ELECTRONIC DEVICE ACCESS CONTROL USING BIOMETRIC TECHNOLOGIES

• US 20170053108A1
• Filed: 11/18/2015
• Published: 02/23/2017
• Est. Priority Date: 08/17/2015
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: JAKOBSSON, Bjorn Markus, BAPST, Mark, LUNDBLADE, Laurence Geoffrey
• Granted Patent: US 10,002,242 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

Methods, apparatus, and computer program products for controlling access to an electronic device based on biometric input are described. An example of such a method includes receiving a current biometric input, determining template similarity scores for the current biometric input, if at least one template similarity score satisfies a template similarity score criterion, then updating a false user counter value in a first numerical direction and performing an authentication process on the current biometric input, else, determining stored biometric input similarity scores for the current biometric input, if at least one stored biometric input similarity score satisfies a stored biometric input similarity score criterion, then maintaining the false user counter value, else, replacing a previously stored biometric input with the current biometric input, and updating the false user counter value in a second numerical direction opposite to the first numerical direction.

Claims

1. A method of controlling access to an electronic device based on biometric input, comprising:

receiving a current biometric input;

determining one or more template similarity scores for the current biometric input;

if at least one template similarity score of the one or more template similarity scores satisfies a template similarity score criterion, then updating a false user counter value in a first numerical direction and performing an authentication process on the current biometric input, else;

determining one or more stored biometric input similarity scores for the current biometric input;

if at least one stored biometric input similarity score of the one or more stored biometric input similarity scores satisfies a stored biometric input similarity score criterion, then maintaining the false user counter value, else;

replacing a previously stored biometric input with the current biometric input; and

updating the false user counter value in a second numerical direction opposite to the first numerical direction.

2. The method of claim 1 comprising:

maintaining the false user counter value at a current value for a previous unauthorized user of the electronic device; and

updating the false user counter value in the second numerical direction for a new unauthorized user of the electronic device.

3. The method of claim 1 wherein the template similarity score criterion is a first template similarity score criterion and comprising:

determining the one or more template similarity scores by determining a similarity between the current biometric input and one or more previously stored biometric templates; and

if the at least one template similarity score satisfies the first template similarity score criterion, then authenticating a user of the electronic device based on one template similarity score of the one or more template similarity scores satisfying a second template similarity score criterion,

wherein the first template similarity score criterion corresponds to a first confidence value threshold and the second template similarity score criterion corresponds to a second confidence value threshold, the second confidence value threshold being higher than the first confidence value threshold.

4. The method of claim 1 comprising determining a plurality of template similarity scores for a plurality of authorized users of the electronic device.

5. The method of claim 1 comprising determining the one or more stored biometric input similarity scores for the current biometric input by determining a similarity between the current biometric input and one or more stored biometric inputs.

6. The method of claim 1 comprising:

determining if the false user counter value satisfies a disallowed re-entry of biometric input criterion based on a false user counter threshold value; and

if the false user counter value satisfies the disallowed re-entry of biometric input criterion, then disallowing re-entry of biometric input, else allowing the re-entry of biometric input without implementing denial of service procedures.

7. The method of claim 1 wherein the replacing the previously stored biometric input with the current biometric input comprises replacing a previously stored biometric input corresponding to an unauthorized user of the electronic device with the current biometric input.

8. The method of claim 1 further comprising, if the at least one stored biometric input similarity score satisfies the stored biometric input similarity score criterion, then discarding the current biometric input.

9. The method of claim 1 wherein the current biometric input includes at least one of a fingerprint, a retinal scan, a voice recording, or a facial image.

10. An apparatus for determining access to an electronic device based on biometric authentication, comprising:

a memory; and

at least one processor operably coupled to the memory and configured to;

receive a current biometric input;

determine one or more template similarity scores for the current biometric input;

if at least one template similarity score of the one or more template similarity scores satisfies a template similarity score criterion, then update a false user counter value in a first numerical direction and perform an authentication process on the current biometric input, else;

determine one or more stored biometric input similarity scores for the current biometric input;

if at least one stored biometric input similarity score of the one or more stored biometric input similarity scores satisfies a stored biometric input similarity score criterion, then maintain the false user counter value, else;

replace a previously stored biometric input with the current biometric input; and

update the false user counter value in a second numerical direction opposite to the first numerical direction.

11. The apparatus of claim 10 wherein the at least one processor is further configured to:

maintain the false user counter value at a current value for a previous unauthorized user of the electronic device; and

update the false user counter value in the second numerical direction for a new unauthorized user of the electronic device.

12. The apparatus of claim 10 wherein the template similarity score criterion is a first template similarity score criterion and the at least one processor is further configured to:

determine a similarity between the current biometric input and one or more previously stored biometric templates and determine the one or more template similarity scores based on the determined similarity between the current biometric input and the one or more previously stored biometric templates; and

if the at least one template similarity score satisfies the first template similarity score criterion, then authenticate a user of the electronic device based on one template similarity score of the one or more template similarity scores satisfying a second template similarity score criterion,

wherein the first template similarity score criterion corresponds to a first confidence value threshold and the second template similarity score criterion corresponds to a second confidence value threshold, the second confidence value threshold being higher than the first confidence value threshold.

13. The apparatus of claim 10 wherein the at least one processor is further configured to determine a plurality of template similarity scores for a plurality of authorized users of the electronic device.

14. The apparatus of claim 10 wherein the at least one processor is further configured to determine a similarity between the current biometric input and one or more stored biometric inputs and determine the one or more stored biometric input similarity scores for the current biometric input based on the determined similarity between the current biometric input and the one or more stored biometric inputs.

15. The apparatus of claim 10 wherein the at least one processor is further configured to:

determine if the false user counter value satisfies a disallowed re-entry of biometric input criterion based on a false user counter threshold value; and

if the false user counter value satisfies the disallowed re-entry of biometric input criterion, then disallow re-entry of biometric input, else allow the re-entry of biometric input without implementing denial of service procedures.

16. The apparatus of claim 10 wherein the at least one processor is further configured to replace a previously stored biometric input corresponding to an unauthorized user of the electronic device with the current biometric input.

17. The apparatus of claim 10 wherein the at least one processor is further configured to discard the current biometric input if the at least one stored biometric input similarity score satisfies the stored biometric input similarity score criterion.

18. The apparatus of claim 10 wherein the current biometric input includes at least one of a fingerprint, a retinal scan, a voice recording, or a facial image.

19. An apparatus for controlling access to an electronic device based on biometric input, comprising:

means for receiving a current biometric input;

means for determining one or more template similarity scores for the current biometric input;

means for updating a false user counter value in a first numerical direction and performing an authentication process on the current biometric input, if at least one template similarity score of the one or more template similarity scores satisfies a template similarity score criterion;

means for determining one or more stored biometric input similarity scores for the current biometric input if the at least one template similarity score of the one or more template similarity scores does not satisfy the template similarity score criterion;

means for maintaining the false user counter value if at least one stored biometric input similarity score of the one or more stored biometric input similarity scores satisfies a stored biometric input similarity score criterion; and

means for replacing a previously stored biometric input with the current biometric input and updating the false user counter value in a second numerical direction opposite to the first numerical direction if the at least one stored biometric input similarity score of the one or more stored biometric input similarity scores does not satisfy the stored biometric input similarity score criterion.

20. The apparatus of claim 19 comprising:

means for maintaining the false user counter value at a current value for a previous unauthorized user of the electronic device; and

means for updating the false user counter value in the second numerical direction for a new unauthorized user of the electronic device.

21. The apparatus of claim 19 wherein the template similarity score criterion is a first template similarity score criterion and comprising:

means for determining the one or more template similarity scores by determining a similarity between the current biometric input and one or more previously stored biometric templates; and

means for authenticating a user of the electronic device based on one template similarity score of the one or more template similarity scores satisfying a second template similarity score criterion if the at least one template similarity score satisfies the first template similarity score criterion,

wherein the first template similarity score criterion corresponds to a first confidence value threshold and the second template similarity score criterion corresponds to a second confidence value threshold, the second confidence value threshold being higher than the first confidence value threshold.

22. The apparatus of claim 19 comprising means for determining a plurality of template similarity scores for a plurality of authorized users of the electronic device.

23. The apparatus of claim 19 comprising means for determining the one or more stored biometric input similarity scores for the current biometric input by determining a similarity between the current biometric input and one or more stored biometric inputs.

24. The apparatus of claim 19 comprising:

means for determining if the false user counter value satisfies a disallowed re-entry of biometric input criterion based on a false user counter threshold value;

means for disallowing re-entry of biometric input if the false user counter value satisfies the disallowed re-entry of biometric input criterion;

means for allowing the re-entry of biometric input without implementing denial of service procedures if the false user counter value does not satisfy the disallowed re-entry of biometric input criterion.

25. The apparatus of claim 19 wherein the means for replacing the previously stored biometric input with the current biometric input comprises means for replacing a previously stored biometric input corresponding to an unauthorized user of the electronic device with the current biometric input.

26. The apparatus of claim 19 further comprising means for discarding the current biometric input if the at least one stored biometric input similarity score satisfies the stored biometric input similarity score criterion.

27. The apparatus of claim 19 wherein the current biometric input includes at least one of a fingerprint, a retinal scan, a voice recording, or a facial image.

28. A non-transitory processor-readable storage medium comprising processor-readable instructions configured to cause a processor to control access to an electronic device based on biometric input, comprising:

code for receiving a current biometric input;

code for determining one or more template similarity scores for the current biometric input;

code for updating a false user counter value in a first numerical direction and code for performing an authentication process on the current biometric input, if at least one template similarity score of the one or more template similarity scores satisfies a template similarity score criterion;

code for determining one or more stored biometric input similarity scores for the current biometric input if the at least one template similarity score of the one or more template similarity scores does not satisfy the template similarity score criterion;

code for maintaining the false user counter value if at least one stored biometric input similarity score of the one or more stored biometric input similarity scores satisfies a stored biometric input similarity score criterion; and

code for replacing a previously stored biometric input with the current biometric input and code for updating the false user counter value in a second numerical direction opposite to the first numerical direction, if the at least one stored biometric input similarity score of the one or more stored biometric input similarity scores does not satisfy the stored biometric input similarity score criterion.

29. The storage medium of claim 28 wherein the processor-readable instructions are further configured to:

maintain the false user counter value at a current value for a previous unauthorized user of the electronic device; and

update the false user counter value in the second numerical direction for a new unauthorized user of the electronic device.

30. The storage medium of claim 28 wherein the template similarity score criterion is a first template similarity score criterion and wherein the processor-readable instructions are further configured to:

determine the one or more template similarity scores by determining a similarity between the current biometric input and one or more previously stored biometric templates; and

authenticate a user of the electronic device based on one template similarity score of the one or more template similarity scores satisfying a second template similarity score criterion if the at least one template similarity score satisfies the first template similarity score criterion,

wherein the first template similarity score criterion corresponds to a first confidence value threshold and the second template similarity score criterion corresponds to a second confidence value threshold, the second confidence value threshold being higher than the first confidence value threshold.

31. The storage medium of claim 28 wherein the processor-readable instructions are further configured to determine a plurality of template similarity scores for a plurality of authorized users of the electronic device.

32. The storage medium of claim 28 wherein the processor-readable instructions are further configured to determine a similarity between the current biometric input and one or more stored biometric inputs and determine the one or more stored biometric input similarity scores for the current biometric input based on the determined similarity between the current biometric input and the one or more stored biometric inputs.

33. The storage medium of claim 28 wherein the processor-readable instructions are further configured to:

determine if the false user counter value satisfies a disallowed re-entry of biometric input criterion based on a false user counter threshold value; and

if the false user counter value satisfies the disallowed re-entry of biometric input criterion, then disallow re-entry of biometric input, else allow the re-entry of biometric input without implementing denial of service procedures.

34. The storage medium of claim 28 wherein the wherein the processor-readable instructions are further configured to replace a previously stored biometric input corresponding to an unauthorized user of the electronic device with the current biometric input.

35. The storage medium of claim 28 wherein the processor-readable instructions are further configured to discard the current biometric input if the at least one stored biometric input similarity score satisfies the stored biometric input similarity score criterion.

36. The storage medium of claim 28 wherein the current biometric input includes at least one of a fingerprint, a retinal scan, a voice recording, or a facial image.