Man-machine interface for controlling access to electronic devices

• US 9,342,674 B2
• Filed: 03/05/2015
• Issued: 05/17/2016
• Est. Priority Date: 05/30/2003
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Abdallah, David S., Johnson, Barry W.
• Primary Examiner(s): Mehta, Bhavesh M.
• Assistant Examiner(s): Dunphy, David F
• Application Number:
  US14/640,020
• Publication Number:
  US 20150178548A1
• Time in Patent Office: 439 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 16/51 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/1076 Revocation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06V 40/13 Sensors therefor
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861

Abstract

This application relates to devices, methods and computer readable media that allow users using a first device to be easily authenticated. For example, while the first device is proximate to a second device, the first device requests user authentication using the one or more biometric sensors. After requesting the user authentication, the first device detects biometric information associated with the user with the one or more biometric sensors. In response to detecting the biometric information associated with the user, in accordance with a determination that the detected biometric information associated with the user meets authentication criteria, the first device provides credentials associated with the user to the second device. In accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, the first device forgoes providing the credentials associated with the user to the second device.

Claims

1. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by a first electronic device with a display and one or more biometric sensors, cause the first device to:

while the first device is proximate to a second device, request user authentication using the one or more biometric sensors;

after requesting the user authentication, detect biometric information associated with the user with the one or more biometric sensors;

in response to detecting the biometric information associated with the user;

in accordance with a determination that the detected biometric information associated with the user meets authentication criteria, provide credentials associated with the user to the second device; and

in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgo providing the credentials associated with the user to the second device.

2. The medium of claim 1, wherein requesting the user authentication comprises displaying an authentication user interface on the display in response to detecting that the first device is within range of the second device.

3. The medium of claim 1, wherein the credentials associated with the user are encrypted prior to being transmitted to the second device.

4. The medium of claim 1, wherein the credentials associated with the user are distinct from the biometric information of the user.

5. The medium of claim 1, wherein the second device is in communication with a remote server that is physically remote from the first device and the second device, and the second device communicates with the remote server to verify the credentials associated with the user in order to complete an authentication transaction associated with the credentials transmitted to the second device.

6. The medium of claim 5, wherein the authentication transaction is not completed until the credentials associated with the user are verified by the remote server.

7. The medium of claim 1, wherein the instructions, when executed, further cause the first device to:

after providing the credentials associated with the user to the second device, in accordance with the determination that the detected biometric information associated with the user meets the authentication criteria;

receive a reply from the second device;

in response to receiving the reply;

in accordance with a determination that the reply indicates that the credentials associated with the user are verified, complete an authentication transaction, and

in accordance with a determination that the reply indicates that the credentials associated with the user are not verified, halt the authentication transaction.

8. The medium of claim 1, wherein the one or more biometric sensors comprise a fingerprint sensor, and the biometric information associated with the user comprises a fingerprint of the user.

9. The medium of claim 8, wherein determining whether the biometric information associated with the user meets authentication criteria comprises:

comparing the fingerprint of the user to a database of fingerprints associated with an authentication transaction requested by the user; and

determining that the biometric information associated with the user meets the authentication criteria if a match is found in the database, and

determining that the biometric information associated with the user does not meet the authentication criteria, if a match is not found in the database.

10. The medium of claim 1, wherein the first device communicates with the second device through a wireless communication medium.

11. A method, comprising:

at a first electronic device with a display and one or more biometric sensors;

while the first electronic device is proximate to a second electronic device, requesting user authentication using the one or more biometric sensors;

after requesting the user authentication, detecting biometric information associated with the user with the one or more biometric sensors;

in response to detecting the biometric information associated with the user;

in accordance with a determination that the detected biometric information associated with the user meets authentication criteria, providing credentials associated with the user to the second device; and

in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgoing providing the credentials associated with the user to the second device.

12. The method of claim 11, wherein requesting the user authentication comprises displaying an authentication user interface on the display in response to detecting that the first device is within range of the second device.

13. The method of claim 11, wherein the credentials associated with the user are encrypted prior to being transmitted to the second device.

14. The method of claim 11, wherein the credentials associated with the user are distinct from the biometric information of the user.

15. The method of claim 11, wherein the second device is in communication with a remote server that is physically remote from the first device and the second device, and the second device communicates with the remote server to verify the credentials associated with the user in order to complete an authentication transaction associated with the credentials transmitted to the second device.

16. The method of claim 15, wherein the authentication transaction is not completed until the credentials associated with the user are verified by the remote server.

17. The method of claim 11, further comprising:

after providing the credentials associated with the user to the second device, in accordance with the determination that the detected biometric information associated with the user meets the authentication criteria;

receiving a reply from the second device;

in response to receiving the reply;

in accordance with a determination that the reply indicates that the credentials associated with the user are verified, completing an authentication transaction, and

in accordance with a determination that the reply indicates that the credentials associated with the user are not verified, halting the authentication transaction.

18. The method of claim 11, wherein the one or more biometric sensors comprise a fingerprint sensor, and the biometric information associated with the user comprises a fingerprint of the user.

19. The method of claim 18, wherein determining whether the biometric information associated with the user meets authentication criteria comprises:

comparing the fingerprint of the user to a database of fingerprints associated with an authentication transaction requested by the user; and

determining that the biometric information associated with the user meets the authentication criteria if a match is found in the database, and

determining that the biometric information associated with the user does not meet the authentication criteria, if a match is not found in the database.

20. The method of claim 11, wherein the first device communicates with the second device through a wireless communication medium.

21. A first electronic device, comprising:

a display;

one or more biometric sensors;

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions, which when executed by the one or more processors, cause the first device to;

while the first device is proximate to a second device, request user authentication using the one or more biometric sensors;

after requesting the user authentication, detect biometric information associated with the user with the one or more biometric sensors;

in response to detecting the biometric information associated with the user;

in accordance with a determination that the detected biometric information associated with the user meets authentication criteria, provide credentials associated with the user to the second device; and

in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgo providing the credentials associated with the user to the second device.

22. The device of claim 21, wherein requesting the user authentication comprises displaying an authentication user interface on the display in response to detecting that the first device is within range of the second device.

23. The device of claim 21, wherein the credentials associated with the user are encrypted prior to being transmitted to the second device.

24. The device of claim 21, wherein the credentials associated with the user are distinct from the biometric information of the user.

25. The device of claim 21, wherein the second device is in communication with a remote server that is physically remote from the first device and the second device, and the second device communicates with the remote server to verify the credentials associated with the user in order to complete an authentication transaction associated with the credentials transmitted to the second device.

26. The device of claim 25, wherein the authentication transaction is not completed until the credentials associated with the user are verified by the remote server.

27. The device of claim 21, wherein the instructions, when executed by the one or more processors, further cause the first device to:

after providing the credentials associated with the user to the second device, in accordance with the determination that the detected biometric information associated with the user meets the authentication criteria;

receive a reply from the second device;

in response to receiving the reply;

in accordance with a determination that the reply indicates that the credentials associated with the user are verified, complete an authentication transaction, and

in accordance with a determination that the reply indicates that the credentials associated with the user are not verified, halt the authentication transaction.

28. The device of claim 21, wherein the one or more biometric sensors comprise a fingerprint sensor, and the biometric information associated with the user comprises a fingerprint of the user.

29. The device of claim 28, wherein determining whether the biometric information associated with the user meets authentication criteria comprises:

comparing the fingerprint of the user to a database of fingerprints associated with an authentication transaction requested by the user; and

determining that the biometric information associated with the user meets the authentication criteria if a match is found in the database, and

determining that the biometric information associated with the user does not meet the authentication criteria, if a match is not found in the database.

30. The device of claim 21, wherein the first device communicates with the second device through a wireless communication medium.