Embedded Authentication Systems in an Electronic Device

• US 20140115695A1
• Filed: 12/27/2013
• Published: 04/24/2014
• Est. Priority Date: 09/24/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Fadell, Anthony, Hodge, Andrew, Schell, Stephan, Caballero, Ruben, Dorogusker, Jesse Lee, Zadesky, Stephen, Sanford, Emery
• Granted Patent: US 9,519,771 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0412 Digitisers structurally integrated in a display
• CPC Class Codes: G06F 3/0416 Control or interface arrangements specially adapted for digitisers
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06V 40/1306 non-optical, e.g. ultrasonic or capacitive sensing
• CPC Class Codes: G06V 40/1312 direct reading, e.g. contactless acquisition
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G06V 40/165 using facial parts and geometric relationships
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/67 by interactive indications to the user
• CPC Class Codes: G09G 2358/00 Arrangements for display data security
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

This invention is directed to an electronic device with an embedded authentication system for restricting access to device resources. The authentication system may include one or more sensors operative to detect biometric information of a user. The sensors may be positioned in the device such that the sensors may detect appropriate biometric information as the user operates the device, without requiring the user to perform a step for providing the biometric information (e.g., embedding a fingerprint sensor in an input mechanism instead of providing a fingerprint sensor in a separate part of the device housing). In some embodiments, the authentication system may be operative to detect a visual or temporal pattern of inputs to authenticate a user. In response to authenticating, a user may access restricted files, applications (e.g., applications purchased by the user), or settings (e.g., application settings such as contacts or saved game profile).

Claims

1. An electronic device, comprising:

a display;

a fingerprint sensor;

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

displaying an unlock user interface while the electronic device is in a locked mode of operation; and

while displaying the unlock user interface, detecting a first input from a user of the device; and

in response to detecting the first input;

in accordance with a determination that the first input satisfies a first authentication system, unlocking the device without providing access to respective content; and

in accordance with a determination that the first input does not satisfy the first authentication system, forgoing unlocking the device;

while the device is unlocked;

detecting a second input that corresponds to a request to access the respective content; and

in response to detecting the second input;

in accordance with a determination that the second input satisfies a second authentication system, providing access to the respective content; and

in accordance with a determination that the second input does not satisfy the second authentication system, forgoing providing access to the respective content.

2. The device of claim 1, wherein:

the first authentication system is an input pattern authentication system; and

the second authentication system is a biometric authentication system.

3. The device of claim 1, wherein:

the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and

the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.

4. The device of claim 1, wherein the first authentication system is selected from the set consisting of:

a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system.

5. The device of claim 1, wherein the second authentication system is selected from the set consisting of:

a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system.

6. The device of claim 1, wherein:

the second input corresponds to a request to launch a respective application that includes the respective content;

providing access to the respective content includes launching the respective application; and

forgoing providing access to the respective content includes forgoing launching the respective application.

7. The device of claim 1, wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.

8. The device of claim 7, wherein the application user interface includes an obscured version of the respective content.

9. The device of claim 1, wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.

10. The device of claim 1, wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.

11. A method, comprising:

at an electronic device with a fingerprint sensor and a display;

displaying an unlock user interface while the electronic device is in a locked mode of operation; and

while displaying the unlock user interface, detecting a first input from a user of the device; and

in response to detecting the first input;

in accordance with a determination that the first input satisfies a first authentication system, unlocking the device without providing access to respective content; and

in accordance with a determination that the first input does not satisfy the first authentication system, forgoing unlocking the device;

while the device is unlocked;

detecting a second input that corresponds to a request to access the respective content; and

in response to detecting the second input;

in accordance with a determination that the second input satisfies a second authentication system, providing access to the respective content; and

in accordance with a determination that the second input does not satisfy the second authentication system, forgoing providing access to the respective content.

12. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display and a fingerprint sensor, cause the device to:

display an unlock user interface while the electronic device is in a locked mode of operation; and

while displaying the unlock user interface, detect a first input from a user of the device; and

in response to detecting the first input;

in accordance with a determination that the first input satisfies a first authentication system, unlock the device without providing access to respective content; and

in accordance with a determination that the first input does not satisfy the first authentication system, forgo unlocking the device;

while the device is unlocked;

detect a second input that corresponds to a request to access the respective content; and

in response to detecting the second input;

in accordance with a determination that the second input satisfies a second authentication system, provide access to the respective content; and

in accordance with a determination that the second input does not satisfy the second authentication system, forgo providing access to the respective content.