Utilizing inputs for accessing devices

• US 10,534,899 B2
• Filed: 08/24/2017
• Issued: 01/14/2020
• Est. Priority Date: 08/24/2017
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil Patrick
• Primary Examiner(s): Holder, Bradley W
• Application Number:
  US15/685,571
• Publication Number:
  US 20190065714A1
• Time in Patent Office: 873 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Devices and methods of access control are provided. A device includes a processor, an input interface coupled to the processor, and a memory coupled to the processor. The device may be configured to receive a first input via a first input interface and determine whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data. Based on the determination, if the first input includes valid authentication data, allow access. If the first input includes invalid authentication data, disallow access. If the first input includes duress authentication data, allow access when a second input received via a second input interface includes valid second authentication data. Example inputs include iris scan input, retinal scan input, fingerprint scan input, handprint input, palm print input, facial recognition input, alphanumeric input, touchscreen gesture input, breathalyzer sample input, facial or hand gesture input, or voice input, among others.

Claims

1. An access control method comprising:

receiving a first input via a first input interface to determine whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data;

determining that the first input includes the valid first authentication data and, in response to that determination, determining whether the first input also includes the duress authentication data;

in response to determining that the first input includes the valid first authentication data and the duress authentication data, disabling the first input interface and receiving a second input via a second input interface;

determining that the second input includes valid second authentication data; and

in response to determining that the second input includes valid second authentication data, allowing access.

2. The method of claim 1,

wherein when the second input does not include valid second authentication data, re-receiving the second input via the second input interface.

3. The method of claim 1, wherein the first input includes an iris scan input, and wherein determining whether the first input also includes the duress authentication data includes:

determining whether the iris scan input is verified against a sequence of eye movements stored as the duress authentication data.

4. The method of claim 1, wherein the first input includes an iris scan input, and wherein determining whether the first input also includes the duress authentication data includes:

determining a pupil size from the iris scan input; and

determining whether the pupil size exceeds a pupil size threshold.

5. The method of claim 4, wherein the second input includes a breathalyzer sample input,

and wherein determining whether the second input includes valid second authentication data includes:

determining a blood-alcohol value from the breathalyzer sample input; and

determining whether the blood-alcohol value is below a blood-alcohol threshold;

and wherein allowing access when the second input includes valid second authentication data includes allowing access when the blood-alcohol value is below the blood-alcohol threshold.

6. The method of claim 1, wherein the first input includes an iris scan input, and wherein determining whether the first input also includes the duress authentication data includes:

displaying a test image having a brightness greater than a prior display image;

determining rate of change of a pupil size from the iris scan input after displaying the test image; and

determining whether the rate of change in the pupil size is greater than a pupil size rate of change threshold.

7. The method of claim 1, wherein the first input includes a fingerprint scan input, and wherein determining whether the first input also includes the duress authentication data includes:

determining whether the fingerprint scan input is verified against duress fingerprint data included in the duress authentication data.

8. The method of claim 1, wherein the first input includes a retinal scan input, and wherein determining whether the first input also includes the duress authentication data includes:

determining whether the retinal scan input is verified against retinal scan data of a duress eye of a user included in the duress authentication data.

9. The method of claim 1, wherein the first input includes a biometric input including at least one of an iris scan input, a retinal scan input, a fingerprint scan input, handprint input, palm print input, or facial recognition input.

10. The method of claim 1, wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, a breathalyzer sample input, pointing device input, facial or hand gesture input, pen/stylus input, or voice input.

11. The method of claim 1, further comprising:

receiving a third input via the first input interface to determine whether the third input includes valid third authentication data, invalid authentication data, or third duress authentication data;

determining that the third input includes the valid third authentication data and, in response to that determination, determining whether the third input also includes the third duress authentication data; and

in response to determining that the third input does not include the third duress authentication data, allowing access.

12. An electronic device comprising:

a processor;

an input interface including a first input interface and a second input interface coupled to the processor to receive input; and

a memory coupled to the processor and storing processor-readable instructions that, when executed, cause the processor to;

receive a first input via the first input interface to determine whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data;

determine that the first input includes the valid first authentication data and, in response to that determination, determine whether the first input also includes the duress authentication data;

in response to determining that the first input includes the valid first authentication data and the duress authentication data, disable the first input interface and receive a second input via the second input interface;

determine that the second input includes valid second authentication data; and

in response to determining that the second input includes valid second authentication data, allow access.

13. The electronic device of claim 12,

wherein when the second input does not include valid second authentication data, the processor-readable instructions, when executed, cause the processor to re-receive the second input via the second input interface.

14. The electronic device of claim 12, wherein the first input includes an iris scan input, and wherein processor-readable instructions that, when executed, cause the processor to determine whether the first input also includes the duress authentication data includes:

determining whether the iris scan input is verified against a sequence of eye movements included in the duress authentication data.

15. The electronic device of claim 12, wherein the first input includes an iris scan input, and wherein processor-readable instructions that, when executed, cause the processor to determine whether the first input also includes the duress authentication data includes:

determining a pupil size from the iris scan input; and

determining whether the pupil size exceeds a pupil size threshold.

16. The electronic device of claim 15, wherein the second input includes a breathalyzer sample input, and wherein processor-readable instructions that, when executed, cause the processor to determine whether the second input includes valid second authentication data includes:

determining a blood-alcohol value from the breathalyzer sample input; and

determining whether the blood-alcohol value is below a blood-alcohol threshold;

and wherein processor-readable instructions that, when executed, cause the processor to allow access to the electronic device when the second input includes valid second authentication data includes;

allowing access to the electronic device when the blood-alcohol value is below the blood-alcohol threshold.

17. The electronic device of claim 12, wherein the first input includes a biometric input including at least one of an iris scan input, a retinal scan input, a fingerprint scan input, handprint input, palm print input, or facial recognition input.

18. The electronic device of claim 12, wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, a breathalyzer sample input, pointing device input, facial or hand gesture input, pen/stylus input, or voice input.

19. The electronic device of claim 12, wherein the processor-readable instructions, when executed, further cause the processor to:

receive a third input via the first input interface to determine whether the third input includes valid third authentication data, invalid authentication data, or third duress authentication data;

determine that the third input includes the valid third authentication data and, in response to that determination, determine whether the third input also includes the third duress authentication data; and

in response to determining that the third input does not include the third duress authentication data, allow access.

20. A non-transitory computer-readable storage medium comprising processor-executable instructions which, when executed, configure a processor to:

receive a first input via a first input interface to determine whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data;

determine that the first input includes the valid first authentication data and, in response to that determination, determine whether the first input also includes the duress authentication data;

in response to determining that the first input includes the valid first authentication data and the duress authentication data, disable the first input interface and receive a second input via a second input interface;

determine that the second input includes valid second authentication data; and

in response to determining that the second input includes valid second authentication data, allow access.