Abstract: An adaptive spoofing method includes obtaining multiple images of a spoof representation of a human user. The multiple images are captured automatically by an image capture device, and each of the multiple images is captured at a different relative position between the image capture device and the spoof representation. The method also includes: executing a biometric authentication process separately on each of at least a subset of the multiple images; determining that the biometric authentication process authenticates the human user based on at least a first image from the subset; and identifying a relative position between the image capture device and the spoof representation corresponding to the first image as a failure condition associated with the biometric authentication process.

Abstract: Technology described herein includes a method that includes receiving, at one or more processing devices at one or more locations, one or more image frames; receiving, at the one or more processing devices, one or more signals representing outputs of one or more light sensors of a device; estimating, by the one or more processing devices based on the one or more image frames, one or more illuminance values; determining, by the one or more processing devices, that a degree of correlation between (i) a first illuminance represented by the one or more illuminance values and (ii) a second illuminance represented by the one or more signals fails to satisfy a threshold condition; and in response to determining that the degree of correlation fails to satisfy the threshold condition, determining, by the one or more processing devices, presence of an adverse condition associated with the device.

Abstract: An adaptive spoofing method includes: causing a first display device to display a spoof representation of a human user; and obtaining multiple images of the spoof representation. The multiple images are captured automatically by an image capture device, each of the multiple images captures a different corresponding configuration of the spoof representation displayed on the first display device. The method also includes: executing a biometric authentication process separately on each of at least a subset of the multiple images; determining that the biometric authentication process authenticates the human user based on at least a first image from the subset; and identifying a configuration of the spoof representation corresponding to the first image as a failure condition associated with the biometric authentication process.

Abstract: An image transformation method includes: causing a first display device to display one or more calibration patterns. One or more first images include a corresponding calibration pattern of the one or more calibration patterns. The one or more first images are captured by an image capture device disposed at a non-zero capture angle with respect to the first display device. The method also includes determining based on the one or more first images, a transformation to be applied to account for the non-zero capture angle; obtaining a second image of a human user; applying the transformation to the second image to generate a transformed spoof representation of the human user for capture by the image capture device being held at the non-zero capture angle with respect to the first display device; and causing the first display device to display the transformed spoof representation.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium for red eye detection are provided. In one aspect, a system includes an image acquisition device, first and second illuminators, and at least one processor. The first illuminator is arranged closer to the image acquisition device than the second illuminator. The image acquisition device is configured to capture a first facial image of a face of a subject with the first illuminator being on and the second illuminator being off and a second facial image of the face of the subject with the second illuminator being on and the first illuminator being off. The processor can process the first facial image based on the second facial image to determine whether at least one eye of the subject is live by determining that the first facial image includes a red eye reflection from the at least one eye.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for a biometric authentication system having anti-spoofing capabilities. A biometric authentication system can use a vibrating component of a mobile device to determine whether the mobile device is oriented in a self-portrait orientation or in an orientation other than the self-portrait orientation based on a vibration response signal received from sensors on the mobile device. In response to determining that the mobile device is oriented in an orientation other than the self-portrait orientation, the biometric authentication system can prevent access attempts to one or more secure systems.

Abstract: A method includes receiving a first image and a second image, wherein the first and second images represent first and second relative locations, respectively, of an image acquisition device with respect to a subject. The method also includes determining, using the first and second images, a total relative displacement of the subject with respect to the image acquisition device between a time of capture of the first image and a time of capture of the second image, and determining, based on sensor data associated with one or more sensors associated with the image acquisition device, a component of the total relative displacement associated with a motion of the image acquisition device. The method also includes determining, based on a difference between the first total relative displacement and the component, that the first subject is an alternative representation of a live person, and in response, preventing access to a secure system.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for capacitive through-body communication. In one aspect, a method includes capturing, from capacitive through-body communication with an on-body device worn by an individual, a biometric template comprising identification data associated with the individual, comparing the captured identification data of the captured biometric template with reference identification data of a stored biometric template associated with the individual, determining that the captured identification data matches the reference identification data of the stored biometric template; and authenticating identification of the individual.

Abstract: In one aspect, a method includes receiving a sequence of images of a subject, the sequence captured by an image acquisition device over a time period in which relative locations of the image acquisition device varies with respect to the subject. A first image and a second image are selected from the first sequence of images. The first and second images represent a first relative location and a second relative location, respectively, of the image acquisition device with respect to the subject. A three-dimensional representation of the first subject is generated using the first image and the second image as a stereo pair. It is determined, based on the first three dimensional representation, that the first subject is an alternative representation of a live person, and in response, access to a secure system is prevented.

Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: The technology described in this document can be embodied in a computer-implemented method that includes receiving, at one or more servers from a first computing device, (i) first identification information identifying the first computing device or an application executing on the first computing device, and (ii) second identification information identifying a second computing device. The second identification information is obtained by the first computing device by detecting changes to one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the server based on the first information, identity information of a user associated with the first computing device, and transmitting, from the one or more servers to the second computing device, the identity information, such that the identity information is usable by the second computing device to verify an access attempt by the user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer-readable storage media, are provided. In one aspect, a first image of an eye region of a subject is received, the first image captured under illumination by electromagnetic radiation having a wavelength in the 850 nm-1100 nm range. Based on the first image, a metric indicative of differential absorption of the electromagnetic radiation by an iris of the subject and a sclera of the subject is determined. It is identified, based on the metric, that the subject is a spoof representation of a human. Responsive to identifying that the subject is a spoof representation of a human, access to a secure system is prevented.

Abstract: Technology described herein includes a method that includes receiving, at one or more processing devices, data corresponding to a first image, and determining, by the one or more processing devices based on the received data, that a first set of pixel values of the first image corresponds to illumination of a first representative wavelength, and at least a second set of pixel values of the first image corresponds to illumination of a second representative wavelength. The illuminations of the first and second representative wavelengths constitute at least a portion of a first illumination sequence pattern used in capturing the first image. The method also includes determining that the first illumination sequence pattern matches a second illumination sequence pattern associated with a device from which the first image is expected to be received, and in response, initiating a biometric authentication process for authenticating a subject represented in the first image.

Abstract: The technology described in this document can be embodied in a method for preventing access to a secure system based on determining that a subject is an alternative representation of a live person. The method includes illuminating a first subject with electromagnetic radiation using a first wavelength range that cause fluorescence in human tissue. The fluorescence is in a second wavelength range different from the first wavelength range. The method also includes receiving, responsive to illuminating the first subject and using one or more sensors, electromagnetic radiation emitted from the first subject, and determining that the received electromagnetic radiation is outside the second wavelength range. Responsive to determining that the received electromagnetic radiation is outside the second wavelength range, the method further includes identifying the first subject as an alternative representation of a live person, and preventing access to the secure system in response.

Abstract: The technology described in this document can be embodied in a method that includes receiving, at one or more servers from a first computing device, (i) authentication information identifying a user-account associated with (a) the first computing device or (b) an application executing on the first computing device, and (ii) a transaction identifier generated by a second computing device. The transaction identifier is obtained by the first computing device by detecting one or more parameters of a magnetic field generated by the second computing device. The method also includes determining, by the one or more servers, that the user-account is authorized to initiate a transaction identified by the transaction identifier, and in response to determining that the user-account is authorized to initiate the transaction, transmitting, from the one or more servers to the second computing device, confirmation information usable by the second computing device to proceed with the transaction.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for authenticating a user based on passive affective and knowledge-based authentication (AKBA). In one aspect, a method includes data associated with eye movements and ocular dynamics of the user are captured with a camera as the user looks at a graphical user interface (GUI) of a device; an AKBA signature of the user is determined based on the captured data; the user is authenticated based on a comparison of the AKBA signature with an AKBA template associated with the user; and an access to a subset of functions of an application is granted.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining the identity of a user. In one aspect, a method comprises: obtaining at least one image depicting a reflection of light from a lens that is included in a set of eyeglasses; determining, based on the reflection of light from the lens, a set of features characterizing the lens; and determining an identity of a corresponding user based at least in part on the set of features characterizing the lens.

Abstract: A method for generating a composite image includes receiving a first image that includes an eyeglass lens illuminated by a first illumination source radiating electromagnetic radiation in a first polarization state, and receiving a second image that includes the eyeglass lens illuminated by a second illumination source radiating electromagnetic radiation in a second polarization state. The second polarization state is different from the first polarization state, and the second illumination source is spatially separated from the first illumination source. The method also includes identifying, in the first image, a first portion that represents a reflection of the first illumination source on the eyeglass lens, and generating the composite image in which the first portion is replaced by a corresponding second portion from the second image. The first portion and the second portion represent substantially a same portion of the eyeglass lens.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for capacitive through-body communication. In one aspect, a method includes capturing, from capacitive through-body communication with an on-body device worn by an individual, a biometric template comprising identification data associated with the individual, comparing the captured identification data of the captured biometric template with reference identification data of a stored biometric template associated with the individual, determining that the captured identification data matches the reference identification data of the stored biometric template; and authenticating identification of the individual.

Abstract: Techniques are described for user authentication based on correlation of multiple pulse signals that each describe an independently determined pulse pattern for an individual. Different measurements of an individual's pulse can be generated in response to a request from the individual to access a computing system, such as a kiosk. The different measurements can be generated independently of one another using different types of sensor devices. For example, a measurement can be made using a radar sensor to detect movements caused by the user's pulse, and another measurement can be made through analysis of video data. If the independently generated pulse patterns are sufficiently similar to each other (e.g., determined using machine learning or other techniques), a determination may be made that the individual is not attempting to spoof another individual, and access to the computing system can be granted based at least partly on the determination.