Secure public key acceleration
    2.
    发明授权

    公开(公告)号:US10521596B1

    公开(公告)日:2019-12-31

    申请号:US16138670

    申请日:2018-09-21

    Applicant: Apple Inc.

    Abstract: In an embodiment, a system is provided in which the private key is managed in hardware and is not visible to software. The system may provide hardware support for public key generation, digital signature generation, encryption/decryption, and large random prime number generation without revealing the private key to software. The private key may thus be more secure than software-based versions. In an embodiment, the private key and the hardware that has access to the private key may be integrated onto the same semiconductor substrate as an integrated circuit (e.g. a system on a chip (SOC)). The private key may not be available outside of the integrated circuit, and thus a nefarious third party faces high hurdles in attempting to obtain the private key.

    Secure public key acceleration
    3.
    发明授权

    公开(公告)号:US10114956B1

    公开(公告)日:2018-10-30

    申请号:US15860314

    申请日:2018-01-02

    Applicant: Apple Inc.

    Abstract: In an embodiment, a system is provided in which the private key is managed in hardware and is not visible to software. The system may provide hardware support for public key generation, digital signature generation, encryption/decryption, and large random prime number generation without revealing the private key to software. The private key may thus be more secure than software-based versions. In an embodiment, the private key and the hardware that has access to the private key may be integrated onto the same semiconductor substrate as an integrated circuit (e.g. a system on a chip (SOC)). The private key may not be available outside of the integrated circuit, and thus a nefarious third party faces high hurdles in attempting to obtain the private key.

    Secure public key acceleration
    6.
    发明授权
    Secure public key acceleration 有权
    安全公钥加速

    公开(公告)号:US09547778B1

    公开(公告)日:2017-01-17

    申请号:US14498820

    申请日:2014-09-26

    Applicant: Apple Inc.

    Abstract: In an embodiment, a system is provided in which the private key is managed in hardware and is not visible to software. The system may provide hardware support for public key generation, digital signature generation, encryption/decryption, and large random prime number generation without revealing the private key to software. The private key may thus be more secure than software-based versions. In an embodiment, the private key and the hardware that has access to the private key may be integrated onto the same semiconductor substrate as an integrated circuit (e.g. a system on a chip (SOC)). The private key may not be available outside of the integrated circuit, and thus a nefarious third party faces high hurdles in attempting to obtain the private key.

    Abstract translation: 在一个实施例中,提供一种系统,其中私钥是以硬件管理的,并且对于软件是不可见的。 该系统可以为公开密钥生成,数字签名生成,加密/解密以及大量随机素数生成提供硬件支持,而不会向软件揭示私有密钥。 因此,私钥比基于软件的版本更安全。 在一个实施例中,可以访问专用密钥的私有密钥和硬件可以集成到与集成电路(例如芯片上的系统(SOC))相同的半导体衬底上。 私钥在集成电路之外可能不可用,因此,恶意的第三方在尝试获取私钥时面临着很大障碍。

    Combined Authorization Process
    7.
    发明申请
    Combined Authorization Process 审中-公开
    组合授权流程

    公开(公告)号:US20170012959A1

    公开(公告)日:2017-01-12

    申请号:US14871782

    申请日:2015-09-30

    Applicant: Apple Inc.

    Abstract: Some embodiments provide a method for a first device for joining a group of related devices. The method receives input of a password for authorization with a centralized entity. The method receives input of a code generated by a second device already established in the group of related devices. The method uses the password and the code to (i) join the group of related devices in order to synchronize user data with the devices in the group of related devices and (ii) authorize the first device with the centralized entity as a valid device for a particular account with the centralized entity.

    Abstract translation: 一些实施例提供了用于连接一组相关设备的第一设备的方法。 该方法接收输入密码以进行集中实体的授权。 该方法接收由相关设备组中已经建立的第二设备生成的代码的输入。 该方法使用密码和代码(i)加入相关设备组,以便将用户数据与相关设备组中的设备同步,以及(ii)将具有集中式实体的第一设备授权为有效设备 与集中实体的特定帐户。

    Apparatuses and Methods for Using a Random Authorization Number to Provide Enhanced Security for a Secure Element
    9.
    发明申请
    Apparatuses and Methods for Using a Random Authorization Number to Provide Enhanced Security for a Secure Element 审中-公开
    使用随机授权号码为安全元素提供增强安全性的设备和方法

    公开(公告)号:US20150348022A1

    公开(公告)日:2015-12-03

    申请号:US14475375

    申请日:2014-09-02

    Applicant: Apple Inc.

    CPC classification number: G06Q20/385 G06Q20/3226 G06Q20/354 G06Q20/3829

    Abstract: A system for provisioning credentials onto an electronic device is provided. The system may include a payment network subsystem, a service provider subsystem, and one or more user devices that can be used to perform mobile transactions at a merchant terminal. The user device may communicate with the service provider subsystem in order to obtained commerce credentials from the payment network subsystem. The user device may include a secure element and a corresponding trusted processor. The trusted processor may generate a random authorization number and inject that number into the secure element. Mobile payments should only be completed if the random authorization number on the secure element matches the random authorization number at the trusted processor. The trusted processor may be configured to efface the previous random authorization number and generate a new random authorization number when detecting a potential change in ownership at the user device.

    Abstract translation: 提供了一种用于将凭证提供到电子设备上的系统。 系统可以包括支付网络子系统,服务提供商子系统以及可以用于在商家终端执行移动交易的一个或多个用户设备。 用户设备可以与服务提供商子系统通信,以便从支付网络子系统获得商业凭证。 用户设备可以包括安全元件和相应的可信处理器。 可信处理器可以生成随机授权号,并将该号码注入到安全元件中。 仅当安全元素上的随机授权号码与可信处理器上的随机授权号码匹配时,才应完成移动支付。 信任处理器可以被配置为在检测用户设备的所有权的潜在变化时消除先前的随机授权号码并生成新的随机授权号码。

    Data protection for keychain syncing
    10.
    发明授权
    Data protection for keychain syncing 有权
    钥匙串同步数据保护

    公开(公告)号:US09124637B2

    公开(公告)日:2015-09-01

    申请号:US13839126

    申请日:2013-03-15

    Applicant: Apple Inc.

    Abstract: Some embodiments provide a program that provides data protection for a device when synchronizing a set of keychains stored on the device with a set of other devices. The program receives keychain data for synchronizing the set of keychains stored on the device with the set of other devices. The keychain data is specified as belonging to a protection domain. The program determines whether a set of conditions defined for the protection domain is satisfied. When the set of conditions is determined as satisfied, the program allows access to the keychain data in order to process the keychain data and synchronize the set of keychains stored on the device with the set of other devices.

    Abstract translation: 一些实施例提供了一种在将设备上存储的一组钥匙串与一组其他设备同步时为设备提供数据保护的程序。 该程序接收用于使存储在设备上的一组密钥串与其他设备的集合同步的钥匙串数据。 钥匙串数据被指定为属于保护域。 该程序确定是否满足为保护域定义的一组条件。 当满足条件集合时,程序允许访问钥匙串数据,以便处理钥匙串数据并使存储在设备上的一组密钥串与其他设备的集合同步。

Patent Agency Ranking