Continual authorization for secured functions

• US 9,959,539 B2
• Filed: 04/05/2017
• Issued: 05/01/2018
• Est. Priority Date: 06/29/2012
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Han, Byron B., Patience, Simon
• Primary Examiner(s): Li, Meng
• Application Number:
  US15/480,178
• Publication Number:
  US 20170206528A1
• Time in Patent Office: 391 Days
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A computing device may determine to execute a secured function. The computing may obtain a biometric of the user of the computing device utilizing one or more biometric sensors associated with the computing device, determine that the biometric matches the biometric of a user authorized to utilize the secured function, and execute the secured function. Whenever during execution of the secured function the computing device determines that the biometric sensor no longer detects the biometric of the user, the computing device may cease execution of the secured function.

Claims

1. A method of submitting a purchase request to an online commerce website using a computing device, the method comprising:

comparing a cost of the purchase request to a first threshold amount and a second threshold amount, the second threshold amount being greater than the first threshold amount;

selecting one of multiple types of authentication credentials based on the comparison of the cost of the purchase request;

receiving a first authentication credential at the computing device;

determining if the first authentication credential matches a reference authentication credential that is associated with the cost of the purchase request;

if the first authentication credential matches the reference authentication credential, determining if a first user is authorized to submit the purchase request;

transmitting the purchase request from the computing device to the online commerce website when the first user is authorized to submit the purchase request; and

providing a grace period of a given amount of time to receive, by the computing device, at least one additional purchase request having a cost that is less than the second threshold amount;

wherein

at least the operation of comparing the cost of the purchase request to the first threshold amount and the second threshold amount occurs prior to the operation of transmitting the purchase request.

2. The method of claim 1, wherein the multiple types of authentication credentials comprises a first type of authentication credential and a different second type of authentication credential, wherein the first type of authentication credential is associated with the first threshold amount and the second type of authentication credential is associated with the second threshold amount.

3. The method of claim 2, wherein the first type of authentication credential comprises a password that is associated with the first user.

4. The method of claim 3, wherein the grace period is provided after the password matches a reference password that is associated with the first user.

5. The method of claim 2, wherein the second type of authentication credential comprises a biometric that is associated with the first user.

6. The method of claim 5, wherein receiving the first authentication credential comprises continuously receiving the biometric until the purchase request is completed.

7. The method of claim 1, further comprising:

if the first user is not authorized to submit the purchase request, transmitting a notification to an electronic device;

receiving a second authentication credential that is associated with a second user on the electronic device;

determining if the second authentication credential matches a reference authentication credential associated with the second user; and

transmitting the purchase request to the online commerce website when the second authentication credential matches the reference authentication credential associated with the second user.

8. The method of claim 7, wherein the second authentication credential comprises a biometric that is associated with the second user.

9. The method of claim 8, wherein receiving the second authentication credential on the electronic device comprises continuously receiving on the electronic device the biometric that is associated with the second user until the purchase request is completed.

10. A method of operating a computing device, the method comprising:

receiving, at the computing device, a purchase request that is associated with a first user;

comparing a cost of the purchase request to first and second threshold amounts;

when the cost of the purchase request is less than the first threshold amount, transmitting the purchase request to an online commerce website;

when the cost of the purchase request is between the first and second threshold amounts, selecting a first reference authentication credential that is associated with the first threshold amount;

when the cost of the purchase request is greater than the second threshold amount, selecting a different second reference authentication credential that is associated with the second threshold amount;

receiving an authentication credential at the computing device;

determining if the received authentication credential matches the selected reference authentication credential;

determining if the first user is authorized to submit the purchase request when the received authentication credential matches the selected reference authentication credential;

transmitting the purchase request to the online commerce website when the first user is authorized to submit the purchase request; and

providing a grace period of a given amount of time to receive, by the computing device, at least one additional purchase request having a cost that is less than the threshold amount associated with the selected authentication credential.

11. The method of claim 10, wherein the first reference authentication credential comprises a password that is associated with the first user.

12. The method of claim 10, wherein the different second reference authentication credential comprises a biometric that is associated with the first user.

13. The method of claim 10, wherein the different second reference authentication credential is associated with a second user.

14. The method of claim 13, further comprising:

prior to receiving the authentication credential, transmitting a notification to an electronic device if the first user is not authorized to submit the purchase request;

receiving the authentication credential on the electronic device; and

transmitting the purchase request to the online commerce website when the received authentication credential matches the second reference authentication credential.

15. The method of claim 14, wherein the second reference authentication credential comprises a biometric that is associated with the second user.

16. A computing device, comprising:

a processing unit;

a biometric sensor operably connected to the processing unit; and

a non-transitory storage medium storing instructions executable by the processing unit to;

compare a cost of a purchase request to a first threshold amount and a second threshold amount, the second threshold amount being greater than the first threshold amount;

select one of multiple types of authentication credentials based on the comparison of the cost of the purchase request;

determine if a received authentication credential matches a reference authentication credential that is associated with the cost of the purchase request;

transmit the purchase request to an online commerce website when the received authentication credential matches the reference authentication credential; and

provide a grace period of a given amount of time to receive at least one additional purchase request having a cost that is less than the second threshold amount;

wherein

at least the operation of comparing the cost of the purchase request to the first threshold amount and the second threshold amount occurs prior to the operation of transmitting the purchase request.

17. The computing device of claim 16, wherein the non-transitory storage medium stores instructions executable by the processing unit to:

prior to transmitting the purchase request to the online commerce website, determine if a first user submitting the purchase request is authorized to submit the purchase request when the received authentication credential matches the reference authentication credential; and

transmit the purchase request to the online commerce website when the first user is authorized to submit the purchase request.

18. The computing device of claim 17, wherein the non-transitory storage medium stores instructions executable by the processing unit to:

if the first user is not authorized to submit the purchase request, transmit a notification to an electronic device; and

transmit the purchase request to the online commerce website when a second authentication credential associated with a second user matches a reference authentication credential associated with the second user.