In-circuit security system and methods for controlling access to and use of sensitive data

Abstract

At a first electronic device with a display and one or more biometric sensors a request is made for user authentication using the one or more biometric sensors. After requesting the user authentication, biometric information associated with the user is detected with the one or more biometric sensors. In response to detecting the biometric information associated with the user and in accordance with a determination that the detected biometric information associated with the user meets authentication criteria, (1) access to the first electronic device is provided based on the detected biometric information and (2) the second electronic device is provided with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device. In accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, access the first electronic device is not provided and the second electronic device is not provided with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device.

1 .- 20 . (canceled) 
     
     
         21 . A method comprising:
 at a first electronic device with a display and one or more biometric sensors, wherein the first electronic device is configured to communicate securely with a second electronic device that is separate from the first electronic device:   requesting user authentication using the one or more biometric sensors;   after requesting the user authentication, detecting biometric information associated with the user with the one or more biometric sensors;   in response to detecting the biometric information associated with the user:   in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   providing access to the first electronic device based on the detected biometric information; and   providing the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device; and   in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgoing providing access the first electronic device and forgoing providing the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device.   
     
     
         22 . The method of  claim 21 , further comprising:
 in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   providing access to a resource of the second electronic device to the user.   
     
     
         23 . The method of  claim 21 , wherein the second electronic device is an interface device and the access provided to the user in accordance with the determination that the detected biometric information associated with the user meets authentication criteria includes access to a service and an application on the interface device 
     
     
         24 . The method of  claim 23 , wherein the service provides purchasing or financial functionality through the interface device. 
     
     
         25 . The method of  claim 23 , wherein access to the interface device allows the user access to content through the interface device. 
     
     
         26 . The method of  claim 23 , wherein the interface device is a video device and the first electronic device is a remote control for the video device, the method further comprising:
 receiving a selection of content to purchase on the first electronic device; and   transmitting an indication of the content to purchase to the second electronic device.   
     
     
         27 . The method of  claim 26  further comprising:
 transmitting, by the video device, an identification of the content to purchase and payment information to a seller of the content; and 
 causing to display, by the video device, the content on a display. 
 
     
     
         28 . The method of  claim 26 , wherein the video device is a set-top box. 
     
     
         29 . The method of  claim 21 , further comprising:
 receiving a signal from the second electronic device after providing the information based on the biometric information to the second electronic device.   
     
     
         30 . The method of  claim 21 , wherein the detected biometric information associated with the user meets authentication criteria when the detected biometric information is consistent with a biometric template that is stored within tamper-resistant memory within the first electronic device. 
     
     
         31 . A first electronic device, comprising:
 a display;   one or more biometric sensors;   one or more processors;   memory; and   one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions, which when executed by the one or more processors, cause the first electronic device to:   request user authentication using the one or more biometric sensors;   after requesting the user authentication, detect biometric information associated with the user with the one or more biometric sensors;   in response to detecting the biometric information associated with the user:   in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   provide access to the first electronic device based on the detected biometric information; and   provide the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device; and   in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgo providing access the first electronic device and forgoing providing the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device.   
     
     
         32 . The first electronic device of  claim 31 , wherein the one or more biometric sensors are integrated with the display. 
     
     
         33 . The first electronic device of  claim 31 , wherein the one or more programs further causes the first electronic device to:
 in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   provide access to a resource of the second electronic device to the user.   
     
     
         34 . The first electronic device of  claim 31 , wherein the second electronic device is an electronic lock and the access provided to the user in accordance with the determination that the detected biometric information associated with the user meets authentication criteria includes unlocking the lock. 
     
     
         35 . The first electronic device of  claim 31 , wherein the second electronic device is an interface device and the access provided to the user in accordance with the determination that the detected biometric information associated with the user meets authentication criteria includes access to a service and an application on the interface device 
     
     
         36 . The first electronic device of  claim 35 , wherein the service provides purchasing or financial functionality through the interface device. 
     
     
         37 . The first electronic device of  claim 35 , wherein access to the interface device allows the user access to content through the interface device. 
     
     
         38 . The first electronic device of  claim 35 , wherein the interface device is a video device and the first electronic device is a remote control for the video device, the one or more programs further causing the first electronic device to:
 receive a selection of content to purchase on the first electronic device; and   transmit an indication of the content to purchase to the second electronic device.   
     
     
         39 . The first electronic device of  claim 38 , wherein the video device is a set-top box. 
     
     
         40 . The first electronic device of  claim 35 , wherein the one or more programs further causes the first electronic device to:
 receive a signal from the second electronic device after providing the information based on the biometric information to the second electronic device.   
     
     
         41 . The first electronic device of  claim 35 , wherein the detected biometric information associated with the user meets authentication criteria when the detected biometric information is consistent with a biometric template that is stored within tamper-resistant memory within the first electronic device. 
     
     
         42 . A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by a first electronic device with a display and one or more biometric sensors, cause the first electronic device to:
 request user authentication using the one or more biometric sensors;   after requesting the user authentication, detect biometric information associated with the user with the one or more biometric sensors;   in response to detecting the biometric information associated with the user:   in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   provide access to the first electronic device based on the detected biometric information; and   provide the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device; and   in accordance with a determination that the detected biometric information associated with the user does not meet the authentication criteria, forgo providing access the first electronic device and forgoing providing the second electronic device with information based on the biometric information that, when received by the second electronic device, grants access to operate the second electronic device.   
     
     
         43 . The non-transitory computer readable storage medium of  claim 42 , wherein the one or more programs further causes the first electronic device to:
 in accordance with a determination that the detected biometric information associated with the user meets authentication criteria:   provide access to a resource of the second electronic device to the user.   
     
     
         44 . The non-transitory computer readable storage medium of  claim 42 , wherein the second electronic device is an interface device and the access provided to the user in accordance with the determination that the detected biometric information associated with the user meets authentication criteria includes access to a service and an application on the interface device 
     
     
         45 . The non-transitory computer readable storage medium of  claim 44 , wherein the service provides purchasing or financial functionality through the interface device. 
     
     
         46 . The non-transitory computer readable storage medium of  claim 44 , wherein access to the interface device allows the user access to content through the interface device. 
     
     
         47 . The non-transitory computer readable storage medium of  claim 44 , wherein the interface device is a video device and the first electronic device is a remote control for the video device, the one or more programs further causing the first electronic device to:
 receive a selection of content to purchase on the first electronic device; and   transmit an indication of the content to purchase to the second electronic device.   
     
     
         48 . The non-transitory computer readable storage medium of  claim 42 , wherein the video device is a set-top box. 
     
     
         49 . The non-transitory computer readable storage medium of  claim 42 , wherein the one or more programs further causes the first electronic device to:
 receive a signal from the second electronic device after providing the information based on the biometric information to the second electronic device.   
     
     
         50 . The non-transitory computer readable storage medium of  claim 42 , wherein the detected biometric information associated with the user meets authentication criteria when the detected biometric information is consistent with a biometric template that is stored within tamper-resistant memory within the first electronic device.