EMBEDDED AUTHENTICATION SYSTEMS IN AN ELECTRONIC DEVICE

• US 20090083847A1
• Filed: 09/09/2008
• Published: 03/26/2009
• Est. Priority Date: 09/24/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Zadesky, Stephen, Caballero, Ruben, Sanford, Emery, Hodge, Andrew, Fadell, Anthony, Dorogusker, Jesse Lee, Schell, Stephan
• Granted Patent: US 8,782,775 B2
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0412 Digitisers structurally integrated in a display
• CPC Class Codes: G06F 3/0416 Control or interface arrangements specially adapted for digitisers
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06V 40/1306 non-optical, e.g. ultrasonic or capacitive sensing
• CPC Class Codes: G06V 40/1312 direct reading, e.g. contactless acquisition
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G06V 40/165 using facial parts and geometric relationships
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/67 by interactive indications to the user
• CPC Class Codes: G09G 2358/00 Arrangements for display data security
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

This invention is directed to an electronic device with an embedded authentication system for restricting access to device resources. The authentication system may include one or more sensors operative to detect biometric information of a user. The sensors may be positioned in the device such that the sensors may detect appropriate biometric information as the user operates the device, without requiring the user to perform a step for providing the biometric information (e.g., embedding a fingerprint sensor in an input mechanism instead of providing a fingerprint sensor in a separate part of the device housing). In some embodiments, the authentication system may be operative to detect a visual or temporal pattern of inputs to authenticate a user. In response to authenticating, a user may access restricted files, applications (e.g., applications purchased by the user), or settings (e.g., application settings such as contacts or saved game profile).

Claims

1. A method for authenticating a user of an electronic device, comprising:

displaying a plurality of selectable options;

receiving a user selection of a subset of the selectable options;

determining that the selected subset of selectable options share a common attribute; and

authenticating the user in response to determining.

2. The method of claim 1, further comprising:

comparing the common attribute with a selectable option attribute stored in memory; and

authenticating in response to determining that the common attribute matches the attribute stored in memory.

3. The method of claim 1, further comprising:

detecting that every selectable option having a selectable option attribute stored in memory was selected; and

authenticating in response to detecting.

4. The method of claim 1, wherein the attribute comprises at least one of:

size;

color;

contour;

fill pattern;

shape;

alignment with other options;

position relative to other options; and

source.

5. The method of claim 1, wherein receiving further comprises simultaneously receiving at least a portion of the subset of selectable options.

6. The method of claim 1, wherein receiving further comprises sequentially receiving at least a portion of the subset of selectable options.

7. The method of claim 1, further comprising providing access to a restricted resource in response to authenticating.

8. The method of claim 1, wherein the subset of selectable options comprises a number of selectable options in the range of 4 to 8.

9. A method for authenticating a user of an electronic device, comprising:

receiving a plurality of inputs from the user;

identifying the delays between consecutive inputs;

determining that the identified delays match delays stored in a library; and

authorizing the user in response to determining.

10. The method of claim 9, wherein receiving further comprises receiving the plurality of inputs using an input mechanism.

11. The method of claim 9, wherein receiving further comprises detecting movements of the electronic device.

12. The method of claim 9, wherein receiving further comprises detecting impacts to the electronic device using a sensor.

13. The method of claim 9, further comprising:

detecting the specific plurality of inputs received; and

determining that the detected specific plurality of inputs matches inputs stored in the library.

14. The method of claim 9, further comprising determining whether the identified delays are within an allowable range of delays stored in the library.

15. The method of claim 9, wherein at least one delay is zero.

16. An electronic device for authenticating a user based on a pattern of inputs, comprising:

a sensor operative to detect a plurality of inputs; and

a processor operative to;

identify a pattern of the detected plurality of inputs;

determine that the pattern matches a pattern stored in a library; and

authenticate the user in response to determining.

17. The electronic device of claim 16, wherein the processor is further operative to identify a visual patterns of inputs.

18. The electronic device of claim 16, wherein the sensor comprises at least one of:

an input mechanism;

an accelerometer; and

a gyroscope.

19. The electronic device of claim 16, further comprising:

a display operative to display screens; and

wherein the processor is further operative to direct the display to display a plurality of selectable options.

20. The electronic device of claim 19, wherein the sensor is further operative to detect selections of a subset of the displayed plurality of selectable options.

21. The electronic device of claim 20, wherein the processor is further operative to identify a common attribute associated with the selected subset of selectable options.

22. The electronic device of claim 21, wherein the attribute comprises at least one of:

size;

color;

contour;

fill pattern;

shape;

alignment with other options;

position relative to other options; and

source.

23. The electronic device of claim 16, wherein the processor is further operative to identify a temporal patterns of inputs.

24. The electronic device of claim 23, wherein the processor is further operative to detect the time delays between consecutive inputs of the detected plurality of inputs.

25. A computer readable medium for authenticating a user of an electronic device, comprising computer program logic recorded thereon for:

receiving a user selection of a subset of the selectable options;

identifying a pattern of the received subset of selectable options;

determining that the identified pattern matches a pattern stored in a library; and

authenticating the user in response to determining.