知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

96 records (took 0.023 seconds)

    SECURE PROVISIONING OF CREDENTIALS ON AN ELECTRONIC DEVICE USING ELLIPTIC CURVE CRYPTOGRAPHY
    31.
    发明申请
    SECURE PROVISIONING OF CREDENTIALS ON AN ELECTRONIC DEVICE USING ELLIPTIC CURVE CRYPTOGRAPHY 审中-公开
    使用ELLIPTIC CURVE CRYPTOGRAPHY安全地在电子设备上提供证书

    公开(公告)号：US20150213433A1

    公开(公告)日：2015-07-30

    申请号：US14475227

    申请日：2014-09-02

    Applicant: Apple Inc.

    Inventor： Ahmer A. Khan

    IPC: G06Q20/32 ,  G06Q20/38 ,  H04L9/30

    CPC classification number: G06Q20/3227 ,  G06Q20/3821 ,  G06Q20/3829 ,  G06Q2220/00 ,  H04L9/0844 ,  H04L9/3013 ,  H04L9/3066 ,  H04L2209/56 ,  H04L2209/80

    Abstract: Systems, methods, and computer-readable media for provisioning credentials are provided. In one example embodiment, an electronic device may include a communications component that receives encrypted commerce credential data from a service provider subsystem. The electronic device may also include a secure element that, inter alia, generates on the secure element a secure element public key and a secure element private key, derives on the secure element a secure element shared secret from the secure element private key, derives on the secure element a secure element secure key from the secure element shared secret, and decrypts on the secure element the encrypted commerce credential data using the secure element secure key. Additional embodiments are also provided.

    Abstract translation: 提供了用于供应凭证的系统，方法和计算机可读介质。 在一个示例实施例中，电子设备可以包括从服务提供商子系统接收加密的商业凭证数据的通信组件。 电子设备还可以包括安全元件，其特别地，在安全元件上生成安全元件公钥和安全元件私钥，从安全元件私有密钥导出安全元件共享秘密的安全元件，导出 所述安全元件是来自所述安全元件共享秘密的安全元件安全密钥，并且使用所述安全元件安全密钥在所述安全元件上解密所述加密的商业凭证数据。 还提供了另外的实施例。

    ON-BOARD APPLET MIGRATION
    32.
    发明申请
    ON-BOARD APPLET MIGRATION 有权
    板上方法移动

    公开(公告)号：US20150193221A1

    公开(公告)日：2015-07-09

    申请号：US14466850

    申请日：2014-08-22

    Applicant: Apple Inc.

    Inventor： Ahmer A. Khan ,  Joakim Linde ,  Mehdi Ziat

    IPC: G06F9/445 ,  G06F21/71 ,  H04W12/06 ,  H04L9/32 ,  G06F9/44

    CPC classification number: G06F8/65 ,  G06F21/57 ,  H04L9/3247 ,  H04L67/06 ,  H04L67/306 ,  H04L67/34 ,  H04L67/42 ,  H04W4/60 ,  H04W12/06

    Abstract: An electronic device (such as a cellular telephone) automatically installs and personalizes updates to an applet on a secure element in the electronic device. In particular, when a digitally signed update package containing the update is received from an updating device (such as a server), the secure element identifies any previous versions of the applet installed on the secure element. If there are any previously installed versions, the secure element verifies the digital signature of the update package using an encryption key associated with a vendor of the secure element. Then, the secure element uninstalls the previous versions of the applet and exports the associated user data. Next, the secure element installs the update to the applet, and personalizes the new version of the applet using the user data.

    Abstract translation: 电子设备（例如蜂窝电话）在电子设备中的安全元件上自动安装并个性化对小应用程序的更新。 特别地，当从更新设备（例如服务器）接收到包含更新的数字签名的更新包时，安全元件识别安装在安全元件上的小应用程序的任何先前版本。 如果有任何先前安装的版本，则安全元件使用与安全元件的供应商相关联的加密密钥验证更新包的数字签名。 然后，安全元素会卸载以前版本的applet并导出关联的用户数据。 接下来，安全元件将更新安装到小程序，并使用用户数据个性化新版本的小应用程序。

    DELETION OF CREDENTIALS FROM AN ELECTRONIC DEVICE
    33.
    发明申请
    DELETION OF CREDENTIALS FROM AN ELECTRONIC DEVICE 审中-公开
    从电子设备中删除证书

    公开(公告)号：US20150178723A1

    公开(公告)日：2015-06-25

    申请号：US14475292

    申请日：2014-09-02

    Applicant: Apple Inc.

    Inventor： Ahmer A. Khan ,  Joakim Linde ,  Christopher Sharp ,  Jerrold V. Hauck

    IPC: G06Q20/38 ,  H04L29/06 ,  G06Q20/32

    Abstract: Systems, methods, and computer-readable media for managing credentials are provided. In one example embodiment, an electronic device may include a secure element with a security domain element stored on the secure element. The electronic device may also include a processor component that may be configured to, inter alia, permanently terminate the functionality of the security domain element, after the functionality has been permanently terminated, communicatively couple the electronic device to a trusted service manager, and transmit data to the communicatively coupled trusted service manager that may be usable by the trusted service manager to determine that the functionality has been permanently terminated. Additional embodiments are also provided.

    Abstract translation: 提供了用于管理凭证的系统，方法和计算机可读介质。 在一个示例实施例中，电子设备可以包括具有存储在安全元件上的安全域元素的安全元件。 电子设备还可以包括处理器组件，其可以被配置为在功能已经被永久地终止之后永久地终止安全域元件的功能，通信地将电子设备耦合到可信服务管理器，并且发送数据 涉及由可信服务管理器可用以确定功能已被永久终止的通信耦合的可信服务管理器。 还提供了另外的实施例。

    USING BIOMETRIC AUTHENTICATION FOR NFC-BASED PAYMENTS
    34.
    发明申请
    USING BIOMETRIC AUTHENTICATION FOR NFC-BASED PAYMENTS 审中-公开
    使用基于NFC的付款的生物识别认证

    公开(公告)号：US20150127549A1

    公开(公告)日：2015-05-07

    申请号：US14474803

    申请日：2014-09-02

    Applicant: Apple Inc.

    Inventor： Ahmer A. Khan

    IPC: G06Q20/38 ,  G06Q20/32 ,  G06Q20/20 ,  G06Q20/40

    CPC classification number: G06Q20/3829 ,  G06Q20/20 ,  G06Q20/32 ,  G06Q20/3227 ,  G06Q20/3278 ,  G06Q20/40145

    Abstract: In order to validate a user to facilitate conducting a high-valued financial transaction via wireless communication between an electronic device (such as a smartphone) and another electronic device (such as a point-of-sale terminal), the electronic device may authenticate the user prior to the onset of the high-valued financial transaction. In particular, a secure enclave processor in a processor may provide local validation information that is specific to the electronic device to a secure element in the electronic device when received local authentication information that is specific to the electronic device (such as a biometric identifier of the user) matches stored authentication information. Moreover, an authentication applet in the secure element may provide the local validation information to an activated payment applet in the secure element. This may enable the payment applet to conduct the high-valued financial transaction via wireless communication, such as near-field communication.

    Abstract translation: 为了验证用户以便通过电子设备（例如智能电话机）和另一电子设备（例如销售点终端）之间的无线通信进行高价值的金融交易，电子设备可以认证 用户在高价值金融交易发生之前。 特别地，处理器中的安全飞地处理器可以在接收到特定于电子设备的本地认证信息时（例如，电子设备的生物识别标识符）向电子设备中的安全元件提供特定于电子设备的本地验证信息 用户）匹配存储的认证信息。 此外，安全元件中的认证小应用程序可以将本地验证信息提供给安全元件中的激活的支付小应用程序。 这可以使得支付小程序通过诸如近场通信的无线通信来进行高价值的金融交易。

    ONLINE PAYMENTS USING A SECURE ELEMENT OF AN ELECTRONIC DEVICE
    35.
    发明申请
    ONLINE PAYMENTS USING A SECURE ELEMENT OF AN ELECTRONIC DEVICE 审中-公开
    使用电子设备安全元件的在线付款

    公开(公告)号：US20150095238A1

    公开(公告)日：2015-04-02

    申请号：US14481526

    申请日：2014-09-09

    Applicant: Apple Inc.

    Inventor： Ahmer A. Khan ,  Timothy S. Hurley ,  Anton K. Diederich ,  George R. Dicker ,  Scott M. Herz ,  Christopher Sharp

    IPC: G06Q20/38 ,  G06Q20/10

    CPC classification number: G06Q20/325 ,  G06Q20/10 ,  G06Q20/12 ,  G06Q20/3227 ,  G06Q20/3278 ,  G06Q20/382 ,  G06Q20/3823 ,  G06Q20/3829 ,  G06Q20/40

    Abstract: Systems, methods, and computer-readable media for securely conducting online payments with a secure element of an electronic device are provided. In one example embodiment, a method includes, inter alia, at an electronic device, generating first data that includes payment card data, generating second data by encrypting the first data and merchant information with a first key, transmitting to a commercial entity subsystem the generated second data, receiving third data that includes the first data encrypted with a second key that is associated with the merchant information, and transmitting the received third data to a merchant subsystem that is associated with the merchant information, where the first key is not accessible to the merchant subsystem, and where the second key is not accessible to the electronic device. Additional embodiments are also provided.

    Abstract translation: 提供了使用电子设备的安全元件安全地进行在线支付的系统，方法和计算机可读介质。 在一个示例实施例中，一种方法尤其包括在电子设备上，生成包括支付卡数据的第一数据，通过用第一密钥加密第一数据和商家信息来生成第二数据，向商业实体子系统发送生成的 第二数据，接收包括用与所述商家信息相关联的第二密钥加密的第一数据的第三数据，以及将所接收的第三数据发送到与所述商家信息相关联的商户子系统，其中所述第一密钥不可访问 商业子系统，以及第二密钥不能被电子设备访问的地方。 还提供了另外的实施例。

Patent Agency Ranking