Embedded authentication systems in an electronic device

• US 8,943,580 B2
• Filed: 09/09/2008
• Issued: 01/27/2015
• Est. Priority Date: 09/24/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Fadell, Anthony, Hodge, Andrew, Schell, Stephan, Caballero, Ruben, Dorogusker, Jesse Lee, Zadesky, Stephen, Sanford, Emery
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US12/207,374
• Publication Number:
  US 20090083850A1
• Time in Patent Office: 2,331 Days
• Field of Search: 726/19
• US Class Current: 726/19
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0412 Digitisers structurally integrated in a display
• CPC Class Codes: G06F 3/0416 Control or interface arrangements specially adapted for digitisers
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06V 40/1306 non-optical, e.g. ultrasonic or capacitive sensing
• CPC Class Codes: G06V 40/1312 direct reading, e.g. contactless acquisition
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G06V 40/165 using facial parts and geometric relationships
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/67 by interactive indications to the user
• CPC Class Codes: G09G 2358/00 Arrangements for display data security
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

This invention is directed to an electronic device with an embedded authentication system for restricting access to device resources. The authentication system may include one or more sensors operative to detect biometric information of a user. The sensors may be positioned in the device such that the sensors may detect appropriate biometric information as the user operates the device, without requiring the user to perform a step for providing the biometric information (e.g., embedding a fingerprint sensor in an input mechanism instead of providing a fingerprint sensor in a separate part of the device housing). In some embodiments, the authentication system may be operative to detect a visual or temporal pattern of inputs to authenticate a user. In response to authenticating, a user may access restricted files, applications (e.g., applications purchased by the user), or settings (e.g., application settings such as contacts or saved game profile).

Claims

1. A method, comprising:

at an electronic device with a touch-sensitive display and a button with an embedded biometric sensor, with both the display and the button on a first side of the device, and the button being the only button on the first side of the device;

displaying a lock screen on the touch-sensitive display;

receiving an input from a user using the button with the embedded biometric sensor;

detecting identification information of the user as the input is received using the biometric sensor;

authenticating the user based on the identification information detected using the biometric sensor that is embedded into the button; and

in response to authenticating the user based on the identification information detected with the biometric sensor that is embedded into the button, replacing display of the lock screen with display of an unlocked user interface on the touch-sensitive display.

2. The method of claim 1, wherein the unlocked user interface is an application launch user interface that includes a plurality of application icons for launching different applications.

3. The method of claim 1, including, after replacing display of the lock screen with display of an unlocked user interface:

displaying, on the touch-sensitive display, a respective user interface that includes an obscured version of first information;

while displaying the obscured version of the first information on the touch-sensitive display, detecting a finger input on the biometric sensor; and

in response to detecting the finger input on the biometric sensor;

in accordance with a determination that the finger input includes a fingerprint that matches a fingerprint of an authorized user, replacing display of the obscured version of the first information with an unobscured version of the first information; and

in accordance with a determination that the finger input does not include a fingerprint that matches a fingerprint of an authorized user, maintaining display of the obscured version of the first information on the touch-sensitive display.

4. The method of claim 1, wherein the biometric sensor comprises a two-dimensional fingerprint sensor configured to detect features of the user'"'"'s finger when the finger is stationary over the biometric sensor.

5. The method of claim 1, including providing the user with access to restricted electronic device resources in response to authenticating.

6. The method of claim 5, wherein the restricted electronic device resources comprise at least one of:

an application;

data associated with an application; and

data files.

7. The method of claim 1, including, in response to authenticating the user, providing the user with a personalized display that provides the user with access to resources associated with the user.

8. The method of claim 1, wherein receiving the input includes receiving an input to unlock the electronic device.

9. The method of claim 1, wherein the identification information comprises at least one of:

a fingerprint;

a palm print;

a hand print;

a knuckle print;

a blood vessel pattern;

a retina pattern;

an iris pattern;

an ear canal pattern; and

a DNA sequence.

10. The method of claim 1, wherein the button is usable by the user to provide input to the electronic device which does not relate to authentication.

11. The method of claim 1, wherein the button is a home button.

12. The method of claim 1, wherein the touch-sensitive display is in a first area on the first side of the device, and the button is in a second area on the first side of the device.

13. The method of claim 1, wherein the button is below the touch-sensitive display on the first side of the device.

14. The method of claim 1, wherein the button has a circular shape.

15. The method of claim 1, wherein the button is a depressible button, and the device performs an operation different from receiving the input from the user using the button with the embedded biometric sensor when the button is depressed.

16. The method of claim 1, wherein the device comprises a front surface, a back surface and four side surfaces, and the front surface is on the first side of the device.

17. The method of claim 16, wherein the device comprises an additional button on at least one of the four side surfaces.

18. An electronic device, comprising:

a touch-sensitive display on a first side of the device;

a button with an embedded biometric sensor on the first side of the device, and the button being the only button on the first side of the device;

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

displaying a lock screen on the touch-sensitive display;

receiving an input from a user using the button with the embedded biometric sensor;

detecting identification information of the user as the input is received using the biometric sensor;

authenticating the user based on the identification information detected using the biometric sensor that is embedded into the button; and

in response to authenticating the user based on the identification information detected with the biometric sensor that is embedded into the button, replacing display of the lock screen with display of an unlocked user interface on the touch-sensitive display.

19. The device of claim 18, wherein the unlocked user interface is an application launch user interface that includes a plurality of application icons for launching different applications.

20. The device of claim 18, including instructions for, after replacing display of the lock screen with display of an unlocked user interface:

displaying, on the touch-sensitive display, a respective user interface that includes an obscured version of first information;

while displaying the obscured version of the first information on the touch-sensitive display, detecting a finger input on the biometric sensor; and

in response to detecting the finger input on the biometric sensor;

in accordance with a determination that the finger input includes a fingerprint that matches a fingerprint of an authorized user, replacing display of the obscured version of the first information with an unobscured version of the first information; and

in accordance with a determination that the finger input does not include a fingerprint that matches a fingerprint of an authorized user, maintaining display of the obscured version of the first information on the touch-sensitive display.

21. The device of claim 18, wherein the biometric sensor comprises a two-dimensional fingerprint sensor configured to detect features of the user'"'"'s finger when the finger is stationary over the biometric sensor.

22. The device of claim 18, including instructions for providing the user with access to restricted electronic device resources in response to authenticating.

23. The device of claim 22, wherein the restricted electronic device resources comprise at least one of:

an application;

data associated with an application; and

data files.

24. The device of claim 18, including instructions for, in response to authenticating the user, providing the user with a personalized display that provides the user with access to resources associated with the user.

25. The device of claim 18, wherein receiving the input includes receiving an input to unlock the electronic device.

26. The device of claim 18, wherein the identification information comprises at least one of:

a fingerprint;

a palm print;

a hand print;

a knuckle print;

a blood vessel pattern;

a retina pattern;

an iris pattern;

an ear canal pattern; and

a DNA sequence.

27. The device of claim 18, wherein the button is usable by the user to provide input to the electronic device which does not relate to authentication.

28. The device of claim 18, wherein the button is a home button.

29. The device of claim 18, wherein the touch-sensitive display is in a first area on the first side of the device, and the button is in a second area on the first side of the device.

30. The device of claim 18, wherein the button is below the touch-sensitive display on the first side of the device.

31. The device of claim 18, wherein the button has a circular shape.

32. The device of claim 18, wherein the button is a depressible button, and the device performs an operation different from receiving the input from the user using the button with the embedded biometric sensor when the button is depressed.

33. The device of claim 18, wherein the device comprises a front surface, a back surface and four side surfaces, and the front surface is on the first side of the device.

34. The device of claim 33, wherein the device comprises an additional button on at least one of the four side surfaces.

35. A non-transitory computer-readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device that comprises a touch-sensitive display and a button with an embedded biometric sensor, with both the display and the button on a first side of the device, and the button being the only button on the first side of the device, cause the device to:

display a lock screen on the touch-sensitive display;

receive an input from a user using an input mechanism of the electronic device,

detect identification information of the user as the input is received using the embedded biometric sensor;

authenticate the user based on the identification information detected using the biometric sensor that is embedded into the button; and

in response to authenticating the user based on the identification information detected with the biometric sensor that is embedded into the button, replace display of the lock screen with display of an unlocked user interface on the touch-sensitive display.

36. The storage medium of claim 35, wherein the unlocked user interface is an application launch user interface that includes a plurality of application icons for launching different applications.

37. The storage medium of claim 35, including instructions which when executed cause the device to, after replacing display of the lock screen with display of an unlocked user interface:

display, on the touch-sensitive display, a respective user interface that includes an obscured version of first information;

while displaying the obscured version of the first information on the touch-sensitive display, detect a finger input on the biometric sensor; and

in response to detecting the finger input on the biometric sensor;

in accordance with a determination that the finger input includes a fingerprint that matches a fingerprint of an authorized user, replace display of the obscured version of the first information with an unobscured version of the first information; and

in accordance with a determination that the finger input does not include a fingerprint that matches a fingerprint of an authorized user, maintain display of the obscured version of the first information on the touch-sensitive display.

38. The storage medium of claim 35, wherein the biometric sensor comprises a two-dimensional fingerprint sensor configured to detect features of the user'"'"'s finger when the finger is stationary over the biometric sensor.

39. The storage medium of claim 35, including instructions which when executed cause the device to provide the user with access to restricted electronic device resources in response to authenticating.

40. The storage medium of claim 39, wherein the restricted electronic device resources comprise at least one of:

an application;

data associated with an application; and

data files.

41. The storage medium of claim 35, including instructions which when executed cause the device to, in response to authenticating the user, provide the user with a personalized display that provides the user with access to resources associated with the user.

42. The storage medium of claim 35, wherein receiving the input includes receiving an input to unlock the electronic device.

43. The storage medium of claim 35, wherein the identification information comprises at least one of:

a fingerprint;

a palm print;

a hand print;

a knuckle print;

a blood vessel pattern;

a retina pattern;

an iris pattern;

an ear canal pattern; and

a DNA sequence.

44. The storage medium of claim 35, wherein the button is usable by the user to provide input to the electronic device which does not relate to authentication.

45. The storage medium of claim 35, wherein the button is a home button.

46. The storage medium of claim 35, wherein the touch-sensitive display is in a first area on the first side of the device, and the button is in a second area on the first side of the device.

47. The storage medium of claim 35, wherein the button is below the touch-sensitive display on the first side of the device.

48. The storage medium of claim 35, wherein the button has a circular shape.

49. The storage medium of claim 35, wherein the button is a depressible button, and the device performs an operation different from receiving the input from the user using the button with the embedded biometric sensor when the button is depressed.

50. The storage medium of claim 35, wherein the device comprises a front surface, a back surface and four side surfaces, and the front surface is on the first side of the device.

51. The storage medium of claim 50, wherein the device comprises an additional button on at least one of the four side surfaces.