Determining validity of subscription to use digital content

    公开(公告)号:US11615388B2

    公开(公告)日:2023-03-28

    申请号:US16698621

    申请日:2019-11-27

    Applicant: Apple Inc.

    Abstract: Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed. The method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.

    Providing verified claims of user identity

    公开(公告)号:US11588804B2

    公开(公告)日:2023-02-21

    申请号:US16726722

    申请日:2019-12-24

    Applicant: Apple Inc.

    Abstract: A device implementing a system for using a verified claim of identity includes at least one processor configured to receive a verified claim including information to identify a user of a device, the verified claim being signed by a server based on verification of the information by an identity verification provider separate from the server, the verified claim being specific to the device. The at least one processor is further configured to send, to a service provider, a request for a service provided by the service provider, and receive, from the service provider and in response to the sending, a request for the verified claim. The at least one processor is further configured to send, in response to the receiving, the verified claim to the service provider.

    Controlling use of shared content items based on client device

    公开(公告)号:US10002236B2

    公开(公告)日:2018-06-19

    申请号:US14634405

    申请日:2015-02-27

    Applicant: Apple Inc.

    Abstract: User accounts can be linked together to form a group of linked user accounts that can access content items assigned to the other user accounts in the group. A user can download content items assigned to their user account, as well as shared content items assigned to one of the other user accounts in the group of linked user accounts. Use of shared content items can be restricted to client devices running specified versions of an operating system. The key ID tagged to a shared content item can be altered such that the key ID no longer correctly identifies the corresponding DRM key that enables use of the shared content item. Client devices authorized to use shared content items can be configured to recognize that a content item is a shared content item and generate the original key ID form the altered key ID.

    USING STATE REORDERING TO PROTECT AGAINST WHITE BOX ATTACKS
    15.
    发明申请
    USING STATE REORDERING TO PROTECT AGAINST WHITE BOX ATTACKS 有权
    使用状态重新防止白盒攻击

    公开(公告)号:US20160359618A1

    公开(公告)日:2016-12-08

    申请号:US14866997

    申请日:2015-09-27

    Applicant: Apple Inc.

    Abstract: Some embodiments provide a method for performing an iterative block cipher. Line rotations and column rotations are combined to have a diversity of representations of the AES state. These protections can be performed either in static mode where the rotations are directly included in the code and the tables or in dynamic mode where the rotations are chosen randomly at execution time, depending on some entropic context variables. The two modes can also be advantageously combined together.

    Abstract translation: 一些实施例提供了一种用于执行迭代块密码的方法。 线旋转和列旋转被组合以具有多种AES状态的表示。 这些保护可以在静止模式下执行,其中旋转被直接包括在代码和表中,或者在动态模式中,其中根据一些熵上下文变量在执行时随机选择旋转。 两种模式也可以有利地组合在一起。

    COMPUTING KEY-SCHEDULES OF THE AES FOR USE IN WHITE BOXES
    16.
    发明申请
    COMPUTING KEY-SCHEDULES OF THE AES FOR USE IN WHITE BOXES 有权
    计算用于白盒的AES的关键时间表

    公开(公告)号:US20160261405A1

    公开(公告)日:2016-09-08

    申请号:US14639026

    申请日:2015-03-04

    Applicant: APPLE INC.

    Abstract: Some embodiments provide a method for performing a cryptographic process. The method receives first and second cipher keys. The method generates a set of subkeys corresponding to each of the first and second cipher keys. The set of subkeys for the first cipher key is dependent on the first cipher key and the second cipher key. The method performs the cryptographic process by using the generated sets of subkeys.

    Abstract translation: 一些实施例提供了用于执行密码处理的方法。 该方法接收第一和第二密码密钥。 该方法生成与第一和第二密码密钥中的每一个对应的一组子密钥。 用于第一密码密钥的子密钥集合取决于第一密码密钥和第二密码密钥。 该方法通过使用生成的子项集执行加密处理。

    Use of a Biometric Image in Online Commerce
    17.
    发明申请
    Use of a Biometric Image in Online Commerce 审中-公开
    在线商务中使用生物识别图像

    公开(公告)号:US20150073998A1

    公开(公告)日:2015-03-12

    申请号:US14022104

    申请日:2013-09-09

    Applicant: Apple Inc.

    Abstract: An online store can transmit an online account token to an electronic device or to a biometric sensing device after a user successfully enters his or her account password. The electronic device or the biometric sensing device can countersign the online account token when the one or more biometric images match reference biometric images and the account password matches user identifier data stored in the electronic device or in the biometric sensing device. The countersigned online account token can then be transmitted to the online store. The user can then make one or more purchases after the online store receives the countersigned online account token.

    Abstract translation: 在用户成功输入他或她的帐户密码之后,在线商店可以将在线帐户令牌传送到电子设备或生物测定传感设备。 当一个或多个生物测定图像与参考生物图像匹配并且帐户密码与存储在电子设备中或生物测定传感设备中的用户标识符数据匹配时,电子设备或生物特征感测设备可以对准在线帐户令牌。 然后可以将签署的在线帐户令牌发送到在线商店。 然后,用户可以在网上商店收到签署的在线帐户令牌之后进行一次或多次购买。

    Secure account creation
    18.
    发明授权
    Secure account creation 有权
    创建安全帐户

    公开(公告)号:US08949935B2

    公开(公告)日:2015-02-03

    申请号:US13732056

    申请日:2012-12-31

    Applicant: Apple Inc.

    CPC classification number: H04L63/08 H04L29/06 H04L63/0807 H04L63/126

    Abstract: In one embodiment, non-transitory computer-readable medium stores instructions for establishing a trusted two-way communications session for account creation for an online store, which include instructions for causing a processor to perform operations comprising retrieving and verifying a signed configuration file from a server, requesting a communication session using the configuration file, receiving a payload of account creation forms from a network client, signing the payload according to the server configuration file, and sending the signed payload containing account creation information to the server. In one embodiment, a computer-implemented method comprises analyzing timestamps for requests for data forms for supplying account creation information for evidence of automated account creation activity and rejecting the request for the locator of the second account creation form if evidence of automated account creation activity is detected. Methods for secure account authentication and asset purchase are also disclosed.

    Abstract translation: 在一个实施例中,非暂时性计算机可读介质存储用于建立用于在线商店的帐户创建的可信双向通信会话的指令,其包括用于使处理器执行操作的指令,所述指令包括从以下操作检索和验证签名配置文件: 服务器,使用配置文件请求通信会话,从网络客户端接收帐户创建表单的有效载荷,根据服务器配置文件签名有效载荷,以及将包含帐户创建信息的签名的有效载荷发送到服务器。 在一个实施例中,计算机实现的方法包括分析用于数据表单的请求的时间戳,用于提供用于创建自动化帐户的活动的证据的帐户创建信息,并且如果自动帐户创建活动的证据是拒绝第二帐户创建表单的定位者的请求, 检测到。 还披露了安全帐户认证和资产购买的方法。

    SECURING IN-APP PURCHASES
    19.
    发明申请
    SECURING IN-APP PURCHASES 审中-公开
    安全入场购买

    公开(公告)号:US20140025521A1

    公开(公告)日:2014-01-23

    申请号:US13668109

    申请日:2012-11-02

    Applicant: APPLE INC.

    Abstract: In one embodiment, a unique (or quasi unique) identifier can be received by an application store, or other on-line store, and the store can create a signed receipt that includes data desired from the unique identifier. This signed receipt is then transmitted to a device that is running the application obtained from the on-line store and the device can verify the receipt by deriving the unique (or quasi-unique) identifier from the signed receipt and comparing the derived identifier with the device identifier stored on the device, or the vendor identifier assigned to the application vendor.

    Abstract translation: 在一个实施例中,唯一的(或准唯一的)标识符可以由应用商店或其他在线商店接收,并且商店可以创建包括从唯一标识符所期望的数据的签名收据。 然后将该签名的收据发送到运行从在线商店获取的应用的设备,并且设备可以通过从签名的收据导出唯一(或准唯一)标识符来验证收据,并将导出的标识符与 存储在设备上的设备标识符或分配给应用供应商的供应商标识符。

    ZERO-KNOWLEDGE BASED AUTHENTICATION METHOD, SYSTEM, AND APPARATUS
    20.
    发明申请
    ZERO-KNOWLEDGE BASED AUTHENTICATION METHOD, SYSTEM, AND APPARATUS 有权
    基于ZERO-KNOWLEDGE的认证方法,系统和设备

    公开(公告)号:US20130205137A1

    公开(公告)日:2013-08-08

    申请号:US13802508

    申请日:2013-03-13

    Applicant: APPLE INC.

    Abstract: In the fields of data security and system reliability and qualification, this disclosure is of a method, system and apparatus for verifying or authenticating a device to a host using a zero-knowledge based authentication technique which includes a keyed message authentication code such as an HMAC or keyed cipher function and which operates on secret information shared between the host and the device. This is useful both for security purposes and also to make sure that a device such as a computer peripheral or accessory or component is qualified to be interoperable with the host.

    Abstract translation: 在数据安全性和系统可靠性和资格认证领域中,本公开是一种用于使用基于零知识的认证技术来验证或认证到主机的设备的方法,系统和装置,其包括诸如HMAC之类的密钥化消息认证码 或密钥密码函数,并且操作在主机和设备之间共享的秘密信息。 这对于安全目的也是有用的,并且还确保诸如计算机外围设备或附件或组件的设备有资格与主机互操作。

Patent Agency Ranking