Indicators for multi-factor authentication

Abstract

An input device configured for multi-factor authentication. The input device includes a plurality of sensor electrodes, one or more light sources, and an authentication component. The plurality of sensor electrodes are configured for capacitive sensing in a sensing area of ​​the input device. The one or more light sources are configured to illuminate at least a portion of the sensing area of ​​the input device. The authentication component is configured to receive a first authentication input via a first authentication device, determine whether the first authentication input matches a first credential of an authorized user, and selectively activate one or more light sources, at least in part, based on whether the first authentication input matches the first credential of an authorized user.

Description

TECHNICAL FIELD

[0001] This embodiment relates generally to user authentication, and specifically to indications for multi-factor authentication. BACKGROUND

[0002] Authentication is a mechanism for verifying the identity of a user attempting to access a device and / or application. A basic form of authentication can require a user to enter a username and password via an input device. However, usernames and passwords are susceptible to theft and can be used by an unauthorized user to gain access to the corresponding device or application. As a result, modern authentication schemes increasingly rely on biometric sensors (e.g., sensors capable of identifying unique biological characteristics of a user) to provide a higher level of security. Example biometric sensors include fingerprint scanners, facial recognition systems, eye scanners, voice recognition systems, and the like. Biometric inputs typically require a user to physically interact with one or more sensors to perform authentication.

[0003] For enhanced security, some applications require multi-factor authentication. Multi-factor authentication requires a user to satisfy two or more "factors" or criteria for authentication. Example authentication factors can include something the user knows (e.g., a username and password), something the user has (e.g., a security token or device identifier), and who the user is (e.g., a personal identifier or biometric). Because multi-factor authentication schemes require multiple different forms of verification, the false acceptance rate of a multi-factor authentication scheme can be significantly lower than the false acceptance rate of any authentication scheme that uses only a single form of authentication. However, because multi-factor authentication can also require various types of user input, it can be desirable to inform or guide a user through the steps of a multi-factor authentication process. SUMMARY

[0004] This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to limit the scope of the claimed subject matter.

[0005] One innovative aspect of the subject matter of this disclosure can be implemented in an input device that includes a plurality of sensor electrodes, one or more light sources, and an authentication component. The plurality of sensor electrodes is configured for capacitive sensing in a sensing region of the input device. The one or more light sources is configured to illuminate at least a portion of the sensing region of the input device. The authentication component is configured to receive a first authentication input via a first authentication device, determine whether the first authentication input matches first credentials of an authorized user, and selectively activate the one or more light sources based at least in part on whether the first authentication input matches the first credentials of the authorized user.

[0006] Another innovative aspect of the subject matter of this disclosure can be implemented in an authentication method. The method includes the steps of receiving, via a first authentication device, a first authentication input, determining whether the first authentication input matches a first credential of an authorized user, and selectively illuminating a sensing region of an input device based at least in part on whether the first authentication input matches the first credential of the authorized user, where the sensing region is provided at least in part by a plurality of sensor electrodes configured for capacitive sensing.

[0007] Another innovative aspect of the subject matter of this disclosure can be implemented in an authentication system including a processing system and a memory. The memory stores instructions that, when executed by the processing system, cause the authentication system to receive, via a first authentication device, a first authentication input, determine whether the first authentication input matches a first credential of an authorized user, and selectively illuminate a sensing region based at least in part on whether the first authentication input matches the first credential of the authorized user, where the sensing region is provided at least in part by a plurality of sensor electrodes configured for capacitive sensing. BRIEF DESCRIPTION OF DRAWINGS

[0008] The present embodiments are by way of example only, and are not intended to be limited by the figures of the accompanying drawings.

[0009] Figure 1 An example input device that can be used with the present embodiments is shown.

[0010] Figure 2 A block diagram of an input device according to some embodiments is shown.

[0011] Figure 3 An example sensor configuration according to some embodiments is shown.

[0012] Figures 4A-4C An example input device in various stages of a multi-factor authentication operation according to some embodiments is shown.

[0013] Figure 5 A block diagram of an authentication system according to some embodiments is shown.

[0014] Figure 6 An illustrative flow diagram depicting an example authentication operation according to some embodiments is shown.

[0015] Figure 7 An illustrative flow diagram depicting an example multi-factor authentication operation according to some embodiments is shown. DETAILED DESCRIPTION

[0016] Various implementations generally relate to input devices capable of multi-factor authentication. Some implementations more specifically relate to visual aids for guiding user input through one or more steps of a multi-factor authentication process. In some implementations, the visual aids can be provided by one or more light sources configured to illuminate at least a portion of a sensing region of the input device. The sensing region can coincide with an array of sensor electrodes configured for capacitive sensing. The input device can also include an authentication component configured to receive a first authentication input via a first authentication device and determine whether the first authentication input matches first credentials of an authorized user. In some implementations, the authentication component can activate the one or more light sources in response to determining that the first authentication input matches the first credentials of the authorized user. When the one or more light sources are activated, the one or more light sources can project an illumination pattern, such as a grid of dots, on an input surface associated with the sensing region.

[0017] Particular implementations of the subject matter described in this disclosure can be implemented to realize one or more of the following potential advantages. By selectively activating one or more light sources associated with a sensing region of an input device, aspects of the present disclosure can provide visual guidance for completing one or more steps of a multi-factor authentication process. For example, the one or more light sources can illuminate the sensing region to indicate where and / or how to complete a next step of the authentication process. In some aspects, the illumination can be used to indicate a type of user input required by the next step of the authentication process. For example, illuminating a sensing region configured for touch or proximity sensing can indicate that gesture input is required. In some other aspects, a particular illumination pattern can be used to guide the user in providing the required user input. For example, the user can provide gesture input by tracking a finger or other input object over a grid of dots projected on an input surface associated with the sensing region.

[0018] In the following description, numerous specific details are set forth such as examples of specific components, circuits, and processes to provide a thorough understanding of the present disclosure. The term“coupled” as used herein means connected directly to or through one or more intervening components or circuits. The terms“electronic system” and“electronic device” can be used interchangeably to refer to any system capable of electronically processing information. Also, in the following description, specific naming conventions are set forth to provide a thorough understanding of the aspects of the present disclosure. However, it will be apparent to one skilled in the art that these specific naming conventions can not be required to practice the example implementations. In other instances, well-known circuits and devices are shown in block diagram form, rather than in detail, to avoid obscuring the present disclosure. Some portions of the detailed description that follow are presented in terms of programs, logic blocks, processing, and other symbolic representations of operations on data bits within a computer memory.

[0019] These descriptions and representations are the means used by those having skill in the data processing arts to most effectively convey the substance of their work to others skilled in the art. In this disclosure, a "program," "block," "process," and the like, refer to a self-consistent sequence of steps or instructions leading to a desired result. The steps are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated in a computer system. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like.

[0020] Unless specifically stated otherwise, as apparent from the following discussions, it is appreciated that throughout the present application, discussions utilizing terms such as "accessing," "receiving," "sending," "using," "selecting," "determining," "normalizing," "multiplying," "averaging," "monitoring," "comparing," "applying," "updating," "measuring," "deriving," or the like, refer to the actions and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers, or other such information storage, transmission or display devices.

[0021] In the drawings, a single block can be described as performing one or more functions; however, in actual practice, one or more of the functions performed by that block can be performed in a single component or across multiple components, and / or can be performed using hardware, using software, or using a combination of hardware and software. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the overall system. Skilled artisans can implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application. In addition, the example input devices can include components other than those shown, including well-known components such as a processor, memory, etc.

[0022] The techniques described herein can be implemented in hardware, software, firmware, or any combination thereof, unless specifically described as being implemented in a particular manner. Any feature described as a module or component can also be implemented together in an integrated logic device or separately as a discrete but interoperable logic device. If implemented in software, the techniques can be implemented at least in part by a non-transitory processor-readable storage medium comprising instructions that, when executed, perform one or more of the methods described above. The non-transitory processor-readable data storage medium can form part of a computer program product, which may include encapsulation material.

[0023] Non-transitory processor-readable storage media may include random access memory (RAM) (such as synchronous dynamic random access memory (SDRAM)), read-only memory (ROM), non-volatile random access memory (NVRAM), electrically erasable programmable read-only memory (EEPROM), flash memory, and other known storage media. Alternatively or additionally, the technology may be implemented at least in part by a processor-readable communication medium that carries or transmits code in the form of instructions or data structures and is accessible, read, and / or executed by a computer or other processor.

[0024] The various illustrative logic blocks, modules, circuits, and instructions described in conjunction with the embodiments disclosed herein can be executed by one or more processors. As used herein, the term "processor" can refer to any general-purpose processor, conventional processor, controller, microcontroller, special-purpose processor, and / or state machine capable of executing scripts or instructions of one or more software programs stored in memory.

[0025] Figure 1 An example input device 100 that can be used with this embodiment is shown. Input device 100 includes a processing system 110 and a sensing area 120. In some embodiments, input device 100 may be configured to provide input and / or control access to an electronic system (not shown for simplicity). Example electronic systems may include, but are not limited to, personal computing devices (e.g., desktop computers, laptop computers, netbook computers, tablet computers, web browsers, e-book readers, personal digital assistants (PDAs), etc.), composite input devices (e.g., physical keyboards, joysticks, push-button switches, etc.), data input devices (e.g., remote controls, mice, etc.), data output devices (e.g., display printers, etc.), remote terminals, kiosks, video game consoles (e.g., video game consoles, portable gaming devices, etc.), communication devices (e.g., cellular phones, smartphones, etc.), and media devices (e.g., recorders, editors, televisions, set-top boxes, music players, digital photo frames, digital cameras, etc.).

[0026] In some aspects, the input device 100 may be implemented as a physical part of the corresponding electronic system. Alternatively, the input device 100 may be physically separated from the electronic system. The input device 100 may be coupled to (and communicate with) components of the electronic system using various wired and / or wireless interconnection and communication technologies, such as buses and networks. Examples of suitable technologies may include internal integrated circuits (I2C), Serial Peripheral Interface (SPI), PS / 2, Universal Serial Bus (USB), Bluetooth®, Infrared Data Association (IrDA), and various radio frequency (RF) communication protocols defined by the IEEE 802.11 family of standards.

[0027] exist Figure 1 In the example, input device 100 may correspond to a proximity sensor device (e.g., also referred to as a "touchpad," "trackpad," or "touch sensor device") configured to sense input provided by one or more input objects 140 in sensing area 120. Example input objects 140 include fingers, styluses, etc. Figure 1 In the example, input object 140 is depicted as a user's finger. However, in other embodiments, any suitable input object can be used to provide user input via sensing area 120. Sensing area 120 can cover any space above, around, in, and / or near input device 100, where input device 100 is capable of detecting user input (such as that provided by one or more input objects 140). The size, shape, and / or location (e.g., relative to the electronic system) of sensing area 120 can vary depending on the specific implementation.

[0028] In some embodiments, the sensing area 120 may extend from the surface of the input device 100 in one or more directions in space, for example, until the signal-to-noise ratio (SNR) of the sensor drops below a threshold suitable for object detection. For example, the distance the sensing area 120 extends in a particular direction may be approximately less than one millimeter, a few millimeters, a few centimeters, or more, and may vary depending on the type of sensing technology used and / or the desired accuracy. In some embodiments, the sensing area 120 may detect inputs involving: no physical contact with any surface of the input device 100, contact with the input surface of the input device 100 (e.g., a touch surface and / or screen), contact with the input surface of the input device 100 coupled with an applied force or pressure of some amount, and / or any combination thereof.

[0029] In some embodiments, the input surface may be provided by one or more surfaces of the housing of the input device 100 and / or projected onto one or more surfaces of the housing of the input device 100 (e.g., as an image). For example, the sensing area 120 may have a rectangular shape when projected onto the input surface of the input device 100. In some aspects, input may be provided by an image spanning a one-dimensional, two-dimensional, three-dimensional, or higher-dimensional space in the sensing area 120. In some other aspects, input may be provided by a projection along a specific axis or plane in the sensing area 120. Still further, in some aspects, input may be provided by a combination of an image and a projection in the sensing area 120.

[0030] Input device 100 can utilize various sensing techniques to detect user input. Example sensing techniques may include capacitive, inverse dielectric, resistive, inductive, magnetic, acoustic, ultrasonic, thermal, and optical sensing techniques. In some embodiments, input device 100 may utilize capacitive sensing techniques to detect user input. For example, sensing area 120 may include one or more capacitive sensing elements (e.g., sensor electrodes) to create an electric field. Input device 100 may detect input based on changes in the capacitance of the sensor electrodes. For example, an object in contact with (or in close proximity to) an electric field may cause a change in voltage and / or current in the sensor electrodes. This change in voltage and / or current can be detected as a “signal” indicating user input. Sensor electrodes may be arranged in an array or other configuration to detect input at multiple points within sensing area 120. In some aspects, some sensor electrodes may be ohmically shorted together to form a larger sensor electrode. Some capacitive sensing techniques may utilize a resistive sheet providing a uniform resistive layer.

[0031] Example capacitive sensing techniques can be based on "self-capacitance" (also known as "absolute capacitance") and / or "mutual capacitance" (also known as "cross-capacitance"). Absolute capacitive sensing methods detect changes in capacitive coupling between sensor electrodes and an input object. For example, an input object near the sensor electrodes can alter the electric field near the sensor electrodes, thus changing the measured capacitive coupling. In some implementations, input device 100 can achieve absolute capacitive sensing by modulating the sensor electrodes relative to a reference voltage and detecting the capacitive coupling between the sensor electrodes and the input object. The reference voltage can be substantially constant or can vary. In some aspects, the reference voltage can correspond to ground potential.

[0032] Transcapacitive sensing methods detect changes in capacitive coupling between sensor electrodes. For example, an input object near the sensor electrodes can alter the electric field between them, thus changing the measured capacitive coupling of the sensor electrodes. In some embodiments, input device 100 can achieve transcapacitive sensing by detecting the capacitive coupling between one or more “transmitter” sensor electrodes and one or more “receiver” sensor electrodes. The transmitter sensor electrode can be modulated relative to the receiver sensor electrode. For example, the transmitter sensor electrode can be modulated relative to a reference voltage to transmit a signal, while the receiver sensor electrode can be held at a relatively constant voltage to “receive” the transmitted signal. The signal received by the receiver sensor electrode may be affected by environmental interference (e.g., from other electromagnetic signals and / or objects in contact with or close to the sensor electrode). In some aspects, each sensor electrode can be a dedicated transmitter or a dedicated receiver. In other aspects, each sensor electrode can be configured to both transmit and receive.

[0033] Processing system 110 may be configured to operate the hardware of input device 100 to detect input in sensing area 120. In some embodiments, processing system 110 may control one or more sensor electrodes to detect objects and / or fingerprints in sensing area 120. For example, processing system 110 may be configured to transmit signals via one or more transmitter sensor electrodes and receive signals via one or more receiver sensor electrodes. In some aspects, one or more components of processing system 110 may be co-located, for example, closely proximate to the sensing element of input device 100. In other aspects, one or more components of processing system 110 may be physically separated from the sensing element of input device 100. For example, input device 100 may be a peripheral device coupled to a computing device, and processing system 110 may be implemented as software executed by the central processing unit (CPU) of the computing device. In another example, input device 100 may be physically integrated into a mobile device, and processing system 110 may at least partially correspond to the CPU of the mobile device.

[0034] The processing system 110 may be implemented as a collection of modules implemented in firmware, software, or a combination thereof. Example modules include a hardware operation module for operating hardware such as one or more sensing elements; a data processing module for processing data such as sensor signals; and a reporting module for reporting information to other components of the electronic system, such as a host processor or CPU. In some embodiments, the processing system 110 may include: a sensor operation module configured to operate sensing elements to detect user input in sensing area 120; an authentication module configured to authenticate the user of the input device 100 and / or the electronic system at least in part based on user input; an identification module configured to identify gestures associated with certain user inputs; and a mode-changing module for changing the operating mode of the input device 100 and / or the electronic system.

[0035] Input device 100 may include additional input components that can be operated by processing system 110 or another processing system. In some embodiments, the additional input components may include one or more biometric sensors that can be used to authenticate the user of input device 100 or a corresponding electronic system. For example, a fingerprint sensor may use capacitive, optical, or ultrasonic fingerprint scanning techniques to detect and / or analyze the user's fingerprint 130 in the fingerprint scanning area 150 of input device 100. In some embodiments, the fingerprint scanning area 150 may be associated with a sensing area 120 (such as...). Figure 1 At least a portion of the fingerprint scanning area 150 (as shown in the diagram) overlaps or substantially overlaps with the sensing area 120. In some other embodiments, the fingerprint scanning area 150 may be separated from the sensing area 120.

[0036] Processing system 110 can respond to user input in sensing area 120 and / or fingerprint scanning area 150 by triggering one or more actions. Example actions include changing the operating mode of input device 100, authenticating the user of input device 100, and / or graphical user interface (GUI) actions such as cursor movement, selection, menu navigation, etc. In some embodiments, processing system 110 can determine location information of the detected input. As used herein, the term "location information" refers to any information that describes or otherwise indicates (e.g., within sensing area 120) the location or position of the detected input. Example location information may include absolute location, relative location, velocity, acceleration, and / or other types of spatial information. In some embodiments, processing system 110 can provide information about the detected input to an electronic system (e.g., to the CPU of the electronic system). The electronic system can then process the information received from processing system 110 to perform additional actions (e.g., changing the mode of the electronic system and / or GUI actions).

[0037] Processing system 110 can operate the sensing elements of input device 100 to generate electrical signals indicating input (or no input) in sensing area 120 and / or fingerprint scanning area 150. Processing system 110 can perform any appropriate amount of processing on the electrical signals to convert or generate information for provision to the electronic system. For example, processing system 110 can digitize analog signals received via sensor electrodes and / or perform filtering or conditioning on the received signals. In some aspects, processing system 110 can subtract or otherwise account for a “baseline” associated with the sensor electrodes. For example, the baseline can represent the state of the sensor electrodes when no user input is detected. Therefore, the information provided to the electronic system by processing system 110 can reflect the difference between the signals received from the sensor electrodes and the baseline associated with each sensor electrode.

[0038] In some implementations, processing system 110 may be configured to implement a multi-factor authentication scheme. As described above, multi-factor authentication requires a user to meet two or more "factors" or criteria used for authentication. Example authentication factors may include something the user knows (e.g., username and password), something the user possesses (e.g., security token or device identifier), and who the user is (e.g., personal identifier or biometrics). Therefore, processing system 110 may only allow a user to access the electronic system if the user can meet two or more authentication factors. In some implementations, at least one authentication factor may correspond to touch or gesture input (e.g., something the user knows) provided via sensing area 120. Figure 1 In one example, another authentication factor may correspond to the fingerprint 130 provided via the fingerprint scanning area 150 (e.g., who the user is). In some other implementations, a multi-factor authentication scheme may include one or more authentication factors other than the user's fingerprint, or a fingerprint that can be used in place of the user's fingerprint.

[0039] As described above, multi-factor authentication operations may require different types of user input at different steps of the operation. For example, in the first step of a multi-factor authentication operation, input device 100 may be configured to detect fingerprint 130 in fingerprint scanning area 150. In the second step of a multi-factor authentication operation, input device 100 may be configured to detect gesture input (e.g., a unique swipe pattern) in sensing area 120. However, whether the multi-factor authentication operation proceeds to the second step depends on whether the fingerprint 130 detected in the first step matches the fingerprint credential associated with the first authentication factor. Therefore, it may be desirable to provide instructions on whether and / or how to perform the second step of the multi-factor authentication operation.

[0040] In some implementations, input device 100 may include one or more light sources 160 to guide a user through a multi-factor authentication operation. The light source 160 may include a light-emitting diode (LED) or any other feasible light source capable of emitting light in the visible spectrum. The light source 160 may be configured to illuminate sensing area 120 to indicate how and / or where the user will provide authentication input. For example, processing system 110 may activate light source 160 in response to determining that a first step of the multi-factor authentication operation has been successfully completed. Therefore, activation of light source 160 may instruct input device 100 to be configured to receive gesture input associated with a second step of the multi-factor authentication operation via sensing area 120.

[0041] The light source 160 can also provide visual assistance for performing authentication input. In some embodiments, the light source 160 can be configured to project a pattern of dots onto an input surface associated with the sensing area 120. Figure 1 In the example, the dots are arranged in a grid pattern within a portion of the sensing area 120. However, in other embodiments, the light source 160 may be configured to project various other patterns (or other shapes) of dots onto the input surface. During the second step of the multi-factor authentication operation, a user can provide gesture input by swiping or tracing the input object 140 on one or more dots projected onto the input surface. The pattern of dots can serve as a guide or boundary for performing gesture input within the sensing area 120. Thus, the dots can assist the user in performing gesture input that can be consistently and accurately repeated during multiple authentication attempts.

[0042] In some embodiments, the processing system 110 may also deactivate the light source 160 upon completion of a second step in the multi-factor authentication operation. All aspects of this disclosure recognize that the sensing area 120 can be various other user inputs besides authentication input (such as touch and gesture input). Therefore, it may not be desirable to always display a dot on the input surface. By selectively activating and deactivating the light source 160 during the multi-factor authentication operation, the input device 100 can display the dot only when gesture input is required during the corresponding step of the multi-factor authentication operation, and can hide the dot at other times (such as when the sensing area 120 is being used to provide location information to the electronic system). The selective activation and deactivation of the light source 160 can further increase user awareness of the current progress of the multi-factor authentication operation.

[0043] Figure 2 A block diagram of an input device 200 according to some embodiments is shown. In some embodiments, the input device 200 may be... Figure 1An example of an input device 100. Input device 200 includes a sensing area 210, an authentication module 220, and a user credential repository 230. The sensing area 210 may cover any space above, around, in, and / or near the input device 200, where the input device 200 is capable of detecting user input such as that provided by one or more input objects (not shown for simplicity). The size, shape, and / or location of the sensing area 210 may vary depending on the actual implementation.

[0044] The sensing area 210 includes a fingerprint sensor 212, a light source 214, and a capacitive sensor 216, or is otherwise coupled to the fingerprint sensor 212, the light source 214, and the capacitive sensor 216. In some embodiments, the fingerprint sensor 212 may be... Figure 1 An example of a fingerprint sensor (associated with the fingerprint scanning area 150). Therefore, the fingerprint sensor 212 can use capacitive, optical, and / or ultrasonic fingerprint imaging techniques to scan or image the user's finger in the sensing area 210. In some embodiments, the light source 214 may be... Figure 1 An example of light source 160. Therefore, light source 214 may include an LED and / or any other suitable light source capable of emitting visible light or otherwise illuminating sensing area 210. In some embodiments, capacitive sensor 216 may be... Figure 1 An example of a capacitive sensor (associated with sensing region 120). Thus, capacitive sensor 216 may include an array of sensor electrodes configured to sense changes in capacitance (or electric field) in and / or around sensing region 210.

[0045] Fingerprint sensor 212, light source 214, and capacitive sensor 216 are coupled to authentication module 220. Authentication module 220 may be implemented by or include at least a portion of a processing system (such as processing system 110) that controls the operation of fingerprint sensor 212, light source 214, and / or capacitive sensor 216. In some embodiments, authentication module 220 may be configured to perform multi-factor authentication operations based at least in part on authentication input received via fingerprint sensor 212 and capacitive sensor 216. Furthermore, authentication module 220 may be configured to guide a user through one or more steps of a multi-factor authentication operation using light source 214. In some embodiments, authentication module 220 may include fingerprint authentication submodule 222, illumination control submodule 224, and gesture authentication submodule 226.

[0046] The fingerprint authentication submodule 222 can authenticate fingerprints as part of a multi-factor authentication operation. For example, the fingerprint authentication submodule 222 can operate the fingerprint sensor 212 to scan a user's fingerprint. The fingerprint authentication submodule 222 can also compare the user's fingerprint with one or more fingerprint credentials 232 stored in the user credential repository 230. The fingerprint credential 232 may include or otherwise indicate a set of identifying features of one or more fingerprints of an authorized user (or multiple authorized users) of the input device 200. For example, identifying features may include a pattern of ridges and valleys on the surface of the user's finger. The fingerprint credential 232 may be captured or acquired via the fingerprint sensor 212 and stored in the user credential repository 230 as part of a fingerprint registration operation prior to the multi-factor authentication operation. Therefore, the fingerprint authentication submodule 22 can authenticate a fingerprint acquired during the multi-factor authentication operation only if the fingerprint matches one or more fingerprint credentials 232 stored in the user credential repository 230.

[0047] The gesture authentication submodule 226 can authenticate gesture input as part of a multi-factor authentication operation. For example, the gesture authentication submodule 226 can operate the capacitive sensor 216 to detect gestures input by an input object, such as a user's finger. The gesture authentication submodule 226 can also compare the gesture input with one or more gesture credentials 234 stored in the user credential repository 230. The gesture credentials 234 may include or otherwise indicate one or more pre-configured gestures by an authorized user (or multiple authorized users) via the input device 200. For example, the gesture may correspond to a unique pattern of touch, tap, and / or swipe performed in the sensing area 210. The gesture credentials 234 may be captured or acquired via the capacitive sensor 216 and stored in the user credential repository 230 as part of a gesture registration operation prior to the multi-factor authentication operation. Therefore, the gesture authentication submodule 226 can authenticate a gesture input acquired during the multi-factor authentication operation only if the gesture input matches one or more gesture credentials 234 stored in the user credential repository 230 (e.g., for the same user as the matching fingerprint credential 232).

[0048] The lighting control submodule 224 can operate the light source 214 to indicate when, where, and / or how gesture input is provided as part of a multi-factor authentication operation. For example, the lighting control submodule 224 can selectively activate and deactivate the light source 214 to indicate the start and end of the gesture authentication step of the multi-factor authentication operation, respectively. (See above regarding...) Figure 1The light source 214 may be arranged or otherwise configured to project a pattern of dots onto an input surface associated with the sensing area 210. In some embodiments, the lighting control submodule 224 may activate the light source 214 to illuminate at least a portion of the sensing area 210 in response to the fingerprint authentication submodule 222 authenticating a user's fingerprint. In some other embodiments, the lighting control submodule 224 may deactivate the light source 214 in response to the gesture authentication submodule 226 authenticating a user's gesture input. When the user of the input device 200 is successfully authenticated by the fingerprint authentication submodule 222 and the gesture authentication submodule 226, the authentication module 220 may enable access to and / or control of the corresponding electronic device (not shown for simplicity).

[0049] Furthermore, in some embodiments, the lighting control submodule 224 may change the illumination of the sensing area 210 in response to the gesture authentication submodule 226 failing to authenticate the user's gesture input. For example, the lighting control submodule 224 may change the color or pattern of the light emitted by the light source 214 to notify the user or otherwise indicate that the authentication attempt has failed. In some aspects, the gesture authentication submodule 226 may allow a number (N) of failed authentication attempts before terminating the multi-factor authentication operation. After N authentication attempts have been exhausted, the multi-factor authentication operation may be reset. Therefore, the lighting control submodule 224 may deactivate the light source 214 in response to the gesture authentication submodule 226 failing to authenticate the user's gesture input N times consecutively.

[0050] Figure 3 An example sensor configuration 300 according to some embodiments is shown. Sensor configuration 300 includes a capacitive sensor array formed by a plurality of sensor electrodes 310 arranged in a vertical pattern and a plurality of sensor electrodes 320 arranged in a horizontal pattern. Sensor configuration 300 also includes a plurality of light sources 330 disposed below (or above) the sensor electrodes 310 and 320. In some embodiments, sensor configuration 300 may represent... Figure 2 The sensing area 210 and / or Figure 1 At least a portion of the sensing area 120. Therefore, sensor electrodes 310 and 320 may correspond to one or more of the capacitive sensors 216, and the light source 330 may correspond to... Figure 2 One or more of the light sources 214.

[0051] exist Figure 3In the example, sensor electrode 310 is shown extending in a first (e.g., vertical) direction, and sensor electrode 320 is shown extending in a second (e.g., horizontal) direction. Although sensor electrodes 310 and 320 are depicted in a vertical grid arrangement, in actual implementations, sensor electrodes 310 and 320 may be arranged in other patterns. For example, in other embodiments, sensor electrode 310 may be parallel to or diagonally opposite sensor electrode 320. Furthermore, each of sensor electrodes 310 and 320 is shown to have substantially the same shape and size. However, in actual implementations, sensor electrodes 310 and 320 may have various shapes and / or sizes. As mentioned above... Figure 1 and Figure 3 As discussed, sensor electrodes 310 and 320 can be transparent. Furthermore, regarding... Figure 3 Sensor electrodes 310 and 320 may cover or overlap the light source 330. In practical embodiments, the relative density and / or pitch of the sensor electrodes 310 and the light source 330 may be... Figure 3 The relative density and / or spacing described in the text are different.

[0052] Sensor electrodes 310 and 320 can use capacitive sensing techniques to detect touch input in the sensing area. For example, in some embodiments, one or more of sensor electrodes 310 and 320 can be driven using a modulated signal to determine a change in the absolute capacitance of the sensor electrode (e.g., absolute capacitive sensing). In other embodiments, a first sensor electrode (e.g., in sensor electrodes 310 or 320) can be driven using a transmitter signal, and a resulting signal can be received on a second sensor electrode (e.g., in sensor electrodes 310 or 320). Further still, in some embodiments, sensor electrodes 310 and 320 can be configured for a combination of cross-capacitive sensing and absolute capacitive sensing. When using capacitive sensing techniques, sensor electrodes 310 and 320 can detect input objects (e.g., fingers hovering over input surface 350) that are in contact with and / or near input surface 350.

[0053] The light source 330 can illuminate at least a portion of the input surface 350. Therefore, the light source 330 can include an LED or any other suitable light source capable of emitting visible light. In some embodiments, the light source 330 can be configured to project a pattern of points onto the input surface 350. Figure 3 In the example, the light sources 330 are arranged in a grid pattern, such that each light source projects a corresponding point onto the input surface 350. However, in other embodiments, one or more points can be generated by combining light from two or more light sources 330. (As mentioned above regarding...) Figure 1As described, the light source 330 can provide visual assistance for inputting gestures via the sensing area. More specifically, the pattern of dots can indicate multiple discrete areas of the input surface 350, on which the user can track an input object to perform a gesture.

[0054] In some implementations, sensor configuration 300 may be implemented as part of a touchpad or touch panel. More specifically, the input device may not include an electronic display capable of providing detailed information and / or instructions to the user. For example, in some aspects, input surface 350 may be at least partially opaque. Because the input device lacks an electronic display, light source 330 may serve as a simple or basic user interface (UI) through which the input device conveys information and / or instructions to the user. For example, light source 330 may be used to convey when, where, and / or how gesture-based authentication input is provided as part of a multi-factor authentication operation.

[0055] Figures 4A-4C Example input device 400 is shown according to some embodiments at various stages 401-403 of a multi-factor authentication operation. Input device 400 includes a sensing area 420, a fingerprint scanning area 450, and a plurality of light sources 460. In some embodiments, input device 400 may be… Figure 1 Input device 100 or Figure 2 An example of an input device 200. Therefore, the sensing area 420, the fingerprint scanning area 450, and the light source 460 can be respectively... Figure 1 Examples of sensing area 120, fingerprint scanning area 150 and light source 160.

[0056] In the first stage 401 of the multi-factor authentication operation, the input device 400 detects the fingerprint 430 in the fingerprint scanning area 450. For example... Figure 4A As shown, the fingerprint scanning area 450 is located in the upper left corner of the input device 400, overlapping with the sensing area 420. In some other embodiments, the fingerprint scanning area 450 may be located elsewhere on the input device 400 (e.g., not overlapping with the sensing area 420). The input device 400 can compare the detected fingerprint 430 with one or more stored fingerprint credentials associated with an authorized user. If the fingerprint 430 does not match any of the stored fingerprint credentials, the input device 400 can terminate the multi-factor authentication operation and prevent the user from accessing the corresponding electronic system. If the fingerprint 430 matches at least one of the stored fingerprint credentials, the input device 400 can proceed to the second stage 402 of the multi-factor authentication operation.

[0057] In the second stage 402 of the multi-factor authentication operation, the input device 400 may activate the light source 460 to illuminate the sensing area 420. For example... Figure 4BAs shown, the input device 400 includes nine discrete light sources 460 arranged in a grid pattern. In some other embodiments, the input device 400 may include... Figure 4B The light sources depicted in the image, whether few or many. Furthermore, in some embodiments, the arrangement or pattern of the light sources 460 can be consistent with... Figure 4B The arrangements or patterns shown are different. As mentioned above... Figure 1 and Figure 3 As described, the light source 460 can project a pattern of dots onto the input surface associated with the sensing area 420 to indicate when, where, and / or how gesture-based authentication input is provided. Therefore, in the second phase 402 of the multi-factor authentication operation, the input device 400 can be configured to receive gesture input via the sensing area 420.

[0058] In the third stage 403 of the multi-factor authentication operation, the input device 400 detects gesture input 470 in the sensing area 420. For example... Figure 4C As shown, gesture input 470 is in the shape of a "Z" and intersects seven of the points projected by light source 460. In some other embodiments, various other gesture inputs 470 may be provided (e.g., depending on the user). Input device 400 may compare the detected gesture input 470 with one or more stored gesture credentials associated with an authorized user. If gesture input 470 matches a stored gesture credential associated with an authorized user, input device 400 may successfully authenticate the user and enable access to and / or control of the electronic system. In some embodiments, input device 400 may deactivate light source 460 in response to determining that gesture input 470 matches a stored gesture credential.

[0059] If gesture input 470 does not match any stored gesture credentials, input device 400 may request the user to repeat the current step of the multi-factor authentication operation (e.g., by providing another gesture input via sensing area 420). In some embodiments, input device 400 may change the illumination emitted by light source 460 in response to determining that gesture input 470 does not match any stored gesture credentials. For example, input device 400 may change the color, intensity, or pattern of the light emitted by light source 460. In some aspects, input device 400 may allow a number (N) of failed gesture-based authentication attempts before terminating the multi-factor authentication operation. In some embodiments, input device 400 may also deactivate light source 460 when terminating the multi-factor authentication operation.

[0060] Figure 5 A block diagram of an authentication system 500 according to some embodiments is shown. In some embodiments, the authentication system 500 may be... Figure 1 The processing system 110 and / or Figure 2An example of the authentication module 220. Therefore, the authentication system 500 may include a device interface 510, a processor 520, and a memory 530.

[0061] Device interface 510 includes a fingerprint (FP) sensor interface (I / F) 512, a capacitive sensor interface 514, and a light source interface 516. The FP sensor interface 512 can be used with one or more fingerprint sensors (such as...) of an input device. Figure 2 The fingerprint sensor interface 512 can communicate with one or more fingerprint sensors (e.g., fingerprint sensor 212). For example, the FP sensor interface 512 can transmit activation signals to and receive fingerprint sensor data from one or more fingerprint sensors to capture or acquire a user's fingerprint. The capacitive sensor interface 514 can be used to communicate with one or more capacitive sensors (such as fingerprint sensors 212) of an input device. Figure 2 The capacitive sensor interface 516 can communicate with one or more capacitive sensors. For example, the capacitive sensor interface 516 can transmit signals to and receive capacitive sensing signals from one or more capacitive sensors to detect input in the sensing area of ​​the input device. The light source interface 516 can be used to communicate with one or more light sources (such as capacitive sensors 216) of the input device. Figure 2 The light source interface 514 communicates with the light source. For example, the light source interface 514 can transmit control and / or activation signals to one or more light sources to activate, deactivate, and / or regulate the illumination of the light sources.

[0062] Memory 530 includes user credential data storage 531 to store a collection of user credentials for one or more authorized users. In some embodiments, user credential data storage 531 may store one or more fingerprint credentials 532 for each authorized user. In some other embodiments, user credential data storage 531 may store one or more gesture credentials 533 for each authorized user. Memory 530 may also include a non-transitory computer-readable medium (e.g., one or more non-volatile memory elements such as EPROM, EEPROM, flash memory, hard disk drive, etc.) that may store at least the following software (SW) modules:

[0063] • Authentication SW module 534, used to implement a multi-factor authentication scheme, includes:

[0064] ◦ Fingerprint (FP) authentication submodule 535, for authenticating a fingerprint received via fingerprint sensor interface 512 by comparing the fingerprint with one or more of fingerprint credentials 532; and

[0065] ◦ Gesture authentication submodule 536 is used to authenticate gesture input received via capacitive sensor interface 514 by comparing the gesture input with one or more of gesture credentials 533; and

[0066] • Lighting control SW module 537, used to control the output of one or more light sources of the input device, includes:

[0067] ◦ A light source activation submodule 538 is used to selectively activate the light source based on the result of a comparison performed by the fingerprint authentication submodule 535 and the gesture authentication submodule 536; and

[0068] ◦ Illumination adjustment submodule 539 is used to selectively change the color, intensity, or pattern of illumination emitted by a light source, based at least in part on the result of a comparison performed by gesture authentication submodule 536.

[0069] Each software module includes instructions that, when executed by processor 520, cause authentication system 500 to perform a corresponding function. The non-transitory computer-readable medium of memory 530 therefore includes components for performing the following... Figure 6 and 7 The instructions that describe all or part of the operation.

[0070] Processor 520 may be any suitable processor or processor capable of executing scripts or instructions of one or more software programs stored in authentication system 500 (e.g., within memory 530). For example, processor 520 may execute authentication SW module 534 to implement a multi-factor authentication scheme. While executing authentication SW module 534, processor 520 may also execute fingerprint authentication submodule 535 and / or gesture authentication submodule 536 to authenticate gesture input received via capacitive sensor interface 514 by comparing the gesture input with one or more of gesture credentials 533. For example, processor 520 may execute fingerprint authentication submodule 535 to authenticate fingerprint received via fingerprint sensor interface 512 by comparing the fingerprint with one or more of fingerprint credentials 532. Furthermore, processor 520 may execute gesture authentication submodule 536 to authenticate gesture input received via capacitive sensor interface 514 by comparing the gesture input with one or more of gesture credentials 533.

[0071] The processor 520 may also execute the lighting control SW module 537 to control the output of one or more light sources from the input device. When executing the lighting control SW module 537, the processor 520 may further execute a light source activation submodule 538 and / or a lighting adjustment submodule 539. For example, the processor 520 may execute the light source activation submodule 538 to selectively activate the light source based on the result of a comparison performed by the fingerprint authentication submodule 535 and the gesture authentication submodule 536. Furthermore, the processor 520 may execute the lighting adjustment submodule 539 to selectively change the color, intensity, or pattern of the illumination emitted by the light source, at least in part, based on the result of a comparison performed by the gesture authentication submodule 536.

[0072] Figure 6 An illustrative flowchart depicting an example authentication operation 600 according to some embodiments is shown. For example, refer to... Figure 1 Operation 600 can be performed by input device 100 to implement at least a portion of the multi-factor authentication scheme.

[0073] The input device receives a first authentication input (610) via a first authentication device. In some embodiments, the first authentication device may be a fingerprint sensor and the first authentication input may represent the fingerprint of the user of the input device. For example, see reference... Figure 1 When a user places their finger on the fingerprint scanning area 150, the first authentication input can be detected.

[0074] The input device determines whether the first authentication input matches a first credential of an authorized user of the input device (620). The fingerprint credential may include, or otherwise indicate, a set of identifying features of one or more fingerprints of an authorized user (or multiple authorized users) of the input device. For example, identifying features may include a pattern of ridges and valleys on the surface of the user's finger. The fingerprint credential may be captured or acquired via a fingerprint sensor and stored in a user credential repository (such as...). Figure 2 In the user credential repository 230, as part of the fingerprint registration operation prior to the multi-factor authentication operation 600.

[0075] The input device may selectively illuminate the sensing area (630) of the input device, at least in part, based on whether the first authentication input matches the first credential of an authorized user. As described above, one or more light sources may be disposed below the input surface of the input device. The light sources may be used to indicate when, where, and / or how subsequent (e.g., gesture-based) steps of a multi-factor authentication operation are performed. In some embodiments, the input device may activate the light source to illuminate the sensing area in response to determining that the detected fingerprint matches the fingerprint credential of an authorized user.

[0076] Figure 7 An illustrative flowchart illustrating an example of a multi-factor authentication operation 700 according to some embodiments is shown. For example, refer to... Figure 2 Operation 600 can be performed by input device 200.

[0077] The input device detects the fingerprint (710) and determines whether the fingerprint matches the stored fingerprint credentials of the authorized user (720). If the fingerprint does not match any stored fingerprint credentials (as tested at 720), the input device may terminate or reset the multi-factor authentication operation 700.

[0078] If the fingerprint matches an authorized user's stored fingerprint credentials (as tested at 720), the input device may continue to activate one or more light sources positioned below the input surface associated with the sensing area (730). The input device also detects gesture input via the sensing area (740) and determines whether the gesture input matches an authorized user's stored gesture credentials (750). If the gesture input does not match an authorized user's stored gesture credentials (as tested at 750), the input device may change the illumination emitted by the light sources (780) and prompt the user to input another gesture (740).

[0079] If the gesture input matches the authorized user's stored gesture credentials (as tested at 750), the input device can proceed with user authentication (760). For example, the input device may enable the user to access and / or control electronic systems coupled to or otherwise associated with the input device. The input device may also deactivate the light source during user authentication (770).

[0080] Those skilled in the art will understand that information and signals can be represented using any of a variety of different techniques and skills. For example, data, instructions, commands, information, signals, bits, symbols, and chips that can be referenced throughout the foregoing description can be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, optical fields or optical particles, or any combination thereof.

[0081] Furthermore, those skilled in the art will understand that the various illustrative logic blocks, modules, circuits, and algorithm steps described in conjunction with the aspects disclosed herein can be implemented as electronic hardware, computer software, or a combination of both. To clearly illustrate this interchangeability between hardware and software, various illustrative components, blocks, modules, circuits, and steps have been generally described above according to their functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the system as a whole. Those skilled in the art can implement the described functionality in varying ways for each specific application, but such implementation decisions should not be construed as departing from the scope of this disclosure.

[0082] The methods, sequences, or algorithms described in conjunction with the aspects disclosed herein may be embodied directly in hardware, in software modules executed by a processor, or a combination of both. Software modules may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the art. Exemplary storage media are coupled to the processor, enabling the processor to read information from and write information to the storage medium. Alternatively, the storage medium may be integrated into the processor.

[0083] In the foregoing specification, embodiments have been described with reference to specific examples. However, it will be apparent that various modifications and changes can be made therein without departing from the broader scope of this disclosure as set forth in the appended claims. Therefore, the specification and drawings are to be considered in an illustrative sense rather than a limiting sense.

Claims

1. An input device comprising: a plurality of sensor electrodes configured for capacitive sensing in a sensing region of the input device; and an authentication component configured to: receive a first authentication input via a first authentication device; determine whether the first authentication input matches a first credential associated with a first authentication factor of a multi-factor authentication operation that controls access to an electronic system; and selectively activate one or more light sources associated with a second authentication factor of the multi-factor authentication operation based at least in part on whether the first authentication input matches the first credential, the one or more light sources configured to at least illuminate a portion of the sensing region of the input device that the input device is configured to receive a second authentication input.

2. The input device of claim 1, wherein the first authentication device comprises a fingerprint sensor, and wherein the first authentication input represents a fingerprint.

3. The input device of claim 1, wherein the authentication component is configured to activate the one or more light sources in response to determining that the first authentication input matches the first credential of an authorized user.

4. The input device of claim 1, further comprising: an input surface associated with the sensing region, wherein the plurality of sensor electrodes and the one or more light sources are disposed behind the input surface.

5. The input device of claim 4, wherein the first authentication device is also disposed behind the input surface.

6. The input device of claim 5, wherein the one or more light sources are configured to illuminate the sensing region by projecting a plurality of dots onto the input surface.

7. The input device of claim 1, wherein the authentication component is further configured to: receive the second authentication input via the plurality of sensor electrodes in response to activating the one or more light sources; determine whether the second authentication input matches a second credential associated with the second authentication factor of the multi-factor authentication operation; and selectively enable access to the electronic system based at least in part on whether the second authentication input matches the second credential.

8. The input device of claim 7, wherein the authentication component is further configured to: deactivate the one or more light sources in response to determining that the second authentication input matches the second credential.

9. The input device of claim 7, wherein the authentication component is further configured to: alter illumination of the sensing region in response to determining that the second authentication input does not match the second credential.

10. The input device of claim 9, wherein the authentication component is configured to alter the illumination of the sensing region by changing a color or pattern of light emitted by at least one of the light sources.

11. An authentication method comprising: receiving a first authentication input via a first authentication device; determining whether the first authentication input matches a first credential associated with a first authentication factor of a multi-factor authentication operation that controls access to an electronic system; and selectively activating one or more light sources associated with a second authentication factor of the multi-factor authentication operation based at least in part on whether the first authentication input matches the first credential. selectively illuminating a sensing region of an input device associated with a second authentication factor of the multifactor authentication operation based at least in part on whether the first authentication input matches the first credential, wherein the sensing region is provided at least in part by a plurality of sensor electrodes configured to receive a second authentication input.

12. The method of claim 11, wherein the first authentication device comprises a fingerprint sensor, and wherein the first authentication input represents a fingerprint.

13. The method of claim 11, wherein the sensing region is illuminated in response to determining that the first authentication input matches the first credential of an authorized user.

14. The method of claim 11, wherein the plurality of sensor electrodes are disposed behind an input surface associated with the sensing region, and wherein the illuminating comprises: activating one or more light sources disposed behind the input surface.

15. The method of claim 14, further comprising: receiving the second authentication input via the plurality of sensor electrodes in response to activating the one or more light sources; determining whether the second authentication input matches a second credential associated with the second authentication factor of the multifactor authentication operation; and enabling access to the electronic system based at least in part on whether the second authentication input matches the second credential.

16. The method of claim 15, further comprising: deactivating the one or more light sources in response to determining that the second authentication input matches the second credential; and altering illumination of the sensing region in response to determining that the second authentication input does not match the second credential.

17. The method of claim 16, wherein altering the illumination comprises: changing a color or pattern of light emitted by at least one of the light sources.

18. An authentication system comprising: a processing system; and a memory storing instructions that, when executed by the processing system, cause the authentication system to: receive a first authentication input via a first authentication device; determine whether the first authentication input matches a first credential associated with a first authentication factor of a multifactor authentication operation that controls access to an electronic system; and selectively illuminate a sensing region of an input device associated with a second authentication factor of the multifactor authentication operation based at least in part on whether the first authentication input matches the first credential, wherein the sensing region is provided at least in part by a plurality of sensor electrodes configured to receive a second authentication input.

19. The authentication system of claim 18, wherein execution of the instructions further causes the authentication system to: receive the second authentication input via the plurality of sensor electrodes in response to illuminating the sensing region; determine whether the second authentication input matches a second credential associated with the second authentication factor of the multifactor authentication operation; and enable access to the electronic system based at least in part on whether the second authentication input matches the second credential. ​ ​ ​ ​ 20. The authentication system of claim 19, wherein execution of the instructions further causes the authentication system to: deactivate one or more light sources in response to determining that the second authentication input matches the second credential; and alter illumination of the sensing region in response to determining that the second authentication input does not match the second credential.

Images