Methods and systems for accessing computing systems with biometric identification

Embodiments for managing computing systems by one or more processors are described. Content rendered by a display device of a computing system is prevented from being modified. An object is detected within a proximity of the display device. The object is associated with an individual. A biometric identification process is caused to be performed on the individual while the object is within the proximity of the display device. Based on the biometric identification process, the content is allowed to be modified while the object is within the proximity of the display device.

BACKGROUND OF THE INVENTION

Field of the Invention

The present invention relates in general to computing systems, and more particularly, to various embodiments for accessing computing systems with biometric identification.

Description of the Related Art

Computing devices (or systems) are often used to display various types of content, such as information/data, images, etc., in situations in which it's desirable that at least some people who view the content and/or are new to the device are not able to make any modifications or changes to the content. For example, in a public place, such as an airport terminal or train station, computing terminals, or at least display devices/screens thereof, may be used to display various types of information, such as schedules, delays, destinations, or general travel-related information.

Typically, this information cannot be changed by any individual who encounters the display. Rather, the display may be accessed from a remote terminal (e.g., in a controlled access area) or a login/security process may be required (e.g., at a terminal near the display).

SUMMARY OF THE INVENTION

Various embodiments for managing computing systems by one or more processors are described. In one embodiment, by way of example only, a method for managing a computing system, again by one or more processors, is provided. Content rendered by a display device of a computing system is prevented from being modified. An object is detected within a proximity of the display device. The object is associated with an individual. A biometric identification process is caused to be performed on the individual while the object is within the proximity of the display device. Based on the biometric identification process, the content is allowed to be modified while the object is within the proximity of the display device.

DETAILED DESCRIPTION OF THE DRAWINGS

As discussed above, computing devices (or systems) are often used to display various types of content, such as information/data, images, etc., in situations in which it's desirable that at least some people who view the content and/or are new to the device are not able to make any modifications or changes to the content. As such, the devices, or at least the content rendered on the displays, are held in a “locked” state so that the content cannot be changed, or perhaps such that some of the content may not be fully accessed and/or utilized.

As one example, various types of information is often displayed using computing devices at public places, such as airport terminals and train stations. This information may include schedules, delays, destinations, and other travel-related information. Generally speaking, it is undesirable for anyone (e.g., travelers) walking by to have the ability to make any changes to the information displayed. Similarly, work places may have various types of content, such as information related to new products, displayed in lobbies or other areas where visitors may spend time. Typically, such content can only be changed by authorized personnel (e.g., employees with an appropriate security clearance).

In such situations, typically the computing device and/or the display screen must be “unlocked” in some manner in order for any changes to the content to be made. This may be accomplished via a remote computer terminal or in situations in which a terminal is located near the display by requiring some sort of security clearance process (e.g., logging in, entering a password, etc.).

However, using conventional systems, there is no way for an authorized user to easily and quickly make changes to the content. That is, the authorized user typically has to pass whatever security procedures are being used, go to a remote terminal, and/or communicate with other personnel in order for the changes to be made.

To address these needs, some embodiments described herein provide methods and systems for managing computing systems (or devices) in such a way that authorized users are easily and quickly able to access and/or make changes to at least some content rendered by a computing system (and/or a display device thereof) and/or the data associated with the rendered content.

In some embodiments, this is accomplished by utilizing a biometric identification process that is initiated when an object is detected within a proximity of (e.g., in contact with) a display device of the system. In at least some embodiments, the computing system may be accessed and/or changes to the content (and/or associated data) are allowed only if the individual is determined to be an authorized user (and/or have the appropriate security clearance) and only while the object remains within the proximity of the display device.

As one example, the computing system may include a fingerprint scanner, and when an object (e.g., a finger) is detected making contact with the fingerprint scanner, a fingerprint scanning process is performed to determine whether or not the individual is authorized to, for example, access and/or make any changes to the content. If the individual is authorized, at least some of the content on the display device (and/or at least some of the data on the computing system associated with the content) is “unlocked” so that it may be accessed and/or changes to it may be made. The content may remain unlocked only so long as the finger of the individual remains in contact with the fingerprint scanner. That is, when the finger is detected as being removed from the fingerprint scanner, the content is again “locked” so that it may no longer be accessed and/or no additional changes may be made.

The biometric identification may be performed using an apparatus (e.g., biometric device) that is integrated into the display device. For example, in some particular embodiments, the computing system includes a touchscreen display device that has fingerprint scanning capabilities (e.g., the fingerprint scanner is integrated into the display device). In such embodiments, the content (and/or computing system) may be unlocked when a finger is detected as making contact with the touchscreen and the subsequent fingerprint scanning process indicates that the individual is an authorized user (e.g., authorized to access and/or make changes to the content). The individual may be able to access and/or make changes to and/or manipulate the content so long as his/her finger remains in contact with the touchscreen. However, once the individual's finger is detected as being removed from the touchscreen, the content is again “locked.”

In some embodiments, the content is rendered on a portion of the touchscreen configured to perform a fingerprint scan. That is, the individual may touch the portion of the touchscreen being used to render the content he/she wishes to change, and that same portion of the touchscreen may then be utilized to perform the biometric identification process. While maintaining contact with the touchscreen, the individual may be able to make changes (e.g., “drag” the content to a different portion of the screen).

In particular, in some embodiments, a method, by one or more processors, for managing computing systems, again by one or more processors, is provided. Content rendered by a display device of a computing system is prevented from being modified. An object is detected within a proximity of the display device. The object is associated with an individual. A biometric identification process is caused to be performed on the individual while the object is within the proximity of the display device. Based on the biometric identification process, the content is allowed to be modified (and/or accessed) while the object is within the proximity of the display device.

The detecting of the object within the proximity of the display device may include detecting the object in contact with (e.g., direct contact with) a portion of the display device. The content may be rendered on the portion of the display device.

The object may be detected moving from the portion of the display device to a second portion of the display device. The content may be caused to be modified in response to the detecting of the object moving from the portion of the display device to the second portion of the display device.

The object may be a portion of a body of the individual. The object may be a finger of the individual. The biometric identification process may include a fingerprint scan.

The allowing of the content to be modified while the object is within the proximity of the display device may include detecting the object moving beyond the proximity of the display device and re-preventing the content from being modified after the detecting of the object moving beyond the proximity of the display device.

Characteristics are as follows:

Service Models are as follows:

Deployment Models are as follows:

In the context of the present invention, and as one of skill in the art will appreciate, various components depicted inFIG. 1may be located in, for example, personal computer systems, server computer systems, thin clients, thick clients, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, mobile electronic devices such as mobile (or cellular and/or smart) phones, personal data assistants (PDAs), tablets, wearable technology devices, laptops, handheld game consoles, portable media players, etc., as well as computing systems in vehicles, such as automobiles, aircraft, watercrafts, etc. For example, some of the processing and data storage capabilities associated with mechanisms of the illustrated embodiments may take place locally via local processing components, while the same components are connected via a network to remotely located, distributed computing data processing and storage components to accomplish various purposes of the present invention. Again, as will be appreciated by one of ordinary skill in the art, the present illustration is intended to convey only a subset of what may be an entire connected network of distributed computing components that accomplish various inventive aspects collectively.

Referring now toFIG. 2, illustrative cloud computing environment50is depicted. As shown, cloud computing environment50comprises one or more cloud computing nodes10with which local computing devices used by cloud consumers, such as, for example, cellular telephone or PDA54A, desktop computer54B, laptop computer54C, biometric device (e.g., a fingerprint scanner)54D, and vehicles (e.g., automobiles, aircraft, watercraft, etc.)54E may communicate. Although biometric device54D is shown as being a separate device, it should be understood that in some embodiments biometric device54D may be integrated into the other devices/systems54A,54B,54C, and54E (e.g., within a display device of another computing system).

Still referring toFIG. 2, nodes10may communicate with one another. They may be grouped (not shown) physically or virtually, in one or more networks, such as Private, Community, Public, or Hybrid clouds as described hereinabove, or a combination thereof. This allows cloud computing environment50to offer infrastructure, platforms and/or software as services for which a cloud consumer does not need to maintain resources on a local computing device. It is understood that the types of computing devices54A-E shown inFIG. 2are intended to be illustrative only and that computing nodes10and cloud computing environment50can communicate with any type of computerized device over any type of network and/or network addressable connection (e.g., using a web browser).

As described above, some embodiments described herein provide methods and systems for managing computing systems, or more particularly, methods and systems for allowing access to computing systems using biometric identification. In some embodiments, (authorized) users are easily and quickly able to access and/or make changes to at least some content rendered and/or the data associated with the rendered content. In some embodiments, this is accomplished by utilizing a biometric identification process that is initiated when an object is detected within a proximity of (e.g., in contact with) a display device of the system. In at least some embodiments, access and/or changes to the content (and/or associated data) are allowed only if the individual is determined to be an authorized user (and/or have the appropriate security clearance) and the changes may only be made while the object remains within the proximity of the display device.

FIG. 4illustrates a display device400according to some embodiments of the present invention. The display device400may be any suitable device configured to render (or display) content and/or information associated with a computing system or device, such as those described above. In some embodiments, the display device400is a display screen, such as an active-matrix liquid-crystal display (AMLCD), a thin-film-transistor LCD (TFT LCD), an active-matrix organic light-emitting diode (AMOLED) display, etc. In some embodiments, the display device400is a touchscreen, as is commonly understood in the art (e.g., mutual capacitance or self-capacitance). In some particular embodiments, the display device400is configured to be utilized in a biometric identification process. For example, the display device400may have a biometric device, such as biometric device54D inFIG. 2, integrated therein. The biometric identification process may include a fingerprint scanning. However, it should be understood that other types of biometric identification may be used in other embodiments, such as face recognition, palm print/scanning, hand geometry, DNA, iris and/or retina recognition, odor/scent detection, etc. Further it should be understood that the biometric identification process may be performed, at least in part, by biometric devices that are external (or separate from) the display device400.

In the example shown inFIG. 4, various content (or information) is shown as being displayed (or rendered) by the display device400, in particular, content pieces402-410. In the particular embodiment shown, the content pieces402-410are respectively labeled as “Add Accounting Tab,” “Create Demo,” “Seek Funding,” Define Tests,” and “Document Requirements.” Also in the example shown inFIG. 4, the content pieces402-410are organized into columns (or categories)412,414, and416, respectively labeled “Planned,” “In-Progress,” and “Done.” As such, it should be understood that the example shown is intended to represent the displaying of the status of various tasks or projects, with each of the content pieces402-410representing one of the tasks and the column412-416in which each task is locating representing the current status of that task. However, it should be understood that the embodiment described herein may be applied to other types of content, such as text, images, spreadsheets, applications (e.g., applications icons/widgets), etc. and/or data stored on a computing system associated with the content.

As shown inFIG. 4, the display device400(and/or the content pieces402-410) is in a “locked” state such that the content (and/or data associated with the content) may not be changed or manipulated. It should be noted that in some embodiments, when the display device400(and/or the computing system) is in the locked state, the content (i.e., content pieces402-410) is rendered by the display device400(e.g., as opposed to a login screen or “screen saver” being rendered, the computing system entering a “power saving mode” in which the display device400is powered off, etc.). As such, the content is rendered by the display device400such that individuals in view of the display screen400may perceive the content (e.g., determine the status of each of the tasks represented by the content pieces402-410). However, as described below, at least some individuals (e.g., unauthorized users) are not able to access and/or make any changes to the content.

Referring now toFIG. 5, an object is detected within a proximity of the display device400. In the particular embodiment shown, the object is a hand, or more specifically a finger (of the hand),418. InFIG. 5, the finger418is detected as making contact with (or direct contact with or touching) the display device400. In the illustrated example, the finger418is touching the portion of the display device400that is rendering content piece402.

In some embodiments, after the finger418is detected as making contact with the display device400, a biometric identification process is initiated. As described above, the biometric identification process may include a fingerprint scanning process. In particular, a fingerprint scanning process may be performed utilizing the portion of the display device400rendering content piece402(i.e., the portion of the display device400with which the finger418is making contact). The detected characteristics of the fingerprint may be compared to those of fingerprints stored in a database (e.g., on a memory in a security system) to determine whether or not the individual associated with the fingerprint is an authorized user (e.g., authorized personnel of the organization administering/managing the display device400, such as an employee of a company or some other authorized user).

If the individual is determined to be an authorized user (or a user authorized to access and/or make changes to the content), the display device400(and/or the content) is changed to an “unlocked” state, allowing at least some changes to (at least some of) the content (and/or data associated with the content) to be made. In some embodiments, the biometric identification process is performed as quickly as possible given the hardware characteristics of the computing system. As such, in some embodiments, if the individual is determined to be an authorized user, the display device400may be unlocked nearly instantaneously (e.g., within a fraction of a second).

An example of such is shown inFIG. 6, where content piece402is “dragged” by the finger418from column412to column414, below content piece408. More specifically, after the finger418contacts the portion of the display device400rendering content piece402and the biometric identification process has indicated that the individual is an authorized user, the individual moves content piece402from its position shown inFIG. 5(i.e., at the top of column412) to its position shown inFIG. 6by maintaining contact with the display device400and moving the finger418across the display device400as shown inFIG. 6. It should be noted that in such an embodiment, the display device400may remain in the unlocked state so long as the finger maintains contact with the display device400, thereby retaining the clearance achieved via the biometric identification process.

Referring now toFIG. 7, the display device400is shown after content piece402has been moved to column414and the finger418has been removed from the display device400. As alluded to above, in some embodiments, when the finger418is detected as being moved away and/or removed from the display device400, the display device400(and/or the content and/or the computing system) returns to the locked state, thereby preventing further changes to the content being made. In some embodiments, the display device400is returned to the locked state as quickly as possible given the hardware characteristics of the computing system. As such, in some embodiments, the display device400may be “re-locked” nearly instantaneously (e.g., within a fraction of a second) after the finger418is detected as being removed from the display device. However, in some embodiments, a delay may be implemented such that the display device400remains unlocked for a brief period of time (e.g., the display device400is again locked a few seconds after the finger418is detected as being removed from the display device400). It should also be noted that inFIG. 7content pieces404and406have been (automatically) moved upwards in column412(i.e., to fill the gap formed by moving content piece402out of column412).

FIG. 8illustrates the display device400in a condition similar to that shown inFIG. 4, with content pieces402-406in column412, content piece408in column414, and content piece410in column416.FIG. 9illustrates a (second) hand/finger420making contact with the portion of the display device400rendering content piece402. In a manner similar to that described above, a biometric identification process (e.g., a fingerprint scan) is then performed on the finger420and/or the respective individual. However, for the purposes of this particular example, it should be assumed that the individual has been determined to be an unauthorized user (i.e., an individual that is not authorized to access and/or make changes to the content rendered by the display device400). As such, the display device400and/or the content is not changed to an unlocked state, but rather remains in the locked state. Thus, when the individual attempts to drag content piece402from column412to column414, he/she is unable to do so (i.e., content piece402does not move across the display device400with the finger420even if the finger420remains in contact with the display device400), as shown inFIG. 10.

As alluded to above, embodiments described herein may be utilized not just to make changes to content, but also to access content (e.g., applications) on computing systems/devices. For example, referring again toFIGS. 4 and 5, the display device400may be a display on a mobile electronic device, such as a mobile phone or tablet, and at least some of the content pieces402-410may be, for example, application icons. In such an embodiment, the display device400may initially render a screen saver or be in a reduced power consumption mode (e.g., powered down/off). The content shown inFIGS. 4 and 5may appear when, for example, the device is detected as being moved (e.g., picked up by a user) and/or a button (e.g., a power button) on the device is actuated. The content (and/or the device as a whole) may then be in a locked state, similar to that described above (e.g., the content may not be accessed and/or modified). In some embodiments, when the finger418is detected as making contact with the portion of the display device400rendering content piece402, the biometric identification process is performed as described above, and if the individual is determined to be an authorized user, access to the content is granted. For example, if content piece402is an application icon, the associated application may be initiated (or “launched”) and/or the application icon may be moved in a similar manner described above. In such an embodiment, the user may continue to utilize the application in the usual manner (e.g., until the application is closed). However, in some embodiments, the application may only be used via a similar biometric identification process each time the user attempts to interact with the application (e.g., the fingerprint scan is performed each time the user attempts to interact with the application).

In some embodiments, the portion of the display device400utilized to perform the biometric identification process may be different than that used to render the content that is accessed and/or modified. For example, a portion of the display device400(e.g., the lower, left corner) may be dedicated to performing fingerprint scans. In such embodiments, the user may contact that portion of the display device400with a finger on one of his/her hands (e.g., their left hand), causing the display device400to become unlocked (assuming he/she is an authorized user), as described above, then access and/or modify the content with his/her other hand/finger, or utilizing another user input device, such a stylus, keyboard, mouse, microphone, etc.

As such, it should be understood that in some embodiments, the computing system (or device) may be accessed utilizing user input devices other than hands/fingers. For example, the user may contact the display device400with a stylus, or perhaps even just sit/stand in a particular location relative to the display device400, and a different biometric identification process (other than a fingerprint scan) may be performed, such as a face recognition process (e.g., performed utilizing a camera associated with the computing system). Further, it should be understood that in some embodiments, the display device may not be a touchscreen. For example, a dedicated fingerprint or palm scanner (separate from the display device) may be utilized. In such an embodiment, when the user touches the scanner with his/her finger/hand, the computing system may be unlocked, assuming he/she is determined to be an authorized user by the biometric identification process, and he/she may then access/change the content (e.g., at least while his/her finger/hand remains on the scanner).

Additionally, in some embodiments, different users are provided with different clearance/authorization levels. For example, with respect to the embodiment shown inFIGS. 4-10, a first user may only be authorized to move the content pieces402-410. However, a second user (e.g., an administrator) may be granted additional access and may be able to, for example, power down/off the computing system, change system settings, and/or make specific changes to the content pieces402-410(e.g., change the labels, delete, etc.). Further, in some embodiments, multiple users may be able to simultaneously interact with the system. For example, in embodiments utilizing a touchscreen and fingerprint scanning, a first user may contact a first portion of the display device with his/her finger and make changes to (or access) the system as described above, while a second user contacts a second portion of the display device and similarly accesses the system. In such an embodiment, simultaneous contact/authentication of multiple authorized users may be required for any changes (or access) to be made to the system.

Turning toFIG. 11, a flowchart diagram of an exemplary method1100for managing computing systems (or devices), according to some embodiments described herein, is provided. Method1100begins (step1102) with, for example, a computing system being utilized to render content, such as by displaying the content on a display device thereof.

The content is prevented from being modified (and/or accessed) (step1104). That is, the content and/or the computing system may be placed in a locked state, as described above. In some embodiments, while the computing system is in the locked state, at least some of the content is visible on/rendered by the display device.

An object is detected within a proximity of the display device (step1106). The object may be associated with an individual. For example, the object may be a portion of the body of the individual, such as a hand and/or finger. However, as described above, in some embodiments, the object may be another object, such as a stylus. The object may be detected as being in contact with a portion of the display device. In some embodiments, the object is detected as being in contact with the same portion of the display device rendering the content.

A biometric identification process is caused to be performed on the individual while the object is within the proximity of the display device (step1108). For example, in embodiments in which the object is a finger, the biometric identification process may include a fingerprint scan. However, as described above, other types of biometric identification processes may be used, such as face recognition, etc.

Based on the biometric identification process, the content is allowed to be modified (and/or accessed) while the object is within the proximity of the display device (step1110). That is, if the individual is determined to be an authorized user, the computing system (and/or the display device and/or the content) may be placed in an unlocked state, such that the content may be modified (and/or accessed), as described above. For example, the object may be detected as moving from the portion of the display device to a second portion of the display device, which may cause the content to be modified.

Method1100ends (step1112) with, for example, the computing system (and/or the display device and/or the content) being (again) placed in a locked state in response to, for example, the object being detected as moving beyond the proximity of the display device (e.g., being removed from the display device). That is, the content may be re-prevented from being modified after the object is detected as moving beyond the proximity of the display device.