Embedded authentication systems in an electronic device
This invention is directed to an electronic device with an embedded authentication system for restricting access to device resources. The authentication system may include one or more sensors operative to detect biometric information of a user. The sensors may be positioned in the device such that the sensors may detect appropriate biometric information as the user operates the device, without requiring the user to perform a step for providing the biometric information (e.g., embedding a fingerprint sensor in an input mechanism instead of providing a fingerprint sensor in a separate part of the device housing). In some embodiments, the authentication system may be operative to detect a visual or temporal pattern of inputs to authenticate a user. In response to authenticating, a user may access restricted files, applications (e.g., applications purchased by the user), or settings (e.g., application settings such as contacts or saved game profile).
1. An electronic device, comprising:
a display;
a fingerprint sensor;
one or more processors;
memory; and
one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for:
displaying an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detecting a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system:
unlocking the device; and
providing access to an application on the device without providing access to respective content associated with the application,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system:
forgoing unlocking the device;
while the device is unlocked:
detecting a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user using a second authentication system, providing access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continuing to provide access to the application without providing access to the respective content.
2. The device of claim 1 , wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.
3. The device of claim 1 , wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.
4. The device of claim 1 , wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.
5. The device of claim 1 , wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.
6. The device of claim 5 , wherein the application user interface includes an obscured version of the respective content.
7. The device of claim 1 , wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.
8. The device of claim 1 , wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.
9. The device of claim 1 , wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.
10. The device of claim 9 , wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.
11. The device of claim 1 , wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.
12. A method, comprising:
at an electronic device with a fingerprint sensor and a display:
displaying an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detecting a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system,
unlocking the device; and
providing access to an application on the device without providing access to respective content associated with the application,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system, forgoing unlocking the device;
while the device is unlocked:
detecting a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user by a second authentication system, providing access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continuing to provide access to the application without providing access to the respective content.
13. The method of claim 12 , wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.
14. The method of claim 12 , wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.
15. The method of claim 12 , wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.
16. The method of claim 12 , wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.
17. The method of claim 16 , wherein the application user interface includes an obscured version of the respective content.
18. The method of claim 12 , wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.
19. The method of claim 12 , wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.
20. The method of claim 12 , wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.
21. The method of claim 20 , wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.
22. The method of claim 12 , wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.
23. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display and a fingerprint sensor, cause the device to:
display an unlock user interface while the electronic device is in a locked mode of operation; and
while displaying the unlock user interface, detect a first input from a user of the device; and
in response to detecting the first input:
in accordance with a determination that the first input satisfies authentication of the user by a first authentication system,
unlock the device; and
provide access to an application on the device without providing access to respective content,
wherein the first authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the first input does not satisfy authentication of the user by the first authentication system, forgo unlocking the device;
while the device is unlocked:
detect a second input that corresponds to a request to access the respective content; and
in response to detecting the second input:
in accordance with a determination that the second input satisfies authentication of the user by a second authentication system, provide access to the respective content associated with the application, wherein the second authentication system is selected from the set consisting of: a facial pattern recognition system, a retina recognition system, a vein pattern recognition system, a fingerprint recognition system, a gesture pattern system, an object selection pattern system, a pass code entry system, a device movement pattern system, and a device vibration pattern system; and
in accordance with a determination that the second input does not satisfy authentication of the user by the second authentication system, continue to provide access to the application without providing access to the respective content.
24. The medium of claim 23 , wherein:
the first authentication system is an input pattern authentication system; and
the second authentication system is a biometric authentication system.
25. The medium of claim 23 , wherein:
the first authentication system is a pass code entry system that is satisfied when a correct pass code is entered; and
the second authentication system is a fingerprint recognition system that is satisfied when an authorized fingerprint is detected.
26. The medium of claim 23 , wherein:
the second input corresponds to a request to launch the application that includes the respective content;
providing access to the respective content includes launching the application with the respective content; and
providing access to the application without providing access to the respective content includes launching the application without the respective content.
27. The medium of claim 23 , wherein the one or more programs include instructions for, after unlocking the device, displaying an application user interface that includes instructions to perform an authentication operation to access the respective content.
28. The medium of claim 27 , wherein the application user interface includes an obscured version of the respective content.
29. The medium of claim 23 , wherein the unlock user interface includes displayed instructions describing a gesture that will initiate unlocking the device.
30. The medium of claim 23 , wherein unlocking the device includes replacing display of the unlock user interface with an application launch user interface that includes a plurality of application icons for launching different applications.
31. The medium of claim 23 , wherein the first input comprises fingerprint data obtained using the fingerprint sensor from a first finger contact over the fingerprint sensor.
32. The medium of claim 31 , wherein the second input comprises fingerprint data obtained using the fingerprint sensor from a second finger contact over the fingerprint sensor.
33. The medium of claim 23 , wherein the application is a call application on the device, and the respective content comprises a secured portion of contacts associated with the call application.