appearing on the image.
The system further may extract a first set of facial features from the requester's photograph and a second set of facial features from the images obtained from the computer network information sources.
The first set of facial features from the requester's photograph and the second set of facial features from the images obtained from the computer network information sources may be compared utilizing a predetermined algorithm. The predetermined algorithm may include the principal component analysis with eigenface, the linear discriminate analysis, elastic bunch graph matching fisherface, the Hidden Markov model, the neuronal motivated dynamic link matching, skin texture analysis, face hallucination (low-resolution images enhancement), and many others.
The statistical rating of a likelihood that the requester's photograph and the image obtained from the computer network information sources display the same person may be calculated in various ranges. It may be a range of real numbers from 0 to 1, where value 0 indicates the lowest likelihood and value 1 indicates the highest likelihood that the requester's photograph and the image obtained from the computer network information sources display the same person. In one embodiment, the statistical rating of value 0.5 and above indicates that the requester's photograph and the image obtained from the computer network information sources display the same person. In an embodiment, the statistical rating is calculated as an integer number of 0 or 1.
The means of the described embodiment can be substituted by machines, apparatuses, and devices described in this specification or equivalents thereof. As a non-limiting example, the means of this embodiment can be substituted with a computing device, a computer-readable code, a computer-executable code, or any combination thereof.
All embodiments of the present invention may further be limited and implemented with any and all limitations disclosed in this specification or in the documents incorporated in this patent application by reference.
Other embodiments and uses of this invention will be apparent to those having ordinary skill in the art upon consideration of the specification and practice of the invention disclosed herein. The specification and examples given should be considered exemplary only, and it is contemplated that the appended claims will cover any other such embodiments or modifications as fall within the true scope of the invention.
The Abstract accompanying this specification is provided to enable the United States Patent and Trademark Office and the public generally to determine quickly from a cursory inspection the nature and gist of the technical disclosure and is in no way intended for defining, determining, or limiting the present invention or any of its embodiments.
This patent application is related to the following concurrently-filed patent application: U.S. patent application Ser. No. ______, “Systems for Person's Verification Using Photographs on Identification Documents.” The subject matter of all patent applications is commonly owned and assigned to The Go Daddy Group, Inc. All prior and concurrent applications are incorporated herein in their entirety by reference.
