IMPLEMENTATION OF BIOMETRIC AUTHENTICATION

• US 20190370583A1
• Filed: 08/15/2019
• Published: 12/05/2019
• Est. Priority Date: 09/09/2017
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: VAN OS, Marcel, ANTON, Peter D., BEHZADI, Arian, DASCOLA, Jonathan R., DEVINE, Lynne, FOSS, Christopher Patrick, GRIFFIN, Bradley W., MARI, Pedro, MOHSENI, Daamun, PAUL, Grant, PRESTON, Daniel Trent
• Granted Patent: US 10,872,256 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 3/016 Input arrangements with force or tactile feedback as computer generated output to the user
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06V 10/17 using hand-held instruments
• CPC Class Codes: G06V 10/242 by image rotation, e.g. by 90 degrees
• CPC Class Codes: G06V 10/98 Detection or correction of errors, e.g. by rescanning the pattern or by human intervention; Evaluation of the quality of the acquired patterns
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints
• CPC Class Codes: G06V 40/16 Human faces, e.g. facial parts, sketches or expressions
• CPC Class Codes: G06V 40/161 Detection; Localisation; Normalisation
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G06V 40/50 Maintenance of biometric data or enrolment thereof
• CPC Class Codes: G06V 40/67 by interactive indications to the user
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04N 23/611 where the recognised objects include parts of the human body
• CPC Class Codes: H04N 23/62 Control of parameters via user interfaces
• CPC Class Codes: H04N 23/63 by using electronic viewfinders
• CPC Class Codes: H04N 23/64 Computer-aided capture of images, e.g. transfer from script file into camera, check of taken image quality, advice or proposal for image composition or decision on when to take image
• CPC Class Codes: H04W 12/06 Authentication

Abstract

An electronic device performs techniques related generally to implementing biometric authentication. In some examples, a device provides user interfaces for a biometric enrollment process tutorial. In some examples, a device provides user interfaces for aligning a biometric feature for enrollment. In some examples, a device provides user interfaces for enrolling a biometric feature. In some examples, a device provides user interfaces for providing hints during a biometric enrollment process. In some examples, a device provides user interfaces for application-based biometric authentication. In some examples, a device provides user interfaces for autofilling biometrically secured fields. In some examples, a device provides user interfaces for unlocking a device using biometric authentication. In some examples, a device provides user interfaces for retrying biometric authentication. In some examples, a device provides user interfaces for managing transfers using biometric authentication. In some examples, a device provides interstitial user interfaces during biometric authentication. In some examples, a device provides user interfaces for preventing retrying biometric authentication. In some examples, a device provides user interfaces for cached biometric authentication. In some examples, a device provides user interfaces for autofilling fillable fields based on visibility criteria. In some examples, a device provides user interfaces for automatic log-in using biometric authentication.

Claims

1. An electronic device, comprising:

one or more biometric sensors;

a display;

one or more processors; and

memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for

while the electronic device is in a locked state, detecting a condition that is associated with performing a biometric authentication check using a biometric sensor without an explicit input from a user requesting biometric authentication; and

in response to detecting the condition, performing a first biometric authentication check, including;

capturing first biometric data using the one or more biometric sensors;

after capturing the first biometric data;

in accordance with a determination that the first biometric data satisfies biometric authentication criteria, transitioning the device from the locked state to an unlocked state; and

in accordance with a determination that the first biometric data does not satisfy the biometric authentication criteria, maintaining the device in the locked state;

after performing the first biometric authentication check, detecting, via the device, a request to perform a respective operation without receiving further authentication information from the user; and

in response to detecting the request to perform the respective operation;

in accordance with a determination that the respective operation does not require authentication, performing the respective operation;

in accordance with a determination that the respective operation requires authentication and that the device is in the unlocked state, performing the respective operation; and

in accordance with a determination that the respective operation requires authentication and that the device is in the locked state as a result of the first biometric data failing to satisfy the biometric authentication criteria;

capturing second biometric data using the one or more biometric sensors without an explicit input from the user requesting a second biometric authentication check; and

after capturing the second biometric data, performing the second biometric authentication check, including;

 

in accordance with a determination that the second biometric data satisfies the biometric authentication criteria, performing the respective operation; and

 

in accordance with a determination that the second biometric data does not satisfy the biometric authentication criteria, forgoing performance of the respective operation.

2. The electronic device of claim 1, wherein detecting, via the device, the request to perform a respective operation without receiving further authentication information from the user includes detecting a request to display content that is unavailable for display when the electronic device is in the locked state.

3. The electronic device of claim 1, wherein the one or more biometric sensors include a contactless biometric sensor configured to capture biometric data associated with biometric features located within a predetermined range of distances from the contactless biometric sensor.

4. The electronic device of claim 1, wherein, the device is restricted from performing more than a predefined number of biometric authentication checks without successful authentication.

5. The electronic device of claim 4, wherein the device performs fewer than the predefined number of biometric authentication checks in response to detecting the condition, so as to reserve at least one biometric authentication check for use in response detecting the request to perform the respective operation.

6. The electronic device of claim 1, wherein detecting a condition that is associated with performing the biometric authentication using a biometric sensor without an explicit input from the user requesting biometric authentication includes:

while the display of the electronic device is disabled, detecting a display wake condition.

7. The electronic device of claim 1, the one or more programs including instructions for:

in response to detecting the request to perform the respective operation and in accordance with a determination that the respective operation requires authentication and that the device is in the locked state, displaying an alternative authentication interface that includes one or more user interface objects for providing non-biometric authentication.

8. The electronic device of claim 1, the one or more programs including instructions for:

in response to detecting the request to perform the respective operation and in accordance with a determination that the respective operation requires authentication and that the device is in the locked state, displaying an authentication indication for the biometric authentication without displaying an option to proceed with an alternative form of authentication.

9. The electronic device of claim 1, the one or more programs including instructions for:

wherein the second biometric authentication check is performed while displaying an alternative authentication interface that includes one or more user interface objects for providing non-biometric authentication; and

the biometric authentication criteria include a requirement that authentication using the alternative authentication interface has not yet started in order for the biometric authentication criteria to be met.

10. The electronic device of claim 1, wherein performing the at least a portion of second biometric authentication check includes performing at least a portion of the second biometric authentication check while displaying an alternative authentication interface that includes one or more user interface objects for providing non-biometric authentication.

11. The electronic device of claim 9, the one or more programs including instructions for:

while displaying the alternative authentication interface that includes one or more user interface objects for providing non-biometric authentication, determining that the biometric authentication criteria have been met; and

in response to determining that the biometric authentication criteria have been met, performing the respective operation.

12. The electronic device of claim 1, the one or more programs including instructions for:

in response to detecting the request to perform the respective operation while the device is in the locked state, in accordance with a determination that the second biometric data does not satisfy the biometric authentication criteria, maintaining the device in the locked state.

13. The electronic device of claim 1, wherein the request to perform a respective operation includes at least one of:

a selection of a notification;

a swipe gesture;

movement of the electronic device a predetermined manner; and

a selection of an affordance.

14. The electronic device of claim 1, the one or more programs including instructions for:

while the device is in a locked state, receiving a request to perform an operation that does not require authentication; and

in response to the request to perform the operation that does not require authentication, performing the operation without waiting for authentication.

15. The electronic device of claim 1, the one or more programs including instructions for:

while the electronic device is in a locked state, displaying, on a touch-sensitive display, one or more affordances for performing operations for which authentication is not required;

while displaying the one or more affordances for performing operations for which authentication is not required, detecting activation of a respective affordance of the one or more affordances for performing operations for which authentication is not required; and

in response to detecting activation of a respective affordance of the one or more affordances for performing operations for which authentication is not required;

in accordance with a determination that a face was looking at the display of the electronic device when the activation of the respective affordance was detected, performing an operation associated with the respective affordance; and

in accordance with a determination that a face was not looking at the display of the electronic device when the activation of the respective affordance was detected, forgoing performance of the operation associated with the respective affordance.

16. The electronic device of claim 1, the one or more programs including instructions for:

while performing the first biometric authentication check, receiving a second request to perform a second operation without receiving further authentication information from the user; and

in response to receiving the second request to perform the second operation;

in accordance with a determination that the second request to perform the second operation was received after determining that the first biometric data does not satisfy the biometric authentication criteria, displaying an alternative authentication interface; and

in accordance with a determination that the second request to perform the second operation was received prior to evaluating the first biometric data, displaying a biometric authentication indicator that includes an indication that biometric authentication is being attempted without displaying the alternative authentication interface.

17. The electronic device of claim 16, wherein the biometric authentication indicator that is displayed in response to receiving the second request to perform the second operation in accordance with a determination that the second request to perform the second operation was received prior to evaluating the first biometric data includes an indication of an application associated with a notification.

18. The electronic device of claim 1, the one or more programs including instructions for:

in response to detecting the request to perform the respective operation, in accordance with a determination that the second biometric data does not satisfy the biometric authentication criteria, displaying an alternative authentication user interface;

while displaying the alternative authentication user interface, detecting an alternative authentication attempt that corresponds to the alternative authentication user interface; and

in response to detecting the alternative authentication attempt that corresponds to the alternative authentication user interface;

in accordance with a determination that the authentication attempt is successful and that biometric data corresponding to the alternative authentication attempt meets first similarity criteria to stored biometric data that corresponds to an authorized user of the device, performing the respective operation and storing additional information based on the biometric data corresponding to the alternative authentication attempt as biometric data that can be used in future biometric authentication attempts to identify the authorized user of the device; and

in accordance with a determination that the authentication attempt is successful and that biometric data corresponding to the alternative authentication attempt does not meet the first similarity criteria to stored biometric data that corresponds to an authorized user of the device, performing the respective operation and without storing additional information based on the biometric data corresponding to the alternative authentication attempt as biometric data that can be used in future biometric authentication attempts to identify the authorized user of the device.

19. The electronic device of claim 18, the one or more programs including instructions for:

in response to detecting the alternative authentication attempt that corresponds to the alternative authentication user interface, in accordance with a determination that the authentication attempt is successful and that biometric data corresponding to the alternative authentication attempt meets similarity criteria to stored biometric data that corresponds to an authorized user of the device, outputting an output indicating that information used in future biometric authentication attempts to identify the authorized user of the device has been modified.

20. The electronic device of claim 18, the one or more programs including instructions for:

while the device is in an unlocked state, receiving a request to store additional information for use in biometric authentication; and

in response to the request to store additional information for use in biometric authentication;

capturing third biometric data;

in accordance with a determination that the third biometric data meets second similarity criteria to stored biometric data that corresponds to an authorized user of the device, storing additional information based on the third biometric data that can be used in future biometric authentication attempts to identify the authorized user of the device, wherein the second similarity criteria requires less similarity between the third biometric data and the stored biometric data than is required by the first similarity criteria; and

in accordance with a determination that the third biometric data does not meet the second similarity criteria to stored biometric data that corresponds to an authorized user of the device, forgoing storing additional information based on the third biometric data that can be used in future biometric authentication attempts to identify the authorized user of the device.

21. The electronic device of claim 1, the one or more programs including instructions for:

while in the unlocked state and prior to detecting the request to perform the respective operation, outputting a prompt, that corresponds to instructions to provide the request to perform a respective operation.

22. The electronic device of claim 21, wherein prompt criteria include a requirement that a gaze of a user is directed at the electronic device.

23. The electronic device of claim 22, wherein the prompt criteria include a requirement that the device detect facial characteristics indicative of the face looking at the electronic device for at least a predetermined amount of time.

24. A non-transitory computer-readable storage medium storing one or more programs configured to be executed by one or more processors of an electronic device with one or more biometric sensors and a display, the one or more programs including instructions for:

while the electronic device is in a locked state, detecting a condition that is associated with performing a biometric authentication check using a biometric sensor without an explicit input from a user requesting biometric authentication; and

in response to detecting the condition, performing a first biometric authentication check, including;

capturing first biometric data using the one or more biometric sensors;

after capturing the first biometric data;

in accordance with a determination that the first biometric data satisfies biometric authentication criteria, transitioning the device from the locked state to an unlocked state; and

in accordance with a determination that the first biometric data does not satisfy the biometric authentication criteria, maintaining the device in the locked state;

after performing the first biometric authentication check, detecting, via the device, a request to perform a respective operation without receiving further authentication information from the user; and

in response to detecting the request to perform the respective operation;

in accordance with a determination that the respective operation does not require authentication, performing the respective operation;

in accordance with a determination that the respective operation requires authentication and that the device is in the unlocked state, performing the respective operation; and

in accordance with a determination that the respective operation requires authentication and that the device is in the locked state as a result of the first biometric data failing to satisfy the biometric authentication criteria;

capturing second biometric data using the one or more biometric sensors without an explicit input from the user requesting a second biometric authentication check; and

after capturing the second biometric data, performing the second biometric authentication check, including;

in accordance with a determination that the second biometric data satisfies the biometric authentication criteria, performing the respective operation; and

in accordance with a determination that the second biometric data does not satisfy the biometric authentication criteria, forgoing performance of the respective operation.

25. A method, comprising:

at an electronic device with one or more biometric sensors and a display;

while the electronic device is in a locked state, detecting a condition that is associated with performing a biometric authentication check using a biometric sensor without an explicit input from a user requesting biometric authentication; and

in response to detecting the condition, performing a first biometric authentication check, including;

capturing first biometric data using the one or more biometric sensors;

after capturing the first biometric data;

in accordance with a determination that the first biometric data satisfies biometric authentication criteria, transitioning the device from the locked state to an unlocked state; and

in accordance with a determination that the first biometric data does not satisfy the biometric authentication criteria, maintaining the device in the locked state;

after performing the first biometric authentication check, detecting, via the device, a request to perform a respective operation without receiving further authentication information from the user; and

in response to detecting the request to perform the respective operation;

in accordance with a determination that the respective operation does not require authentication, performing the respective operation;

in accordance with a determination that the respective operation requires authentication and that the device is in the unlocked state, performing the respective operation; and

in accordance with a determination that the respective operation requires authentication and that the device is in the locked state as a result of the first biometric data failing to satisfy the biometric authentication criteria;

capturing second biometric data using the one or more biometric sensors without an explicit input from the user requesting a second biometric authentication check; and

after capturing the second biometric data, performing the second biometric authentication check, including;

 

in accordance with a determination that the second biometric data satisfies the biometric authentication criteria, performing the respective operation; and

 

in accordance with a determination that the second biometric data does not satisfy the biometric authentication criteria, forgoing performance of the respective operation.