Out-of-Band Biometric Enrollment and Verification Using Interactive Messaging

Abstract

A system and method for enabling out-of-band biometric verification is disclosed. The system includes a biometric engine coupled with an interactive messaging system and configured as an identity provider. The biometric identity provider includes a biometric enrollment process using open standard authentication protocols. The identity provider may answer calls generated by a service provider for biometric verification request for a user by sending an interactive message to a wireless mobile device associated to the user. The user captures and sends a biometric input to the identity provider. Biometrics provided by a user are compared by the biometric engine against biometric templates stored for that user in order to verify the user. The identity provider then sends a response back to the service provider. The service provider may grant or deny services to a user depending on the response.

We claim: 
     
         1 . A method for user authentication on a mobile device, the method comprising:
 receiving, at a processor, an interactive message from an online service provider, the interactive message being based on a user logging into the online service provider using a single sign-on identity provider;   requesting based on receiving the interactive message, user information, at the processor, the user information being entered at the mobile device;   submitting, at the processor, the requested user information to the single sign-on identity provider; and   receiving, at the processor, instructions for downloading and using a biometric authentication application.   
     
     
         2 . The method of  claim 1 , wherein the instructions for downloading and using the biometric authentication application are received, at the processor, via a second interactive message. 
     
     
         3 . The method of  claim 1 , wherein the user information further comprises a phone number. 
     
     
         4 . The method of  claim 1 , the method further comprising:
 downloading, at the processor, the biometric authentication application;   running, at the processor, the biometric authentication application; and   receiving, at the biometric authentication application, a user name, a password, or a combination thereof.   
     
     
         5 . The method of  claim 4 , the method further comprising:
 receiving, at the biometric authentication application, a request to capture one or more biometric probes; and   submitting, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.   
     
     
         6 . The method of  claim 5 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID. 
     
     
         7 . A mobile device configured to perform user authentication, the mobile device comprising:
 a memory, the memory being operable to store instructions for a user to download and use a biometric authentication application, the memory being further operable to store the biometric authentication application;   a processor being operable to:
 receive an interactive message from an online service provider, the interactive message being based on the user logging into the online service provider using a single sign-on identity provider; 
 request, based on receiving the interactive message, user information, the user information being entered at the mobile device and being stored in the memory; 
 submit the requested user information to the single sign-on identity provider; and 
 receive instructions for downloading and using a biometric authentication application, the instructions being stored in the memory. 
   
     
     
         8 . The mobile device of  claim 7 , wherein the instructions for downloading and using the biometric authentication application are received via a second interactive message. 
     
     
         9 . The mobile device of  claim 7 , wherein the user information further comprises a phone number. 
     
     
         10 . The mobile device of  claim 7 , the processor being further operable to:
 download, to the memory, the biometric authentication application;   run, from the memory, the biometric authentication application; and   receive, at the biometric authentication application, a user name, a password, or a combination thereof.   
     
     
         11 . The mobile device of  claim 10 , the processor being further operable to:
 receive, at the biometric authentication application, a request to capture one or more biometric probes; and   submit, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.   
     
     
         12 . The mobile device of  claim 11 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID. 
     
     
         13 . A computer-readable medium storing instructions that, when executed by a computer, cause the computer to:
 receive, at a memory, an interactive message from an online service provider, the interactive message being based on the user logging into the online service provider using a single sign-on identity provider;   request, based on receiving the interactive message, user information, the user information being entered at a mobile device and being stored in the memory;   submit, from the memory, the requested user information to the single sign-on identity provider; and   receive instructions for downloading and using a biometric authentication application, the instructions being stored in the memory.   
     
     
         14 . The computer-readable medium of  claim 13 , wherein the instructions for downloading and using the biometric authentication application are received, at the memory, via a second interactive message. 
     
     
         15 . The computer-readable medium of  claim 13 , wherein the user information further comprises a phone number. 
     
     
         16 . The computer-readable medium of  claim 13 , the instructions further causing the computer to:
 download, to the memory, the biometric authentication application;   run, from the memory, the biometric authentication application; and   receive, at the biometric authentication application, a user name, a password, or a combination thereof.   
     
     
         17 . The computer-readable medium of  claim 16 , the instructions further causing the computer to:
 receive, at the biometric authentication application, a request to capture one or more biometric probes; and   submit, at the biometric authentication application, the captured one or more biometric probes to a biometric engine.   
     
     
         18 . The computer-readable medium of  claim 17 , wherein submitting the captured one or more biometric probes further includes submitting a mobile device ID.