Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system. In one aspect, a method includes identifying a target user in proximity to a kiosk. Data for the target user is gathered from equipment on and in proximity to the kiosk. The gathered data is processed to generate a feature vector. The feature vector includes at least motion characteristics of the target user as the target user approaches the kiosk and touch input characteristics of the target user at the kiosk. A candidate user to compare to the target user is determined. Reference data for the candidate user is retrieved. The feature vector is compared to the reference data for the candidate user to determine a likelihood that the target user is the candidate user. A kiosk application is customized for the target user based on the determined likelihood.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system. In one aspect, a method includes identifying a target user in proximity to a kiosk. Data for the target user is gathered from equipment on and in proximity to the kiosk. The gathered data is processed to generate a feature vector. The feature vector includes at least motion characteristics of the target user as the target user approaches the kiosk and touch input characteristics of the target user at the kiosk. A candidate user to compare to the target user is determined. Reference data for the candidate user is retrieved. The feature vector is compared to the reference data for the candidate user to determine a likelihood that the target user is the candidate user. A kiosk application is customized for the target user based on the determined likelihood.

Abstract: The technology described in this document can be embodied in a method that includes receiving, at one or more servers from a first computing device, (i) authentication information identifying a user-account associated with (a) the first computing device or (b) an application executing on the first computing device, and (ii) a transaction identifier generated by a second computing device. The transaction identifier is obtained by the first computing device by detecting one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the one or more servers, that the user-account is authorized to initiate a transaction identified by the transaction identifier, and in response to determining that the user-account is authorized to initiate the transaction, transmitting, from the one or more servers to the second computing device, confirmation information usable by the second computing device to proceed with the transaction.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system having anti-spoofing capabilities. A biometric authentication system can use a vibrating component of a mobile device to determine whether the mobile device is oriented in a self-portrait orientation or in an orientation other than the self-portrait orientation based on a vibration response signal received from sensors on the mobile device. In response to determining that the mobile device is oriented in an orientation other than the self-portrait orientation, the biometric authentication system can prevent access attempts to one or more secure systems.

Abstract: A method includes receiving a first image and a second image, wherein the first and second images represent first and second relative locations, respectively, of an image acquisition device with respect to a subject. The method also includes determining, using the first and second images, a total relative displacement of the subject with respect to the image acquisition device between a time of capture of the first image and a time of capture of the second image, and determining, based on sensor data associated with one or more sensors associated with the image acquisition device, a component of the total relative displacement associated with a motion of the image acquisition device. The method also includes determining, based on a difference between the first total relative displacement and the component, that the first subject is an alternative representation of a live person, and in response, preventing access to a secure system.

Abstract: In one aspect, a method includes receiving a sequence of images of a subject, the sequence captured by an image acquisition device over a time period in which relative locations of the image acquisition device varies with respect to the subject. A first image and a second image are selected from the first sequence of images. The first and second images represent a first relative location and a second relative location, respectively, of the image acquisition device with respect to the subject. A three-dimensional representation of the first subject is generated using the first image and the second image as a stereo pair. It is determined, based on the first three dimensional representation, that the first subject is an alternative representation of a live person, and in response, access to a secure system is prevented.

Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: The technology described in this document can be embodied in a method that includes receiving, at one or more servers from a first computing device, (i) authentication information identifying a user-account associated with (a) the first computing device or (b) an application executing on the first computing device, and (ii) a transaction identifier generated by a second computing device. The transaction identifier is obtained by the first computing device by detecting one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the one or more servers, that the user-account is authorized to initiate a transaction identified by the transaction identifier, and in response to determining that the user-account is authorized to initiate the transaction, transmitting, from the one or more servers to the second computing device, confirmation information usable by the second computing device to proceed with the transaction.

Abstract: Techniques are described for user authentication based on correlation of multiple pulse signals that each describe an independently determined pulse pattern for an individual. Different measurements of an individual's pulse can be generated in response to a request from the individual to access a computing system, such as a kiosk. The different measurements can be generated independently of one another using different types of sensor devices. For example, a measurement can be made using a radar sensor to detect movements caused by the user's pulse, and another measurement can be made through analysis of video data. If the independently generated pulse patterns are sufficiently similar to each other (e.g., determined using machine learning or other techniques), a determination may be made that the individual is not attempting to spoof another individual, and access to the computing system can be granted based at least partly on the determination.

Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system. In one aspect, a method includes broadcasting, through a transceiver, a signal that includes a kiosk identifier; receiving, from a server system, a reference image of the user based on a mobile computing device associated with the user having received the signal and providing the kiosk identifier to the server system; capturing, with a camera, an image of the user; and authenticating the user based on a comparison of the captured image of the user to the reference image of the user based on a comparison of the captured image of the user to the reference image of the user.

Abstract: A method includes receiving a first image and a second image, wherein the first and second images represent first and second relative locations, respectively, of an image acquisition device with respect to a subject. The method also includes determining, using the first and second images, a total relative displacement of the subject with respect to the image acquisition device between a time of capture of the first image and a time of capture of the second image, and determining, based on sensor data associated with one or more sensors associated with the image acquisition device, a component of the total relative displacement associated with a motion of the image acquisition device. The method also includes determining, based on a difference between the first total relative displacement and the component, that the first subject is an alternative representation of a live person, and in response, preventing access to a secure system.

Abstract: In one aspect, a method includes receiving a sequence of images of a subject, the sequence captured by an image acquisition device over a time period in which relative locations of the image acquisition device varies with respect to the subject. A first image and a second image are selected from the first sequence of images. The first and second images represent a first relative location and a second relative location, respectively, of the image acquisition device with respect to the subject. A three-dimensional representation of the first subject is generated using the first image and the second image as a stereo pair. It is determined, based on the first three dimensional representation, that the first subject is an alternative representation of a live person, and in response, access to a secure system is prevented.

Abstract: The technology described in this document can be embodied in a method that includes receiving at a second device a request for data sharing from a first device, and receiving a first file package associated with an application installed on the first device, and the file package includes a first portion of information usable for installation of the application on the second device. The method also includes processing the first file package to obtain the first portion of information usable for installing the application on the second device, providing authentication information for downloading a second file package to a remote computer device different from the first device, and installing the application on the second device using the first portion of information and the second portion of information.

Abstract: Techniques are described for authentication using sound-based monitor detection. In some implementations, the sound (e.g., ultrasound) generated by a monitor is used to detect its presence in the vicinity of a (e.g., portable) computing device that is being used to capture image(s) to be provided to an image-based authentication system. While the computing device is being used to capture image(s) to be provided to the image-based authentication system, the sound data in proximity to the computing device can be captured and analyzed (e.g., using machine learning or other techniques) to determine whether the sound data exhibits a particular pattern and/or characteristics (e.g., signature) that indicates the presence of a monitor in proximity to the computing device. The presence (or absence) of a monitor can be used in determining whether to authenticate the user.

Abstract: The technology described in this document can be embodied in a method for generating an iris identifier. The method includes obtaining a plurality of images of an iris, and generating a binary code for each of the plurality of images of the iris, the binary code including a sequence of bits. The method also includes identifying a first pattern of bits for which bit values and bit-locations are the same across a plurality of the binary codes, generating a first index based on the first pattern of bits, and then storing the first index on a storage device in accordance with a database management system. The first index is linked to biometric information of a different modality for a corresponding user.

Abstract: The technology described in this document can be embodied in a method that includes receiving at a second device a request for data sharing from a first device, and receiving a first file package associated with an application installed on the first device, and the file package includes a first portion of information usable for installation of the application on the second device. The method also includes processing the first file package to obtain the first portion of information usable for installing the application on the second device, providing authentication information for downloading a second file package to a remote computer device different from the first device, and installing the application on the second device using the first portion of information and the second portion of information.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system. In one aspect, a method includes broadcasting, through a transceiver, a signal that includes a kiosk identifier; receiving, from a server system, a reference image of the user based on a mobile computing device associated with the user having received the signal and providing the kiosk identifier to the server system; capturing, with a camera, an image of the user; and authenticating the user based on a comparison of the captured image of the user to the reference image of the user based on a comparison of the captured image of the user to the reference image of the user.