Man-machine interface for controlling access to electronic devices

• US 7,420,546 B2
• Filed: 11/24/2004
• Issued: 09/02/2008
• Est. Priority Date: 05/30/2003
• Status: Expired

• Current Assignee: Privaris, Inc.
• Original Assignee: Privaris, Inc.
• Inventors: Johnson, Barry W., Abdallah, David S., Olvera, Kristen R.
• Primary Examiner(s): OSORIO, RICARDO
• Application Number:
  US10/997,291
• Publication Number:
  US 20050093834A1
• Time in Patent Office: 1,378 Days
• Field of Search: 345/156, 345/173, 713200-202, 382/115, 382/124, 382/125
• US Class Current: 345/173
• CPC Class Codes: G06F 16/51 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/1076 Revocation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06V 40/13 Sensors therefor
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861

Abstract

The invention disclosed herein describes a man-machine interface device for controlling access to electronic devices. The man-machine interface device comprises an electronic display unit including a transparent finger touch sensor region that is seated above the display apparatus, which is responsible for determining the presence and absence of a finger and for generating fingerprint images when a finger is detected. The man-machine interface device also includes a controller unit that is coupled to the display apparatus, the finger touch sensor region, and at least one electronic device. The method of the invention describes a process for authenticating individuals and verifying their security privileges to access sensitive data, based on a finger-touch selection of an icon presented on the display apparatus of the man-machine interface device.

Claims

1. A processor-readable medium storing code representing instructions to cause a processor to perform a process, the code comprising code to:

receive a biometric input from a first user at a location of a touch screen, the location of the touch screen being associated with an icon, the icon being associated with a function;

determine a security privilege uniquely associated with the icon and the biometric input of the first user based collectively on the icon and the biometric input of the first user;

permit access to the function associated with the icon when the security privilege uniquely associated with the icon and the biometric input of the first user permits access to that function;

receive a biometric input from a second user at the location of the touch screen;

determine a security privilege uniquely associated with the icon and the biometric input of the second user based collectively on the icon and the biometric input of the second user; and

inhibit access to the function associated with the icon when the security privilege uniquely associated with the icon and the biometric input of the second user does not permit access to that function.

2. The processor-readable medium of claim 1, wherein the code to permit access to the function for the first user is configured to permit full access to the function by the first user when the security privilege associated with the icon and the biometric input of the first user is configured to permit full access to that function.

3. The processor-readable medium of claim 1, wherein the code to permit access to the function for the first user is configured to permit limited access to the function by the first user when the security privilege associated with the icon and the biometric input of the first user is configured to permit limited access to that function.

4. The processor-readable medium of claim 1, the code further comprising code to:

before access to the function is permitted for the first user, inhibit access to the function by the first user when the security privilege associated with the icon and the biometric input of the first user does not permit access to that function.

5. The processor-readable medium of claim 1, wherein the location of the touch screen is a first location of the touch screen, the icon is a first icon, the function is a first function, the code further comprising code to:

receive the biometric input from the first user at a second location of the touch screen, the second location of the touch screen being associated with a second icon, the second icon being associated with a second function different than the first function;

determine a security privilege uniquely associated with the second icon and the biometric input of the first user based collectively on the second icon and the biometric input of the first user; and

permit access to the second function associated with the second icon when the security privilege uniquely associated with the second icon and the biometric input of the first user permits access to the second function.

6. The processor-readable medium of claim 1, wherein the location of the touch screen is a first location of the touch screen, the icon is a first icon, the function is a first function, the code further comprising code to:

receive the biometric input from the second user at a second location of the touch screen, the second location of the touch screen being associated with a second icon, the second icon being associated with a second function different than the first function;

determine a security privilege uniquely associated with the second icon and the biometric input of the second user based on the second icon and the biometric input of the second user; and

permit access to the second function associated with the second icon when the security privilege uniquely associated with the second icon and the biometric input of the second user permits access to the second function.

7. The processor-readable medium of claim 1, the code further comprising code to:

before access to the function is permitted for the first user, determine whether the biometric input of the first user is authentic based on a biometric template of the first user, the biometric input of the first user being uniquely associated with the biometric template of the first user.

8. The processor-readable medium of claim 1, wherein the function is a software program.

31. The processor-readable medium of claim 1, the code further comprising code to:

determine, before the security privilege of the first user is determined, at least one of the function associated with the location of the touch screen at which the biometric input of the first user is received or the icon associated with the location of the touch screen at which the biometric input of the first user is received.

32. The processor-readable medium of claim 1, wherein the biometric input of the first user is received at a first screen including the icon, the security privilege is determined before displaying a second screen different from the first screen.

9. An apparatus, comprising:

a memory configured to store a plurality of biometric templates, each biometric template from the plurality of biometric templates being associated with a security privilege from a plurality of security privileges, each security privilege from the plurality of security privileges being associated with a function from a plurality of functions;

a touch screen having a biometric sensor configured to receive a biometric input at a location within the touch screen, the touch screen configured to display a plurality of icons, each icon from the plurality of icons being associated with a function from the plurality of functions; and

a processor coupled to the memory and the biometric sensor, the processor configured to permit access to a function associated with an icon from the plurality of icons when biometric input is received at a location within the touch screen associated with that icon and when the security privilege for that icon and for the biometric template from the plurality of biometric templates associated with the biometric input permits access to that icon.

10. The apparatus of claim 9, wherein the processor is configured to authenticate a biometric input based on at least one biometric template from the plurality of biometric templates, the processor configured to permit access to the function when the biometric input is authenticated.

11. The apparatus of claim 9, wherein the processor is configured to inhibit access to the function when the biometric input does not match any biometric template from the plurality of biometric templates.

12. The apparatus of claim 9, wherein the processor is configured to inhibit access to the function when the security privilege uniquely associated with the function and associated with the biometric template for that function does not permit access to that function.

13. The apparatus of claim 9, wherein the processor is configured to permit limited access to the function when the security privilege uniquely associated with the function and associated with the biometric template for that function is configured to permit limited access to that function.

14. The apparatus of claim 9, wherein the processor is configured to permit access to the function when the location within the touch screen is independent of any security privilege.

15. The apparatus of claim 9, wherein the function is a software program.

33. The apparatus of claim 9, wherein the biometric sensor is a first biometric sensor, the touch screen has a plurality of biometric sensors including the first biometric sensor, each biometric sensor from the plurality of biometric sensors being configured to receive the biometric input at a location of the touch screen, the location of each biometric sensor being associated with an icon from the plurality of icons.

34. The apparatus of claim 9, wherein the processor is configured to determine the icon from the plurality of icons based on the location of the touch screen at which the biometric input is received.

16. A processor-readable medium storing code representing instructions to cause a processor to perform a process, the code comprising code to:

receive a biometric input at a location of a touch screen from a user, the location of the touch screen being associated with an icon, the icon being associated with a function;

determine a security privilege of the user for that function based on the icon associated with the function and a biometric template that matches the biometric input of the user, the biometric template being from a plurality of biometric templates, the security privilege of the user for that function being from a plurality of security privileges; and

permit access to the function associated with the icon based on the security privilege of the user for that function.

17. The processor-readable medium of claim 16, wherein the user is a first user, the code further comprising code to:

receive a biometric input from a second user at the location of the touch screen; and

inhibit access to the function associated with the icon when no biometric template from the plurality of biometric templates match the biometric input of the second user.

18. The processor-readable medium of claim 16, wherein the user is a first user, the biometric template from the plurality of biometric templates is a first biometric template from the plurality of biometric templates and is associated with the first user, the code further comprising code to:

receive a biometric input from a second user at the location of the touch screen;

determine a security privilege of the second user for that function based on the icon associated with the function and a second biometric template that matches the biometric input of the second user, the second biometric template being from the plurality of biometric templates and being associated with the second user; and

permit access to the function associated with the icon based on the security privilege of the second user for that function.

19. The processor-readable medium of claim 16, wherein the user is a first user, the biometric template from the plurality of biometric templates is a first biometric template from the plurality of biometric templates and is associated with the first user, the access to the function includes full access to the function, the code further comprising code to:

receive a biometric input from a second user at the location of the touch screen;

determine a security privilege of the second user for that function based on the icon associated with the function and a second biometric template that matches the biometric input of the second user, the second biometric template being from the plurality of biometric templates and being associated with the second user; and

permit limited access to the function associated with the icon based on the security privilege of the second user for that function, functionality associated with the limited access to the function being less than functionality associated with the full access to the function.

20. The processor-readable medium of claim 16, the code further comprising code to:

before access to the function is permitted, inhibit access to the function associated with the icon when no biometric template from the plurality of biometric templates match the biometric input.

21. The processor-readable medium of claim 16, the code further comprising code to:

before access to the function is permitted, inhibit access to the function associated with the icon when the security privilege of the user for that function does not permit access to the function.

22. The processor-readable medium of claim 16, wherein the function is a software program.

35. The processor-readable medium of claim 16, the code further comprising code to:

determine, before the security privilege is determined, at least one of the function associated with the location of the touch screen at which the biometric input is received or the icon associated with the location of the touch screen at which the biometric input is received.

36. The processor-readable medium of claim 16, wherein the biometric input is received at a first screen and the security privilege is determined before displaying a second screen different from the first screen.

23. A processor-readable medium storing code representing instructions to cause a processor to perform a process, the code comprising code to:

receive a biometric input from a user at a location of a touch screen, the location being associated with an icon, the icon being associated with a function;

determine whether the biometric input of the user is authentic based on at least one biometric template from a plurality of biometric templates; and

determine a security privilege of the user for the function from a plurality of security privileges based on the icon associated with the function and the biometric input of the user when the biometric input of the user is authentic, the security privilege being uniquely associated with the icon and that biometric template.

24. The processor-readable medium of claim 23, the code further comprising code to:

after the security privilege is determined, inhibit access by the user to the function associated with the icon when the security privilege of the user for the function does not permit access to that function.

25. The processor-readable medium of claim 23, the code further comprising code to:

before the security privilege is determined, inhibit access by the user to the function associated with the icon based on the biometric template from the plurality of biometric templates that is authentic.

26. The processor-readable medium of claim 23, wherein the user is a first user, the code further comprising code to:

receive a biometric input from the second user at the touch screen location;

determine whether the biometric input of the second user is authentic based on at least one biometric template from the plurality of biometric templates; and

determine a security privilege of the second user for the function from the plurality of security privileges based on the icon associated with the function and the biometric input of the second user when the biometric input of the second user is authentic.

27. The processor-readable medium of claim 23, the code further comprising code to:

permit access by the user to the function associated with the icon based on the security privilege of the user for the function.

28. The processor-readable medium of claim 23, the code further comprising code to:

inhibit access by the user to the function associated with the icon when the security privilege of the user for the function does not permit access to that function.

29. The processor-readable medium of claim 23, the code further comprising code to:

permit limited access by the user to the function associated with the icon when the security privilege of the user for the function permits limited access to the function.

30. The processor-readable medium of claim 23, wherein the function is a software program.

37. The processor-readable medium of claim 23, wherein the biometric input is received at a first screen and the security privilege is determined before displaying a second screen different from the first screen.