Secure credential storage and retrieval

    公开(公告)号:US11164179B2

    公开(公告)日:2021-11-02

    申请号:US16428724

    申请日:2019-05-31

    Applicant: Apple Inc.

    Abstract: Techniques are disclosed relating to securely receiving and storing credentials. In some embodiments, a computing device includes an application executable to supply a credential to an external system. A secure circuit of the computing device is configured to send, to a credential storage, a request for the credential, the request including a first certificate identifying a first public key and a stipulation to perform a user authentication before permitting use of a first private key corresponding to the first public key. The secure circuit receives, from the credential storage, the credential encrypted using the first public key and, based on the stipulation, performs the user authentication prior to decrypting the credential and supplying it to the application. In some embodiments, the secure circuit receives the first certificate by providing information about hardware included in the computing device to a hardware verification service.

    SECURE CREDENTIAL STORAGE AND RETRIEVAL
    3.
    发明申请

    公开(公告)号:US20200234283A1

    公开(公告)日:2020-07-23

    申请号:US16428724

    申请日:2019-05-31

    Applicant: Apple Inc.

    Abstract: Techniques are disclosed relating to securely receiving and storing credentials. In some embodiments, a computing device includes an application executable to supply a credential to an external system. A secure circuit of the computing device is configured to send, to a credential storage, a request for the credential, the request including a first certificate identifying a first public key and a stipulation to perform a user authentication before permitting use of a first private key corresponding to the first public key. The secure circuit receives, from the credential storage, the credential encrypted using the first public key and, based on the stipulation, performs the user authentication prior to decrypting the credential and supplying it to the application. In some embodiments, the secure circuit receives the first certificate by providing information about hardware included in the computing device to a hardware verification service.

Patent Agency Ranking