Microsoft Technology Licensing, LLC

Craig Thomas McIntyre

Peter Gregory Davis

Raju Jain

Kiran Kumar

Guillermo Enrique Rueda

Anshul Rawat

Jing Zhang

Nathan Jeffrey Ide

Pranav Kukreja

Ibrahim Mohammad Ismail

Jeff Johnson

Matthias Baer

Jonathan David Wiswall

Jeffrey J Johnson

Peter Dawoud Shenouda Dawoud

Jason C Mayans

Paul Clay Barr

Sangeeta Ranjit

Michael C Hilsdale

Gargee Sharma

Tyler Jeffrey White

Kanna Ramasubramanian

Tom Coon

Aspects of the present disclosure include systems and methods for generating and managing user authentication rules of a computing device. In an example, a computing device may include a memory storing instructions and a processor communicatively coupled with the memory and configured to execute the instructions. The processor may determine a state of the computing device, wherein the state of the computing device is one of a locked state or an unlocked state. The processor may determine a user authentication rule corresponding to the state of the computing device. The processor may also identify whether a combination of signals associated with the user authentication rule of the computing device are received by the computing device. The processor may also change or maintain the state of the computing device based on the combination of signals being received.

Authentication rules for locked and unlocked states

A user provides an identification (ID) signal (e.g. a biometric ID signal like a self-snapshot) to a trusted cloud-based provider. When the user attempts to authenticate with the cloud-based provider, a similar ID signal (e.g. another self-snapshot) for the user is captured and provided to the cloud-based provider. The cloud-based provider then obtains a secondary ID signal, or a combination of secondary ID signals, and utilizes the secondary ID signal, or signals, to identify a subset of user records to be searched for the ID signal. The subset of the records, rather than all of the user records, can then be searched for the ID signal. The cloud-based provider can then authenticate the user based on the results of the search of the subset of the user records.

Authenticating users of communal computing devices using a limited search scope

A multi-user computing device, such a communal computing device like an interactive digital whiteboard, can execute single user aware ('SUA') applications and multi-user aware ('MUA') applications. Instances of SUA applications execute in the context of a single user. MUA applications can execute in the contexts of multiple authenticated users simultaneously. A multi-user aware OS platform authenticates and de-authenticates users of the multi-user computing device. The multi-user aware OS platform provides notifications to MUA applications when users are authenticated and de-authenticated. When a new user is authenticated, MUA applications begin executing in the context of the newly authenticated user and any other previously authenticated users. When users are de-authenticated, MUA applications stop executing in the context of the de-authenticated user but continue executing in the context of the remaining authenticated users of the multi-user computing device. Data associated with the de-authenticated user is removed from the multi-user computing device.

Multi-user computing device configured for executing applications in multiple user contexts simultaneously

Systems and methods for generating and managing user authentication rules of a computing device

A communal computing device such as an interactive digital whiteboard can provide progressively more access to functionality and data on the device based on a level of certainty in the identity of a user. If a user is identified based on one or more low-fidelity identification signals such as an image of the user or a device identifier, the communal computing device may provide a first level of functionality that is limited. If the user requests greater access, the communal computing device can request that a trusted cloud-based provider authenticate the user by way of a personal device, such as a smartphone. The authentication may be a password or high-fidelity biometric identification. The cloud-based provider communicates successful authentication to the communal computing device and it, in turn, provides the user access to higher, second level of functionality.

Progressive access to data and device functionality

Techniques are disclosed for configuring a group of displays. A grouping of display devices that are to be combined to form an integrated display is identified. A prompt is generated for user input indicative of a spatial arrangement of the display devices. In response to the prompt, a series of user inputs is received by one or more input sensors. Based on the series of user inputs, the spatial arrangement of the display devices is estimated. Based on the estimated spatial arrangement of the display devices, portions of display data are mapped to the display devices. The mapped portions of the display data are rendered on the display devices to form an integrated display.

Setting up multiple displays via user input

A computing device is described that selectively displays or suppresses personalized information on a lock screen based on the results of a biometric user authentication process. In embodiments, a measure of confidence that a user of the computing device is an authorized user is determined based on biometric data collected by one or more biometric sensors. If it is determined that the measure of confidence satisfies a criterion, then personal information associated with the user is selectively rendered to the lock screen while the computing device is in the locked state. If it determined that the measure of confidence does not satisfy the criterion, then such personal information may be suppressed from the lock screen. The application of the foregoing technique to selectively provide or deny access to certain functionality of the computing device via the lock screen is also described.

Selectively providing personal information and access to functionality on lock screen based on biometric user authentication

Growing community of inventors

Kirkland, WA, United States of America

Craig Thomas McIntyre