US20180150839A1

US20180150839A1 - Identity verification systems and methods

Info

Publication number: US20180150839A1
Application number: US15/365,559
Authority: US
Inventors: Frank Joseph Lamont Gauld
Original assignee: NCR Corp
Current assignee: NCR Atleos Corp
Priority date: 2016-11-30
Filing date: 2016-11-30
Publication date: 2018-05-31

Abstract

Various embodiments herein each include at least one of systems, methods, and software for identity verification. Some such embodiments identify a user based on analysis of their handwriting. Some such embodiments may be utilized to authenticate an individual, for emergency authentication or when other authentication solutions are not available, as one of a two or more step authentication process, authenticating checks, authenticating a signature or other handwriting on another document, and the like. One embodiment, in the form of a method, includes storing a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual. The method may then determine whether an input handwriting sample is handwriting of the individual based on the stored set of handwriting characteristics of the individual and then output a result of the determining.

Description

BACKGROUND INFORMATION

Consumer and user authentication methods are varied and typically involve a consumer knowing something (e.g., Personal Identification Number “PIN” or password), having something (smart card), or something they “are” (e.g., a fingerprint). While these solutions work well, or at least sufficiently, new methods are needed to provide new and different authentication options when other solutions have been compromised, for use as a secondary authentication mechanism, to reset other authentication credentials, and the like.

SUMMARY

Various embodiments herein each include at least one of systems, methods, and software for identity verification. Some such embodiments identify a consumer or user based on analysis of their handwriting on checks, other documents, or as input on a signature pad or other handwriting input device. Some such embodiments may be utilized to authenticate an individual, for emergency authentication or when other authentication solutions are not available, as one of a two or more step authentication process, authenticating checks, authenticating a signature or other handwriting on another document, and the like.
One embodiment, in the form of a method, includes storing a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual. The method may then determine whether an input handwriting sample is handwriting of the individual based on the stored set of handwriting characteristics of the individual and then output a result of the determining.
Another method embodiment includes identifying an individual from whom a handwriting sample was received as input based on stored sets of handwriting characteristics of a plurality of individuals and outputting data identifying the individual from whom the handwriting sample was received when the individual is identified, otherwise outputting data indicating no identification was made.
A further embodiment, in the form of a system, includes a processor, a memory device, a network interface device, and instructions stored on the at least one memory device that are executable by the processor to perform data processing activities. The data processing activities, in some embodiments, include storing, on the memory device, a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual. The data processing activities may further include determining whether an input handwriting sample received via the network interface device is handwriting of the individual based on the stored set of handwriting characteristics of the individual. Subsequently, the data processing activities include outputting a result of the determining via the network interface device.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a logical block diagram of a system architecture, according to an example embodiment.

FIG. 2 is a block diagram of a computing device, according to an example embodiment.

FIG. 3 is a block flow diagram of a method, according to an example embodiment.

FIG. 4 is a block flow diagram of a method, according to an example embodiment.

DETAILED DESCRIPTION

Various embodiments herein each include at least one of systems, methods, and software for identity verification. Some such embodiments identify a consumer or user based on analysis of their handwriting on checks, other documents, or as input on a signature pad or other handwriting input device. Some such embodiments may be utilized to authenticate an individual, for emergency authentication or when other authentication solutions are not available, as one of a two or more step authentication process, authenticating checks, authenticating a signature or other handwriting on another document, and the like.
Security and Consumer authentication is a major concern and is a constant battle in many instances, such as in banking. Some embodiments herein provide a solution, that may be provided as an Application Programming Interface (API), one or a set of web services, and the like. Some such solutions may leverage a check processor's check image archive which may not be viewed as a strategic asset in a financial institution or an archive of other documents including handwriting associated with known individuals. Such embodiments are able to identify and store data representations of unique characteristics of an individual's handwriting from such archived handwriting samples, newly received handwriting samples, and handwriting received as learning input for proposes authentication of the identity of the individual based on handwriting, such as a signature, received at a later time. Such embodiments provide a new authentication solution that the individual does not need to know or have, rather it is something that just is. Such embodiments may enable authentication of the individual in emergency situations when other identification items or solutions are not available or fail, for secondary authentication, to verify the authenticity of a handwritten check or check signature, such as when a check amount is over a certain value, and the like.
These and other embodiments are described herein with reference to the figures.
In the following detailed description, reference is made to the accompanying drawings that form a part hereof, and in which is shown by way of illustration specific embodiments in which the inventive subject matter may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice them, and it is to be understood that other embodiments may be utilized and that structural, logical and electrical changes may be made without departing from the scope of the inventive subject matter. Such embodiments of the inventive subject matter may be referred to, individually and/or collectively, herein by the term “invention” merely for convenience and without intending to voluntarily limit the scope of this application to any single invention or inventive concept if more than one is in fact disclosed.
The following description is, therefore, not to be taken in a limited sense, and the scope of the inventive subject matter is defined by the appended claims.
The functions or algorithms described herein are implemented in hardware, software or a combination of software and hardware in one embodiment. The software comprises computer executable instructions stored on computer readable media such as memory or other type of storage devices. Further, described functions may correspond to modules, which may be software, hardware, firmware, or any combination thereof. Multiple functions are performed in one or more modules as desired, and the embodiments described are merely examples. The software is executed on a digital signal processor, ASIC, microprocessor, or other type of processor operating on a system, such as a personal computer, server, a router, or other device capable of processing data including network interconnection devices.
Some embodiments implement the functions in two or more specific interconnected hardware modules or devices with related control and data signals communicated between and through the modules, or as portions of an application-specific integrated circuit. Thus, the exemplary process flow is applicable to software, firmware, and hardware implementations.
FIG. 1 is a logical block diagram of a system 100 architecture, according to an example embodiment. The system 100 is an example of a system on which some embodiments may be implemented. For example, the database 112 may store an archive of documents, such as processed checks, signed documents, handwritten documents, and the like, or portions thereof, in electronic image form.
One or more processes that execute on one or more servers 110 may execute against archived documents stored in the database 112 to identify characteristics of individuals handwriting across a plurality of documents associated in stored data with individuals' respective identities. Characteristics of handwriting that are identified and extracted from handwriting samples may include characteristics such as what is referred to as skill level, or neatness in terms of fluid, rhythmic, and artistic embellishment. Other characteristics may include slant or inclination of characters, character forms, movement of a writing utensil when forming characters or portions thereof, proportions of character portions compared to the whole character or other portions, height rations of characters with relation to one or more other characters, loop shape and form, pressure as is evident from line width, writing utensil lifting when forming certain characters, exit and entry strokes for characters, retracing, character and word spacing, case of letters, and other characteristics. These characteristics as may be extracted with regard to a particular individual are generally unique to the individual. The degree of the uniqueness may be lesser or greater depending upon the number of characteristics taken into account and in combination. The degree of uniqueness may be complete or a bit lower. The degree of a particular embodiment may be set based on a configuration setting of the software that extracts the characteristics and build a data representation of the characteristics, which may be considered as a handwriting fingerprint. Once a handwriting fingerprint is established for an individual, a data representation of the handwriting fingerprint is stored to the database 112. The database 112 typically stores handwriting fingerprints for a plurality of individuals. Note that it is quite possible for a single individual to have two handwriting fingerprints in some embodiments, such as when an individual utilizes two or more distinct handwriting styles (e.g., block letters and cursive). However, some embodiments may limit an individual to a single handwriting fingerprint.
Once an individual has a handwriting fingerprint, the handwriting fingerprint may be utilized in various ways, depending on the embodiment. For example, the handwriting fingerprint may be used utilized to verify the authenticity of a signature on checks drawn against an account of an individual, which may be for all checks, checks over a certain dollar amount, checks randomly selected, or otherwise. The handwriting fingerprint may be considered at a time when an imaging device 104 acquires an image of check based on data retrieved from the database 112 over a network 108, such as the Internet. In other embodiment, the check image may be transmitted over the network from the imaging device 104 to the one or more servers 110 via an API or web service call. Note that the imaging device 104 may be a check reading and imaging device, a camera, a scanner, a product scanner, a handheld scanner, or other imaging device that may be located in a check processing facility, at a terminal such as terminal 102 described below, a document imaging facility, and the like.
A handwriting fingerprint may also be utilized at a terminal 102, such as an automated teller machine (ATM), airline check-in kiosk, library checkout kiosk, or other terminal. In some embodiments, the terminal 102 may utilized the handwriting fingerprint locally or may transmit handwriting data over the network 108 to the one or more servers 110 via an API or web service call. The handwriting data may be received as input via the imaging device 104, an electronic signature pad device coupled to the terminal 102, a handwriting input received via a touch screen by a finger or stylus, and the like.
The terminal 102 in some embodiments may be in the form of a mobile device 106. The mobile device 106 may be a smartphone, handheld computing device, a tablet, a smartwatch or other device having a similar form factor and the like.
FIG. 2 is a block diagram of a computing device, according to an example embodiment. In one embodiment, multiple such computer systems are utilized in a distributed network to implement multiple components in a transaction-based environment. An object-oriented, service-oriented, or other architecture may be used to implement such functions and communicate between the multiple systems and components. One example computing device in the form of a computer 210, may include a processing unit 202, memory 204, removable storage 212, and non-removable storage 214. Although the example computing device is illustrated and described as computer 210, the computing device may be in different forms in different embodiments. For example, the computing device may instead be a smartphone, a tablet, smartwatch, or other computing device including the same or similar elements as illustrated and described with regard to FIG. 2. Devices such as smartphones, tablets, and smartwatches are generally collectively referred to as mobile devices. Further, although the various data storage elements are illustrated as part of the computer 210, the storage may also or alternatively include cloud-based storage accessible via a network, such as the Internet.
Returning to the computer 210, memory 204 may include volatile memory 206 and non-volatile memory 208. Computer 210 may include—or have access to a computing environment that includes a variety of computer-readable media, such as volatile memory 206 and non-volatile memory 208, removable storage 212 and non-removable storage 214. Computer storage includes random access memory (RAM), read only memory (ROM), erasable programmable read-only memory (EPROM) and electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD ROM), Digital Versatile Disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium capable of storing computer-readable instructions.
Computer 210 may include or have access to a computing environment that includes input 216, output 218, and a communication connection 220. The input 216 may include one or more of a touchscreen, touchpad, mouse, keyboard, camera, one or more device-specific buttons, one or more sensors integrated within or coupled via wired or wireless data connections to the computer 210, and other input devices. The computer 210 may operate in a networked environment using a communication connection 220 to connect to one or more remote computers, such as database servers, web servers, and other computing device. An example remote computer may include a personal computer (PC), server, router, network PC, a peer device or other common network node, or the like. The communication connection 220 may be a network interface device such as one or both of an Ethernet card and a wireless card or circuit that may be connected to a network. The network may include one or more of a Local Area Network (LAN), a Wide Area Network (WAN), the Internet, and other networks. In some embodiments, the communication connection 220 may also or alternatively include a transceiver device, such as a BLUETOOTH® device that enables the computer 210 to wirelessly receive data from and transmit data to other BLUETOOTH® devices.
Computer-readable instructions stored on a computer-readable medium are executable by the processing unit 202 of the computer 210. A hard drive (magnetic disk or solid state), CD-ROM, and RAM are some examples of articles including a non-transitory computer-readable medium. For example, various computer programs 225 or apps, such as one or more applications and modules implementing one or more of the methods illustrated and described herein or an app or application that executes on a mobile device or is accessible via a web browser, may be stored on a non-transitory computer-readable medium.
FIG. 3 is a block flow diagram of a method 300, according to an example embodiment. The method 300 is an example of a method that may be performed in whole or in part on the one or more servers 110 of FIG. 1.
The method 300 includes storing 302 a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual and determining 304 whether an input handwriting sample is handwriting of the individual based on the stored set of handwriting characteristics of the individual. The method 300 further includes outputting 306 a result of the determining.
In some embodiments of the method 300, the stored 302 set of handwriting characteristics of the individual is stored in a database storing sets of handwriting characteristics of a plurality of individuals. A set of handwriting characteristics in some embodiments is stored 302 as a data representation of a plurality of handwriting characteristics. These handwriting characteristics may include, among others, one, two, or more of character slant, character forms, writing instrument direction of movement when forming a character or portion thereof, proportions between character portions, height ratios between characters, and character loop forms.
In some further embodiments of the method 300, outputting 306 the result of the determining includes outputting 306 a score generated by the determining where the score indicative of a degree of accuracy of the determining. The score may be generated in some such embodiments based on a degree of matching of certain characteristics of a handwriting fingerprint with a handwriting input, a number of matches, a frequency of matches, among other factors.
In some embodiments, the plurality of handwriting samples are stored check images. In some such embodiments, the input handwriting sample is an image of a check presented for processing.
In another embodiment, the input handwriting sample is received by a server performing at least a portion of the method 300 from a source over a network and the result of the determining is output in a data transmission from the server to the source over the network. The source may be a networked terminal, such as an ATM or other terminal.
FIG. 4 is a block flow diagram of a method 400, according to an example embodiment. The method 400 is an example of a method that may be performed in whole or in part on one or more of the one or more servers 110, the terminal 102, the imaging device 104, and the mobile device 106 of FIG. 1.
The method 400 includes identifying 402 an individual from whom a handwriting sample was received as input based on stored sets of handwriting characteristics of a plurality of individuals. The method 400 further includes outputting 404 data identifying the individual from whom the handwriting sample was received when the individual is identified, otherwise outputting data indicating no identification was made.
The method 400 may further include receiving the input handwriting sample and extracting the set of characteristics from the received handwriting sample. In some embodiments of the method 400, the handwriting sample is received and the extracting is performed on a client device that transmits a data representation of the extracted set of characteristics over a network to a computing device that performs the identifying. The input handwriting sample may initially be received as manual input into a signature pad input device. In other embodiments or other instances, the input handwriting sample may initially be received as an electronic image of a check captured by an imaging device when the check is presented for payment or for deposit.
It will be readily understood to those skilled in the art that various other changes in the details, material, and arrangements of the parts and method stages which have been described and illustrated in order to explain the nature of the inventive subject matter may be made without departing from the principles and scope of the inventive subject matter as expressed in the subjoined claims.

Claims

What is claimed is:

1. A method comprising:

storing a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual;

determining whether an input handwriting sample is handwriting of the individual based on the stored set of handwriting characteristics of the individual; and

outputting a result of the determining.

2. The method of claim 1, wherein the stored set of handwriting characteristics of the individual is stored in a database storing sets of handwriting characteristics of a plurality of individuals.

3. The method of claim 2, wherein a set of handwriting characteristics is stored as a data representation of a plurality of handwriting characteristics including data representation of two or more of:

character slant;

character forms;

writing instrument direction of movement when forming a character or portion thereof;

proportions between character portions;

height ratios between characters; and

character loop forms.

4. The method of claim 1, wherein outputting the result of the determining includes outputting a score generated by the determining, the score indicative of a degree of accuracy of the determining.

5. The method of claim 1, wherein the plurality of handwriting samples are stored check images.

6. The method of claim 5, wherein the input handwriting sample is an image of a check presented for processing.

7. The method of claim 1, wherein the input handwriting sample is received by a server performing at least a portion of the method from a source over a network and the result of the determining is output in a data transmission from the server to the source over the network.

8. The method of claim 7, wherein the source is a networked terminal.

9. The method of claim 8, wherein the terminal is an Automated Teller Machine (ATM).

10. A method comprising:

identifying an individual from whom a handwriting sample was received as input based on stored sets of handwriting characteristics of a plurality of individuals; and

outputting data identifying the individual from whom the handwriting sample was received when the individual is identified, otherwise outputting data indicating no identification was made.

11. The method of claim 10, further comprising:

receiving the input handwriting sample; and

extracting the set of characteristics from the received handwriting sample.

12. The method of claim 11, wherein the handwriting sample is received and the extracting is performed on a client device that transmits a data representation of the extracted set of characteristics over a network to a computing device that performs the identifying.

13. The method of claim 11, wherein the input handwriting sample is initially received as manual input into a signature pad input device.

14. The method of claim 11, wherein the input handwriting sample is initially received as an electronic image of a check captured by an imaging device when the check is presented for payment or for deposit.

15. The method of claim 10, wherein the identifying includes generating a score indicating a degree of degree of accuracy of the identifying regarding the individual.

16. A system comprising:

a processor, a memory device, a network interface device, and instructions stored on the at least one memory device that are executable by the processor to perform data processing activities, the data processing activities comprising:

storing, on the memory device, a set of handwriting characteristics of an individual identified during processing of a plurality of handwriting samples of the individual;

determining whether an input handwriting sample received via the network interface device is handwriting of the individual based on the stored set of handwriting characteristics of the individual; and

outputting a result of the determining via the network interface device.

17. The system of claim 16, wherein the stored set of handwriting characteristics of the individual is stored in a database on the memory device, the database storing sets of handwriting characteristics of a plurality of individuals.

18. The system of claim 17, wherein a set of handwriting characteristics is stored as a data representation of a plurality of handwriting characteristics including data representation of two or more of:

character slant;

character forms;

proportions between character portions;

height ratios between characters; and

character loop forms.

19. The system of claim 16, wherein outputting the result of the determining includes outputting a score generated by the determining, the score indicative of a degree of accuracy of the determining.

20. The system of claim 1, wherein:

the plurality of handwriting samples are stored check images; and

the input handwriting sample is an image of a check presented for processing.