User authentication based on time variant fingerprint sequences

• US 10,102,360 B2
• Filed: 01/05/2016
• Issued: 10/16/2018
• Est. Priority Date: 01/05/2016
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Mohan, Badrinath
• Primary Examiner(s): Kabir, Jahangir
• Application Number:
  US14/988,167
• Publication Number:
  US 20170193209A1
• Time in Patent Office: 1,015 Days
• Field of Search: 726 4, 726 28
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

An electronic device includes a fingerprint detector sensor, a processor, and a memory coupled to the processor. The memory stores computer readable program code that when executed by the processor causes the processor to perform operations. The operations include receiving a sequence of digital fingerprint scans from the fingerprint detector sensor. The operations further include selectively allowing electronic access by a user to an application processed by the processor based on determining a combination of whether the digital fingerprint scans match a defined number of digital fingerprints stored in a data structure residing in the memory and whether an order of the digital fingerprint scans in the sequence matches a registered order of the defined number of digital fingerprints.

Claims

1. A method, comprising:

performing operations as follows on a processor of an electronic device;

receiving a sequence of digital fingerprint scans of different individual fingers of a user from a fingerprint detector sensor of the electronic device configured to electronically scan the user'"'"'s fingerprint to output a digital fingerprint scan;

measuring a sequence of elapsed times and angular rotation offsets between receiving individual ones of the digital fingerprint scans of the different individual fingers of the user in the sequence from the fingerprint detector sensor; and

selectively allowing electronic access by the user to an application processed by the processor of the electronic device based on determining a combination of whether the digital fingerprint scans of the different individual fingers of the user match a defined number of digital fingerprints of the different individual fingers of the user stored in an authentication data structure residing in a memory and whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user,

wherein the selectively allowing electronic access further comprises determining whether individual entries in the sequence of elapsed times and angular rotation offsets match entries in a registered sequence of elapsed times and angular rotation offsets that are stored in the authentication data structure,

wherein measuring the sequence of angular rotation offsets comprises measuring a sequence of angular rotation offsets between fingerprint patterns of adjacent pairs in the sequence of the digital fingerprint scans from the fingerprint detector sensor in the sequence.

2. The method of claim 1, wherein the determining a combination of whether the digital fingerprint scans match a defined number of digital fingerprints stored in an authentication data structure residing in a memory and whether an order of the digital fingerprint scans in the sequence matches a registered order of the defined number of digital fingerprints, comprises:

determining whether each of the digital fingerprint scans in the sequence matches a different one of the digital fingerprints stored in the authentication data structure and whether an order of the matching occurs in the registered order.

3. The method of claim 2, wherein the selectively allowing electronic access comprises:

receiving, from a user through a user interface of the electronic device, a command to login to the application;

communicating a user authentication failed message to the application responsive to determining that an order of the matching does not occur in the registered order; and

communicating a user authentication completed message to the application responsive to determining that each of the digital fingerprint scans in the sequence matches a different one of the digital fingerprints stored in the authentication data structure and that the order of the matching occurs in the registered order.

4. The method of claim 1,

wherein the determining whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user, comprises:

determining whether the measured sequence of angular rotation offsets matches a registered sequence of angular rotation offsets that is stored in the authentication data structure.

5. The method of claim 4, wherein the selectively allowing electronic access comprises:

receiving, from a user through a user interface of the electronic device, a command to login to the application;

communicating a user authentication failed message to the application responsive to determining that the sequence of angular rotation offsets does not match a registered sequence of angular rotation offsets; and

communicating a user authentication completed message to the application responsive to determining that the sequence of angular rotation offsets matches a registered sequence of angular rotation offsets.

6. The method of claim 4, further comprising:

measuring a sequence of elapsed times between determining that individual ones of the sequence of angular rotation offsets match individual entries in the registered sequence of angular rotation offsets,

wherein the determining whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user further comprises determining whether individual entries of the digital fingerprint scans of the different individual fingers of the user in the sequence of elapsed times match entries of the digital fingerprint scans of the different individual fingers of the user in a registered sequence of elapsed times that is stored in the authentication data structure.

7. The method of claim 4, wherein the fingerprint detector sensor comprises a capacitive fingerprint sensor containing an array of capacitive sensor elements, and wherein:

the receiving a sequence of digital fingerprint scans from a fingerprint detector sensor, comprises;

receiving for each of the digital fingerprint scans, an array of capacitance values measured by the array of capacitive sensor elements based on capacitive coupling to fingerprint ridges and valleys of a finger; and

the measuring a sequence of angular rotation offsets between adjacent pairs of the digital fingerprint scans in the sequence, comprises;

for each adjacent pair of the digital fingerprint scans in the sequence, comparing the capacitance values in the array of one of the adjacent pair to the capacitance values in the array of the other one of the adjacent pair to identify a fingerprint pattern of matching ones of the capacitance values in both arrays, and identifying the angular rotation offset based on an angular difference between the fingerprint patterns in both arrays.

8. The method of claim 4, further comprising:

measuring a sequence of dwell times during which individual ones of the sequence of angular rotation offsets are statically maintained with a match to individual entries in the registered sequence of angular rotation offsets,

wherein the selectively allowing electronic access further comprises determining whether individual entries in the sequence of dwell times match entries in a registered sequence of dwell times that is stored in the authentication data structure.

9. The method of claim 1, wherein the determining a combination of whether the digital fingerprint scans of the different individual fingers of the user match a defined number of digital fingerprints of the different individual fingers of the user stored in an authentication data structure residing in a memory and whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user, comprises:

measuring a sequence of directions between locations of the digital fingerprint scans relative to an array of sensor elements of the fingerprint detector sensor; and

determining whether the sequence of directions matches a registered sequence of directions that is stored in the authentication data structure.

10. The method of claim 7, wherein the array of capacitive sensor elements form a coordinate system of the fingerprint detector sensor.

11. The method of claim 10, wherein measuring the sequence of angular rotational offsets comprises measuring the angular rotational offset relative to the coordinate system of the fingerprint detector sensor.

12. An electronic device, comprising:

a fingerprint detector sensor configured to electronically scan a user'"'"'s fingerprint to output a digital fingerprint scan;

a processor; and

a memory coupled to the processor and storing computer readable program code that when executed by the processor causes the processor to perform operations comprising;

receiving a sequence of digital fingerprint scans of different individual fingers of the user from the fingerprint detector sensor;

measuring a sequence of elapsed times and angular rotational offsets between receiving individual ones of the digital fingerprint scans of the different individual fingers of the user in the sequence from the fingerprint detector sensor; and

selectively allowing electronic access by the user to an application processed by the processor of the electronic device based on determining a combination of whether the digital fingerprint scans of the different individual fingers of the user match a defined number of digital fingerprints of the different individual fingers of the user stored in an authentication data structure residing in a memory and whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user,

wherein the selectively allowing electronic access further comprises determining whether individual entries in the sequence of elapsed times and angular rotational offsets match entries in a registered sequence of elapsed times and angular rotational offsets that are stored in the authentication data structure, and

wherein measuring the sequence of angular rotation offsets comprises measuring a sequence of angular rotation offsets between fingerprint patterns of adjacent pairs in the sequence of the digital fingerprint scans from the fingerprint detector sensor in the sequence.

13. The electronic device of claim 12, wherein the determining a combination of whether the digital fingerprint scans match a defined number of digital fingerprints stored in an authentication data structure residing in the memory and whether an order of the digital fingerprint scans in the sequence matches a registered order of the defined number of digital fingerprints, comprises:

determining whether each of the digital fingerprint scans in the sequence matches a different one of the digital fingerprints stored in the authentication data structure and an order of the matching occurs in the registered order.

14. The electronic device of claim 13, further comprising a user interface, wherein the selectively allowing electronic access comprises:

receiving, from a user through the user interface, a command to login to the application;

communicating a user authentication failed message to the application responsive to determining that an order of the matching does not occur in the registered order; and

communicating a user authentication completed message to the application responsive to determining that each of the digital fingerprint scans in the sequence matches a different one of the digital fingerprints stored in the authentication data structure and that the order of the matching occurs in the registered order.

15. The electronic device of claim 12,

wherein the determining whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user, comprises:

determining whether the measured sequence of angular rotation offsets matches a registered sequence of angular rotation offsets that is stored in the authentication data structure.

16. The electronic device of claim 15, further comprising a user interface, wherein the selectively allowing electronic access comprises:

receiving, from a user through the user interface, a command to login to the application;

communicating a user authentication failed message to the application responsive to determining that the sequence of angular rotation offsets does not match a registered sequence of angular rotation offsets; and

communicating a user authentication completed message to the application responsive to determining that the sequence of angular rotation offsets matches a registered sequence of angular rotation offsets.

17. The electronic device of claim 15, the operations further comprising:

measuring a sequence of elapsed times between determining that individual ones of the sequence of angular rotation offsets match individual entries in the registered sequence of angular rotation offsets,

wherein the determining whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user further comprises determining whether individual entries of the digital fingerprint scans of the different individual fingers of the user in the sequence of elapsed times match entries of the digital fingerprint scans of the different individual fingers of the user in a registered sequence of elapsed times that is stored in the authentication data structure.

18. The electronic device of claim 15, wherein the fingerprint detector sensor comprises a capacitive fingerprint sensor containing an array of capacitive sensor elements, and wherein:

the receiving a sequence of digital fingerprint scans from a fingerprint detector sensor, comprises;

receiving for each of the digital fingerprint scans, an array of capacitance values measured by the array of capacitive sensor elements based on capacitive coupling to fingerprint ridges and valleys of a finger; and

the measuring a sequence of angular rotation offsets between adjacent pairs of the digital fingerprint scans in the sequence, comprises;

for each adjacent pair of the digital fingerprint scans in the sequence, comparing the capacitance values in the array of one of the adjacent pair to the capacitance values in the array of the other one of the adjacent pair to identify a fingerprint pattern of matching ones of the capacitance values in both arrays, and identifying the angular rotation offset based on an angular difference between the fingerprint patterns in both arrays.

19. The electronic device of claim 15, the operations further comprising:

measuring a sequence of dwell times during which individual ones of the sequence of angular rotation offsets are statically maintained with a match to individual entries in the registered sequence of angular rotation offsets,

wherein the selectively allowing electronic access further comprises determining whether individual entries in the sequence of dwell times match entries in a registered sequence of dwell times that is stored in the authentication data structure.

20. The electronic device of claim 12, wherein the determining a combination of whether the digital fingerprint scans of the different individual fingers of the user match a defined number of digital fingerprints of the different individual fingers of the user stored in an authentication data structure residing in the memory and whether an order of the digital fingerprint scans of the different individual fingers of the user in the sequence matches a registered order of the defined number of digital fingerprints of the different individual fingers of the user, comprises:

measuring a sequence of directions between locations of the digital fingerprint scans relative to an array of sensor elements of the fingerprint detector sensor; and

determining whether the sequence of directions matches a registered sequence of directions that is stored in the authentication data structure.