公开(公告)号：US20220005028A1

公开(公告)日：2022-01-06

申请号：US17443419

申请日：2021-07-26

Applicant: Apple Inc.

Inventor： Karl Anders CARLSSON ,  Anton K. DIEDERICH ,  Christopher SHARP ,  Gianpaolo FASOLI ,  Maciej STACHOWIAK ,  Matthew C. BYINGTON ,  Nicholas J. SHEARER ,  Samuel M. WEINIG

IPC: G06Q20/38 ,  H04L29/06 ,  G06Q20/32 ,  G06Q20/12 ,  G06Q20/40

Abstract: Systems, methods, and computer-readable media for validating online access to secure device functionality are provided that may use shared secrets between different subsystems and limited use validation data.

公开(公告)号：US20200320188A1

公开(公告)日：2020-10-08

申请号：US16840200

申请日：2020-04-03

Applicant: Apple Inc.

Inventor： Irene M. GRAFF ,  Ahmer A. KHAN ,  Christopher SHARP ,  Libor SYKORA ,  Lucia E. BALLARD ,  Rupamay SAHA

IPC: G06F21/45 ,  H04L29/06 ,  H04W12/06

Abstract: A device for controlled identity credential release may include at least one processor configured to receive a request to release an identity credential of a user, the identity credential being stored on the device. The at least one processor may be further configured to authenticate the user associated with the identity credential. The at least one processor may be further configured to, responsive to the authentication, provide at least a portion of the identity credential, such as for display and/or to a terminal device over a direct wireless connection. The at least one processor may be further configured to cause the electronic device to enter a locked state and/or to remain in a locked state, responsive to providing the at least the portion of the identity credential.

公开(公告)号：US20200213295A1

公开(公告)日：2020-07-02

申请号：US16726731

申请日：2019-12-24

Applicant: Apple Inc.

Inventor： Rupamay SAHA ,  Brandon K. LEVENTHAL ,  Christopher SHARP ,  Vishnu JANARDHANAN PILLAI ,  Gianpaolo FASOLI ,  Augustin J. FARRUGIA

IPC: H04L29/06 ,  H04L9/00

Abstract: A device implementing a system for using a verified claim of identity includes at least one processor configured to receive a first request to revoke a verified claim, the verified claim comprising information to identify a user of a device, wherein the verified claim includes a hardware reference key of the device, and wherein the hardware reference key is a public key of a public-private key pair, a corresponding private key of which is securely stored on the device. The at least one processor may be further configured to in response to receiving the request, send, to the device, a second request to revoke the verified claim on the device, and add the verified claim to a revocation list.

公开(公告)号：US20200154270A1

公开(公告)日：2020-05-14

申请号：US16680273

申请日：2019-11-11

Applicant: Apple Inc.

Inventor： Matthew C. BYINGTON ,  Christopher SHARP ,  Jeff W. LIN ,  Rahul Narayan SINGH ,  Sourabh DUGAR ,  Yousuf H. VAID

IPC: H04W12/00 ,  H04L9/08 ,  H04L29/06 ,  G06F8/30 ,  G06F8/60 ,  G06Q20/32

Abstract: A secure trusted service manager provider may include at least one processor configured to provide, to an electronic device, a first script to provision an applet instance corresponding to a third party server, the script including a public key corresponding to the third party server. The at least one processor may be configured to receive, from the electronic device, an encrypted symmetric key and provide the encrypted symmetric key to the third party server, the symmetric key being encrypted with the public key. The at least one processor may be configured to receive, from the third party server, an encrypted data element corresponding to a transaction to be performed by the applet instance, the encrypted data element being encrypted with the symmetric key, generate a second script that includes the encrypted data element and provide, to the electronic device, the second script that includes the encrypted data element.

公开(公告)号：US20180349886A1

公开(公告)日：2018-12-06

申请号：US15995995

申请日：2018-06-01

Applicant: Apple Inc.

Inventor： Scott D. BLAKESLEY ,  Benjamin D. CHESTER ,  Christopher SHARP ,  Glen W. STEELE ,  Pritesh M. DAVE ,  Yousuf H. VAID

IPC: G06Q20/36 ,  G06Q20/34 ,  G06Q20/32

CPC classification number: G06Q20/3672 ,  G06Q20/3227

Abstract: A device implementing notification based provisioning of card accounts may include at least one processor configured to receive, from a service provider, an indication of a card account of a user, and to determine whether the card account is eligible to be added to a first device of the user for use in a wireless transaction system. The at least one processor is further configured to, when the card account is determined to be eligible to be added to the first device, transmit a notification to the first device for display, the notification indicating that the card account is eligible to be added to the first device for use in the transaction system, and initiate provisioning, on a secure element of the first device, of an applet corresponding to the card account when an approval for adding the card account to the first device is received responsive to the notification.

公开(公告)号：US20160226877A1

公开(公告)日：2016-08-04

申请号：US14995154

申请日：2016-01-13

Applicant: Apple Inc.

Inventor： David T. HAGGERTY ,  Jerrold Von HAUCK ,  Ben-Heng JUANG ,  Li Li ,  Arun G. MATHIAS ,  Kevin McLAUGHLIN ,  Avinash NARASIMHAN ,  Christopher SHARP ,  Yousuf H. Vaid ,  Xiangying YANG

IPC: H04L29/06 ,  H04W8/18

CPC classification number: H04L63/10 ,  H04L63/06 ,  H04L63/0823 ,  H04L63/0853 ,  H04L63/205 ,  H04W8/18 ,  H04W8/183 ,  H04W8/20 ,  H04W12/06

Abstract: Methods and apparatus for large scale distribution of electronic access control clients. In one aspect, a tiered security software protocol is disclosed. In one exemplary embodiment, a server electronic Universal Integrated Circuit Card (eUICC) and client eUICC software comprise a so-called “stack” of software layers. Each software layer is responsible for a set of hierarchical functions which are negotiated with its corresponding peer software layer. The tiered security software protocol is configured for large scale distribution of electronic Subscriber Identity Modules (eSIMs).

Abstract translation: 电子门禁客户大规模分销的方法和装置。 一方面，公开了一种分层的安全软件协议。 在一个示例性实施例中，服务器电子通用集成电路卡（eUICC）和客户端eUICC软件包括软件层的所谓“堆叠”。 每个软件层负责与其相应的对等软件层协商的一组分层功能。 分层安全软件协议配置为大规模分发电子订户身份模块（eSIM）。