CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is related to U.S. patent application Ser. No. 16/229,034, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,158, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,316, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,476, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,567, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,625, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,703, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,871, filed Dec. 21, 2018, U.S. patent application Ser. No. 16/229,933, filed Dec. 21, 2018 and U.S. patent application Ser. No. 16/230,032, filed Dec. 21, 2018, which are hereby incorporated by reference in their entireties.

BACKGROUND

1. Technical Field

The present teaching generally relates to data management. More specifically, the present teaching relates to secure data management.

2. Technical Background

In the age of the Internet, more and more transactions are completed on the Internet. Such transactions may be commercial or non-commercial. Some transactions require one party to the transactions to validate certain information associated with the party. For example, in order for a person to buy beer, the person has to show that he or she is over 21 years old. A confidential transaction may require one or both parties to prove a certain level of security clearance. In another example, a transaction may require a party to the transaction to have some independent source to validate the stated income level. Yet another example is that some transaction may be personal in nature so that it requires a verification that the person who is engaged in the transaction is the person intended. In many transactions, the data that need to be validated involve personal or private data. In some instances, confidential or highly confidential information may be involved.

For traditional transactions that are conducted over the Internet, validation of certain information regarding a party to the transactions may be done via paper work or appearance in person. For example, to close a real estate transaction, the parties (seller and buyer) may physically go to an office designated for closing and present their personal identification information to validate, e.g., they are old enough to conduct the transaction or any other personal information such as approval for their income, etc. to the office. For an Internet transaction, much of the information that needs to be validated in order to proceed to the transaction likely needs to be transmitted over the network which increases the risk of such data being hijacked during the Internet transmission.

As society becomes more and more Internet based, security and privacy concerns have arisen significantly with respect to private information transmitted over the Internet. This is despite the fact that technologies have been continuously developed and deployed to secure the Internet traffic because means/tools seem to always emerge that are developed and deployed to circumvent the security measures to hijack confidential and private information while it is moving through the Internet. Thus, there is a need to devise a solution to address this problem.

SUMMARY

The teachings disclosed herein relate to methods, systems, and programming for information management. More particularly, the present teaching relates to methods, systems, and programming related to self-sovereign information management and utilization thereof.

In one example, a method, implemented on a machine having at least one processor, storage, and a communication platform capable of connecting to a network for authenticating a user. An authentication session is initiated to authenticate, via iris, a person claiming to be an authorized user. A trajectory is determined with respect to a display visible to the person. A plurality of focus dots are generated with corresponding coordinates on the trajectory with respect to the display and rendered to the person on the display in accordance with the corresponding coordinates during a specified period of time. A plurality of pictures of the iris of the person are captured during the period of time and used to determine whether the person is live based on the captured plurality of pictures of the iris of the person.

In a different example, a system for authenticating a user is disclosed. The system includes an authentication unit configured for initiating an authentication session to authenticate, via iris, a person claiming to be an authorized user, a trajectory generator configured for determining a trajectory with respect to a display visible to the person, a focus dots generator configured for generating a plurality of focus dots with corresponding coordinates on the trajectory with respect to the display, a focus dots display controller configured for rendering the plurality of focus dots to the person on the display in accordance with the corresponding coordinates during a specified period of time, a camera controller configured for capturing a plurality of pictures of the iris of the person during the period of time, and an iris liveness determiner configured for determining whether the person is live based on the captured plurality of pictures of the iris of the person.

Other concepts relate to software for implementing the present teaching. A software product, in accord with this concept, includes at least one machine-readable non-transitory medium and information carried by the medium. The information carried by the medium may be executable program code data, parameters in association with the executable program code, and/or information related to a user, a request, content, or other additional information.

In one example, a machine-readable, non-transitory and tangible medium having data recorded thereon for authenticating a user, wherein the medium, when read by the machine, causes the machine to perform a series of steps. An authentication session is initiated to authenticate, via iris, a person claiming to be an authorized user. A trajectory is determined with respect to a display visible to the person. A plurality of focus dots are generated with corresponding coordinates on the trajectory with respect to the display and rendered to the person on the display in accordance with the corresponding coordinates during a specified period of time. A plurality of pictures of the iris of the person are captured during the period of time and used to determine whether the person is live based on the captured plurality of pictures of the iris of the person.

Additional advantages and novel features will be set forth in part in the description which follows, and in part will become apparent to those skilled in the art upon examination of the following and the accompanying drawings or may be learned by production or operation of the examples. The advantages of the present teachings may be realized and attained by practice or use of various aspects of the methodologies, instrumentalities and combinations set forth in the detailed examples discussed below.

