公开(公告)号：US20240037533A1

公开(公告)日：2024-02-01

申请号：US18378627

申请日：2023-10-10

Applicant: Apple Inc.

Inventor： Najeeb M. ABDULRAHIMAN ,  Matthias LERCH ,  George R. DICKER ,  Oren M. ELRAD ,  Glen W. STEELE ,  Charles T. AHN ,  Onur E. TACKIN ,  Gordon Y. SCOTT

IPC: G06Q20/32 ,  G06Q20/36 ,  G06Q20/40 ,  G06Q20/34

CPC classification number: G06Q20/3278 ,  G06Q20/3674 ,  G06Q20/405 ,  G06Q20/401 ,  G06Q20/3572 ,  G06Q20/322 ,  G06Q20/4014 ,  G06Q20/342

Abstract: A device implementing an express credential transaction system includes at least one processor configured to receive an indication that a payment applet for a service provider has been provisioned on a secure element of the device with a first attribute indicating that the payment applet can be utilized for a transaction without authentication associated with the transaction. The processor is configured to set the first attribute of the payment applet to indicate that authentication is required to utilize the payment applet when another payment applet for the service provider provisioned on the secure element of the device has an attribute that indicates the other payment applet can be utilized for the transaction without user authentication. The at least one processor is configured to control whether the user authentication is requested when utilizing the payment applet or the other payment applet, respectively, in transactions.

公开(公告)号：US20190387402A1

公开(公告)日：2019-12-19

申请号：US16557770

申请日：2019-08-30

Applicant: Apple Inc.

Inventor： Li LI ,  Xiangying YANG ,  Jerrold Von HAUCK ,  Christopher B. SHARP ,  Yousuf H. VAID ,  Arun G. MATHIAS ,  David T. HAGGERTY ,  Najeeb M. ABDULRAHIMAN

IPC: H04W12/06 ,  H04L12/24 ,  H04L29/06

Abstract: Methods and apparatus for user authentication and human intent verification of administrative operations for eSIMs of an eUICC included in a mobile device are disclosed. Certain administrative operations, such as import, modification, and/or export, of an eSIM and/or for an eUICCs firmware can require user authentication and/or human intent verification before execution of the administrative operations are performed or completed by the mobile device. A user of the mobile device provides information to link an external user account to an eSIM upon (or subsequent to) installation on the eUICC. User credentials, such as a user name and password, and/or information generated therefrom, can be used to authenticate the user with an external server. In response to successful user authentication, the administrative operations are performed. Human intent verification can also be performed in conjunction with user authentication to prevent malware from interfering with eSIM and/or eUICC functions of the mobile device.

公开(公告)号：US20190166483A1

公开(公告)日：2019-05-30

申请号：US16244035

申请日：2019-01-09

Applicant: Apple Inc.

Inventor： Li LI ,  Clark P. MUELLER ,  Avinash NARASIMHAN ,  Arun G. MATHIAS ,  Najeeb M. ABDULRAHIMAN ,  David T. HAGGERTY

IPC: H04W8/18 ,  H04W4/50 ,  H04W12/10 ,  H04L29/06 ,  H04W4/60 ,  G06F21/72 ,  G06F21/57

CPC classification number: H04W8/183 ,  G06F21/575 ,  G06F21/72 ,  H04L63/123 ,  H04W4/50 ,  H04W4/60 ,  H04W8/245 ,  H04W12/10

Abstract: Representative embodiments described herein set forth techniques for provisioning bootstrap electronic Subscriber Identity Modules (eSIMs) to mobile devices. According to some embodiments, a mobile device can be configured to issue, to an eSIM selection server, a bootstrap eSIM request that includes (i) metadata associated with the mobile device, and (ii) metadata associated with an electronic Universal Integrated Circuit Card (eUICC) included in the mobile device. In turn, the eSIM selection server selects and binds a particular bootstrap eSIM to the mobile device, and provides information to the mobile device that enables the mobile device to obtain the particular bootstrap eSIM from one or more eSIM servers. When the mobile device obtains the particular bootstrap eSIM, the mobile device can interface with a mobile network operator (MNO) and obtain a complete eSIM that enables the mobile device to access services provided by the MNO.

公开(公告)号：US20190141137A1

公开(公告)日：2019-05-09

申请号：US16200507

申请日：2018-11-26

Applicant: Apple Inc.

Inventor： Luciano M. VERGER ,  Ajoy K. SINGH ,  Christopher M. GARRIDO ,  Najeeb M. ABDULRAHIMAN ,  Ming JIN ,  Anil G. NAIK ,  Deepak Chitlur LAKSHMAN ,  Srinivasan VASUDEVAN ,  David L. BIDERMAN ,  Gurtej Singh CHANDOK ,  Patrick MIAUTON ,  Eric A. ALLAMANCHE

IPC: H04L29/08 ,  H04W36/26 ,  H04L29/06 ,  H04W76/23

Abstract: Methods and apparatus to manage communication sessions to handover between a direct connection at a secondary wireless device and a relayed connection to the secondary wireless device via a primary wireless device. A connection manager of a secondary wireless device can trigger transfer of a communication session based on measurements of performance metrics for the communication session. Upon detection of performance degradation in a local connection or a backhaul connection or both, the connection manager of the secondary wireless device can determine proximity of and/or capabilities for connections of the primary wireless device and instigate transfer of the communication session between different connection types, such as between a direct connection and a relayed connection. The transfer of the communication session can occur without user intervention or in response to input from the user without interrupting or reestablishing the communication session.

公开(公告)号：US20180069581A1

公开(公告)日：2018-03-08

申请号：US15807516

申请日：2017-11-08

Applicant: Apple Inc.

Inventor： Avinash NARASIMHAN ,  Hemant PURSWANI ,  Clark P. MUELLER ,  David T. HAGGERTY ,  Li LI ,  Arun G. MATHIAS ,  Najeeb M. ABDULRAHIMAN

IPC: H04B1/3816 ,  H04W4/24 ,  H04L12/24

CPC classification number: H04W4/24 ,  H04L12/1407 ,  H04M15/66 ,  H04M15/80 ,  H04M17/02 ,  H04M17/023 ,  H04M17/026 ,  H04M17/103

Abstract: Methods, devices, and servers for as-needed update of a trusted list are provided herein. An electronic subscriber identity module (eSIM) server receives a request for an eSIM of a particular type from a wireless device. The eSIM server evaluates the particular type and requests an eSIM of the particular type from a second eSIM server, which is not initially trusted by a secure element (SE) of the wireless device. The eSIM server sends a policy update to the wireless device. The wireless device passes the policy update to the SE, for example, a universal integrated circuit card (UICC). The UICC updates the trusted list with an identity of the second eSIM server. When the wireless device downloads a bound profile package (BPP) containing an eSIM from the second eSIM server, the UICC validates the BPP based on the updated trusted list. The eSIM is then installed on the UICC.

公开(公告)号：US20160277930A1

公开(公告)日：2016-09-22

申请号：US15076527

申请日：2016-03-21

Applicant: Apple Inc.

Inventor： Li LI ,  Xiangying YANG ,  Jerrold Von HAUCK ,  Christopher B. SHARP ,  Yousuf H. VAID ,  Arun G. MATHIAS ,  David T. HAGGERTY ,  Najeeb M. ABDULRAHIMAN

IPC: H04W12/06 ,  H04L29/06

CPC classification number: H04W12/06 ,  H04L41/28 ,  H04L63/083 ,  H04L63/0838 ,  H04L63/0853

Abstract: Methods and apparatus for user authentication and human intent verification of administrative operations for eSIMs of an eUICC included in a mobile device are disclosed. Certain administrative operations, such as import, modification, and/or export, of an eSIM and/or for an eUICCs firmware can require user authentication and/or human intent verification before execution of the administrative operations are performed or completed by the mobile device. A user of the mobile device provides information to link an external user account to an eSIM upon (or subsequent to) installation on the eUICC. User credentials, such as a user name and password, and/or information generated therefrom, can be used to authenticate the user with an external server. In response to successful user authentication, the administrative operations are performed. Human intent verification can also be performed in conjunction with user authentication to prevent malware from interfering with eSIM and/or eUICC functions of the mobile device.

Abstract translation: 公开了用于移动设备中包括的eUICC的eSIM的管理操作的用户认证和人为意图验证的方法和装置。 eSIM和/或eUICC固件的某些管理操作（例如导入，修改和/或导出）可能需要在由移动设备执行或完成执行管理操作之前的用户认证和/或人为意图验证。 移动设备的用户提供在eUICC上（或之后）安装时将外部用户帐户链接到eSIM的信息。 可以使用诸如用户名和密码的用户凭证和/或从其生成的信息来用外部服务器认证用户。 响应成功的用户认证，执行管理操作。 人员意图验证还可以与用户认证一起执行，以防止恶意软件干扰移动设备的eSIM和/或eUICC功能。

公开(公告)号：US20150229639A1

公开(公告)日：2015-08-13

申请号：US14502786

申请日：2014-09-30

Applicant: APPLE INC.

Inventor： Najeeb M. ABDULRAHIMAN ,  Thomas F. PAULY ,  Vikram B. YERRABOMMANAHALLI

IPC: H04L29/06 ,  H04W12/06

CPC classification number: H04W12/06 ,  H04L63/0853 ,  H04L63/0884 ,  H04L63/0892 ,  H04W76/10 ,  H04W84/12

Abstract: Described are methods that allow credentials of a first client station to authenticate a second client station. An exemplary method includes associating a first client station with a second client station, the first client station including credential information, the associating authorizing the second client station to use the credential information, transmitting, by the second client station, an association request to a network, the network utilizing the credential information to authorize a connection, the second client station configured to perform a proxy functionality for requests received from the network to be forwarded to the first client station and responses received from the first client station to be forwarded to the network, determining, by the network, whether the credential information received from the second client station is authenticated and establishing a connection between the second client station and the network using the credential information of the first client station.

Abstract translation: 描述了允许第一客户端的凭证来验证第二客户端的方法。 一种示例性方法包括将第一客户端站与第二客户站相关联，第一客户端站包括凭证信息，关联授权第二客户端站使用凭证信息，由第二客户站向网络发送关联请求 ，所述网络利用所述凭证信息来授权连接，所述第二客户端站被配置为执行从所述网络接收到的请求被转发到所述第一客户端的请求的代理功能，以及从所述第一客户站接收的要被转发到所述网络的响应 由所述网络确定从所述第二客户端站接收到的所述凭证信息是否被认证，并且使用所述第一客户站的凭证信息来建立所述第二客户端站与所述网络之间的连接。