Controlled access to functionality of a wireless device

• US 9,690,480 B2
• Filed: 10/09/2015
• Issued: 06/27/2017
• Est. Priority Date: 06/16/2009
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Ferren, Bran
• Primary Examiner(s): WONG, ALLEN C
• Application Number:
  US14/879,160
• Publication Number:
  US 20160034901A1
• Time in Patent Office: 627 Days
• Field of Search: 348 78
• CPC Class Codes: G02B 13/0065 having a beam-folding prism or mirror
• CPC Class Codes: G02B 13/009 having zoom function
• CPC Class Codes: G03B 3/00 Focusing arrangements of general interest for cameras, projectors or printers
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 3/02 Input arrangements using manually operated switches, e.g. using keyboards or dials
• CPC Class Codes: G06F 3/0236 using selection techniques to select from displayed items
• CPC Class Codes: G06F 3/0237 using prediction or retrieval techniques
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0412 Digitisers structurally integrated in a display
• CPC Class Codes: G06F 3/0414 using force sensing means to determine a position
• CPC Class Codes: G06F 3/04186 Touch location disambiguation
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: G06F 9/451 Execution arrangements for user interfaces
• CPC Class Codes: G06K 2207/1011 Aiming
• CPC Class Codes: G06K 7/10811 Focalisation
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/4012 : Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06V 40/16 : Human faces, e.g. facial parts, sketches or expressions
• CPC Class Codes: G06V 40/165 : using facial parts and geometric relationships
• CPC Class Codes: G06V 40/19 : Sensors therefor
• CPC Class Codes: G06V 40/20 : Movements or behaviour, e.g. gesture recognition recognition of facial expressions G06V40/16
• CPC Class Codes: G06V 40/45 : Detection of the body part being alive
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 1/72448 : with means for adapting the functionality of the device according to specific conditions
• CPC Class Codes: H04M 2250/52 : including functional features of a camera constructional features concerning the integration of cameras in portable phones H04M1/0264
• CPC Class Codes: H04N 13/239 : using two 2D image sensors having a relative position equal to or related to the interocular distance H04N13/243 takes precedence
• CPC Class Codes: H04N 13/243 : using three or more 2D image sensors
• CPC Class Codes: H04N 23/45 : for generating image signals from two or more image sensors being of different type or operating in different modes, e.g. with a CMOS sensor for moving images in combination with a charge-coupled device [CCD] for still images
• CPC Class Codes: H04N 23/63 : by using electronic viewfinders
• CPC Class Codes: H04N 23/67 : Focus control based on electronic image sensor signals
• CPC Class Codes: H04N 23/69 : Control of means for changing angle of the field of view, e.g. optical zoom objectives or electronic zooming
• CPC Class Codes: H04N 7/183 : for receiving images from a single remote source

Abstract

Various embodiments of the invention may be used to verify that a person being authorized by biometric techniques to use a device is a living person and not some form of recording intended to spoof the system. Some embodiments may try to cause a change in a measured biometric feature, and compare images taken before and after the change to verify the change occurred. In some embodiments, multiple stages of verification may be used, either to increase the difficulty of spoofing the security system, or to provide different levels of security for different levels of access to the device'"'"'s functionality.

Claims

1. At least one non-transitory machine-readable medium comprising instructions which, when executed by one or more processors of a computing device, cause the computing device to:

provide a first functionality of the computing device;

subsequent to provision of the first functionality, perform biometric authentication based on an input from a camera, to determine if a person attempting to access more functionality of the computing device has been approved to do so;

wherein the biometric authentication is to analyze the input from the camera to recognize at least part of a face of the person;

responsive to authentication success of the biometric authentication, provide access to a second functionality of the computing device;

responsive to authentication failure of the biometric authentication, perform a second authentication based on a PIN or other password; and

responsive to authentication success of the second authentication, provide access to a third functionality of the computing device.

2. The at least one non-transitory machine-readable medium of claim 1, wherein the second functionality and the third functionality comprise the same functionality.

3. The at least one non-transitory machine-readable medium of claim 1, wherein at least one of the first functionality, the second functionality and the third functionality is to enable the person to gain access to at least one of a network, a building and a room.

4. The at least one non-transitory machine-readable medium of claim 1, further comprising instructions that, when executed by the one or more processors, cause the computing device to receive the PIN via input on a keypad of the computing device.

5. The at least one non-transitory machine-readable medium of claim 1, wherein the performance of the biometric authentication is to enable the person to regain access to the more functionality after the access to the more functionality has been lost.

6. The at least one non-transitory machine-readable medium of claim 5, wherein the access to the more functionality is lost responsive to a period of non-use.

7. The at least one non-transitory machine-readable medium of claim 1, wherein the input from the camera comprises an image of an eye of the person.

8. The at least one non-transitory machine-readable medium of claim 1, further comprising instructions that, when executed by the one or more processors, cause the computing device to perform a liveness verification to prompt the person to blink and use the camera to take a picture of the at least part of the face of the person.

9. The at least one non-transitory machine-readable medium of claim 8, further comprising instructions that, when executed by the one or more processors, cause the computing device to prompt the person via text directions on the touchscreen.

10. The at least one non-transitory machine-readable medium of claim 1, wherein the second functionality is to enable the person to conduct a financial transaction via the computing device.

11. An apparatus comprising:

one or more processors;

a touchscreen coupled to the one or more processors;

a camera coupled to the one or more processors; and

one or more non-transitory machine-readable media comprising instructions which, when executed by the one or more processors, cause the one or more processors to;

provide a first functionality of the apparatus;

subsequent to provision of the first functionality, perform biometric authentication based on an input from the camera, to determine if a person attempting to access more functionality of the apparatus has been approved to do so, wherein the biometric authentication is to analyze the input from the camera to recognize at least part of a face of the person;

responsive to authentication success of the biometric authentication, provide access to a second functionality of the apparatus;

responsive to authentication failure of the biometric authentication, perform a second authentication based on a PIN or other password; and

responsive to authentication success of the second authentication, provide access to a third functionality of the apparatus.

12. The apparatus of claim 11, wherein the apparatus further comprises a radio for wireless communications.

13. The apparatus of claim 11, wherein the apparatus further comprises a sensor to sense movement.

14. The apparatus of claim 11, wherein the apparatus comprises a handheld user device.

15. The apparatus of claim 11, wherein the apparatus comprises a phone.

16. A wireless device comprising:

a processor;

a touch-sensitive display screen adapted on a first side of the wireless device;

a camera having a lens adapted on the first side of the wireless device;

at least one non-transitory computer-readable storage medium comprising instructions that when executed enable the wireless device to;

provide a first functionality of the wireless device;

subsequent to provision of the first functionality, perform biometric authentication based on an input from the camera, to determine if a person attempting to access more functionality of the wireless device has been approved to do so, wherein the biometric authentication is to analyze the input from the camera to recognize at least part of a face of the person;

responsive to authentication success of the biometric authentication, provide access to a second functionality of the wireless device;

responsive to authentication failure of the biometric authentication, perform a second authentication based on a PIN or other password; and

responsive to authentication success of the second authentication, provide access to a third functionality of the wireless device.

17. The wireless device of claim 16, wherein the wireless device comprises a phone, and the at least one non-transitory computer-readable medium comprises a flash memory.

18. The wireless device of claim 16, wherein the at least one non-transitory computer readable medium further comprises instructions that when executed enable the wireless device to perform liveness verification, based on a second input from the camera, to determine whether the second input is from a living person corresponding to the person.

19. The wireless device of claim 18, wherein the at least one non-transitory computer readable medium further comprises instructions that when executed enable the wireless device to grant access to at least the second functionality only if both the biometric authentication and the liveness verification are successful.

20. The wireless device of claim 18, wherein the liveness verification is to prompt the person to change expression.