Access control through multi-factor image authentication

[0009]Disclosed herein are systems and methods for authenticating users accessing financial accounts from user terminals such as automatic teller machines (ATMs). According to an embodiment, a user authentication operates within a system hardware and software architecture and authenticates users to process a requested transaction. According to an embodiment, a system and method of authenticating user access to financial accounts uses multi-factor facial image authentication to decrease the potential for fraudulent transactions. The system and method captures a first facial image of a user and compares this image with stored facial recognition credentials. The method prompts the user via a facial gesture cue to make a facial gesture, captures a second facial image of the user, and compares the second image with stored facial gesture credentials. The user is authorized to perform a transaction in the event the first facial image matches a facial recognition credential for an authorized account, and the second facial image matches a facial gesture credential associated with the authorized account. An additional authentication factor may employ a secondary biometric sensor.

One issue with ATMs and other such secret password authentication based systems is that they are vulnerable to fraud.

Since the customer has already reclaimed his ATM card and has completed the transaction, the customer might vacate the ATM prior to termination of authentication, thus leaving the authenticated session open for potential fraudulent use.

Additionally, malicious users may obtain bank account information by attaching scanning devices to an ATM to read a transaction card and record the embedded account information, and also obtain the user's PIN number by watching or recording video of the user entering the PIN on the ATM keypad.

Other systems in which a user enters a password, PIN, log-in or other private information are similarly susceptible to fraud.

Although customer authentication by facial recognition offers various advantages, it too can be vulnerable to fraud when employed as a stand-alone authentication technique.

Therefore, a malicious user may be able to gain access to an ATM account or other secured system simply by procuring a picture or other artificial representation of an authorized user.