Controlled access to functionality of a wireless device

• US 9,778,842 B2
• Filed: 01/26/2015
• Issued: 10/03/2017
• Est. Priority Date: 06/16/2009
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Ferren, Bran
• Primary Examiner(s): Abedin, Shanto M
• Application Number:
  US14/605,632
• Publication Number:
  US 20150150121A1
• Time in Patent Office: 981 Days
• Field of Search: 726 2- 7, 726 14- 19, 455410, 455411, 713186, 713168
• CPC Class Codes: G02B 13/0065 having a beam-folding prism or mirror
• CPC Class Codes: G02B 13/009 having zoom function
• CPC Class Codes: G03B 3/00 Focusing arrangements of general interest for cameras, projectors or printers
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 3/02 Input arrangements using manually operated switches, e.g. using keyboards or dials
• CPC Class Codes: G06F 3/0236 using selection techniques to select from displayed items
• CPC Class Codes: G06F 3/0237 using prediction or retrieval techniques
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0412 Digitisers structurally integrated in a display
• CPC Class Codes: G06F 3/0414 using force sensing means to determine a position
• CPC Class Codes: G06F 3/04186 Touch location disambiguation
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: G06F 9/451 Execution arrangements for user interfaces
• CPC Class Codes: G06K 2207/1011 Aiming
• CPC Class Codes: G06K 7/10811 Focalisation
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/4012 : Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06V 40/16 : Human faces, e.g. facial parts, sketches or expressions
• CPC Class Codes: G06V 40/165 : using facial parts and geometric relationships
• CPC Class Codes: G06V 40/19 : Sensors therefor
• CPC Class Codes: G06V 40/20 : Movements or behaviour, e.g. gesture recognition recognition of facial expressions G06V40/16
• CPC Class Codes: G06V 40/45 : Detection of the body part being alive
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 1/72448 : with means for adapting the functionality of the device according to specific conditions
• CPC Class Codes: H04M 2250/52 : including functional features of a camera
• CPC Class Codes: H04N 13/239 : using two 2D image sensors having a relative position equal to or related to the interocular distance H04N13/243 takes precedence
• CPC Class Codes: H04N 13/243 : using three or more 2D image sensors
• CPC Class Codes: H04N 23/45 : for generating image signals from two or more image sensors being of different type or operating in different modes, e.g. with a CMOS sensor for moving images in combination with a charge-coupled device [CCD] for still images
• CPC Class Codes: H04N 23/63 : by using electronic viewfinders
• CPC Class Codes: H04N 23/67 : Focus control based on electronic image sensor signals
• CPC Class Codes: H04N 23/69 : Control of means for changing angle of the field of view, e.g. optical zoom objectives or electronic zooming
• CPC Class Codes: H04N 7/183 : for receiving images from a single remote source

Abstract

Various embodiments of the invention may be used to verify that a person being authorized by biometric techniques to use a device is a living person and not some form of recording intended to spoof the system. Some embodiments may try to cause a change in a measured biometric feature, and compare images taken before and after the change to verify the change occurred. In some embodiments, multiple stages of verification may be used, either to increase the difficulty of spoofing the security system, or to provide different levels of security for different levels of access to the device'"'"'s functionality.

Claims

1. At least one non-transitory machine-readable medium comprising instructions which, when executed by one or more processors of a computing device, cause the computing device to:

receive a first biometric input comprising a camera picture of at least a part of a face of a person;

use the first biometric input to determine if the person is authorized to use a first level of functionality in the computing device;

determine whether a second biometric input is from a living person corresponding to the person, where the instructions that cause the determination include instructions to cause the computing device to;

present a prompt, comprising an image of a particular physical change comprising a change in a facial expression of the person, on a touchscreen to prompt the particular physical change in the at least part of the face of the person, wherein the particular physical change is unpredictable to avoid anticipating the particular physical change;

receive the second biometric input comprising a second camera picture of the at least part of the face of the person subsequent to presentation of the prompt; and

confirm that the second camera picture reflects the particular physical change; and

enable the person to be authenticated based on one or more of the first and second biometric inputs.

2. The at least one non-transitory machine-readable medium of claim 1, further comprising instructions which, when executed by the one or more processors, cause the computing device, responsive to authentication of the person, to provide access to a second level of functionality of the computing device.

3. The at least one non-transitory machine-readable medium of claim 1, further comprising instructions which, when executed by the one or more processors, cause the computing device, responsive to authentication failure of the authentication of the person, to perform a second authentication based on a PIN or other password.

4. The at least one non-transitory machine-readable medium of claim 3, further comprising instructions which, when executed by the one or more processors, cause the computing device to receive the PIN via input on a keypad of the computing device.

5. The at least one non-transitory machine-readable medium of claim 3, further comprising instructions which, when executed by the one or more processors, cause the computing device, responsive to authentication success of the second authentication, to provide access to a particular functionality of the computing device.

6. The at least one non-transitory machine-readable medium of claim 5, wherein the particular functionality is to enable the person to gain access to at least one of a network, a building and a room.

7. The at least one non-transitory machine-readable medium of claim 1, wherein responsive to the authentication of the person, the computing device is to enable the person to regain access to a particular functionality of the computing device after the access to the particular functionality has been lost.

8. The at least one non-transitory machine-readable medium of claim 1, wherein responsive to the authentication of the person, the computing device is to enable the person to conduct a financial transaction via the computing device.

9. An apparatus comprising:

one or more processors;

a touchscreen coupled to the one or more processors;

a camera coupled to the one or more processors; and

one or more non-transitory machine-readable media comprising instructions which, when executed by the one or more processors, cause the one or more processors to;

receive a first biometric input from the camera comprising a first picture of at least a part of a face of a person;

use the first biometric input to determine if the person is authorized to use a first level of functionality in the apparatus;

determine whether a second biometric input is from a living person corresponding to the person, where the instructions that cause the determination include instructions to cause the one or more processors to;

present a prompt, comprising an image of a particular physical change comprising a change in a facial expression of the person, on the touchscreen to prompt the particular physical change in the at least part of the face of the person, wherein the particular physical change is unpredictable to avoid anticipating the particular physical change;

receive the second biometric input from the camera comprising a second picture of the at least part of the face of the person subsequent to presentation of the prompt; and

confirm that the second picture reflects the particular physical change; and

enable the person to be authenticated based on one or more of the first and second biometric inputs.

10. The apparatus of claim 9, wherein the apparatus further comprises a radio for wireless communications.

11. The apparatus of claim 9, wherein the apparatus further comprises a sensor to sense movement.

12. The apparatus of claim 9, wherein the apparatus comprises a handheld user device.

13. The apparatus of claim 9, wherein the apparatus comprises a phone.

14. A wireless device comprising:

a processor;

a touch-sensitive display screen adapted on a first side of the wireless device;

a camera having a lens adapted on the first side of the wireless device;

at least one computer-readable storage medium comprising instructions that when executed enable the wireless device to;

receive a first biometric input comprising a first camera picture of at least a part of a face of a person;

use the first biometric input to determine if the person is authorized to use a first level of functionality of the wireless device;

determine whether a second biometric input is from a living person corresponding to the person, where the instructions that cause the determination include instructions to cause the wireless device to;

present a prompt, comprising an image of a particular physical change comprising a change in a facial expression of the person, on the touch-sensitive display screen to prompt the particular physical change in the at least part of the face of the person, wherein the particular physical change is unpredictable to avoid anticipating the particular physical change;

receive the second biometric input comprising a second camera picture of the at least part of the face of the person subsequent to presentation of the prompt; and

confirm that the second camera picture reflects the particular physical change; and

enable the person to be authenticated based on one or more of the first and second biometric inputs.

15. The wireless device of claim 14, wherein the wireless device comprises a phone, and the at least one computer-readable storage medium comprises a flash memory.

16. The wireless device of claim 14, wherein the at least one computer-readable storage medium further comprises instructions that when executed enable the wireless device to perform liveness verification, based on the second biometric input, to determine whether the second picture is from a living person corresponding to the person.

17. The wireless device of claim 16, wherein the at least one computer-readable storage medium further comprises instructions that when executed enable the wireless device to grant access to a particular functionality of the wireless device only if both the authentication and the liveness verification are successful.

18. The wireless device of claim 16, wherein the liveness verification is to prompt the person to change a facial expression.