Embedded authentication systems in an electronic device

0001The present invention relates to an electronic device provided with a built-in authentication system.

0002Electronic devices, especially portable electronic devices, are used to store personal information. For example, a user may use a mobile phone, PDA, smartphone, or other electronic device to store contacts, emails, calendar information, documents, and other information used by the user. This information does not necessarily have to be kept secret, but the user may wish to make at least a portion of the information unavailable to others. One way to prevent unauthorized persons from accessing and viewing your personal information is to provide your password or passcode electronically before enabling device features or accessing device resources. There is a method of requesting the user of the device. For example, an electronic device may require the user to enter a four-digit or four-letter PIN before displaying the device's home screen (eg, springboard) or menu. As another example, by connecting an accessory device to the device to detect the user's fingerprint or scan the user's retina, the user is authorized to fingerprint or retina before gaining access to the device. May have to be shown first.

0003Both of these methods can work, but password- or passcode-based access restrictions are effective unless someone else knows the password or passcode. Once the password or passcode is known, the restriction mechanism can be ineffective. You may also forget your password or passcode, preventing authorized users from accessing your device. In addition, requesting the user to provide a fingerprint or undergo a retinal scan can be time consuming and annoying to the user as it requires more steps for the user to access the device. This method is more secure than entering a password or passcode, but it is costly and time consuming in hardware (eg, the required scanner, detector, or reader). Thus, for example, an electronic device that implements biometric and other authentication mechanisms is provided so that the device authenticates the user quickly and seamlessly when the user turns on, unlocks, or boots the device. Is desirable.

0004Methods, electronic devices, and computer-readable media for authenticating users of electronic devices are provided. In some embodiments, the electronic device can seamlessly authenticate the user. The electronic device may receive input from the user, and the input is provided by the input mechanism of the electronic device. The electronic device may detect the identification information when the user provides the input from one or more sensors embedded in or near the input mechanism. The electronic device may authenticate the user by comparing the detected identification information with the identification information stored in the device's library. For example, the sensor may include a sensor for detecting a user's skin features or a user's subcutaneous features. The sensor can be a touch screen, a button (eg, a keyboard or mouse button), a device enclosure near the input mechanism (eg, a laptop enclosure near the keyboard), or at least one in any other suitable position. It may be incorporated in several places.

0005In some embodiments, the electronic device may determine that the user is aligned with the sensing element without instructing the user to align with the sensing element of the device. For example, the detection element may be arranged such that the detection area of the sensor includes the expected position of the user when operating the electronic device. The sensor may use a sensing element to detect one or more biological attributes of the user (eg, facial or eye features). For example, the sensor may include a camera or optical sensor adjacent to the display of the device. The user may then be authenticated by comparing the detected bioattributes with a library of bioattributes stored in or accessible to the electronic device.

0006In some embodiments, the electronic device may authenticate the user based on the common attributes of the options selected by the user. The electronic device may display several selectable options for user selection and may receive a subset (partial) user selection of options. The electronic device may then identify one or more attributes that are common to some or all of the selected options. Attributes can be, for example, size, color, contour, shading pattern, shape, array with other options, position relative to other options, source of options, or at least one of any other suitable attributes. May include. The electronic device may then authenticate the user based on the identified attributes. For example, if a user selects all shapes that share attributes associated with a particular user, the electronic device may authenticate that user.

0007In some embodiments, the electronic device may authenticate the user based on the pattern of input received by the device. The electronic device may include sensors that detect multiple inputs provided by the user. For example, the sensor may include an input mechanism that receives the input provided by the user. As another example, the sensor may include an accelerometer or gyroscope that detects the movement of the electronic device or contact with the electronic device. The electronic device may act to identify the detected input pattern and compare the identified pattern with a pattern stored in memory to authenticate the user. The pattern can be a temporal pattern (eg, a pattern for delays between consecutive inputs), a visual pattern (for example, some optional attributes selected by the user, or a pattern for user-provided inputs), or These combinations may be included. After authenticating the user, the electronic device may provide the user with access to restricted electronic device resources.

0008<figref num="1">The schematic which shows an example of the electronic device for use with the authentication system by one Embodiment of this invention.</figref><figref num="2">The schematic which shows an example of the display screen of an electronic device according to one Embodiment of this invention.</figref><figref num="3">The figure which shows an example of the display screen for instructing a user to authenticate according to one Embodiment of this invention.</figref><figref num="4">FIG. 6 is a schematic diagram showing an example of a display screen for instructing a user to authenticate before a user accesses a device resource according to an embodiment of the present invention.</figref><figref num="5A">FIG. 6 is a schematic diagram showing an example of a display screen associated with a different user provided in response to user authentication according to an embodiment of the present invention.</figref><figref num="5B">FIG. 6 is a schematic diagram showing an example of a display screen associated with a different user provided in response to user authentication according to an embodiment of the present invention.</figref><figref num="5C">FIG. 6 is a schematic diagram showing an example of a display screen associated with a different user provided in response to user authentication according to an embodiment of the present invention.</figref><figref num="6">FIG. 6 is a schematic diagram showing an example of a display of an electronic device for detecting a user's fingerprint according to an embodiment of the present invention.</figref><figref num="7">The schematic which shows another example of the electronic device for detecting a user's fingerprint according to one Embodiment of this invention.</figref><figref num="8A">The schematic which shows an example of the electronic device for detecting a user's handprint according to one Embodiment of this invention.</figref><figref num="8B">The schematic which shows an example of the electronic device for detecting a user's handprint according to one Embodiment of this invention.</figref><figref num="9">The schematic which shows an example of the electronic device for detecting a user's handprint according to one Embodiment of this invention.</figref><figref num="10">The schematic which shows an example of the device which has the sensor which detects the feature under the skin of a user according to one Embodiment of this invention.</figref><figref num="11">FIG. 6 is a schematic diagram showing an example of an electronic device having a sensor for detecting a feature of a user's face according to an embodiment of the present invention.</figref><figref num="12">FIG. 6 is a schematic diagram showing an example of an electronic device having a sensor for detecting a feature of the user's eye according to an embodiment of the present invention.</figref><figref num="13">The schematic which shows an example of the display for providing a visual pattern according to one Embodiment of this invention.</figref><figref num="14">The schematic which shows an example of the display for providing a visual pattern according to one Embodiment of this invention.</figref><figref num="15">A flowchart showing an example of a method for authenticating a user according to an embodiment of the present invention.</figref>

0009Electronic devices are provided that have an authentication system for restricting access to the resources of the electronic device. Access to any suitable electronic device resource, such as access to files or data stored on or available from the device, may be restricted. As another example, access to a particular application (eg, an application purchased by a particular user, or an application associated with an administrator task or administrator privilege) may be restricted. As yet another example, access to personal settings (eg, displayed options, background images, or icons used in applications) may be restricted until the user is authenticated.

0010Any suitable authentication system may be implemented. In some embodiments, the authentication system may include a system for detecting a user's biological characteristics or attributes. For example, the electronic device may be a fingerprint, a hand print, a palm print, a knuckle print, a vascular pattern, or any other suitable part of the user's skin or subcutaneous part. A system may be provided that detects and authenticates the user based on the skin or subcutaneous characteristics of the user. As another example, the electronic device may include a system that detects and authenticates the user based on the features of the user's eyes or face or the movement of the user's eyes (eyeballs). As yet another example, the electronic device may be equipped with a system that detects the characteristics of the user's ear canal, the user-related odor, the user's DNA, or any other suitable biological attribute or information associated with the user. Good.

0011In some embodiments, the authentication system may include a system that identifies the user based on a visual or temporal input pattern provided by the user. For example, an electronic device may display several selectable options or shapes that form a visual pattern. The user may select any suitable predetermined subset (partial) from the displayed options for authentication. For example, the user may select one or more options that have certain attributes in common (eg, size, color, shape, or contour). As another example, the user may select one or more options (eg, regardless of the attributes of the option selected) located in a given area of the display. The user may select options simultaneously, sequentially, or in combination thereof.

0012As another example, the user may provide a series of inputs at a particular pace or at a particular pattern. For example, the user may select an option with a specific delay (eg, a break between two selections). Alternatively, the user may provide inputs detected by a sensor in the device (eg, an accelerometer or gyroscope) according to a predetermined temporal pattern. The device detects the input in any suitable way to detect the input, such as detecting the input from the vibration caused by tapping the device or the area adjacent to the device or moving the device in a particular way. Good.

0013The electronic device may provide any suitable combination of authentication systems, such as, for example, a biometric authentication system and a pattern-based authentication system, some biometric authentication systems, or some pattern-based system. In some embodiments, different authentication systems may be associated with different resources so that the user may have some restricted resources (eg, private or personal information) before they are finally accessed. Can provide credentials to the system. The electronic device may use any suitable method to select which authentication system to combine. For example, a user may associate some authentication system with a particular resource, or an electronic device may automatically (eg, by default) assign a particular authentication system to a particular resource.

0014FIG. 1 is a schematic diagram showing an example of an electronic device for use with an authentication system according to an embodiment of the present invention. The electronic device 100 may include a processor 102, a storage 104, a memory 106, a communication circuit 108, an input / output circuit 110, an authentication system 112, and a power supply 114. In some embodiments, one or more of the components of electronic device 100 may be combined or omitted (eg, storage 104 and memory 106 are combined). In some embodiments, the electronic device 100 may include other components (eg, a display, a bus, or an input mechanism) that are not integrated or provided with the components shown in FIG. Alternatively, a plurality of the components shown in FIG. 1 may be provided. For simplicity, Figure 1 shows only one component for each component.

0015Processor 102 may include any processing circuit that controls the operation and execution of electronic device 100. For example, processor 100 may be used to run an operating system application, a firmware application, a media playback application, a media editing application, or any other application. In some embodiments, the processor may drive the display and process the input received from the user interface.

0016The storage 104 stores one or more storage media, such as, for example, hard drives, solid state drives, flash memory, permanent memory such as ROM, any other suitable type of storage element, or any combination thereof. May include. The storage 104 may include, for example, media data (eg, music and video files), application data (eg, for implementing functionality on device 100), firmware, user preference information data (eg, media playback settings), authentication. Information (eg, a library of data associated with authorized users), lifestyle information data (eg, food preferences), exercise information data (eg, information acquired by an exercise monitor), transaction information data (eg, credit card). Information such as information), wireless connection information data (eg, information that may allow the electronic device 100 to establish a wireless connection), subscription information data (eg, podcasts, television programs, or other information that the user subscribes to). It may store media-aware information), contact data (eg, phone numbers and email addresses), calendar information data, and any other suitable data or any combination thereof.

0017Memory 106 may include cache memory, semi-permanent memory such as RAM, and / or one or more different types of memory used to temporarily store data. In some embodiments, the memory 106 is available to store data used to operate electronic device applications, or any other type of data that may be stored in storage 104. In some embodiments, the memory 106 and the storage 104 may be combined as a single storage medium.

0018Communication circuit 108 can allow device 100 to communicate with one or more servers or other devices using any suitable communication protocol. The electronic device 100 may include a plurality of communication circuits 108 in order to simultaneously perform several communication operations using different communication networks, but in order to avoid complication of the figure, FIG. 1 shows 1. Only one is shown. For example, the communication circuit 108 includes Wi-Fi (eg 802.11 protocol), Ethernet®, Bluetooth® (Bluetooth). Sig Trademarks), Radio Frequency Systems, Cellular Networks (eg GSM®, AMPS, GPRS, CDMA, EV-DO, EDGE, 3GSM, DECT, IS-136 / TDMA, iDen, LTE, or Optional Other suitable cellular networks or protocols), infrared, TCP / IP (eg, one of the protocols used at each layer of the TCP / IP layer), HTTP, BitTorrent, FTP, RTP, RTSP, SSH, voice over IP (eg) VOIP), any other communication protocol, or any combination thereof may be supported.

0019The input / output circuit 110 may operate to convert (and encode / decode if necessary) analog and other signals into digital data. In some embodiments, the input / output circuit may convert the digital data to any other type of signal and vice versa. For example, the input / output circuit 110 can be a physical contact input (eg, from a multi-touch screen), a physical movement (eg, from a mouse or sensor), an analog audio signal (eg, from a microphone), or any Other inputs of may be received and converted. Digital data can be supplied to and received from the processor 102, storage 104, memory 106, or any other component of electronic device 100. Although the input / output circuit 110 is shown in FIG. 1 as a single component of the electronic device 100, a plurality of input / output circuits may be provided in the electronic device 100.

0020The electronic device 100 may include any suitable mechanism or component that allows the user to provide input to the input / output circuit 110. For example, the electronic device 100 may include any suitable input mechanism, such as a button, keypad, dial, click wheel, or touch screen. In some embodiments, the electronic device 100 may include a capacitive sensing mechanism or a multi-touch capacitive sensing mechanism. Several detection mechanisms are described in US Patent Application No. 10 / 902,964 "Gestures for Touch Sensitive Input Device" of the applicant of the present application, which was filed on July 10, 2004, and January 18, 2005. It is described in US Patent Application No. 11 / 028,590, "Mode-Based Graphical User Interfaces for Touch Sensitive Input Device," filed in Japan, both of which are incorporated herein in their entirety.

0021In some embodiments, the electronic device 100 may include dedicated output circuits associated with the output device, such as, for example, one or more audio outputs. The audio output connects to one or more speakers built into the electronic device 100 (eg, monaural or stereo speakers), or an audio component that is remotely connected to the electronic device 100 (eg, wired or wirelessly connected to the communication device). It may include a headset, headphones, or earphones that can be used.

0022In some embodiments, the I / O circuit 110 may include a display circuit (eg, a screen or projection system) that provides a visible display to the user. For example, the display circuit may include a screen (eg, an LCD screen) embedded in the electronic device 100. As another example, the display circuit may include a movable display or a projection system (eg, a video projector) for providing a display of content on a surface away from the electronic device 100. In some embodiments, the display circuit may include a coder / decoder (codec) for converting digital media data into analog signals. For example, the display circuit (or any other suitable circuit within the electronic device 100) may include a video codec, an audio codec, or any other suitable type of codec.

0023The display circuit may also include a display driver circuit, a circuit for driving the display driver, or both. At the direction of the processor 102, the display circuit receives content (eg, media playback information, application screens of applications implemented in electronic devices, information about ongoing communication operations, information about incoming communication requests, or devices. It may operate to display the operation screen).

0024The authentication system 112 may include any suitable system or sensor that receives or detects input that identifies the user of device 100. For example, the authentication system 112 may be a mechanism for detecting skin patterns, an optical system for identifying a user based on a user's facial pattern, eye features (eg, retina), or venous pattern, or any of them. It may be equipped with any other sensor for detecting biological features or attributes specific to other users. As another example, the authentication system 112 is to receive a secret or confidential input that identifies the user (for example, a gesture on the device or touching an object or color on the display in a particular pattern). It may work. As yet another example, the authentication system 112 may operate to detect specific movements or vibrations of the device by the user. The authentication system 112 may be integrated or built into any other component of the electronic device 112 (eg, display or camera), and by various sensors of the electronic device (eg, accelerometer or proximity sensor). The detected event may be used. In some embodiments, multiple types of authentication systems may be incorporated or implemented in electronic devices.

0025In some embodiments, the electronic device 100 includes a control processor 102, a storage 104, a memory 106, a communication circuit 108, an input / output circuit 110, an authentication system 112, and any other component provided in the electronic device. A bus may be provided that provides a data transfer path for exchanging data with or between these components.

0026To prevent unauthorized access to data or information stored in memory or storage, the electronic device may instruct the authentication system to identify the user and grant access to the requested resource. The electronic device may require authentication before providing access to any electronic device resource. In some embodiments, the electronic device may require different levels of authentication before providing access to different applications or different data or files associated with different applications. For example, an electronic device may require a user to meet several authentication systems before providing access to an application or data (eg, in addition to a primary or initial authentication such as a passcode, a biometric device. Second authentication, such as authentication, is used to unlock the device).

0027FIG. 2 is a schematic view showing an example of a display screen of an electronic device according to an embodiment of the present invention. The display screen 200 may be displayed in response to the user unlocking the electronic device. The display screen 200 may include a selectable option 210 for accessing various device functions. For example, each option 210 may be associated with a different application available on the electronic device. As another example, each option may be associated with specific data or files available to the user. The electronic device may or may not require authentication to access the display 200. For example, the display 200 may include basic or default applications available to the user. As another example, the display 200 may include default features available to all users.

0028In some embodiments, one or more applications may provide or utilize access to the personal data or resources of one or more users. For example, options 212 and 214 associated with the telephone and email applications, respectively, may include personal accounts or contacts that are not associated with all users of the electronic device. The electronic device may require the user to authenticate before providing access to such applications or access to personal or secret features or resources available through such applications. In some embodiments, the default features of the application may be available without authentication (eg, all users can make calls but not access the contact list).

0029FIG. 3 is a diagram showing an example of a display screen that allows a user to authenticate according to an embodiment of the present invention. The display screen 300 may be displayed in response to receiving an instruction from the user to access a resource (eg, information or application) limited by the authentication protocol. The display screen 300 may include information 310 associated with the selected resource. Prior to authentication, information 310 may be obscured or hidden from the view to prevent unauthorized users from viewing the resource (eg, no entry for a particular field is available). Can be). In some embodiments, the display screen 300 may not include information until the user is authenticated.

0030The display screen 300 may include a notification 320 instructing the user to authenticate before accessing the requested resource. Notification 320 may include pop-ups, overlays, new display screens, or any other suitable type of display for providing instructions to the user. Notification 320 may include any suitable instructions, such as how the user authenticates (eg, instructions that specify a particular authentication system to use). For example, notification 320 may instruct the user to provide a fingerprint or input that fits a predetermined visual or temporal pattern. Once the user is properly authenticated, the electronic device may display information 310 for identification by the user and enable selectable options or other features associated with the selected resource.

0031In some embodiments, the user may be required to authenticate before unlocking the electronic device (eg, before accessing any resource on the device). FIG. 4 is a schematic diagram showing an example of a display screen for instructing a user to authenticate before the user accesses a device resource according to an embodiment of the present invention. The display screen 400 may include option 410 for unlocking the display. For example, option 410 may include a slider that is dragged across a portion of the screen. As another example, option 410 gives the user an option or set of options to choose from (for example, pressing several keys simultaneously or consecutively, or touching some area of the display screen 400). You may prepare.

0032The display screen 400 may include a notification 420 instructing the user to authenticate before accessing the device resource (eg, a home screen that launches information and applications). Notification 420 may include any suitable type of notification, for example pop-ups, overlays, new display screens, or any other suitable type of display for providing instructions to the user. The electronic device responds, for example, when the user switches on the device (eg, when viewing the display screen 400 thereafter), in response to the user attempting to access the device resource without first authentication (eg, when viewing the display screen 400). Notification 420 may be displayed at any appropriate time (as an error message), at the request of help by the user, or at any other appropriate time. Notification 420 may include any appropriate instructions, such as, for example, how a user authenticates, a list of authorized users, or any other appropriate information.

0033Once the user is properly authenticated, the electronic device may display options associated with the authenticated user (eg, options for applications purchased by a particular user). In some embodiments, the electronic device may provide access to previously unavailable resources or content, such as a contact list for a telephone or email application or previous messages. 5A-C are schematics showing examples of display screens associated with different users provided in response to user authentication according to embodiments of the present invention. The display screen 500A may have several options 510A. The displayed options may include some options that are common to the default or basic display of electronic devices (for example, the display screen 500A shares the options with the display screen 200 in Figure 2). The display screen 500A may include several options 512A for additional applications or resources that are only available to specific authenticated users. For example, the display screen 510A may include additional option 512A for gaming, system, and media applications.

0034The display screen 500B may include option 510B for resources or applications available to the user. In some embodiments, option 510B may be completely different from the default screen option (eg, display screen 500B does not share the option with display screen 200 in FIG. 2). The display screen 500B may be further customized to include no label identifying the application or resource associated with option 510B.

0035The display screen 500C may include option 510C for resources or applications available to the user. In some embodiments, option 510C for the same resources as other display screens may have different appearances (eg, different icons). For example, in Figure 5C, the options displayed for mail, clock, photos, YouTube®, and the calculator application may differ from the options displayed on the display screen 500A in Figure 5A. The display screen 500C may further include a custom or personal background 512C (eg, a different background image). In some embodiments, the display screen 500C (unlike option 510B located in dock 512B, for example) does not have to have a dock or other function to keep some option 510C in place. Good.

0036In some embodiments, the electronic device may provide access to a different range of electronic device resources based on the identity of the authenticated user. For example, if an electronic device is being used by multiple users (eg, parents and children of the same family), the users may share some, but not all, of the resources (eg, all users of the family). You can access your contact list, but not the emails of other family members). As another example, users of electronic devices may be organized into groups or hierarchies of users. Some resources may be associated with a group or hierarchy of users instead of or in addition to being associated with a particular user. When a particular user is authenticated and identified as a member of a group, the electronic device identifies the resources associated with that group (eg, common or in-service contacts, in-service communications, or in-service documents), and identification. You may provide access to resources associated with a user, such as personal contacts, email accounts, and call lists.

0037The electronic device may associate a particular resource with one or more authentication systems. For example, the user may identify the resource and provide protection or security instructions (eg, by selecting the appropriate option). The user may also select one or more authentication systems to meet before providing access to the resource. If the resource is not in service (for example, not the default application or file that remains available to all users), or if the resource is created or purchased by the user, the electronic device will use the selected resource. It may be associated with one or more selected authentication systems. Alternatively, if the user has sufficient privileges (eg, an administrator), any resource may be protected using one or more selected authentication systems.

0038The electronic device does not have to require the user to authenticate each time the user unlocks or operates the electronic device. In some embodiments, the electronic device may maintain the user authenticated state for a specific period of time. For example, once authenticated, the electronic device may allow the user to access the restricted resources for 10 hours from the time the user was authenticated. As another example, the electronic device may retain the user's authentication for a specific period of time (eg, retain authentication for 30 minutes after input) after receiving the user's last instruction or entering standby mode. .. The length of time that an electronic device retains credentials may be set by the device or user and may be based on the particular type or resource protected by the credentials (eg, rather than the user's personal contacts). , The authentication period may be long for access to games purchased by a particular user). Power consumption can be saved because the electronic device does not have to require authentication each time the user operates the device.

0039Electronic devices may use any suitable type of authentication system to prevent unauthorized access to device resources. In some embodiments, the electronic device may include an authentication system based on a user-specific skin pattern. For example, the electronic device may include an authentication system that detects a user's fingerprint, hand print, palm print, knuckle print, or any other suitable print or skin feature specific to the user. The authentication system may include sensors that detect user-specific skin patterns or features.

0040The sensor may include any suitable type of sensor for detecting features or patterns specific to the user's skin. For example, the sensor may include an optical scanner that detects features of the user's skin. The optical sensor may include a charge-coupled device or an array of any other suitable light-receiving element (eg, a diode) that records the light received by the sensor (eg, charge-coupled device). For example, when the charge-coupled device includes a light-receiving element array, the optical sensor may operate to record pixels representing the light received by the particular light-receiving element for each light-receiving element in the array. The value of each pixel may reflect the distance from the sensor of a particular part of the user's skin (eg, ridges or valleys) associated with the pixel. The recorded pixels can form an image that the electronic device can compare to a library of images associated with the authorized user (eg, an image of a particular part of the user's skin).

0041As another example, the sensor may include a capacitance sensor that detects features of the user's skin. The capacitance sensor may include one or more chips containing an array of cells, and each cell may include at least two conductor plates separated by an insulating layer. The sensor may be connected to an inverting amplifier that changes the voltage between at least two conductor plates in each cell of the chip. When the user's finger is placed on the cell array, the sensor valleys based on the difference in capacity value of each cell (for example, the cell below the valley line has a lower capacity value than the cell below the ridge). It can act to distinguish between cells with lines (eg, fingerprint valleys) and cells with ridges (eg, fingerprint ridges). Using the capacitance values detected in each cell of the chip, the sensor can generate images or representations for the skin placed on the sensor that are comparable to the library of images or representations available to the electronic device.

0042The authentication system prevents an unauthorized user from imitating an authorized user's skin pattern, for example, by bringing an image (eg, a printed image) or a three-dimensional structure (eg, a polymer casting) close to the sensor of the authentication system. Any appropriate remedy may be provided. For example, an authentication system is a combination of optical and capacitive sensors, a sonar or high frequency sensor, a sensor that detects the user's pulse, a thermal sensor that determines the temperature of an object that touches the sensor (eg, temperature is a prediction of human skin temperature). (To determine if it is within range), or any other appropriate workaround may be provided.

0043The sensor can operate to detect features of the user's skin using any suitable method. In some embodiments, the sensor may operate to detect features of the user's skin as it is moved over the sensor. For example, the sensor may include a one-dimensional sensor or stagnant sensor (eg, a row of sensing elements) that detects the characteristics of the user's finger as it slides or rotates on the sensor. The sensor may have a direction in which the user's skin should be moved to provide an accurate representation of the characteristics of the user's skin. For example, the sensor may require the user to move the fingertip along the axis of the finger or orthogonal to the axis of the finger.

0044In some embodiments, the sensor may operate to detect features of the user's skin when the skin is held immobile on the sensor. For example, the sensor may include a two-dimensional sensor or movement sensor that detects the characteristics of the user's finger when the finger is stationary on the sensor. The sensor may move under a stationary user's finger at a regular pace or speed, or may be momentary at a point in time (eg, with the user's finger moving on the sensor). Alternatively, it may act to detect a substantially instantaneous two-dimensional representation. A two-dimensional sensor, unlike a one-dimensional sensor, does not rely on the user to move the skin over the sensor at a regular or uniform pace, so by using a two-dimensional sensor, the user's skin characteristics can be enhanced. Can provide accurate representation.

0045The sensor may be placed at any suitable location within the electronic device. In some embodiments, the sensor may be arranged to be able to act to detect the appropriate part of the user's skin when the user operates or begins to operate the electronic device. The position of the sensor may vary depending on the part of the user's skin to be detected (eg, finger, hand, or palm). FIG. 6 is a schematic diagram showing an example of a display of an electronic device for detecting a user's fingerprint according to an embodiment of the present invention. The display 600 may include a screen 602 instructing the user to unlock the electronic device. For example, the screen 602 is an arrow instructing the user to slide the block 610 along the track 612 to unlock the electronic device by placing a finger on the block 610 and dragging the finger along the track 612. A block 610 with the above may be provided.

0046To authenticate the user during the unlocking process, the display 600 may include a sensor 620 in the display along track 612. For example, the sensor 620 may be incorporated within a display stack (eg, a display stack that may include a capacitance sensing element, a light source, and a display surface). As another example, the sensor 620 may be located below the display stack. As yet another example, the sensor 620 may include existing components of the display stack (eg, the display stack of a touch screen display may include a capacitive sensor). In such an example, the authentication system may use the detection output of a capacitance sensing element of a display stack (eg, of a touch screen display) that has sufficient resolution to distinguish between ridges and valleys of the user's skin. In some embodiments, the capacitance sensing element of the display stack may include some type or density capacitance sensing element to allow authentication using a particular portion of the display (eg, track 612). A very fine detector is used for authentication in the display stack along at least part of the display 600, and a less detailed detector is used for the rest of the display 600).

0047In some embodiments, the sensor 620 may be embedded in an electronic device so that it is not visible within the display 600. For example, the sensor 620 may be assembled, printed, or directly etched (eg, etched onto glass) on the display 600 so that the user cannot see the fingerprint scanner. If it is difficult for the user to provide the proper fingerprint to the sensor 620, the display 600 may emphasize the contour of the sensor 620 (eg, located above the sensor 620) to assist the user in authenticating. Display an icon that tells you to put your finger on the icon, etc.).

0048FIG. 7 is a schematic diagram showing another example of an electronic device for detecting a user's fingerprint according to an embodiment of the present invention. The electronic device 700 may include input mechanisms 710 and 712 that can be activated by the user to provide input to the electronic device 700. For example, the input mechanism 710 may include a keyboard and the input mechanism 712 may include a touchpad or trackpad. However, it should be understood that any other input mechanism, such as an input mechanism remotely connected to the electronic device 700 (eg, a wired or wireless mouse), may be used in the electronic device 700.

0049To provide secure access to resources, the electronic device 700 may include at least one sensor 720 that detects the characteristics of the user's fingerprint to identify the user. To provide a seamless user experience, the sensor 720 may be incorporated within or below at least one of the input mechanisms 710 and 712. In some embodiments, the input mechanism 710 comprises a sensor 720 built into one or more keys so that the input mechanism 710 may have a plurality of separate keys that the user can press to provide input to the electronic device 700. You can. For example, an optical or capacitive sensor is a feature of the user's fingertips for the sensor to authenticate the user when the user places the finger on the key (eg, the user's index finger on the "F" or "J" key). May be placed on the top surface of the key so that it can be detected. A two-dimensional or mobile sensor can be used to authenticate the user while the user's finger is placed on the key.

0050The sensor 720 may be located near, near, or behind any button or other physical input that the user may press on the electronic device. For example, the sensor 720 may be located behind the home button of a portable media player or mobile phone (eg, button 812 in FIG. 8B). The sensor 720 may be located between an external cover or surface (eg, a glass or plastic surface) and a mechanical component acting on a switch or electronic circuit. For example, a fingerprint detection mechanism may be incorporated beneath a transparent surface so that the detection mechanism can detect the ridges and valleys of the user's fingerprint through that surface. In some embodiments, it is not necessary to add a transparent surface (eg, if the detection mechanism includes a surface on which the user can place a finger).

0051In some embodiments, the input mechanism 712 may include a sensor 720 embedded beneath part or all of the pad so that the user (eg, to move the indicator on the display 715) When a finger is placed on the input mechanism 712, the sensor 720 can detect the characteristics of the user's finger to authenticate the user. The sensor 720 may be a one-dimensional sensor that authenticates the user when the user moves his or her finger across the pad, or when the user's finger is stationary on the pad (eg, the user first touches the finger). It may be a two-dimensional sensor that authenticates the user when placed on a pad). The sensor 720 may cover the entire surface of the input mechanism 712 so that the user does not have to place his finger on a particular part of the input mechanism 712 for authentication. The electronic device 700 of each sensor 720 uses, for example, highlighting, instructions on the display, or any other suitable method to help the user provide a fully detectable input. It may act to locate. In some embodiments, any other suitable input mechanism (eg, button, wheel, key, or screen) may include a sensor 720 that seamlessly detects the features of the user's fingerprint.

00528A and 8B are schematic views showing an example of an electronic device for detecting a user's handprint according to an embodiment of the present invention. The electronic device 800 may include a housing 802 that holds the display 810. The housing 802 may substantially form the back surface of the electronic device 800 (eg, the surface on the side that does not include the display 810) in order to protect the components of the electronic device. When the user holds the electronic device 800, the user's hand 830 may be recessed around the housing 802 so that the display 810 can be seen, as shown in FIG. 8B, when at least the user's palm 832 is on the back. Arranged to touch the 804. The electronic device 800 may include a sensor 820 embedded within the rear 804 to detect features of the user's palm or hand. By placing the sensor 820 on the back 802 (or any surface of the electronic device opposite the surface of the display 810), the sensor 820 can authenticate the user when the user holds the electronic device 800. it can. The sensor 820 may include a two-dimensional sensor, which allows the electronic device 800 to seamlessly authenticate the user without requiring the user to touch the back 804 to move or slide his or her hand.

0053FIG. 9 is a schematic view showing an example of an electronic device for detecting a user's handprint according to an embodiment of the present invention. The electronic device 900 may include an input mechanism 910 for the user to provide input to the device. The input mechanism 910 may be arranged such that when the user's fingers are placed on the input mechanism 910, the user's palm and wrist are placed on or above the housing 912. The electronic device 900 may include one or more sensors 920 embedded in or placed on the housing 912 to authenticate the user of the device. The sensor 920 ensures that the user's hand, palm, or wrist is aligned with the sensor 920 when the user places the user's hand on the housing 912 to operate the input mechanism 910. , May be placed. The sensor 920 may operate to detect features of the user's skin, for example, using a two-dimensional sensor when the user's hand is placed on the housing 912.

0054In some embodiments, the authentication system may optionally or additionally include a detection mechanism that detects features under the user's skin. For example, the authentication system may include sensors that detect the distribution pattern of the user's veins, arteries, hair follicles, or any other suitable feature under the skin of the user that can be detected. The sensor may include any suitable type of sensor, such as an optical sensor (eg, a camera) located on the surface of an electronic device. The sensor may be arranged to detect features under any suitable part of the user's skin during use of the electronic device. For example, the sensor may be arranged to detect features under the skin of the user's fingers, hands, wrists, arms, face, or any other suitable area.

0055FIG. 10 is a schematic diagram showing an example of a device having a sensor that detects a feature under the user's skin according to an embodiment of the present invention . The electronic device 1000 may include an input mechanism 1010 that is located on or extends over a portion of the housing 1012. The input mechanism 1010 may be configured such that the user's hands and wrists are placed on the housing 1012 (eg, not on the input mechanism 1010) during use. The electronic device 1000 may include a sensor 1020 that detects features under the user's skin. For example, the sensor 1020 may include an optical sensor that detects the user's vein pattern near the user's wrist. The sensor 1020 is placed or built into the housing 1012 so that the user's wrist can be in close proximity to the sensor 1020, for example, when the user's hand is placed to provide input using the input mechanism 1010. , Etc., may be placed on any suitable surface of the electronic device 1000. According to such an arrangement, seamless user authentication can be performed by detecting a feature under the user's skin (for example, a vein pattern near the user's wrist) while the user operates the device 1000.

0056In some embodiments, the authentication system may optionally include sensors that detect facial features of the user. For example, an authentication system may include a sensor that detects radiation emitted or reflected by one or more salient features of the user's face when the user's face is placed facing the sensor. The sensor may operate to detect any suitable type of radiation. For example, a sensor may be an optical sensor (eg, a camera), an infrared sensor, an ultraviolet sensor, a scanning laser, an ultrasonic sensor (eg, sonar), or a desired radiation (eg, a radiation frequency or period in a specific range). ) Can be included in any other suitable sensor.

0057The authentication system may operate to detect any suitable element of the user's face. For example, an authentication system can identify a face by analyzing the relative position and size of the user's head, nose, mouth, ears, cheekbones, chin, or any other attribute of the user's face. .. As another example, an authentication system uses a three-dimensional authentication system to capture and analyze the curved surface or depth of features of the user's face (eg, the contour of the eye socket, chin, or nose) of the user's face. The characteristics of may be specified. As yet another example, the authentication system may detect lines, patterns, or stains specific to the user's skin (eg, using skin texture analysis). These methods may be used together to improve or facilitate authentication.

0058Sensors for detecting user facial features may be placed at any suitable location on the electronic device. In some embodiments, the sensor may include a camera or other sensor provided to the electronic device for another purpose (eg, a built-in webcam for chat). FIG. 11 is a schematic diagram showing an example of an electronic device having a sensor for detecting facial features of a user according to an embodiment of the present invention. When the electronic device 1100 faces the display 1110 for the user to browse or access the electronic device resources, the features of interest on the user's face and the user's face are relative to the sensor 1120 (eg, for example). A sensor 1120 may be provided adjacent to the display 1110 so that it can be positioned (within the field of view of the sensor 1120). In response to the detection of the user's face facing the sensor 1120, the electronic device 1100 instructs the sensor 1120 to capture and analyze the features of the user's face, and the analyzed features are associated with the authorized user. You may compare it with the library. If an authorized user is detected, electronic device 1100 may display restricted content 1112 on display 1110 or provide access to the content.

0059In some embodiments, the authentication system may optionally or additionally include sensors that authenticate the user based on the attributes of the user's eyes. For example, the sensor may operate to scan the user's retina, iris, or retinal blood vessels to detect user-specific patterns. The sensor may include a light source that emits light (eg, infrared light), which light is reflected by the user's eyes and detected by a lens or optical sensor. The sensor analyzes the received light to create a representation of the user's eye that can be compared to the library of authorized users' eyes.

0060As another example, the sensor is alternative or additionally, for example, by tracking the position and movement of the user's retina, iris, blood vessels, or any other feature of the user's eye. It may act to detect motion. Prior to providing the user with access to the electronic device resource, the electronic device may instruct the sensor to detect a predetermined eye movement set by the authorized user. For example, each authorized user may create a flow of eye movement by moving the eye in a specific way (eg, up, down, left, right, blink, blink, etc.) while looking at the sensor. The electronic device may unlock the device or provide access to limited resources when the user of the device moves his or her eyes to match a given eye movement.

0061The sensor may be placed at any suitable position on the device, for example, adjacent to the display or other part of the device facing the user's eye (eg, to authenticate the user from the features of the user's eye). (Similar position to available sensor 1120 in Figure 11). FIG. 12 is a schematic diagram showing an example of an electronic device having a sensor for detecting a feature of the user's eye according to an embodiment of the present invention. The electronic device 1200 is positioned with respect to the sensor 1220 (eg, within the field of view of the sensor 1220) when the user faces the display 1210 to view or access the electronic device resources. A sensor 1220 may be provided adjacent to the display 1210 so that it can be aligned. Using the sensor 1220, the electronic device 1200 may detect the user's eye features or movements to authenticate the user and provide access to limited device resources. In some embodiments, the sensor 1220 may be implemented to authenticate the user based on the facial features of the user (eg, sensor 1120 in FIG. 11).

0062In some embodiments, the authentication system may operate to authenticate the user based on voice attributes or quality. For example, an authentication system may operate to detect a particular voice pitch or voiceprint. The authentication system may be string-dependent (for example, the user must say a specific phrase for authentication, such as "my voice is my password") or string-independent. It may (for example, say any appropriate word to authenticate the user). In some embodiments, the authentication system may require the user to say a secret password for authentication, so that the user knows the password and the user's voice is loud. Appropriate authentication can be performed by requiring both to have. The authentication system may include any suitable component for authenticating the user, such as a microphone. In some embodiments, the microphone may be used primarily for other purposes (eg, telephone communications or video conferencing).

0063In some embodiments, other types of authentication systems may be used. In some embodiments, the authentication system may operate to identify and authenticate the user from the shape of the ear canal. For example, the authentication system may include sensors (eg, optical sensors, radar, or sonar) that detect the unique features (eg, shape and length) of the user's ear canal. For example, the sensor may be located near the speaker of the device (eg, if the device is a telephone). In some embodiments, the authentication system may act to identify the user based on a user-specific odor. For example, the authentication system may include sensors that detect attributes specific to the odor of the user's skin or sweat glands. The sensor may be located at any suitable location on the device, for example, at or near the location of the input device (eg, where the user touches the device).

0064In some embodiments, the authentication system may act to identify the user based on the DNA sequence. For example, an authentication system may include a sensor connected to a processor that acquires cells bearing the user's DNA (eg, from the user's skin or mouth) to determine if a particular DNA sequence is present. The length or mutation of the DNA sequence may be selected so that the authentication process can be performed sufficiently quickly while providing appropriate authentication (eg, the entire DNA strand does not need to be analyzed). The sensor may be placed at any suitable location on the device, for example on or near a user-touchable input mechanism or other component.

0065The electronic device may acquire biometric information that reflects the authorized user using any suitable method. For example, when a user chooses an authentication system to use for a particular device resource, the electronic device prompts the user to provide biometric information (eg, fingerprints, eye scans, or DNA sequences) to be stored in the library. You may instruct. Electronic devices provide biometric input using any suitable method, such as visual cues, auditory cues, and emphasizing or locating sensors in an authentication system. You may instruct the user to do so. The biometric information acquired and stored in the library may be retrieved when the user attempts authentication and compared with the biometric information provided by the user. If the biometric information provided matches the information stored in the library (eg, the information associated with the requested resource), the electronic device may provide access to the restricted resource. In some embodiments, non-biometric information may be received using a similar method.

0066In some embodiments, the authentication system may, in an alternative or additional manner, not require bioparameters to provide the user with access to electronic device resources. Non-biometric systems can be broken more easily than biometric systems, but some are very effective and secure. In some embodiments, the authentication system may provide access to electronic device resources in response to detection that the key or token is within a certain distance from the electronic device. For example, the user may have a mobile phone and a computer. One or both devices may be equipped with circuits to detect that they are within a certain range of each other (eg, a user sits at a desk to put a mobile phone in his pocket and use the computer). 5 feet range etc. so that it can be authenticated at times). If it determines that the devices are close to each other, the resources of one or both devices may be available. This method is particularly effective in protecting access to stationary devices while taking advantage of the user's ability to carry portable devices. Details of this embodiment and other embodiments can be found in US Patent Application No. 11 / 823,656 of the Simultaneously Pending Applicant filed June 27, 2007 (Agent Reference No. 104677-0059-101, Agent Reference No. 104677-0059-101, It is described in P4884US1).

0067In some embodiments, the electronic device may authenticate the user based on a particular set of inputs provided by the user. For example, the electronic device may require the user to provide an input corresponding to the visual pattern provided by the electronic device. 13 and 14 are schematic views showing an example of a display for providing a visual pattern according to an embodiment of the present invention. The display 1300 may include an option, i.e., a distribution 1310 of figures 1312. The display 1400 may include an option, ie, a distribution 1410 of figures 1412. Each of the shapes 1312 and 1412 has a different shading pattern (eg, different line directions), solid or multicolored, shape or contour, size (eg, perimeter or area), proximity to other shapes displayed, or Relative position, alignment with other shapes (for example, selecting four yellow shapes to form a straight line, etc.), source (for example, a shape showing a picture of a particular album or library), or any other It may have suitable characteristics. The distribution 1310 or 1410 may be, for example, a plurality of uniformly distributed shapes (eg, 20 uniformly distributed shapes 1310) or an apparently irregularly distributed shape (eg, an arbitrarily distributed shape 1410). It may include any suitable number and distribution of shapes, such as.

0068To authenticate, the user may select any suitable subset from the displayed geometry or options (eg, as detected by the input mechanism or other sensor). A subset can include some or all entities that share one or more attributes. For example, the user may select some or all of the shapes that are of a particular color (eg, all of the shapes, including yellow). As another example, the user may select some or all shapes (eg, all squares) that have the same contour. As yet another example, the user has some or all of the shapes that have certain attributes in common (for example, all the shapes with five sides, or all the shapes that represent the photos associated with a particular album stored by the device. ) May be selected. As yet another example, the user may select some or all of the shapes that contain a particular distribution of colors (eg, a shape that contains a red part adjacent to a blue part). Any suitable criteria or attributes select a particular subset of the displayed shape (including a combination of the above examples, such as selecting two blue shapes from the top and two squares from the bottom). May be used to

0069Any suitable number of shapes or options may be associated with the subset to be selected for authentication. For example, the number of such shapes may be related to the total number of shapes displayed (eg, select 20% of the displayed shapes). As another example, the number of such shapes is 5 or less (for example, allowing the user to select all shapes with one hand at the same time), or 10 or less (for the user to select all shapes with both hands at the same time). It may be a fixed number. The number of such shapes may be chosen to optimize security (eg, requesting a sufficient number of shapes for which it is not easy to guess which shape to choose).

0070The user may use any suitable method to select the shapes included in the subset. If a multi-touch display is provided, the authentication system may require the user to select all the graphics used for authentication at the same time. As another example, the authentication system may allow the user to sequentially select the graphics used for authentication. The shapes may be selected in any or specific order (eg, top-to-bottom or left-to-right). As yet another example, the authentication system may require the user to select only an allowed subset of entities with a single stroke input (eg, dragging a finger across the display). Any other suitable method for selecting the shapes contained in the subset may be used.

0071To avoid having the user select a shape that appears in the same relative position on the display each time (as in the case of entering a numeric passcode using the displayed keypad, for example), electronic devices , The distribution of figures to be selected for authentication may be changed. The user may then identify a shape that shares the attributes associated with the authentication protocol in order to authenticate. Each time the user accesses a device resource, the position of the shape used for authentication can change, so a person who sees the overall distribution of the selected shape over the user's shoulder will have the same distribution for authentication. Cannot be selected (for example, striped shapes may not be distributed in the same area of the device).

0072After a failed attempt to select a shape for authentication to prevent unauthorized users from guessing the appropriate shape subset, the electronic device may change the distribution of the displayed shape or the shape. May be varied (eg, using different colors or contours, etc.). The electronic device may lock the device after a certain number of unsuccessful attempts to select the appropriate graphic subset. Once locked, the user may need to connect the device to the host (eg, connect the portable device to the stationary device) to re-enable the device, or re-enable the device. Therefore, it may be necessary to use another authentication system (for example, a biometric authentication system).

0073In some embodiments, instead of selecting a particular shape, the user may simply select a shape located on a predetermined portion of the screen. For example, the user may place one or more fingers at several shape positions, regardless of the shape that is actually displayed. As another example, a user may place one or more fingers on a particular shape displayed on an electronic device and move one or more fingers in a predetermined manner regardless of the shape displayed. Good (for example, you may slide one or more fingers). As yet another example, the user may continuously select several shapes arranged in a predetermined position on the display (for example, select a shape in a specific position so as to form a predetermined pattern). ,Such). In some embodiments, the electronic device may provide a blank or uniform display screen on which the user can draw one or more patterns with one or more fingers. Such a method can confuse or distract unauthorized users by visually attracting them with the displayed graphics.

0074In some embodiments, the electronic device may, in an alternative or additional manner, authenticate the user based on the temporal pattern of input received from the user. For example, a user may provide a certain number of inputs at a certain speed for authentication. The electronic device may detect the input using any suitable method. For example, an electronic device may detect an input provided using the device's input mechanism (eg, an input received by a touch screen). As another example, the electronic device may detect the input from motion, contact, vibration, or other impact detected by the device's appropriate sensor (eg, accelerometer). In such a method, the user may tap (tap) any part of the device (or an object that comes into contact with the device, such as a table on which the device is placed), and the sensor of the device detects those taps. It is determined whether or not it corresponds to the permitted temporal pattern. As yet another example, an electronic device uses the device's sensor (eg, an accelerometer or gyroscope) to detect that it has been moved in a particular way (eg, shake it twice and then rotate it). You can. In response to the detection of an accurate temporal pattern, the electronic device may provide access to limited resources.

0075In some embodiments, the authentication system may combine temporal and visual patterns for authentication. For example, a user is required to select a particular displayed shape at a certain speed (eg, quickly select the first two shapes, then pause, and then select the last two at the same time). Good. As another example, the user may be required to first select the appropriate shape and then provide the input of the temporal pattern. As yet another example, the user may be required to select one or more shapes and move the device (eg, shake the device). Input of any other suitable combination may be required for authentication.

0076The electronic device may set a visual or temporal pattern for authorized users using any suitable method. In some embodiments, if the user chooses to use a temporal or visual pattern to limit access to a particular device resource, the electronic device provides or selects a temporal or visual pattern. You may instruct the user to do so. For example, an electronic device may provide a list of graphic attributes (eg, color or contour) that the user can select to form a pattern. As another example, the electronic device may instruct the user to select a displayed graphic or provide a temporal pattern to extract or identify the pattern from the received input. The electronic device may instruct the user to provide the pattern multiple times before accepting the pattern to ensure that the user intentionally performed and remembers the selected pattern.

0077The electronic device may be equipped with any suitable number and type of authentication system. For example, the electronic device may include one, more, or all of the authentication systems or authentication methods described above. Access to various resources may be restricted using one or more authentication systems, which authentication system may be selected or configured by the user. In some embodiments, multiple authentication systems may be used in succession before access to a particular restricted resource is provided.

0078FIG. 15 is a flowchart showing an example of a method for authenticating a user according to an embodiment of the present invention. Process 1500 begins with step 1502. In step 1504, the electronic device may identify the user of the device. For example, the electronic device may receive a username or password associated with the user. As another example, the electronic device may use an authentication system to receive authentication information and identify the user from the received authentication system. The electronic device automatically obtains the authentication information without requiring an explicit input from the user, for example, by arranging the sensor of the authentication system so that the authentication information can be obtained seamlessly when the user operates the device. Can be received by. As another example, the sensor may act to detect features of the user's attributes as soon as the user enters the sensor's field of view or detection area. In some embodiments, process 1500 may transition directly from step 1502 to step 1506.

0079At step 1506, the electronic device may determine if an access request to the restricted resource has been received. For example, an electronic device may determine whether a user has provided an instruction to access data associated with a particular user (eg, a contact list or other personal information). As another example, an electronic device is an instruction for a user to access a restricted application (for example, an application restricted to a specific hierarchy of users such as an administrator, or an application purchased by a specific user). May be determined whether or not If the electronic device determines that it has not received an instruction to access the restricted resource, process 1500 may return to step 1506 to continue monitoring input received from the user.

0080On the other hand, if the electronic device determines in step 1506 that it has received an instruction to access the restricted resource, process 1500 may proceed to step 1508. At step 1508, the electronic device may determine if the identified user is authorized to access the resource. For example, the electronic device may determine whether the user has provided appropriate credentials to access the restricted resource. The electronic device may acquire appropriate authentication information without the user's knowledge by incorporating an authentication sensor in the device so that the authentication information can be acquired during normal use, for example. If the electronic device determines that the identified user is not authorized, process 1500 may proceed to step 1510. At step 1510, the electronic device may instruct the user to authenticate. For example, the electronic device may instruct the user to provide authentication information to an authentication system (eg, one of the authentication systems described above). In some embodiments, the electronic device detects multiple inputs by the user and determines whether those inputs have a pattern associated with the authorized user or attributes associated with the authorized user. It may be determined whether it is shared (eg, whether the user has provided the appropriate input corresponding to the attribute or pattern of the authorized user, or the attribute or pattern of the input is the authorized user. Determine if it matches the attribute or pattern associated with). Process 1500 may then return to step 1508 to determine if the user has provided the appropriate authentication information.

0081On the other hand, if the electronic device determines in step 1508 that the user is authorized, process 1500 may proceed to step 1512. At step 1512, the electronic device may provide the user with access to the requested limited resources. For example, the electronic device may provide the user with access to personal data or access to a user-specific application. Process 1500 may then be terminated in step 1514.

0082The above-described embodiments of the present invention are for purposes of illustration, not limitation, and the present invention is limited only by the following claims.