Patent Application
20190394649
The disclosure generally relates to techniques for unlocking a device.
Electronic devices typically include a locking mechanism to limit inputs and access to those authorized to use the particular device. One class of input that a locked device may respond to is a request to unlock the device. These inputs may involve known unlocking procedures, such as pressing a predefined set of buttons (e.g., simultaneously or sequentially) or entering a code or password, or other factors, or combinations of factors.
In one aspect, in general, a method performed by a data processing apparatus includes receiving, by a first device, at least one wireless signal from a second device. The method also includes transmitting, by the first device, at least one wireless signal to the second device. The method also includes determining, by the first device, transit times of the at least one received wireless signal and the at least one transmitted wireless signal. The method also includes determining, by the first device, one or more range measurements between the first device and the second device based at least in part on the transit times. The method also includes determining, by the first device, an unlock decision based at least in part on the one or more range measurements. The method also includes causing, by at least the first device, the first device to unlock if the unlock decision is positive.
Implementations of these aspects may include one or more of the following features.
In some implementations, the method includes comparing, by the first device, at least one of the one or more range measurements to a range threshold.
In some implementations, the range threshold is a dynamic range threshold.
In some implementations, a value of the dynamic range threshold is based at least in part on a type of the first device, a type of the second device, a count of wireless signals received by the first device, a degree of conformity of the one or more range measurements to a model of range data, and one or more characteristics of an environment in which the first device and the second device are located.
In some implementations, the unlock decision is based at least in part on clustering of the one or more range measurements.
In some implementations, the unlock decision is based at least in part on an accuracy of the transit times.
In some implementations, the one or more range measurements are determined by a wireless controller of the first device.
In some implementations, the method includes determining, by the first device, that the second device is within a threshold range of the first device. The method also includes determining, by the first device, that the unlock decision is positive.
In some implementations, the unlock decision is based at least in part on one or more of a type of the first device, a type of the second device, a count of wireless signals received by the first device, a degree of conformity of the one or more range measurements to a model of range data, and one or more characteristics of an environment in which the first device and the second device are located.
In some implementations, the method includes filtering the at least one wireless signal received by the first device.
In some implementations, the at least one wireless signal received by the first device is filtered by a batch filter.
In some implementations, one or more characteristics of the batch filter are based on experimental data obtained from one or both of the first device and the second device.
In some implementations, the experimental data comprises a distribution of distance measurements between the first device and the second device.
In some implementations, the one or more characteristics of the batch filter are modeled such that one or both of false positive unlock decisions and false negative unlock decisions are minimized.
In some implementations, the one or more characteristics of the batch filter are modeled according to a maximum likelihood estimation methodology.
In some implementations, the one or more characteristics of the batch filter are modeled according to a generalized extreme value methodology.
In some implementations, the one or more characteristics of the batch filter are modeled based on an assumption that the one or more range measurements comprise at least a predetermined number of range measurements.
In some implementations, the at least one wireless signal received by the first device is filtered by sequential filters.
In some implementations, the at least one wireless signal received by the first device is pre-filtered before being filtered.
In some implementations, the pre-filtering removes outlier wireless signals of the at least one wireless signal received by the first device.
In some implementations, the at least one wireless signal is received by the first device as a first packet.
In some implementations, the first packet is encrypted according to a first encryption scheme.
In some implementations, the at least one wireless signal is transmitted by the first device as a second packet.
In some implementations, the second packet is encrypted according to a second encryption scheme.
In another aspect, in general, a computer system includes a computer readable storage device storing computer executable instructions. The computer system also includes a hardware processor configured to, in response to executing the computer executable instructions, carry out operations comprising: receiving at least one wireless signal from a device. The operations also comprise transmitting at least one wireless signal to the device. The operations also comprise determining transit times of the at least one received wireless signal and the at least one transmitted wireless signal. The operations also comprise determining one or more range measurements between the first device and the second device based at least in part on the transit times. The operations also comprise determining an unlock decision based at least in part on the one or more range measurements. The operations also comprise causing the computer system to unlock if the unlock decision is positive.
In another aspect, in general, a computer readable storage device storing computer executable instructions, when executed by a first device, causes a hardware processor of the first device to carry out operations comprising: receiving, by the first device, at least one wireless signal from a second device. The operations also comprise transmitting, by the first device, at least one wireless signal to the second device. The operations also comprise determining, by the first device, transit times of the at least one received wireless signal and the at least one transmitted wireless signal. The operations also comprise determining, by the first device, one or more range measurements between the first device and the second device based at least in part on the transit times. The operations also comprise determining, by the first device, an unlock decision based at least in part on the one or more range measurements. The operations also comprise causing, by at least the first device, the first device to unlock if the unlock decision is positive.
Particular implementations provide at least the following advantages:
In some implementations, interaction between the first device and the second device that results in a positive unlock decision allows an authorized user to access the first device without repetitive input of a code, password, or passphrase. That is, a user who is already determined to be an authorized user and who is within typical access range of the first device can unlock and access the first device with minimal or no user input.
In some implementation, the range required to yield a positive unlock decision may vary based on a number of factors. In some implementations, characteristics of the environment in which the first device and/or the second device reside may contribute to the threshold range that forms the decision boundary (e.g., the “unlock bubble”) of the unlock decision. The decision boundary may be dynamically adjustable to fit the needs of the user. For example, the decision boundary may be designed to minimize false positives and/or false negatives as desired. In some implementations, the decision boundary may be adjusted depending on the reliability of the range measurements between the first device and the second device.
In some implementations, the range measurements between the first device and the second device are filtered to minimize or eliminate effects of wireless signals transmitted/received between the devices bouncing off of one or more reflectors before reaching their destination (e.g., multipath signals). The filter (e.g., a batch filter) can be modeled such that the raw range measurements are presented as a more accurate representation of the actual range between the first device and the second device. In some implementations, the filter may be modeled based on experimental data obtained from the first device and the second device under known use cases (e.g., use cases in which the expected result of the unlock decision and the “true” distance between the devices are known). In some implementations, the filter may be modeled in various environments in which the devices are expected to reside and in which an unlock decision is expected to be made.
Details of one or more implementations are set forth in the accompanying drawings and the description below. Other features, aspects, and potential advantages will be apparent from the description and drawings, and from the claims.
Like reference symbols in the various drawings indicate like elements.
A first device (e.g., a laptop computer) and a second device (e.g., a wearable device such as a watch, a mobile phone, some other trusted device, etc.) are configured to communicate with each other using wireless communication. Based on characteristics of the wireless communication, such as the transit times (e.g., times-of-flight) of wireless signals transmitted between the devices, a plurality of range measurements are obtained. The range measurements, among other things, are used to determine whether the watch is within a “bubble” around the laptop. For example, the bubble may be defined by a predetermined radius around the laptop. In this example, the laptop can unlock only if the watch is determined to be within the laptop's bubble. In some implementations, unlocking the laptop requires user interaction such as a key press or opening of the laptop. In some implementations, a characteristic of the watch, such as the identity of the wearer of the watch, is considered before the laptop is unlocked. For example, the laptop may confirm that the wearer is authorized to access the laptop by determining whether the watch and the laptop are associated with the same credentials (e.g., iCloud® account) as part of a device discovery routine.
In some implementations, the determination of whether the watch is within the bubble may be based at least in part on characteristics of the environment in which the watch and laptop are located. For example, certain environments may call for adjustment (e.g., relaxation) of the bubble, for example, due to the wireless signals potentially bouncing off of walls (e.g., multipath signals). In some implementations, the determination may be based at least in part on a type of the first device. For example, if the first device is a desktop computer rather than a laptop, the bubble may be relaxed or constrained. In this way, the bubble may have a dynamic range threshold that varies based on one or more of characteristics of the particular environment, a type of the first device and/or the second device (e.g., a laptop, a desktop computer, a mobile phone, etc.), and a number of antennas and/or type of antenna switching employed.
In some implementations, the range measurements, among other things, are used to determine a range estimate between the laptop and the watch. The range estimate may be compared to a bubble threshold. If the threshold is satisfied, the laptop may unlock (or, e.g., the laptop may enter an unlockable state in which the laptop can be unlocked in response to user interaction). For example, one or more data packets may be transmitted between the laptop and the watch. The time-of-flight (e.g., TOF) of the transmissions can be measured and used to determine a plurality of range measurements (e.g., distance measurements in meters) between the devices. The range measurements are processed (e.g., passed to a batch filter) to determine a range estimate between the devices (e.g., also in meters). The range estimate represents an approximation of the distance between the laptop and the watch based on a number of factors. If the range estimate is within the bubble threshold, the laptop is unlocked. If the range estimate is outside of the bubble threshold, the laptop may remain locked and the process may revert back to making range measurements.
In some implementations, the range measurements, among other things, are used in a hypothesis test that estimates a probability (e.g., a likelihood) that the device is within the bubble. In some examples, the range measurements are not necessarily compared to a range threshold, but instead may be used to determine a probability that the devices are various distances apart (e.g., as a probability distribution). The probability distribution may then be used to determine a probability that the device is within the bubble, for example, by fitting the probability distribution to empirical data and determining a probability that the devices are within a particular range of each other.
In some implementations, the bubble 106 may be characterized according to one or more predetermined criteria. For example, the bubble 106 may be defined by a predetermined radius around the laptop 102. In some implementations, the bubble 106 may be dynamic in nature. For example, the bubble 106 may be defined by a radius around the laptop 102 that changes based on one or more factors, such as characteristics of the environment, a type of the first device 102 and/or the second device 104, and characteristics of the wireless communication employed between the devices (e.g., a number of antennas and/or a type of antenna switching employed, among others). The ranging accuracy of the wireless waveforms transmitted between the devices may be based at least in part on the signal-to-noise ratio and/or the bandwidth used. The number of antennas and/or an antenna gain of each device may affect the signal-to-noise ratio and, in turn, the ranging accuracy. In some implementations, the ranging accuracy may also be based at least in part on an integration time used to generate range measurements. The bubble 106 may change based on one or more of the foregoing factors.
While the bubble 106 is shown in
The process 200 begins with discovery (202) between the laptop 102 and the watch 104 to confirm that the user of the watch 104 is authorized to access the laptop 102 and to determine whether sufficient signal connectivity exists for the laptop 102 and the watch 104 to communicate (e.g., based on strengths of the signals). Ranging (204) is then performed, which involves determining the distance between the laptop 102 and the watch 104. A plurality of range measurements between the laptop 102 and the watch 104 are taken. In some implementations, the range measurements are then pre-filtered (206) to remove outlier measurements before they are passed through a filter such as a batch filter (208). The batch filter (208) can filter the range measurements, and one or both of a range estimate of a distance between the laptop 102 and the watch 104 and a probability that the watch 104 is within the bubble 106 can be determined. An unlock decision (210) is then determined based on the output of the batch filtering (208). If the unlock decision (210) is positive, the laptop 102 is unlocked (212). If the unlock decision (210) is negative, the process 200 reverts back to discovery (202) or ranging (204) between the devices.
An authentication step (304) can be used to verify that the user of the watch 104 is authorized to access the laptop 102 before the unlock process can proceed. For example, the laptop 102 may verify that the watch 104 and the laptop 102 belong to the same owner (e.g., the user described above with respect to
A quick ranging step (306) can be used after the initial discovery to verify that sufficient signal connectivity exists between the laptop 102 and the watch 104 for the unlock process to continue. For example, the laptop 102 may determine whether the watch 104 is within range of communication over a short-range communication technology such as Bluetooth (e.g., a Bluetooth observable determination). Pairing (e.g., using a Bluetooth pairing technique) of the laptop 102 and the watch 104 may be performed but is not required. In some implementations, the quick ranging (306) may be performed after discovery (202) and instead as an initial step in the ranging process (204).
A wireless channel is then established (308) between the laptop 102 and the watch 104. The wireless channel may be established over a peer-to-peer wireless direct link such as Apple® Wireless Direct Link (AWDL). A key exchange (310) then occurs. For example, the laptop 102 and the watch 104 exchange keys related to one of both of the AWDL channel and the ranging (204 shown in
One or more range measurements are computed (410) based on transit times (e.g., times-of-flight, or TOF) of the first and second data packets. In this example, the determinations of the TOF occur at the laptop 102, thus the time of transmission and time of arrival of the first data packet and the second data packet must be known by the laptop 102. As such, the time of transmission of the first data packet by the watch 104 and the time of arrival of the second data packet by the watch 104 are provided to the laptop 102. Such information is included in the third data packet.
In some implementations, the ranging process (204) may be performed inversely. For example, the first data packet may be sent by the laptop 102 (e.g., instead of the watch 104), the second data packet may be sent by the watch 104 (e.g., instead of the laptop 102), and the third data packet may be sent by the laptop 102. In such implementations, information related to the distance between the devices is conveyed to the device to be unlocked (e.g., the laptop 102).
In some examples, the range measurements may be computed by a wireless controller (e.g., a wireless card) of the laptop 102. For example, firmware in the wireless controller may be configured to compute the range measurements (e.g., in meters) based on the TOF of packet1 and packet2. In some examples, the range is computed from the product of the TOF and the speed of light c. The TOFs and range are given by Equations [1] and [2]:
TOF=½((t4−t1)−(t3−t2)). [1]
Range=c*TOF. [2]
In some implementations, the laptop 102 and the watch 104 are configured to operate at different clock speeds and/or have different clock offsets, which could make the calculation of the TOF difficult. By employing the two-way ranging technique described herein using Equations [1] and [2], a common time base is not required because (t4−t1) and (t3−t2) can be measured independently at each device using its own local time base. That is, the two clocks need not be synchronized.
In a multipath environment, the TOF may be inaccurate due to multipath conditions in the wireless channel. That is, the transmitted signals may bounce off of one or more reflectors (e.g., walls) in the environment, thereby resulting in the wireless signals traveling a greater distance than would otherwise be traveled in the absence of reflectors. The greater distance traveled by the multipath signals requires a greater amount of time to traverse, which results in the times of arrival (e.g., t2 and t4) occurring later in time than the times of arrival for non-multipath signals. The inaccurate TOF of the multipath signals results in inaccurate range measurements. Range errors due to multipath can be compensated by filtering the range measurements (e.g., using a batch filter), as described in more detail below.
In some implementations, the range threshold is a predetermined distance value. In some examples, the range threshold may be in the order of meters (e.g., in the order of two to five meters). If the batch filtering results in a range estimate that is less than the range threshold, the laptop 102 may be unlocked. If the batch filtering results in a range estimate that is greater than the range threshold, the laptop 102 may remain locked and the unlock process (e.g., the unlock process 200 shown in
In some implementations, the range threshold may be a dynamic distance value. The range threshold may change during the unlock process based on one or more factors. That is, the range threshold may have a default value (e.g., approximately two to three meters) that may be constrained or relaxed based on one or more of a variety of circumstances.
In some examples, the range threshold may change based on the types of one or both of the devices. In this example, the first device (e.g., the device to be unlocked, sometimes referred to as the “lock”) is a laptop 102 and the second device (e.g., the device that causes the unlocking, sometimes referred to as the “key”) is a watch 104. When the lock is a laptop 102, the default range threshold may be two meters. The particular range threshold may have a value that is based on an expected distance between the user and the type of the locked device when the user is attempting to access the locked device. For example, a user who is attempting to use a laptop 102 is typically relatively close to the laptop 102 during use (e.g., to allow the user to access the keyboard and trackpad). Thus, a range threshold of approximately two meters may be appropriate. However, if the locked device were instead a desktop computer, the range threshold may be relaxed. For example, a user who is attempting to use a desktop computer may be positioned relatively further away from the desktop computer during use (e.g., because the user interacts with peripheral devices such as the keyboard, mouse, and/or display that are positioned near the user but away from the wireless antenna), or the desktop computer may be positioned behind a reflector (e.g., such as the display) and therefore not be in line-of-sight with the key device. Thus, the range threshold may be increased to three or four meters when the locked device is a desktop computer.
In some implementations, the range threshold may change based on the type of the key device. The range threshold may have a value that is based on an expected distance between the key device and the locked device. For example, the watch 104 that is provided in the current example is typically expected to be worn on the user's wrist, and such can be confirmed (e.g., as part of device discovery). Thus, there is increased confidence that the position of the watch 104 is an accurate representation of the position of the user. However, if the key device were instead a mobile phone, there may be less confidence that the position of the phone corresponds to the position of the user. For example, mobile phones are sometimes kept away from the person (e.g., on a desk while at work, on the coffee table while at home, etc.). The range threshold may be adjusted to account for this additional uncertainty. In some examples, the range threshold may be relaxed to reduce false negative unlock decisions (e.g., an authorized user is close to the locked device but it is not unlocked because his or her phone is too far away). In some examples, the range threshold may be constrained to reduce false positive unlock decisions (e.g., an unauthorized user is able to unlock the locked device because an authorized user's phone was left near the locked device).
In some implementations, the range threshold may change based on characteristics of the particular environment and/or the effects of the particular environment on the wireless signals transmitted between the devices. For example, if the environment in which the laptop 102 and the watch 104 are positioned results in range measurements that include significant noise and/or the received signal strength indication (RSSI) of the wireless signals transmitted between the devices is relatively low, the range threshold may be relaxed (e.g., to reduce false negative unlock decisions) or constrained (e.g., to reduce false positive unlock decisions).
In some implementations, the range threshold may change based on a number of antennas and/or a type of antenna switching employed by the locked device and/or the key device. For example, if the number of antennas and the type of antenna switching that is employed typically results in measurements of increased accuracy (e.g., if multiple antennas are used), the range threshold may be relaxed (e.g., because there is increased confidence in the range estimation). In some implementations, the locked device may include two antennas. A quick check may be performed during the unlock process to determine which antenna is best suited to provide the most reliable data, and the ranging (204 of
In some implementations, instead of comparing the range estimate to a range threshold to arrive at an unlock decision, the range estimate may serve as one of a plurality of factors that are considered when determining whether to unlock the laptop 102. For example, the unlock decision may be based on a function that considers one or more of the range estimate, the device type of the locked device and/or the key device, a number of antennas in the locked device and/or the key device, a type of antenna switching employed by the locked device and/or the key device, a number of range measurements obtained during ranging, a measure of an amount of noise in the wireless signals transmitted between the devices during ranging, the RSSI of the wireless signals transmitted between the device during ranging, an accuracy or an expected accuracy of the range measurements, a signal-to-noise ratio of the wireless signals, a bandwidth of the wireless signals, and an integration time use to generate the range measurements, among others.
In some implementations, instead of or in addition to determining a range estimate (e.g., an estimate of the distance between the laptop 102 and the watch 104) as described with respect to
As described above with respect to implementations in which the unlock decision is based at least in part on a comparison of a range estimate to a range threshold, the range threshold may be a dynamic distance value that may be constrained or relaxed based on a variety of factors surrounding the unlock decision. In this way, the bubble 106 may be characterized as a decision boundary that can be dynamically adjustable. Similarly, implementations that utilize a hypothesis test to determine whether the laptop 102 is to be unlocked can also be based at least in part on a dynamically adjustable decision boundary bubble 106.
In some implementations, to determine whether the laptop 102 is to be unlocked, the probability that the watch 104 is within sufficient range of the laptop 102 (e.g., within a predetermined range) can be compared to a dynamic probability threshold that changes based on one or more factors, such as a number of antennas and/or the type of antenna switching employed by the devices, among others. For example, suppose the unlock decision is based on a determination of whether the watch 104 is within two meters of the laptop 102. Under a first set of conditions (e.g., no antenna switching employed by the devices), the unlock decision may be positive if the hypothesis test indicates that there exists a 95% chance that the watch 104 is within two meters of the laptop 102. Under a second set of conditions (e.g., antenna switching employed by the laptop 102), the unlock decision may be positive if the hypothesis test indicates that there exists a 99% chance that the watch 104 is within two meters of the laptop 102 because the antenna switching may be expected to yield range measurements of improved accuracy. In this way, the boundary of the unlock decision can be relaxed (e.g., as illustrated under the first set of conditions) or constrained (e.g., as illustrated under the second set of conditions) as desired.
Whether the batch filtering (504 of
In some implementations, a maximum likelihood estimation (MLE) may be applied to the range measurements. The MLE may be related to a mean of the range measurements. For example, the MLE may consider a set of range measurements (e.g., and optionally one or more tuning parameters) and estimate the mode of the data given the particular underlying distribution that is being modeled. Averaging the range measurements may occur when the underlying distribution is Gaussian; in such a case, the mode is equal to the mean. In some implementations, the MLE may employ outlier rejection. For example, an estimate of an expected standard deviation may be obtained based on the modeling, and anything outside of a threshold (e.g., 3 or 4 sigma of the mean of the range measurements) may be discounted before the range estimate and/or the probability distribution is determined based on the average of the range measurements.
In some implementations, a count-based hypothesis test is employed to determine a count of range measurements that are within a range threshold and a count of range measurements that are outside of a range threshold. The range threshold may be a predetermined threshold distance or a dynamic threshold that changes based on one or more factors, as described above. The count-based hypothesis test may result in a positive unlock decision if the count of range measurements that are within the range threshold is greater than the number of range measurements that are outside of the range threshold.
In some implementations, a cluster-based test is employed. The range estimate and/or the probability distribution may be based on range measurement values that are closely clustered. For example, if a significant majority of the range measurements have values clustered between approximately 1.6 and 1.8 meters and the rest of the range measurements have unclustered values spread across various distances, the cluster-based test may determine that the range estimate is between 1.6 and 1.8 meters. Alternatively, such as in implementations in which a hypothesis test is performed, the cluster-based test may result in a determination of a probability that the devices are within 1.6 to 1.8 meters of each other and/or a determination of a probability that the devices are within a threshold range of each other (e.g., within the bubble).
In some implementations, a likelihood ratio (or, e.g., a log-likelihood ratio) test is employed. Such a test uses models for two possible cases of a distribution of ranges: one set of ranges that correspond to the device being unlocked, and one set of ranges that correspond to the device remaining locked. The likelihood ratio computes the ratio of the composite probabilities of being either inside or outside of the bubble based on the input set of ranges (e.g., the range measurements) and the modeled distributions. The ratio may then be compared to a threshold to determine the result of the unlock decision. In such implementations, the distance between the two devices may not be directly computed. As such, the threshold may not be presented in terms of meters.
Various experimental use cases and related data are shown in
Range measurement data for 22 use cases were collected and examined. Each of the 22 use cases was examined with the laptop 102 resting on a metal table and a wooden table, resulting in a total of 44 cases. The watch 104 was positioned at various locations relative to the laptop 102. All of the use cases represent various positions and situations in which a user wearing the watch 104 may be in or around the environment in which the laptop 102 resides. Some of the use cases are referred to as “positive use cases” which are expected to result in a positive unlock decision (e.g., use cases in which the user is close to the laptop 102 and/or intends to access the laptop 102); some of the use cases are referred to as “negative use cases” which are expected to result in a negative unlock decision (e.g., use cases in which the user is far away from the laptop 102 and/or does not intend to access the laptop 102). The use cases included a mix of likely use cases and challenging use cases (e.g., use cases in which a correct unlock decision may be difficult to determine).
Range measurement data was collected for each of the use cases (e.g., according to the process described above with respect to
Use cases # 1-12 may represent positive use cases, and use cases # 13 and 14 may represent negative use cases. Referring briefly to
In contrast, the data that corresponds to negative use cases # 13 and 14 show range measurements that are approximately 10-14 meters (e.g., the watch 104 is relatively far away from the laptop 102). Although use cases # 13 and 14 are not specifically illustrated like use cases # 1-5 are, they may correspond to situations in which the laptop 102 is in the office of a home of the user, and the user wearing the watch 104 is in a different room. Under such circumstances, the user likely does not intend to access the laptop 102, and thus the unlock decision should be negative (assuming the discovery procedure described above is even possible).
As described above, many environments may include reflectors that result in transmitted wireless signals traversing a non-direct path between the laptop 102 and the watch 104. Such wireless signals are referred to herein as multipath signals, and are the cause of the extended tail to the right of the range distribution shown in
The data shown in
The data distribution was fit according to various filtering methodologies to reduce range errors due to measurement noise and multipath. The solid curve represents a Gaussian distribution that provides a reasonable fit; however, the Gaussian distribution does a relatively poor job of accounting for the tail to the right of the distribution. A more-complex generalized extreme value (GEV) distribution represented by the dotted curve provides a much better fit for the data. While only two possible filtering methodologies are shown in
In order to more accurately replicate conditions that would exist in an actual implementation (e.g., in which multiple range measurements are obtained), the GEV model was adjusted to assume that five range measurements were obtained.
In this example, a range threshold (e.g., a bubble size) of three meters was established, as indicated by the dotted line overlaid on the plot. Because the true distance of the positive use cases is 0 meters and the true distance of the negative use cases (e.g., simulated) is seven meters, ideally every positive use case would result in a positive unlock decision and every negative use case would result in a negative unlock decision. However, due to the various errors described above, this is not the case in practice. Rather, the area under the GEV model for the positive use cases 802 and to the left of the dotted line represents the positive success rate (e.g., the probability that the laptop 102 and the watch 104 are close together and the unlock decision is positive); the area under the GEV model for the positive use cases 802 and to the right of the dotted line represents the positive failure rate (e.g., the probability that the laptop 102 and the watch 104 are close together but the unlock decision is negative); the area under the GEV model for the negative use cases 804 and to the right of the dotted line represents the negative success rate (e.g., the probability that the laptop 102 and the watch 104 are far apart and the unlock decision is negative); and the area under the GEV model for the negative use cases 804 and to the left of the dotted line represents the negative failure rate (e.g., the probability that the laptop 102 and the watch 104 are far apart but the unlock decision is positive). The negative failure rate is illustrated as residing within the circled region. Under the stated assumptions, the positive success rate is approximately 96.1% and the negative failure rate is much less than 0.01%.
To reiterate, in an actual implementation, the data obtained from the devices is not separated into positive use cases and negative use cases, and of course, the true distance is not known. As a brief aside, in an actual implementation, after the distribution of the range measurement data is filtered, a range threshold may be applied. The probability that the distance between the devices is within the range threshold may be determined. The outcome of the unlock decision may depend at least in part on a comparison between the probability that the distance between the devices is within the range threshold and a probability threshold. For example, the unlock decision may be positive if, according to the filtered range measurement data, there is a 95% chance or higher that the distance between the devices is less than the range threshold. In some implementations, a range estimate between the devices may be determined based at least in part on the filtered range measurement data, and the unlock decision may be based at least in part on a comparison between the range estimate and the range threshold. Similarly, in some implementations, the outcome of the unlock decision may be based at least in part on a degree of conformity of the range measurements to one or more models (e.g., distributions) of range data.
While a GEV model was described and illustrated in
In this example, a range threshold (e.g., a bubble size) of four meters was established, as indicated by the dotted line overlaid on the plot. In a manner similar to that described above with respect to
The table also illustrates that the positive success rate is maximized and the negative failure rate is minimized when additional range measurements are obtained. This is because the filtering methodology employed is more effective when a greater number of measurement points are available. Thus, it may be desirable to obtain a relatively large number of range measurements (e.g., more than 5, more than 10, more than 20, etc.) between the laptop 102 and the watch 104.
Of the 22 use cases, some are characterized as line-of-sight (LOS) and some are characterized as non-line-of-sight (NLOS). The data discussed with respect to
Information related to additional use cases is shown in
Range measurement data was collected for each of the use cases (e.g., according to the process described above with respect to
In this example, a range threshold (e.g., a bubble size) of three meters was established, as indicated by the dotted line overlaid on the plot. Because the true distance of the positive use cases is 0 meters and the true distance of the negative use cases (e.g., simulated) is five meters, ideally every positive use case would result in a positive unlock decision and every negative use case would result in a negative unlock decision. However, due to the various errors described above, this is not the case in practice. Rather, the area under the GEV model for the positive use cases 902 and to the left of the dotted line represents the positive success rate (e.g., the probability that the first device and the second device are close together and the unlock decision is positive); the area under the GEV model for the positive use cases 902 and to the right of the dotted line represents the positive failure rate (e.g., the probability that the first device and the second device are close together but the unlock decision is negative); the area under the GEV model for the negative use cases 904 and to the right of the dotted line represents the negative success rate (e.g., the probability that the first device and the second device are far apart and the unlock decision is negative); and the area under the GEV model for the negative use cases 904 and to the left of the dotted line represents the negative failure rate (e.g., the probability that the first device and the second device are far apart but the unlock decision is positive).
In this example, a range threshold (e.g., a bubble size) of four meters was established. In a manner similar to that described above with respect to
The table also illustrates that the positive success rate is maximized and the negative failure rate is minimized when additional range measurements are obtained. This is because the filtering methodology employed is more effective when a greater number of measurement points are available. Thus, it may be desirable to obtain a relatively large number of range measurements (e.g., more than 5, more than 10, more than 20, etc.) between the first device and the second device.
While the unlock process has largely been described in relation to the laptop 102 and the watch 104 of
In some implementations, the device to be unlocked is an automobile and the device that causes the unlocking is a wearable device such as the watch 104. A bubble is defined around the automobile. Techniques similar to those described above with respect to
While the bubble (106 of
The systems and techniques described herein provide significant advantages over existing methods of unlocking (e.g., unlocking electronic devices, automobiles, door locks, etc.). Traditionally, unlocking of a lock requires some form of user interaction. In the most traditional sense, a user who is authorized to access the contents behind a lock possesses a key. The user inserts the key into the lock, turns the key, and the door opens. Locks are also essential in the realm of electronic devices, which typically contain sensitive information. In such cases, the “key” is typically in the form of a code, password, or passcode. Such a password may be a series of numbers or letters that are known only to the persons who are authorized to access the electronic device. To unlock the device, the user types the code into the device through a user interface, and access is then granted. Such methods of unlocking a physical lock or an electronic device require time and can be cumbersome to the user.
Advances have been made to simplify unlocking. In some implementations, a user who possesses a wireless key (e.g., a device that has wireless communication capabilities) may be able to unlock a corresponding device. For example, a door lock may be paired to a key fob and both may be configured to wirelessly communicate with each other. When the key fob is within some particular distance of the lock, the lock may unlock. However, such unlocking techniques have a number of drawbacks. Firstly, wireless communication is not always reliable so as to yield an accurate representation of the distance between the key fob and the lock. In other words, the key fob and the lock may be within sufficient range of each other such that the lock should unlock, but due to wireless communication shortcomings the lock may nonetheless remain locked. Conversely, the key fob and the lock may be outside of the predetermined range that permits unlocking, but the lock may nevertheless unlock. One reason for such inaccuracies in wireless communication is the presence of multipath wireless signals (e.g., wireless signals that bounce off reflectors before they reach their destination). Other environmental factors may also play a role in such inaccuracies.
The systems and techniques described herein address such shortcomings by providing an unlock bubble that represents a lock/unlock decision boundary. The decision boundary may correspond to a range (e.g., distance) between the locked device and the “key” device. The range may be adjustable based on a number of factors. For example, if the devices determine that the wireless signals transmitted between the devices are reliable, the unlock bubble may be constrained due to the expected high accuracy of the range measurements. Similarly, environmental conditions, the types of the devices, the antenna switching methodologies employed, and/or the level of security desired may call for the bubble to be adjusted as needed. Rather than simply estimating a distance between the devices based on transmitted wireless signals, the systems and techniques described herein perform a number of pre-filtering, filter modeling, and batch filtering processes to ensure that the determined distance between the devices is as accurate as possible and that the unlock decision is appropriate given the particular circumstances and the primary motivations surrounding such. Existing computing devices that employ unlocking techniques are not known to provide for such adaptability to maximize unlock decision accuracy.
Display device 1006 can be any known display technology, including but not limited to display devices using Liquid Crystal Display (LCD) or Light Emitting Diode (LED) technology. Processor(s) 1002 can use any known processor technology, including but are not limited to graphics processors and multi-core processors.
Input device 1004 can be any known input device technology, including but not limited to a keyboard (including a virtual keyboard), mouse, track ball, and touch-sensitive pad or display. In some implementations, the input device 1004 could include a microphone that facilitates voice-enabled functions, such as speech-to-text, speaker recognition, voice replication, digital recording, and telephony functions. The input device 1004 can be configured to facilitate processing voice commands, voiceprinting and voice authentication. In some implementations, audio recorded by the input device 1004 is transmitted to an external resource for processing. For example, voice commands recorded by the input device 1004 may be transmitted to a network resource such as a network server which performs voice recognition on the voice commands.
Bus 1012 can be any known internal or external bus technology, including but not limited to ISA, EISA, PCI, PCI Express, NuBus, USB, Serial ATA or FireWire.
Computer-readable medium 1010 can be any medium that participates in providing instructions to processor(s) 1002 for execution, including without limitation, non-volatile storage media (e.g., optical disks, magnetic disks, flash drives, etc.) or volatile media (e.g., SDRAM, ROM, etc.).
Computer-readable medium 1010 can include various instructions 1014 for implementing an operating system (e.g., Mac OS®, Windows®, Linux). The operating system can be multi-user, multiprocessing, multitasking, multithreading, real-time and the like. The operating system performs basic tasks, including but not limited to: recognizing input from input device 1004; sending output to display device 1006; keeping track of files and directories on computer-readable medium 1010; controlling peripheral devices (e.g., disk drives, printers, etc.) which can be controlled directly or through an I/O controller; and managing traffic on bus 1012. Network communications instructions 1016 can establish and maintain network connections (e.g., software for implementing communication protocols, such as TCP/IP, HTTP, Ethernet, etc.).
A graphics processing system 1018 can include instructions that provide graphics and image processing capabilities. For example, the graphics processing system 1018 can implement the processes described with reference to
Application(s) 1020 can be an application that uses or implements the processes described in reference to
The described features can be implemented advantageously in one or more computer programs that are executable on a programmable system including at least one programmable processor coupled to receive data and instructions from, and to transmit data and instructions to, a data storage system, at least one input device, and at least one output device. A computer program is a set of instructions that can be used, directly or indirectly, in a computer to perform a certain activity or bring about a certain result. A computer program can be written in any form of programming language (e.g., Objective-C, Java), including compiled or interpreted languages, and it can be deployed in any form, including as a stand-alone program or as a module, component, subroutine, or other unit suitable for use in a computing environment.
Suitable processors for the execution of a program of instructions include, by way of example, both general and special purpose microprocessors, and the sole processor or one of multiple processors or cores, of any kind of computer. Generally, a processor will receive instructions and data from a read-only memory or a random access memory or both. The essential elements of a computer are a processor for executing instructions and one or more memories for storing instructions and data. Generally, a computer will also include, or be operatively coupled to communicate with, one or more mass storage devices for storing data files; such devices include magnetic disks, such as internal hard disks and removable disks; magneto-optical disks; and optical disks. Storage devices suitable for tangibly embodying computer program instructions and data include all forms of non-volatile memory, including by way of example semiconductor memory devices, such as EPROM, EEPROM, and flash memory devices; magnetic disks such as internal hard disks and removable disks; magneto-optical disks; and CD-ROM and DVD-ROM disks. The processor and the memory can be supplemented by, or incorporated in, ASICs (application-specific integrated circuits).
To provide for interaction with a user, the features can be implemented on a computer having a display device such as a CRT (cathode ray tube) or LCD (liquid crystal display) monitor for displaying information to the user and a keyboard and a pointing device such as a mouse or a trackball by which the user can provide input to the computer.
The features can be implemented in a computer system that includes a back-end component, such as a data server, or that includes a middleware component, such as an application server or an Internet server, or that includes a front-end component, such as a client computer having a graphical user interface or an Internet browser, or any combination of them. The components of the system can be connected by any form or medium of digital data communication such as a communication network. Examples of communication networks include, e.g., a LAN, a WAN, and the computers and networks forming the Internet.
The computer system can include clients and servers. A client and server are generally remote from each other and typically interact through a network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.
One or more features or steps of the disclosed embodiments can be implemented using an API. An API can define on or more parameters that are passed between a calling application and other software code (e.g., an operating system, library routine, function) that provides a service, that provides data, or that performs an operation or a computation.
The API can be implemented as one or more calls in program code that send or receive one or more parameters through a parameter list or other structure based on a call convention defined in an API specification document. A parameter can be a constant, a key, a data structure, an object, an object class, a variable, a data type, a pointer, an array, a list, or another call. API calls and parameters can be implemented in any programming language. The programming language can define the vocabulary and calling convention that a programmer will employ to access functions supporting the API.
In some implementations, an API call can report to an application the capabilities of a device running the application, such as input capability, output capability, processing capability, power capability, communications capability, etc.
A number of implementations have been described. Nevertheless, it will be understood that various modifications may be made. For example, other steps may be provided, or steps may be eliminated, from the described flows, and other components may be added to, or removed from, the described systems. Accordingly, other implementations are within the scope of the following claims.
Sensors, devices, and subsystems can be coupled to the peripherals interface 1106 to facilitate multiple functionalities. For example, a motion sensor 1110, a light sensor 1112, and a proximity sensor 1114 can be coupled to the peripherals interface 1106 to facilitate orientation, lighting, and proximity functions. Other sensors 1116 can also be connected to the peripherals interface 1106, such as a global navigation satellite system (GNSS) (e.g., GPS receiver), a temperature sensor, a biometric sensor, or other sensing device, to facilitate related functionalities.
A camera subsystem 1120 and an optical sensor 1122, e.g., a charged coupled device (CCD) or a complementary metal-oxide semiconductor (CMOS) optical sensor, can be utilized to facilitate camera functions, such as recording photographs and video clips. The camera subsystem 1120 and the optical sensor 1122 can be used to collect images of a user to be used during authentication of a user, e.g., by performing facial recognition analysis.
Communication functions can be facilitated through one or more wireless communication subsystems 1124, which can include radio frequency receivers and transmitters and/or optical (e.g., infrared) receivers and transmitters. The specific design and implementation of the communication subsystem 1124 can depend on the communication network(s) over which the computing device 1100 is intended to operate. For example, the computing device 1100 can include communication subsystems 1124 designed to operate over a GSM network, a GPRS network, an EDGE network, a Wi-Fi or WiMax network, and a Bluetooth™ network. In particular, the wireless communication subsystems 1124 can include hosting protocols such that a device (e.g., the laptop 102 shown in
An audio subsystem 1126 can be coupled to a speaker 1128 and a microphone 1130 to facilitate voice-enabled functions, such as speaker recognition, voice replication, digital recording, and telephony functions. The audio subsystem 1126 can be configured to facilitate processing voice commands, voiceprinting and voice authentication, as described above with reference to
The I/O subsystem 1140 can include a touch-surface controller 1142 and/or other input controller(s) 1144. The touch-surface controller 1142 can be coupled to a touch surface 1146. The touch surface 1146 and touch-surface controller 1142 can, for example, detect contact and movement or break thereof using any of a plurality of touch sensitivity technologies, including but not limited to capacitive, resistive, infrared, and surface acoustic wave technologies, as well as other proximity sensor arrays or other elements for determining one or more points of contact with the touch surface 1146.
The other input controller(s) 1144 can be coupled to other input/control devices 1148, such as one or more buttons, rocker switches, thumb-wheel, infrared port, USB port, and/or a pointer device such as a stylus. The one or more buttons (not shown) can include an up/down button for volume control of the speaker 1128 and/or the microphone 1130.
In one implementation, a pressing of the button for a first duration can disengage a lock of the touch surface 1146; and a pressing of the button for a second duration that is longer than the first duration can turn power to the computing device 1100 on or off. Pressing the button for a third duration can activate a voice control, or voice command, module that enables the user to speak commands into the microphone 1130 to cause the device to execute the spoken command. The user can customize a functionality of one or more of the buttons. The touch surface 1146 can, for example, also be used to implement virtual or soft buttons and/or a keyboard.
In some implementations, the computing device 1100 can present recorded audio and/or video files, such as MP3, AAC, and MPEG files. In some implementations, the computing device 1100 can include the functionality of an MP3 player, such as an iPod®. The computing device 1100 can, therefore, include a 36-pin connector that is compatible with the iPod®. Other input/output and control devices can also be used.
The memory interface 1102 can be coupled to memory 1150. The memory 1150 can include high-speed random access memory and/or non-volatile memory, such as one or more magnetic disk storage devices, one or more optical storage devices, and/or flash memory (e.g., NAND, NOR). The memory 1150 can store an operating system 1152, such as Darwin, RTXC, LINUX, UNIX, OS X, WINDOWS, or an embedded operating system such as VxWorks.
The operating system 1152 can include instructions for handling basic system services and for performing hardware dependent tasks. In some implementations, the operating system 1152 can be a kernel (e.g., UNIX kernel). In some implementations, the operating system 1152 can include instructions for performing voice authentication. For example, operating system 1152 can implement the security lockout and voice authentication features as described with reference to
The memory 1150 can also store communication instructions 1154 to facilitate communicating with one or more additional devices, one or more computers and/or one or more servers. The memory 1150 can include graphical user interface instructions 1156 to facilitate graphic user interface processing; sensor processing instructions 1158 to facilitate sensor-related processing and functions; phone instructions 1160 to facilitate phone-related processes and functions; electronic messaging instructions 1162 to facilitate electronic-messaging related processes and functions; web browsing instructions 1164 to facilitate web browsing-related processes and functions; media processing instructions 1166 to facilitate media processing-related processes and functions; GNSS/Navigation instructions 1168 to facilitate GNSS and navigation-related processes and functions; and/or camera instructions 1170 to facilitate camera-related processes and functions.
The memory 1150 can store other software instructions 1172 to facilitate other processes and functions, such as the security and/or authentication processes and functions as described with reference to
The memory 1150 can also store other software instructions (not shown), such as web video instructions to facilitate web video-related processes and functions; and/or web shopping instructions to facilitate web shopping-related processes and functions. In some implementations, the media processing instructions 1166 are divided into audio processing instructions and video processing instructions to facilitate audio processing-related processes and functions and video processing-related processes and functions, respectively. An activation record and International Mobile Equipment Identity (IMEI) 1174 or similar hardware identifier can also be stored in memory 1150.
Each of the above identified instructions and applications can correspond to a set of instructions for performing one or more functions described above. These instructions need not be implemented as separate software programs, procedures, or modules. The memory 1150 can include additional instructions or fewer instructions. Furthermore, various functions of the computing device 1100 can be implemented in hardware and/or in software, including in one or more signal processing and/or application specific integrated circuits.
As described above, some aspects of the subject matter of this specification include gathering and use of data available from various sources to improve services a mobile device can provide to a user. The present disclosure contemplates that in some instances, this gathered data may identify a particular location or an address based on device usage. Such personal information data can include location based data, addresses, subscriber account identifiers, or other identifying information.
The present disclosure further contemplates that the entities responsible for the collection, analysis, disclosure, transfer, storage, or other use of such personal information data will comply with well-established privacy policies and/or privacy practices. In particular, such entities should implement and consistently use privacy policies and practices that are generally recognized as meeting or exceeding industry or governmental requirements for maintaining personal information data private and secure. For example, personal information from users should be collected for legitimate and reasonable uses of the entity and not shared or sold outside of those legitimate uses. Further, such collection should occur only after receiving the informed consent of the users. Additionally, such entities would take any needed steps for safeguarding and securing access to such personal information data and ensuring that others with access to the personal information data adhere to their privacy policies and procedures. Further, such entities can subject themselves to evaluation by third parties to certify their adherence to widely accepted privacy policies and practices.
In the case of advertisement delivery services, the present disclosure also contemplates embodiments in which users selectively block the use of, or access to, personal information data. That is, the present disclosure contemplates that hardware and/or software elements can be provided to prevent or block access to such personal information data. For example, in the case of advertisement delivery services, the present technology can be configured to allow users to select to “opt in” or “opt out” of participation in the collection of personal information data during registration for services.
Therefore, although the present disclosure broadly covers use of personal information data to implement one or more various disclosed embodiments, the present disclosure also contemplates that the various embodiments can also be implemented without the need for accessing such personal information data. That is, the various embodiments of the present technology are not rendered inoperable due to the lack of all or a portion of such personal information data. For example, content can be selected and delivered to users by inferring preferences based on non-personal information data or a bare minimum amount of personal information, such as the content being requested by the device associated with a user, other non-personal information available to the content delivery services, or publically available information.
This application is a continuation of U.S. patent application Ser. No. 15/272,892, filed Sep. 22, 2016, which claims priority under 35 USC § 119(e) to U.S. patent application Ser. No. 62/348,995, filed on Jun. 12, 2016, both of which are hereby incorporated by reference.
| Number | Date | Country | |
|---|---|---|---|
| 62348995 | Jun 2016 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 15272892 | Sep 2016 | US |
| Child | 16560563 | US |
