An electronic device with a display and a fingerprint sensor may authenticate a user for a respective function. While a respective function of the device is in a locked state, the device displays a graphical element on the display, the graphical element indicating a first direction of finger movement that enables unlocking of the respective function. While displaying the graphical element, the device detects an input that includes movement of a finger in the first direction over the fingerprint sensor and determines whether the input meets unlock criteria based at least in part on fingerprint information of the finger detected by the fingerprint sensor during the input. In accordance with a determination that the input meets the unlock criteria, the device unlocks the respective function; and in accordance with a determination that the input does not meet the unlock criteria, the device maintains the respective function in the locked state.

Embedded authentication systems in an electronic device

An electronic device with a display and a fingerprint sensor displays a fingerprint enrollment interface and detects, on the fingerprint sensor, a plurality of finger gestures performed with a finger. The device collects fingerprint information from the plurality of finger gestures performed with the finger. After collecting the fingerprint information, the device determines whether the collected fingerprint information is sufficient to enroll a fingerprint of the finger. When the collected fingerprint information for the finger is sufficient to enroll the fingerprint of the finger, the device enrolls the fingerprint of the finger with the device. When the collected fingerprint information for the finger is not sufficient to enroll the fingerprint of the finger, the device displays a message in the fingerprint enrollment interface prompting a user to perform one or more additional finger gestures on the fingerprint sensor with the finger.

Device, method, and graphical user interface for manipulating user interfaces based on fingerprint sensor inputs

A computer system in a fault-tolerant configuration employees multiple identical CPUs executing the same instruction stream, with multiple, identical memory modules in the address space of the CPUs storing duplicates of the same data. The system detects faults in the CPUs and memory modules, and places a faulty unit offline while continuing to operate using the good units. The faulty unit can be replaced and reintegrated into the system without shutdown. The multiple CPUs are loosely synchronized, as by detecting events such as memory references and stalling any CPU ahead of others until all execute the function simultaneously; interrupts can be synchronized by ensuring that all CPUs implement the interrupt at the same point in their instruction stream. Memory references via the separate CPU-to-memory busses are voted at the three separate ports of each of the memory modules. I/O functions are implemented using two identical I/O busses, each of which is separately coupled to only one of the memory modules. A number of I/O processors are coupled to both I/O busses. I/O devices are accessed through a pair of identical (redundant) I/O processors, but only one is designated to actively control a given device; in case of failure of one I/O processor, however, an I/O device can be accessed by the other one without system shutdown.

Fault-tolerant computer system with online recovery and reintegration of redundant components

The present invention relates to a system and methodology facilitating automation security in a networked-based industrial controller environment. Various components, systems and methodologies are provided to facilitate varying levels of automation security in accordance with security analysis tools, security validation tools and/or security learning systems. The security analysis tool receives abstract factory models or descriptions for input and generates an output that can include security guidelines, components, topologies, procedures, rules, policies, and the like for deployment in an automation security network. The validation tools are operative in the automation security network, wherein the tools perform security checking and/or auditing functions, for example, to determine if security components are in place and/or in suitable working order. The security learning system monitors/learns network traffic patterns during a learning phase, fires alarms or events based upon detected deviations from the learned patterns, and/or causes other automated actions to occur.

System and methodology providing automation security analysis, validation, and learning in an industrial controller environment

A power management architecture for an electrical power distribution system, or portion thereof, is disclosed. The architecture includes multiple intelligent electronic devices (“IED's”) distributed throughout the power distribution system to manage the flow and consumption of power from the system. The IED's are linked via a network to back-end servers. Security mechanisms are further provided which protect and otherwise ensure the authenticity of communications transmitted via the network in furtherance of the management of the distribution and consumption of electrical power by the architecture. In particular, public key cryptography is employed to identify components of the architecture and provide for secure communication of power management data among those components. Further, certificates and certificate authorities are utilized to further ensure integrity of the security mechanism.

System and method for assigning an identity to an intelligent electronic device

The present system having a secure wireless infrastructure with a key server acting as a key distribution center. The key server may be the core of the network, securely admitting new nodes or devices, deploying and updating keys and authorizing secure communications sessions. The system may also share secure keying information with a new device not already a member of a secure wireless network. The keying information may be used for authentication or encryption or both, and may be provided to the new device in a manner or mode which is not susceptible to exposure outside of the secure network. The keying information shared with the new device may be regarded as a birth key. Then the new device may send a birth key encrypted request to join the secure network via an exposed communication mode. The key server may respond with a birth key encrypted key encryption key.

Secure wireless instrumentation network system

A system using face and iris image capture for recognition of people. The system may have wide field-of-view, medium field-of-view and narrow field-of-view cameras to capture images of a scene of people, faces and irises for processing and recognition. Matching of the face and iris images with images of a database may be a basis for recognition and identification of a subject person.

Combined face and iris recognition system

A method and system for eye-safe near infra-red (NIR) optical imaging illumination. An eye of an intended subject are imaged with visible light or NIR light at an unconditionally eye-safe illumination level and the maximum permissible eye-safe NIR illumination that can be applied to the eye is determined from the captured images. The eye of the intended subject can then be illuminated with at least one substantially maximal NIR light pulse having a pulse intensity and duration selected to provide the substantially maximum permissible eye-safe NIR illumination intensity at the eye. NIR light pulse illumination can be inhibited in response to detection of other subjects either within the vicinity of a volume extending between an NIR illuminator illuminating the eye and the intended subject. The likelihood that an intended subject has been recently illuminated can also be determined and statistical measures can be used to avoid re-illuminating subject unnecessarily.

Eye-safe near infra-red imaging illumination method and system

A system for sharing secure keying information with a new device not of a secure wireless network. The keying information may be used for encryption and provided to the new device in a manner which is not susceptible to exposure outside of the secure network. The keying information shared with the new device may be regarded as a birth key. Upon appropriate provision of the birth key, the new device may request with a birth key encrypted message via a communication mode exposed to potential adversaries to be added to the secure network.

A cryptographic key sharing method

An initiating device in a wireless network transmits a data message to at least three responding devices. None, one, some, or all of the responding devices may successfully receive the data message. Any responding device that successfully receives the data message sends an acknowledgement to the initiating device, which may or may not receive the acknowledgement. The responding devices may use any suitable technique to determine an order in which the acknowledgements are communicated to the initiating device, such as by using an ordering of the network addresses of the responding devices. With adequate spatial and angular separation of the responding devices from the perspective of the initiating device, the likelihood of a lost (unsuccessfully received) data message in the wireless network can be reduced significantly. This may be useful, for example, in industrial process control systems used to control industrial processes.

Thomas L. Phinney

Papers

Secure wireless instrumentation network system

Combined face and iris recognition system

Eye-safe near infra-red imaging illumination method and system

A cryptographic key sharing method

Apparatus and method for acknowledging successful transmissions in a wireless communication system