Mobile device inputs for activating authentication credentials

Abstract

The present disclosure relates a mobile device including an input device, a wireless communication module, and at least one processor and a memory - storing an authentication management application. The authentication management application includes stored instructions executable to detect a first input received by the input device, wherein the first input corresponds to one of a plurality of stored inputs, and in response to the detected first input, identify a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a. plurality of stored authentication credentials. The authentication management application further includes stored instructions executable to designate, by the authentication management application, the identified first authentication credential as an active authentication credential associated with an application, wherein the application, in response to a prompt for authentication, communicates the active authentication credential via tire wireless communication module.

Description

MOBILE DEVICE INPUTS FOR ACTIVATING AUTHENTICATION CREDENTIALSBACKGROUND[1] Many modem computing devices, including mobile phones, personal computers, and tablets include applications to facilitate identity authentication for sales transactions and location access. Wide adoption of identity authentication via computing devices has resulted in cases where multiple instances of secured information used as part of the identity authentication are stored on the same computing device.SUMMARY[2] In an example, a mobile device includes an input device, a wireless communication module, and at least one processor and a memory in communication with input device and the wireless communication module, wherein the at least one processor is configured with an authentication management application stored in the memory'. The authentication management application includes stored instructions executable to detect a first input received by the input device, wherein the first input corresponds to one of a plurality of stored inputs, and in response to the detected first input, identify a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials. The instructions further executable to designate, by the authentication management application, the identified first authentication credential as an active authentication credential associated with an application, and wherein the application, in response to a prompt for authentication, communicates the active authentication credential via the wireless communication module.[3] In another embodiment, a non-transitory computer readable storing program instructions executable by one or more processors to cause the one or more processors to perform operations is disclosed. The performed operations include detecting a first input received by an input device, wherein the first input corresponds to one of a plurality of stored inputs, and in response to the detected first input, identifying a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality' of stored authentication credentials. The performed operations further include designating, by an authentication management application, the identified first authentication credential as an active authentication credential associated with an application, and wherein the application, in response to a prompt for authentication, communicates the active authentication credential via a wireless communication module.[4] In another embodiment, a computer implemented method is disclosed. The method includes detecting a first input received by an input device, wherein the first input corresponds to one of a plurality of stored inputs, and in response to the detected first input, identifying a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials. The method further includes designating, by an authentication management application, the identified first authentication credential as an active authentication credential associated with an application, and communicating, by the application in response to a prompt for authentication, the active authentication credential via a wireless communication module.[5] In another embodiment, a system for authentication is disclosed. The system includes means for detecting a first input received by an input device, wherein the first input corresponds to one of a plurality of stored inputs, and in response to the detected first input, means for identifying a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality' of stored authentication credentials. The method further includes means for designating, by an authentication management application, the identified first authentication credential as an active authentication credential associated with an application, and means for communication by the application, in response to a prompt for authentication, to communicate the active authentication credential.[6] The foregoing summary is illustrative only and is not intended to be in any way limiting. In addition to the illustrative aspects, embodiments, and features described above, further aspects, embodiments, and features will become apparent by reference to the figures and the following detailed description and the accompanying drawings.BRIEF DESCRIPTION OF THE DRAWINGS[7] Figure 1 illustrates an example computing device, in accordance with example embodiments.[8] Figure 2 is a simplified block diagram showing some of the components of an example computing system.[9] Figure 3 is a first flowchart of a configuration method, in accordance with example embodiments.

[0010] Figure 4 is a first flowchart of an authentication method, in accordance with example embodiments.

[0011] Figure 5 are views of an example computing device implementing an authentication mechanism, in accordance with example embodiments.

[0012] Figure 6 illustrates views depicting an authentication mechanism, in accordance with example embodiments.DETAILED DESCRIPTION

[0013] Example methods, devices, and systems are described herein. It should be understood that the words “example” and “exemplary” are used herein to mean “serving as an example, instance, or illustration.” Any embodiment or feature described herein as being an “example” or “exemplary'” is not necessarily to be construed as preferred or advantageous over other embodiments or features unless indicated as such. Other embodiments can be utilized, and other changes can be made, without departing fiom the scope of the subject matter presented herein.

[0014] Thus, the example embodiments described herein are not meant to be limiting. It will be readily understood that the aspects of the present disclosure, as generally described herein, and illustrated in the figures, can be arranged, substituted, combined, separated, and designed in a wide variety of different configurations.

[0015] Throughout this description, the articles “a” or “an” are used to introduce elements of the example embodiments. Any reference to “a” or “an” refers to “at least one,” and any reference to “the” refers to “the at least one,” unless otherwise specified, or unless the context clearly dictates otherwise. The intent of using the conjunction “or” within a described list of at least two terms is to indicate any of the listed terms or any combination of the listed terms.

[0016] The use of ordinal numbers such as “first,” “second,” “third” and so on is to distinguish respective elements rather than to denote a particular order of those elements. For the purpose of this description, the terms “multiple” and “a plurality of’ refer to “two or more” or “more than one.”

[0017] Further, unless context suggests otherwise, the features illustrated in each of the figures may be used in combination with one another. Thus, the figures should be generally viewed as component aspects of one or more overall embodiments, with the understanding that not all illustrated features are necessary for each embodiment. In the figures, similar symbols typically identify similar components, unless context dictates otherwise . Further, unless otherwise noted, figures are not drawn to scale and are used for illustrative purposes only. Moreover, the figures are representational only and not all components are shown. For example, additional structural or restraining components might not be shown.

[0018] Additionally, any enumeration of elements, blocks, or steps in this specification or the claims is for purposes of clarity. Thus, such enumeration should not be interpreted to requireor imply that these elements, blocks, or steps adhere to a particular arrangement or are carried out in a particular order.I. Overview

[0019] Mobile computing devices such as smartphones, tablets, and smart watches are ubiquitous devices that have replaced a number of items in common usage. For example, mobile computing devices often include a payment application allowing a user to complete a transaction in a secure manner. The payment application replaces common items like physical cash, paper checks, and coins as well as plastic cards issued by different institutions for conducting transactions based on credit, debit and / or pre-paid balances. In some examples, mobile computing devices include a mobile credential application allowing a user to gain access to a physical location. The mobile credential application replaces common items like physical keys cut to engage mechanical locks, security cards including cards employing magnetic coding, radio frequency identification (RFID), near field communications and other security measures.

[0020] Mobile computing devices often include multiple versions of payment credentials representing each available funding source, e.g., pre-paid, credit, direct credit, money transfer. Similarly, a mobile computing device may include multiple versions of identification credentials such as a government identification, a business identification, and other personal identification such as a gym membership or parking access. Accessing the credentials stored on a mobile computing device, such as payment or identification credentials, is a multi-step process that is repeated each time a credential is selected and accessed. The additional effort to repeatedly utilize the multi-step process while potentially tedious may be overlooked in the name of preventing unauthorized payments. Accordingly, when completing an example sales transaction using payment systems, a user selects a payment application, and then selects the desired payment credential each time a purchase is made. However, when the same multi-step process is repeated dozens of times throughout the course of a business day as a user utilizes a mobile computing device to gain physical access to, or within, a building location, the process may be too cumbersome in practice.

[0021] Providing secure access to payment and / or identification credentials may be accomplished utilizing the capabilities of the mobile computing device to identify a user selection. In some examples, a user gesture may be identified and linked to a credential. For example, a three-finger swipe from the bottom to the top of a smartphone display may be recognized and associated with a first credential. Similarly, a two-finger swipe from the top to the bottom of a smartphone display may be recognized and associated with a second credential.In further examples, the user gesture may be based on fecial recognition. For example, fecial recognition defined with the user’s eyes closed may be associated with a first identification credential. In another example, fecial recognition defined with a different fecial expression may be similarly associated with a second identification credential. In some examples, additional capabilities of the mobile computing device may be employed to further identify a credential to activate. For example, a positioning device such as a GPS transceiver may be utilized when selecting identification credentials for building access. Specifically, the GPS location may identify a building corresponding to a particular identification credential resulting in the activation or selection of the identified identification credential. In another example, a network communication module may be utilized when selecting identification credentials for building access by determining a network connection associated with the building.II. Example Systems and Methods

[0022] Figure 1 illustrates an example computing device 100. The example computing device100 shown in Figure 1 is arranged in the form factor of a mobile computing device such as a mobile phone. However, computing device 100 may be alternatively implemented as a laptop computer, a tablet computer, and / or a wearable computing device such as a health tracking device, and a smart watch. Computing device 100 may include various elements, such as body 102, display 106, and buttons 108 and 110. Computing device 100 may further include one or more cameras, such as front-facing camera 104 and one or more rear-feeing cameras 112. Each of the rear-feeing cameras may have a different field of view. For example, the rear feeing cameras may include a wide angle camera, a main camera, and a telephoto camera. The wide angle camera may capture a larger portion of the environment compared to the main camera and the telephoto camera, and the telephoto camera may capture more detailed images of a smaller portion of the environment compared to the main camera and the wide angle camera.

[0023] Front-facing camera 104 may be positioned on a side of body 102 typically facing a user while in operation (e.g., on the same side as display 106). Rear-feeing camera 112 may be positioned on a side of body 102 opposite front-feeing camera 104. Referring to the cameras as front and rear facing is arbitrary, and computing device 100 may include multiple cameras positioned on various sides of body 102.

[0024] Display 106 could represent a cathode ray tube (CRT) display, a light emitting diode (LED) display, a liquid crystal (LCD) display, a plasma display, an organic light emitting diode (OLED) display, or any other type of display known in the art. In some examples, display 106 may display a digital representation of the current image being captured by front-facing camera 104 and / or rear-feeing camera 112, an image that could be captured by one or more of thesecameras, an image that was recently captured by one or more of these cameras, and / or a modified version of one or more of these images.

[0025] Display 106 may incorporate a touch sensitive-panel and functionality that may be able to adjust the settings and / or configuration of one or more aspects of computing device 100. The touch sensitive-panel and functionality incorporated into the display 106 may be configured to recognize input gestures based on, for example, the number of digits in contact with the touchscreen, the type of action detected, the direction of the action detected. In another example, the touch sensitive-panel functionality and / or the front-feeing camera 104 of the display 106 may be configured to recognize fecial expressions of a user. For example, a fecial expression may be captured by the front-feeing camera 104 in response to a tap on the touchscreen. A first facial expression may include a user with their eyes closed, while a second fecial expression may be a different expression.

[0026] Figure 2 is a simplified block diagram showing some of the components of an example computing system 200. By way of example and without limitation, computing system 200 maybe a cellular mobile telephone (e.g., a smartphone), a computer (such as a desktop, notebook, tablet, server, or handheld computer), a home automation component, a digital video recorder (DVR), a digital television, a remote control, a wearable computing device, a gaming console, a robotic device, a vehicle, or some other type of device. Computing system 200 may represent, for example, aspects of the mobile computing device 100.

[0027] As shown in Figure 2, computing system 200 may include communication interfece 202, user interface 204, processor 206, data storage 208, and input components 224, all of which may be communicatively linked together by a system bus, network, or other connection mechanism 210. Computing system 200 may be equipped with at least some short-range communication capabilities operating in connection with a digital wallet or other secure storage for sensitive information.

[0028] The communication interfece 202 may allow the computing system 200 to communicate, using analog or digital modulation, with other devices, access networks, and / or transport networks. Thus, communication interface 202 may facilitate circuit-switched and / or packet-switched communication, such as plain old telephone service (POTS) communication and / or Internet protocol (IP) or other packetized communication. For instance, communication interface 202 may include a chipset and antenna arranged for wireless communication with a radio access network or an access point.

[0029] The communication interfece 202 may further include a wireline interfece, such as an Ethernet, Universal Serial Bus (USB), or High-Definition Multimedia Interfece (HDMI) port,among other possibilities. The communication interface 202 may also take the form of or include a wireless interface, such as a Wi-Fi, BLUETOOTH®, global positioning system (GPS), or wide-area wireless interface (e.g., UWB, WiMAX, or 3GPP Long-Term Evolution (LTE)), among other possibilities. However, other forms of physical layer interfaces and other types of standard or proprietary communication protocols may be used over communication interface 202. Furthermore, communication interface 202 may be a wireless communication module configured to include multiple physical communication interfeces (e.g., a Wi-Fi interface, a BLUETOOTH® interface, and a wide-area wireless interface). In other configurations, the wireless communication module may cooperate with a wired communication module including multiple wired interfaces to provide a range of network access options and capabilities.

[0030] User interface 204 may function to allow computing system 200 to interact with a human or non-human user, such as to receive input from a user and to provide output to the user. Thus, user interface 204 may include input components such as a keypad, keyboard, touch-sensitive panel, a fingerprint scanner, one or more accelerometers, one or more gyroscopes, computer trackpad, computer mouse, joystick, microphone, and so on. User interface 204 may also include one or more output components such as the display 106, which, for example, may be combined with a touch-sensitive panel . The display may be based on CRT, LCD, LED, and / or OLED technologies, or other technologies now known or later developed. User interface 204 may generate controls and visual elements for presentation on the display 106. In an example operation, the user interface 204 may detect a user interaction with the touch-sensitive panel incorporated into display 106, and identify a corresponding control and / or visual element as a way of gathering information from the user. User interface 204 may further be configured to generate audible output(s), via a speaker, speaker jack, audio output port, audio output device, earphones, and / or other similar devices. User interface 204 may also be configured to receive and / or capture audible utterance(s), noise(s), and / or signal(s) by way of a microphone and / or other similar devices. In this way, information may be presented and received via the user interface 204.

[0031] In some examples, a control presented by the user interface 204 may serve as a viewfinder for a camera such as fiont-fecing camera 104 and / or rear-facing camera 112 and provide access to camera functions supported by computing system 200. In some examples, the user interface 204 may include a display to capture fingerprint information using the touch- sensitive panel. In another example, the user interface 204 may cooperate with the front-feeing camera 104 to train and capture a facial gesture directed to the fiont-fecing camera 104 andprovided to the display 106 for review. In another example, the user interface 204 may include a touch-sensitive panel and be configured to identify and distinguish a user gesture provided to the touch-sensitive panel. Additionally, user interface 204 may include one or more controls and elements such as graphical buttons, switches, knobs, and / or dials that facilitate the interaction with the stored functionality as described herein. It may be possible that some or all of the controls such as buttons, switches, knobs, and / or dials are implemented by way of the touch-sensitive panel and the display 106.

[0032] Processor 206 may comprise one or more general purpose processors - e.g., microprocessors - and / or one or more special purpose processors - e.g., digital signal processors (DSPs), graphics processing units (GPUs), floating point units (FPUs), network processors, or application-specific integrated circuits (ASICs). In some instances, special purpose processors may be capable of image processing, image alignment, and merging images, among other possibilities. Data storage 208 may include one or more volatile and / or non-volatile storage components, such as magnetic, optical, flash, or organic storage, and maybe integrated in whole or in part with processor 206. Data storage 208 may include removable and / or non-removable components.

[0033] Processor 206 may be capable of executing program instructions 218 (e.g., compiled or non-compiled program logic and / or machine code) stored in data storage 208 to cany out the various functions described herein. Therefore, data storage 208 may include a non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by computing system 200, cause computing system 200 to carry out any of the methods, processes, or operations disclosed in this specification and / or the accompanying drawings. The execution of program instructions 218 by processor 206 may result in processor 206 using data 212.

[0034] By way of example, program instructions 218 may include an operating system 222 (e.g., an operating system kernel, device drivers), and / or other modules) and one or more application programs 220 (e.g., camera functions, address book, email, web browsing, social networking, audio-to-text functions, text translation functions, and / or gaming applications) installed on computing system 200. Similarly, data 212 may include operating system data 216 and application data 214. Operating system data 216 may be accessible primarily to operating system 222, and application data 214 may be accessible primarily to one or more of application programs 220. Application data 214 may be arranged in a file system that is visible to or hidden from a user of computing system 200. Data 212 may further include secure data 226. Secure data 226 may be stored as part of the operating system data 216, or the application data 214.In another example, the secure data 226 may be physically isolated storage, logically partitioned storage, or otherwise additionally protected against access. The secure data 226 may include authentication credentials such as personal identification, governmental identification, biometric identification information, and other private information. For example, other private information stored as part of the secure data 226 may include authentication credentials associated with financial information. The biometric identification information may include stored or digitized fingerprint information, fecial recognition information, and other quantified personal characteristics.

[0035] Application programs 220 may communicate with operating system 222 through one or more application programming interfaces (APIs). These APIs may facilitate, for instance, application programs 220 reading and / or writing application data 214, transmitting or receiving information via communication interface 202, receiving and / or displaying information on user interface 204, and so on. Additionally, application programs 220 may be downloadable to computing system 200 through one or more online application stores or application markets. However, application programs can also be installed on computing system 200 in other ways, such as via a web browser or through a physical interface (e.g., a USB port) on computing system 200.

[0036] In some cases, application programs 220 may be referred to as “apps” for short. One example application may be an authentication management application 228 which may be a security app, a wallet app, and any other application for handling personal and / or secure data. The authentication management application 228 may be one of the application programs 220 as shown in FIG. 2. In another example, the authentication management application 228 may be part of the operating system 222. The authentication application may be configured to securely access the secure data 226.

[0037] Input components 224 may include, but are not limited to, a touchscreen integrated into the display 106, one or more cameras such as the front feeing camera 104. Additional input components include the buttons 108 and 110 including any controls, toggles, or switches provided in the body 102. Input components 224 may include components configured to determine the device orientation based on one or more accelerometers positioned within the body 102. Input components 224 may be configured to capture images in the visible-light spectrum (e.g., electromagnetic radiation having a wavelength of 380 - 700 nanometers) and / or components configured for capturing of images in the infrared light spectrum (e.g., electromagnetic radiation having a wavelength of 701 nanometers - 1 millimeter), among other possibilities. In some examples, input device 224 may be a tight detection and ranging(LiDAR) sensor providing three-dimension (3D) coordinate and depth information of a target such as a user’s face and expression. Input components 224 may be controlled at least in part by software executed by processor 206.

[0038] FIG. 3 provides a flowchart 300 for configuring secure access to payment and / or identification credentials stored with the mobile computing device 100. For example, the payment and / or identification credentials may be stored as part of secured data 226 and collectively represent authentication credentials that include personal identification, governmental identification, biometric identification information, and other private information accessible by the mobile computing device 100. At block 302, the configuration process begins by accessing the authentication management application 228 via the user interface 204 and the display 106 to identify one of the stored authentication credentials from the group of authentication credentials stored as part of secured data 226 to be presented on command. For example, the selected authentication credential may correspond to a credit account or credit card. In another example, the authentication credential may correspond to a state or federal-issued identification, a building identification, or other information typically stored on an integrated circuit included in a smartcard.

[0039] At block 304, the identified authentication credential may be linked and otherwise associated with an input received via one or more of the input components 224 operating in conjunction with the user interface 204. In some examples, the input may be a user gesture detected through a touch sensitive panel portion of the display 106. The user gesture may be a swipe gesture, may be a tap gesture, and / or may include one or more fingers individually detectable as part of the gesture. In other examples, the input may be a facial expression detected through the front facing camera 104 adjacent to the display 106. The fecial expression may be any repeatable and recognizable expression. Linking the authentication credential to an input may be accomplished through a manual linking process, and / or automatically through a learned or behavior based process.

[0040] In some examples, a manual linking process may include the user interface 204 presenting a first control corresponding to at least one input and a second control corresponding to at least one stored authentication credential. In some examples, a user may graphically connect or align the first control to the second control in order to associate the at least one input with the at least one stored authentication credential. Graphically connecting the two controls may include moving the two controls represented as graphical icons into position relative to each other. For example, the two graphical icons may be aligned next to each other in a pair of adjacent columns. One column presented by the user interface 204 may include graphicalicons representing at least one input, while the second column may include graphical items representing the stored authentication credential. In another example, the manual linking may be accomplished in a series of tasks prompted to the user via the user interface 204. An example series of tasks may prompt the user to first define or identify the desired input on a first screen of the user interface 204, and then, on a second screen of the user interface 204, to identify one of the authentication credentials to associate with the identified input.

[0041] In other examples, the authentication management application 228 may operate in connection with the input components 224, the user interface 204 and / or the communication interface 202 to record the conditions under which each of the authentication credentials is accessed. The authentication management application 228 may be configured to maintain a log of when each authentication credential stored in the secure data 226 has been accessed by the user. The log maintained by the authentication management application 228 may include a count or index to determine the frequency at which an authentication credential has been accessed by the user. The log working in conjunction with the input components 224, and / or the communication interface 202 may include other conditions detected at the time(s) when the authentication credential has been accessed by the user. Those conditions include information such as an access total, an SSID, GPS coordinates, and a relative orientation of the mobile computing device 100.

[0042] The authentication management application 228 may utilize the information within the log to generate an access record associated with each of the stored authentication credentials. The access record may, in some examples, be defined to identify' when and under what conditions each authentication record has been accessed by the user. In some examples, the access record may be used by the authentication management application 228 to automatically associate one of the stored inputs to one of the stored authentication credentials. For example, if the log and access record indicate the access total for one of the stored authentication credentials has exceeded a threshold, the authentication management application 228 may prompt the user via the user interface 204 to associate one of the stored inputs in order to facilitate access to the desired credential. Similarly, if the log and access record indicate that the user employs a specific input when accessing one of the stored authentication credentials, the authentication management application 228 may automatically associate the user-employed input to the stored authentication credential.

[0043] At block 306, an activation action may be established by the authentication management application 228. The activation action may establish when, and under what conditions, one of the authentication credentials is active and available via the mobilecomputing device 100. In one example, the activation action may correspond to the detection of an attempt to unlock the mobile computing device 100. For example, during an attempt to unlock the mobile computing device 100, the authentication management application 228 may detect an input corresponding to a stored swipe gesture and activate the corresponding authentication credential. Alternatively, the mobile computing device 100 may be unlocked for use by an input other than one stored by the authentication management application 228 such as by entering a four (4) or six (6) digit code via the user interface 204 presented on the display 106 without making one of tire authentication credentials active and available. Alternatively, each of the four (4) or six (6) digit codes may act as an input allowing one or more authentication credentials to be associated with a different code. In other examples, the activation action may utilize additional information contained within the access record. For example, the authentication management application 228 may detect that the mobile computing device 100 is oriented horizontally relative to a reader and activate the associated authentication credential for interrogation by the reader. In another example, the authentication management application 228 may detect that the mobile computing device 100 is connected to a secured network having an SSID stored as part of the access record and is oriented as defined in the access record, and then activate a different associated authentication credential for interrogation by the reader.

[0044] FIGS. 4 and 5 provide a flowchart 400 and illustrations 502-506 describing the operation of a secure access mechanism for accessing authentication credentials, such as payment and / or identification credentials. In operation, the mechanism for secure access to authentication credentials begins as described at block 402 with the detection of an input by the authentication management application 228. The detection of an input by the user to the touch-sensitive panel of the display 106 may initiate an activity that requires access to secure information such as payment and / or identification credentials. For example, the user may begin a sales transaction using mobile computing device 100 requiring a payment, credit authorization, or otherwise fund a payment transfer. The sales transaction may be initiated by tire user providing an input to the mobile computing device 100. The input provided by the user may be one of the inputs stored by the authentication management application 228.

[0045] At block 404, in response to the detection of the input, the authentication management application 228 identifies an authentication credential that corresponds to the detected input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials. For example, when the activation action is defined as a device unlock action, the authentication management application 228 activates upon detection of theinput utilized to unlock the mobile computing device 100. As shown in related Figure 5, the front view 502 of the mobile computing device 100 illustrates a first input provided to the display 106 and detected by the included touch sensitive panel incorporated into the display 106. The front view 502 illustrates that the detected input is generally a swipe gesture. In particular, the swipe gesture may be in a downward direction (i.e, from the top of the device 100 to the bottom of the device 100) and include three detected fingers or points of contact. It will be understood that a different number of detected points of contact, and / or a swipe in a different direction may be detected as a different input. For example, the front view 504 of the mobile computing device 100 illustrates a second input provided to the display 106 and detected by the included touch sensitive panel. The front view 504 illustrates that the detected second input is generally a pinch gesture. In particular, the pinch gesture may include two points of contact identified as initially in close proximity to each other and having an increasing relative distance between the two. Alternatively, the pinch gesture may be defined and detected as two points of contact coming together to a position relative to each other and in close proximity.

[0046] In another example, the front view 506 of the mobile computing device 100 illustrates another activation action that may be implemented to access the authentication management application 228. The mobile computing device 100 shown in front view 506 may remain in a locked state, the activation action may be a proximity action associated with the mobile computing device 100 and a reader. For example, the authentication management application 228 may detect an input related to the mobile computing device 100 being rotated in the direction indicated by the arrow R, and positioned within a fixed proximity to a card reader. In this example, the information associated with the detected input, may be the relative position and orientation of the mobile computing device 100 as determined by one or more accelerometers positioned within the body 102. In this way, the relative orientation of the mobile computing device 100 may be identified as another input to be detected by the authentication management application 228.

[0047] In another configuration, the input provided to the mobile computing device 100 may be augmented with location-specific information and / or data stored as part of the log and / or access record to further specify one of the inputs provided by the user. For example, the activation action may be an unlock action that identifies the orientation of the mobile computing device 100 as being upside down (i.e., inverted from the normal use orientation) and in proximity to a reader or other access authentication device. The activation action may further specify that the input includes information indicating a connection to a location specificnetwork as provided by the communication interface 202. For example, the activation criteria may require that the communication interface 202 connects to a secure network that includes a specific SSID. In another example, the location-specific information detected by the communication interface 202 may be a communication or query from a near field communication device such as an access authentication device. In another example, the communication interface 202 may detect the location-specific factor as a location specified by Global Navigation Satellite System (GNSS) position or other location derivation device or technique.

[0048] Returning to Figure 4, at block 406 the mechanism for secure access of authentication credentials continues with the designation by the authentication management application 228 of the identified authentication credential as an active authentication credential. For example and as shown in Figure 5, the three-fingered downward swipe the front view 502 results in the authentication management application 228 activating the authentication credentials associated with a credit card. Similarly, as shown in Figure 5, detection of a different activation criteria such as the two-fingered pinch shown in front view 504 results in the authentication management application 228 activating the authentication credentials associated with a debit account. The front view 506 of Figure 5 depicts detection of an activation action that includes orientation-specific criteria resulting in the authentication management application 228 activating the authentication credentials associated with a location such as a building access card.

[0049] At block 408, the mechanism for secure access of authentication credentials continues with the authentication management application 228 communicating the active authentication credential via the wireless communication module. In other words, by providing the activated authentication credential, the authentication management application 228 allows the user to complete the initiated activity. For example, the credit or debit information presented as shown in either front view 502 or front view 504, may be utilized to complete the financial transaction. Similarly, the location information presented as shown in front view 506 may be utilized to gain access to a building or other location with electronic access.

[0050] FIG. 6 depicts an example 600 of the mobile computing device 100 incorporating the authentication management application 228 configured according to the present disclosure. The example 600 illustrates a mechanism for secure access to authentication credentials that may be implemented using the mobile computing device 100. In the illustrated example, the authentication management application 228 may be configured to provide and / or display authentication credentials for activities conducted at a first location 602, a second location 604,and a third location 606. In the illustrated example 600, the first location 602 may be a personal home configured for access via the mobile computing device 100. The authentication management application 228 may be configured to unlock the mobile computing device 100 in response to a three-point of contact down-swipe. In response to the detected three-point of contact down-swipe, the authentication management application 228 may activate the linked authentication credentials identified as L2. The active L2 credential information may be provided by the mobile computing device 100 in order to access the first location. In some examples, the authentication management application 228 may further access GPS information GPS2 to further validate the access to the linked authentication credentials identified as L2.

[0051] In the illustrated example 600, the second location 604 may be a store or other location where a sales transaction may occur via the mobile computing device 100. The authentication management application 228 may be configured to unlock the mobile computing device 100 in response to a two-point of contact right-swipe. In response to the detected two-point of contact right-swipe, the authentication management application 228 may activate the linked authentication credentials identified as CC. The active CC authentication credentials may be provided by the mobile computing device 100 in order to complete purchase or other transaction at the second location.

[0052] In the illustrated example 600, the third location 606 may be a business or other secure location where access may be restricted by a keycard stored and provided by the mobile computing device 100. In this example, the mobile computing device 100 may be a company provided mobile phone, or a mobile device configured to provide secure access. The authentication management application 228 may be configured to activate authentication credentials when the mobile computing device 100 is oriented and positioned in proximity to a reader. In response to the detected proximity to the reader and a determination that the mobile computing device 100 is oriented in a landscape arrangement relative to the card reader, the authentication management application 228 may activate the linked authentication credentials identified as LI. The active LI credential information may be provided by the mobile computing device 100 in order to access the third location without having to unlock the mobile computing device 100. The authentication management application 228 may further access network information SSID1 to further validate the access to the linked authentication credentials identified as LI. The access network information SSID1 may correspond to a secured network at the third location where the network password is stored on the mobile computing device.

[0053] In some examples, the mechanism for secure access to authentication credentials includes maintaining an access record to associate one of the plurality of stored inputs to one of a plurality of authentication credentials based on access repetitions recorded for the one of the plurality of stored inputs.

[0054] In some examples, the input device is one of a touch screen, a fingerprint detection module, a camera, or at least one accelerometer.

[0055] In some examples, the wireless communication module is a cellular communications module, a Bluetooth module, an NFC module, a positioning module, or a Wi-Fi communication module.

[0056] In some examples, the first authentication credential is identified in connection with an input provided by the wireless communication module.

[0057] In some examples, the first authentication credential is identified from the plurality of security profiles based on a location identified by a positioning module.

[0058] In some examples, the first authentication credential is identified from the plurality of security profiles based on an SSID associated with a Wi-Fi network identified by a Wi-Fi communications module.

[0059] In some examples, the first input is a gesture detected by the input device.

[0060] In some examples, the first input is a facial expression detected by a camera implemented as part of the input device.HI. Conclusion

[0061] The present disclosure is not to be limited in terms of the particular embodiments and examples described in this application, which are intended as illustrations of various aspects. Many modifications and variations can be made without departing from its scope, as will be apparent to those skilled in the art. Functionally equivalent methods and apparatuses within the scope of the disclosure, in addition to those described herein, will be apparent to those skilled in the art from the foregoing descriptions. Such modifications and variations are intended to fall within the scope of the appended claims.

[0062] The above detailed description describes various features and operations of die disclosed systems, devices, and methods with reference to the accompanying figures. In the figures, similar symbols typically identify similar components, unless context dictates otherwise. The example embodiments described herein and in the figures are not meant to be limiting. Other embodiments can be utilized, and other changes can be made, without departing from the scope of the subject matter presented herein. It will be readily understood that the aspects of the present disclosure, as generally described herein, and illustrated in the figures,can be arranged, substituted, combined, separated, and designed in a wide variety of different configurations.

[0063] With respect to any or all of the message flow diagrams, scenarios, and flow charts in the figures and as discussed herein, each step, block, and / or communication can represent a processing of information and / or a transmission of information in accordance with example embodiments. Alternative embodiments are included within the scope of these example embodiments. In these alternative embodiments, for example, operations described as steps, blocks, transmissions, communications, requests, responses, and / or messages can be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved . Further, more or fewer blocks and / or operations can be used with any of the message flow diagrams, scenarios, and flow charts discussed herein, and these message flow diagrams, scenarios, and flow charts can be combined with one another, in part or in whole.

[0064] A step or block that represents a processing of information may correspond to circuitry that can be configured to perform the specific logical functions of a herein-described method or technique. Alternatively or additionally, a block that represents a processing of information may correspond to a module, a segment, or a portion of program code (including related data). The program code may include one or more instructions executable by a processor for implementing specific logical operations or actions in the method or technique. The program code and / or related data may be stored on any type of computer readable medium such as a storage device including random access memory (RAM), a disk drive, a solid state drive, or another storage medium.

[0065] The computer readable medium may also include non-transitory computer readable media such as computer readable media that store data for short periods of time like register memory, processor cache, and RAM. The computer readable media may also include non- transitory computer readable media that store program code and / or data for longer periods of time. Thus, the computer readable media may include secondary or persistent long term storage, like read only memory (ROM), optical or magnetic disks, solid state drives, compactdisc read only memory (CD-ROM), for example. The computer readable media may also be any other volatile or non-volatile storage systems. A computer readable medium may be considered a computer readable storage medium, for example, or a tangible storage device.

[0066] Moreover, a step or block that represents one or more information transmissions may correspond to information transmissions between software and / or hardware modules in thesame physical device. However, other information transmissions may be between software modules and / or hardware modules in different physical devices.

[0067] The particular arrangements shown in the figures should not be viewed as limiting. It should be understood that other embodiments can include more or less of each element shown in a given figure. Further, some of the illustrated elements can be combined or omitted. Yet further, an example embodiment can include elements that are not illustrated in the figures.

[0068] While various aspects and embodiments have been disclosed herein, other aspects and embodiments will be apparent to those skilled in the art. The various aspects and embodiments disclosed herein are for the purpose of illustration and are not intended to be limiting, with the true scope being indicated by the following claims.

Claims

CLAIMS1. A mobile device comprising: an input device; a wireless communication module; and at least one processor and a memory in communication with the input device and the wireless communication module, wherein the at least one processor is configured with an authentication management application stored in the memory, the authentication management application including stored instructions executable to: detect a first input received by the input device, wherein the first input corresponds to one of a plurality of stored inputs; in response to the detected first input, identify a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials; and designate, by the authentication management application, the identified first authentication credential as an active authentication credential associated with an application, wherein the application, in response to a prompt for authentication, communicates the active authentication credential via the wireless communication module.

2. The mobile device of claim 1, wherein the instructions are further executable to: maintain an access record to associate one or more of the plurality of stored inputs to one or more of the plurality of stored authentication credentials based on access repetitions recorded for the one or more of the plurality of stored inputs.

3. The mobile device of claim 1, wherein the input device is one of a touch screen, a fingerprint detection module, a camera, or at least one accelerometer.

4. The mobile device of claim 1, wherein the wireless communication module is a cellular communications module, a Bluetooth module, an NFC module, a positioning module, or a Wi-Fi communication module.

5. The mobile device of claim 1 , wherein the first authentication credential is identified in connection with information provided by the wireless communication module.

6. The mobile device of claim 5, wherein the information provided by the wireless communication module includes an SSID associated with a Wi-Fi network.

7. The mobile device of claim 1, wherein the first authentication credential is further identified from the plurality of stored authentication credentials based on a location identified by a positioning module.

8. The mobile device of claim 1, wherein the first authentication credential is further identified from the plurality of stored authentication credentials based on an SSID associated with a secured Wi-Fi network.

9. The mobile device of claim 1, wherein the first input is a gesture detected by the input device.

10. The mobile device of claim 1, wherein the first input is a first expression detected by a camera associated with the input device.

11. The mobile device of claim 1, wherein the instructions are further executable to: detect a second input received by the input device, wherein the second input corresponds to a second one of the plurality of stored inputs; in response to the detected second input, identify a second authentication credential that corresponds to the detected second input.

12. The mobile device of claim 1, wherein the first input is a first orientation provided by at least one accelerometer in communication with the authentication management application.

13. The mobile device of claim 12, wherein the first orientation provided by the at least one accelerometer is associated with information provided by the wireless communication module.

14. A non-transitory computer readable storing program instructions executable by one or more processors to cause the one or more processors to perform operations comprising: detecting a first input received by an input device, wherein the first input corresponds to one of a plurality of stored inputs; in response to the detected first input, identifying a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials; and designating the identified first authentication credential as an active authentication credential associated with an application, wherein the application, in response to a prompt for authentication, communicates the active authentication credential via a wireless communication module.

15. The non-transitory computer readable of claim 14, the operations further comprising: maintaining an access record to associate one or more of the plurality of stored inputs to one or more of the plurality of stored authentication credentials based on access repetitions recorded for the one of the plurality of stored inputs.

16. The non-transitory computer readable of claim 14, the operations further comprising: detecting a second input received by the input device, wherein the second input corresponds to a second one of the plurality of stored inputs; in response to the detected second input, identifying a second authentication credential that corresponds to the detected second input.

17. The non-transitory computer readable of claim 14, wherein die wireless communication module is a cellular communications module, a Bluetooth module, an NFC module, a positioning module, or a Wi-Fi communication module.

18. The non-transitory computer readable of claim 17, wherein the first authentication credential is identified in connection with information provided by the wireless communication module.

19. The non-transitory computer readable of claim 14, wherein the first authentication credential is further identified from the plurality of stored authentication credentials based on a location identified by a positioning module.

20. A computer implemented method comprising: detecting a first input received by an input device, wherein the first input corresponds to one of a plurality of stored inputs; in response to the detected first input, identifying a first authentication credential that corresponds to the detected first input, wherein each of the plurality of stored inputs is associated with one of a plurality of stored authentication credentials; and designating, by an authentication management application, the identified first authentication credential as an active authentication credential associated with an application, communicating, by the application in response to a prompt for authentication, the active authentication credential via a wireless communication module.

Images