Methods and apparatus for authentication in an electronic device

• US 10,552,595 B2
• Filed: 11/06/2017
• Issued: 02/04/2020
• Est. Priority Date: 11/07/2016
• Status: Active Grant

• Current Assignee: Cirrus Logic Incorporated
• Original Assignee: Cirrus Logic Incorporated
• Inventors: Oswal, Nikesh, Roberts, Ryan, Page, Michael
• Primary Examiner(s): Pich, Ponnoreay
• Application Number:
  US15/804,714
• Publication Number:
  US 20180129796A1
• Time in Patent Office: 820 Days
• Field of Search: None
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/40 Spoof detection, e.g. liveness detection
• CPC Class Codes: G06V 40/53 Measures to keep reference information secret, e.g. cancellable biometrics
• CPC Class Codes: G10L 17/00 Speaker identification or verification techniques
• CPC Class Codes: G10L 17/24 the user being prompted to utter a password or a predefined phrase

Abstract

Embodiments of the invention provide methods and apparatus for monitoring the routing configuration within an electronic device such that a biometric authentication process can be carried out without interference from other components of the device, such as may occur when the device has become infected with malware for example. The invention may provide a codec or speaker recognition processor, coupled to receive biometric input data, comprising a security module that determines whether a routing configuration complies with one or more rules. The security module may be implemented to prevent genuine biometric data from being output from the speaker recognition processor, and/or to prevent spoof biometric data from being inserted into the authentication module.

Claims

1. A biometric authentication system, comprising:

one or more inputs, for receiving biometric input signals from a user;

a biometric authentication module having one or more biometric authentication module inputs, and being configured to carry out biometric authentication of signals received at the one or more biometric authentication module inputs and generate an authentication result;

a control interface, for receiving one or more control signals from an application processor;

a routing module, having a set of routing inputs and a set of routing outputs, at least one of the routing inputs being coupled to the one or more inputs and at least one of the routing outputs being coupled to the biometric authentication module, the routing module being configurable by the one or more control signals to route signals from one or more of the routing inputs to one or more of the routing outputs; and

a security module, operable to determine whether a routing module configuration complies with one or more rules and, responsive to a determination that the routing module configuration does not comply with one or more of the one or more rules, generate a signal indicating that the routing module configuration is insecure.

2. The biometric authentication system according to claim 1, wherein the security module is operable in a plurality of modes, and wherein each mode has a respective set of one or more rules for determining whether a routing module configuration is secure or not.

3. The biometric authentication system according to claim 2, wherein the plurality of modes includes one or more of a biometric authentication mode and a biometric enrolment mode.

4. The biometric authentication system according to claim 3, wherein the security module is operable in the biometric authentication mode or the biometric enrolment mode to determine whether the routing module configuration is such that signal paths terminating at the one or more biometric authentication module inputs originate from one of a plurality of predefined secure inputs and, responsive to a determination that one or more signal paths terminating at the one or more biometric authentication module inputs do not originate from a predefined secure input, determine that the routing module configuration does not comply with one of the one or more rules.

5. The biometric authentication system according to claim 3, wherein the security module is operable in the biometric authentication mode or the biometric enrolment mode to determine whether the routing module configuration is such that any signal path originating at the one or more inputs terminates at an output interface of the biometric authentication system and, responsive to a determination that one or more signal paths originating at the one or more inputs terminate at an output interface of the biometric authentication system, determine that the routing module configuration does not comply with one of the one or more rules.

6. The biometric authentication system according to claim 3, wherein the security module is operable in the biometric authentication mode or the biometric enrolment mode to determine whether the routing module configuration is such that any signal path originating at the one or more inputs terminates at a node other than an input of the biometric authentication module and, responsive to a determination that one or more signal paths originating at the one or more inputs terminates at a node other than an input of the biometric authentication module, determine that the routing module configuration does not comply with one of the one or more rules.

7. The biometric authentication system according to claim 2, wherein the plurality of modes includes a listen mode in which the biometric authentication module is configured to carry out biometric authentication of signals received at the one or more biometric authentication module inputs, responsive to receipt of a trigger indicating that the biometric input signals contain voice content.

8. The biometric authentication system according to claim 7, wherein the security module is operable in the listen mode to determine whether the routing module configuration complied with one or more rules during a time window in which the voice content was uttered.

9. The biometric authentication system according to claim 8, wherein the security module is operable in the listen mode to determine whether the routing module configuration during the time window was such that:

signal paths terminating at the one or more biometric authentication module inputs originated from a secure input and, responsive to a determination that one or more signal paths terminating at the one or more biometric authentication module inputs did not originate from a secure input, determine that the routing module configuration did not comply with one of the one or more rules;

any signal path originating at the one or more inputs terminated at an output interface of the biometric authentication system and, responsive to a determination that one or more signal paths originating at the one or more inputs terminated at an output interface of the biometric authentication system, determine that the routing module configuration did not comply with one of the one or more rules;

or

any signal path originating at the one or more inputs terminated at a node other than an input of the biometric authentication module and, responsive to a determination that one or more signal paths originating at the one or more inputs terminated at a node other than an input of the biometric authentication module, determine that the routing module configuration did not comply with one of the one or more rules.

10. The biometric authentication system according to claim 4, wherein the security module is operable to access a configuration file containing a list of secure inputs in the biometric authentication system.

11. The biometric authentication system according to claim 4, wherein the predefined plurality of secure inputs comprise a subset of the inputs, being those inputs coupled to a predefined set of inputs of the routing module.

12. The biometric authentication system according to claim 2, wherein the security module is configured to determine whether a routing module configuration complies with one or more rules upon receipt of a request to enter a particular mode.

13. The biometric authentication system according to claim 1, wherein one of the following applies:

the biometric authentication module is configured to abort the biometric authentication responsive to generation of the signal indicating that the routing module configuration is insecure;

the security module is configured to invalidate the authentication result responsive to generation of the signal indicating that the routing module configuration is insecure; and

the security module is configured to append to the authentication result an indication that the routing module configuration did not comply with one or more of the one or more rules, responsive to generation of the signal indicating that the routing module configuration is insecure.

14. The biometric authentication system according to claim 1, further comprising a data-authentication module operable to authenticate the authentication result.

15. An electronic device comprising a biometric authentication system as claimed in claim 1.

16. The electronic device as claimed in claim 15, further comprising an application processor in communication with the biometric authentication system.

17. The electronic device as claimed in claim 16, wherein the security module is operable in a plurality of modes, and wherein each mode has a respective set of one or more rules for determining whether a routing module configuration is secure or not, the plurality of modes including one or more of a biometric authentication mode and a biometric enrolment mode, wherein the security module is operable in the biometric authentication mode or the biometric enrolment mode to determine whether the routing module configuration is such that signal paths terminating at the one or more biometric authentication module inputs originate from one of a plurality of predefined secure inputs and, responsive to a determination that one or more signal paths terminating at the one or more biometric authentication module inputs do not originate from a predefined secure input, determine that the routing module configuration does not comply with one of the one or more rules, and wherein a secure input is an input which is not connected to the application processor.

18. The electronic device as claimed in claim 15, further comprising one or more input devices, coupled to the one or more inputs, for generating the biometric input signals.

19. The electronic device as claimed in claim 18, wherein the security module is operable in a plurality of modes, and wherein each mode has a respective set of one or more rules for determining whether a routing module configuration is secure or not, the plurality of modes including one or more of a biometric authentication mode and a biometric enrolment mode, wherein the security module is operable in the biometric authentication mode or the biometric enrolment mode to determine whether the routing module configuration is such that signal paths terminating at the one or more biometric authentication module inputs originate from one of a plurality of predefined secure inputs and, responsive to a determination that one or more signal paths terminating at the one or more biometric authentication module inputs do not originate from a predefined secure input, determine that the routing module configuration does not comply with one of the one or more rules, and wherein a secure input is an input the data on which originated only from the one or more input devices.

20. A biometric authentication system, comprising:

one or more inputs, for receiving biometric input signals from a user;

a biometric authentication module having one or more biometric authentication module inputs, and being configured to carry out biometric authentication of signals received at the one or more biometric authentication module inputs and generate an authentication result;

a plurality of configurable signal paths terminating at the one or more biometric authentication module inputs, at least one of the configurable signal paths originating at the one or more inputs; and

a security module, operable to determine whether the plurality of signal paths complies with one or more rules and, responsive to a determination that the plurality of signal paths does not comply with one or more of the one or more rules, generate a signal indicating that the signal path configuration is insecure.

21. The biometric authentication system according to claim 20, wherein one or more of the plurality of signal paths are configurable by being enabled or disabled, and wherein the security module is operable to determine whether the one or more signal paths are enabled or disabled.

22. The biometric authentication system according to claim 21, wherein the one or more configurable signal paths comprise a first signal path originating at an unsecure input, and wherein the security module is operable to determine whether the first signal path is enabled or disabled and, responsive to a determination that the first signal path was enabled, generate a signal indicating that the signal path configuration is insecure.

23. The biometric authentication system according to claim 22, wherein the first signal path is connected to an application processor.

24. An electronic device comprising a biometric authentication system as claimed in claim 20.

25. A biometric authentication system comprising:

a routing module, configurable in use to route received signals to at least one routing module output from a selected one or more of a plurality of routing module inputs;

a biometric authentication module coupled to receive signals from said at least one routing module output, and being configured to generate a biometric authentication result based on at least the signals received from said at least one routing module output; and

a security module, operable to determine whether the routing module is configured compliant with one or more rules and, if not compliant, modify the biometric authentication result.