# US 9,519,771 B2 · Embedded authentication systems in an electronic device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,519,771 B2
- Document ID: US9519771B2
- Status: Granted
- Kind: B2
- Application number: 14/142,669
- Filed: 2013-12-27
- Published: 2014-04-24
- Granted: 2016-12-13
- Earliest claimed: 2007-09-24
- Assignees: Apple Inc.
- Applicants: Apple Inc.
- Inventors: Anthony Fadell; Andrew Hodge; Stephan Schell; Ruben Caballero; Jesse Lee Dorogusker; Stephen Zadesky; Emery Sanford
- Web page: https://patentgrep.com/patent/US9519771B2

## CPC

- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 3/0412: {Digitisers structurally integrated in a display}
- G06F 3/0416: {Control or interface arrangements specially adapted for digitisers}
- G06F 3/04817: using icons (graphical or visual programming using iconic symbols G06F8/34)
- G06F 3/0488: using a touch-screen or digitiser, e.g. input of commands through traced gestures
- G06F 3/04883: for inputting data by handwriting, e.g. gesture or text
- G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour}
- G06F 21/36: by graphic or iconic representation
- G06V 40/1306: {non-optical, e.g. ultrasonic or capacitive sensing}
- G06V 40/1312: {direct reading, e.g. contactless acquisition}
- G06V 40/1365: {Matching; Classification}
- G06V 40/165: {using facial parts and geometric relationships}
- G06V 40/166: {using acquisition arrangements}
- G06V 40/67: {by interactive indications to the user}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04W 12/065: Continuous authentication
- H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications}
- G09G 2358/00: Arrangements for display data security
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/104: {Grouping of entities}
- H04W 88/02: Terminal devices
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G09G: ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION (arrangements for transferring data between digital computers and displays G06F3/14; static indicating arrangements comprising an association of a number of separate sources or light control cells G09F9/00; static indicating arrangements comprising integral associations of a number of light sources H01J, H01K, H10H, H05B33/12; scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission, details thereof H04N1/00)

## Abstract

This invention is directed to an electronic device with an embedded authentication system for restricting access to device resources. The authentication system may include one or more sensors operative to detect biometric information of a user. The sensors may be positioned in the device such that the sensors may detect appropriate biometric information as the user operates the device, without requiring the user to perform a step for providing the biometric information (e.g., embedding a fingerprint sensor in an input mechanism instead of providing a fingerprint sensor in a separate part of the device housing). In some embodiments, the authentication system may be operative to detect a visual or temporal pattern of inputs to authenticate a user. In response to authenticating, a user may access restricted files, applications (e.g., applications purchased by the user), or settings (e.g., application settings such as contacts or saved game profile).

## Claims

### Claim 1

An electronic device, comprising:
a display;
a fingerprint sensor;
one or more processors;
memory; and
one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for:
displaying an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detecting a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system:
unlocking the device; and
providing access to an application on the device without providing access to respective content associated with the application,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system:
forgoing unlocking the device;
while the device is unlocked:
detecting a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user using a second authentication system, providing access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continuing to provide access to the application without providing access to the respective content.

### Claim 2 (depends on 1)

The device of claim 1, wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.

### Claim 3 (depends on 1)

The device of claim 1, wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.

### Claim 4 (depends on 1)

The device of claim 1, wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.

### Claim 5 (depends on 1)

The device of claim 1, wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.

### Claim 6 (depends on 5)

The device of claim 5, wherein the application user interface includes an obscured version of the respective content.

### Claim 7 (depends on 1)

The device of claim 1, wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.

### Claim 8 (depends on 1)

The device of claim 1, wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.

### Claim 9 (depends on 1)

The device of claim 1, wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.

### Claim 10 (depends on 9)

The device of claim 9, wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.

### Claim 11 (depends on 1)

The device of claim 1, wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.

### Claim 12

A method, comprising:
at an electronic device with a fingerprint sensor and a display:
displaying an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detecting a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system,
unlocking the device; and
providing access to an application on the device without providing access to respective content associated with the application,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system, forgoing unlocking the device;
while the device is unlocked:
detecting a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user by a second authentication system, providing access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continuing to provide access to the application without providing access to the respective content.

### Claim 13 (depends on 12)

The method of claim 12, wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.

### Claim 14 (depends on 12)

The method of claim 12, wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.

### Claim 15 (depends on 12)

The method of claim 12, wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.

### Claim 16 (depends on 12)

The method of claim 12, wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.

### Claim 17 (depends on 16)

The method of claim 16, wherein the application user interface includes an obscured version of the respective content.

### Claim 18 (depends on 12)

The method of claim 12, wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.

### Claim 19 (depends on 12)

The method of claim 12, wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.

### Claim 20 (depends on 12)

The method of claim 12, wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.

### Claim 21 (depends on 20)

The method of claim 20, wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.

### Claim 22 (depends on 12)

The method of claim 12, wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.

### Claim 23

A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display and a fingerprint sensor, cause the device to:
display an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detect a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system,
unlock the device; and
provide access to an application on the device without providing access to respective content,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system, forgo unlocking the device;
while the device is unlocked:
detect a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user by a second authentication system, provide access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continue to provide access to the application without providing access to the respective content.

### Claim 24 (depends on 23)

The medium of claim 23, wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.

### Claim 25 (depends on 23)

The medium of claim 23, wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.

### Claim 26 (depends on 23)

The medium of claim 23, wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.

### Claim 27 (depends on 23)

The medium of claim 23, wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.

### Claim 28 (depends on 27)

The medium of claim 27, wherein the application user interface includes an obscured version of the respective content.

### Claim 29 (depends on 23)

The medium of claim 23, wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.

### Claim 30 (depends on 23)

The medium of claim 23, wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.

### Claim 31 (depends on 23)

The medium of claim 23, wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.

### Claim 32 (depends on 31)

The medium of claim 31, wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.

### Claim 33 (depends on 23)

The medium of claim 23, wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.