SECURE DEVICE PAIRING
    31.
    发明申请

    公开(公告)号:US20200213133A1

    公开(公告)日:2020-07-02

    申请号:US16537391

    申请日:2019-08-09

    Applicant: Apple Inc.

    Abstract: Techniques are disclosed relating to the secure communication of devices. In one embodiment, a first device is configured to perform a pairing operation with a second device to establish a secure communication link between the first device and the second device. The pairing operation includes receiving firmware from the second device to be executed by the first device during communication over the secure communication link, and in response to a successful verification of the firmware, establishing a shared encryption key to be used by the first and second devices during the communication. In some embodiments, the pairing operation includes receiving a digital signature created from a hash value of the firmware and a public key of the second device, and verifying the firmware by extracting the hash value from the digital signature and comparing the extracted hash value with a hash value of the received firmware.

    Cryptographic separation of users
    33.
    发明授权

    公开(公告)号:US10423804B2

    公开(公告)日:2019-09-24

    申请号:US15275273

    申请日:2016-09-23

    Applicant: Apple Inc.

    Abstract: Techniques are disclosed relating to securely storing data in a computing device. In one embodiment, a computing device includes a secure circuit configured to maintain key bags for a plurality of users, each associated with a respective one of the plurality of users and including a first set of keys usable to decrypt a second set of encrypted keys for decrypting data associated with the respective user. The secure circuit is configured to receive an indication that an encrypted file of a first of the plurality of users is to be accessed and use a key in a key bag associated with the first user to decrypt an encrypted key of the second set of encrypted keys. The secure circuit is further configured to convey the decrypted key to a memory controller configured to decrypt the encrypted file upon retrieval from a memory.

    Secure device pairing
    34.
    发明授权

    公开(公告)号:US10382210B2

    公开(公告)日:2019-08-13

    申请号:US15274836

    申请日:2016-09-23

    Applicant: Apple Inc.

    Abstract: Techniques are disclosed relating to the secure communication of devices. In one embodiment, a first device is configured to perform a pairing operation with a second device to establish a secure communication link between the first device and the second device. The pairing operation includes receiving firmware from the second device to be executed by the first device during communication over the secure communication link, and in response to a successful verification of the firmware, establishing a shared encryption key to be used by the first and second devices during the communication. In some embodiments, the pairing operation includes receiving a digital signature created from a hash value of the firmware and a public key of the second device, and verifying the firmware by extracting the hash value from the digital signature and comparing the extracted hash value with a hash value of the received firmware.

    System and method for wireless data protection
    36.
    发明授权
    System and method for wireless data protection 有权
    无线数据保护的系统和方法

    公开(公告)号:US09401898B2

    公开(公告)日:2016-07-26

    申请号:US14874360

    申请日:2015-10-02

    Applicant: Apple Inc.

    Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for wireless data protection utilizing cryptographic key management on a primary device and a backup device. A system encrypts a file with a file key and encrypts the file key twice, resulting in two encrypted file keys. The system encrypts each file key differently and stores a first file key on the primary device and transmits one of the encrypted file keys in addition to the encrypted file to a backup device for storage. On the backup device, the system associates the encrypted file key with a set of backup keys protected by a user password. In one embodiment, the system generates an initialization vector for use in cryptographic operations based on a file key. In another embodiment, the system manages cryptographic keys on a backup device during a user password change.

    Abstract translation: 这里公开的是用于在主设备和备用设备上利用密码密钥管理的无线数据保护的系统,方法和非暂时的计算机可读存储介质。 系统使用文件密钥加密文件,并对文件密钥进行两次加密,从而产生两个加密的文件密钥。 该系统对每个文件密钥进行不同的加密,并将第一个文件密钥存储在主设备上,并将加密的文件密钥之一加密到备份设备进行存储。 在备份设备上,系统将加密的文件密钥与受用户密码保护的一组备份密钥相关联。 在一个实施例中,系统基于文件密钥生成用于加密操作的初始化向量。 在另一个实施例中,系统在用户密码改变期间管理备份设备上的加密密钥。

    Context Based Data Access Control
    38.
    发明申请
    Context Based Data Access Control 有权
    基于上下文的数据访问控制

    公开(公告)号:US20150347770A1

    公开(公告)日:2015-12-03

    申请号:US14503244

    申请日:2014-09-30

    Applicant: Apple Inc.

    Abstract: In some implementations, encrypted data (e.g., application data, keychain data, stored passwords, etc.) stored on a mobile device can be accessed (e.g., decrypted, made available) based on the context of the mobile device. The context can include the current device state (e.g., locked, unlocked, after first unlock, etc.). The context can include the current device settings (e.g., passcode enabled/disabled). The context can include data that has been received by the mobile device (e.g., fingerprint scan, passcode entered, location information, encryption key received, time information).

    Abstract translation: 在一些实现中,可以基于移动设备的上下文来访问(例如,解密,使得可用)存储在移动设备上的加密数据(例如,应用数据,钥匙串数据,存储的密码等)。 上下文可以包括当前设备状态(例如,锁定,解锁,在首次解锁之后等等)。 上下文可以包括当前设备设置(例如,启用/禁用密码)。 上下文可以包括已经由移动设备接收的数据(例如,指纹扫描,输入的密码,位置信息,接收的加密密钥,时间信息)。

Patent Agency Ranking