Apple Inc.

Andrew Roger Whalley

Craig Alan Marciniak

Byron Bay Han

Patrick L Coffman

Gregory N Christie

Lawrence Yuan Yang

Jonathan R Dascola

Craig Michael Federighi

Donald Walter Pitschel

Matthew Elliot Shepherd

Brendan John Langoulant

Michael Brouwer

Christopher R Whitney

Matthew H Gamble

Brittany D Paine

Daniel O Schimpf

David P Finkelstein

Imran A Chaudhri

Mitchell David Adler

Wade Benson

Conrad Sauerwald

Richard F Murphy

Jerrold Von Hauck

Thomas P Mensch

John C Hurley

Libor Sykora

Vratislav Kuzela

Augustin J Farrugia

Bob Bradley

Gianpaolo Fasoli

Sean Boland Kelly

Patrice Olivier Gautier

Payam Mirrashidi

Michael Kuohao Chu

Braden Jacob Thomas

Thomas Matthieu Alsina

Kenneth W Scott

Matthew Elliott Shepherd

Kenneth C McLeod

Scott T Boyd

Rajit Shinh

Yannick L Sierra

Steven J Falkenburg

Christopher S Linn

Maciej Stachowiak

Samuel M Weinig

Robert J Walsh

Pedraum R Pardehpoosh

Jonathan M Grynspan

Aaron M Sigel

Robert Bradley

Awartika Pandey

Imran Chaudhri, Iii

Timothy R Paaske

Zhimin Chen

Jeffrey C Lee

Timothee Geoghegan

Brittany D Hughes

Pedraum Pardehpoosh

An electronic device with a display and a fingerprint sensor displays a fingerprint enrollment interface and detects, on the fingerprint sensor, a plurality of finger gestures performed with a finger. The device collects fingerprint information from the plurality of finger gestures performed with the finger. After collecting the fingerprint information, the device determines whether the collected fingerprint information is sufficient to enroll a fingerprint of the finger. When the collected fingerprint information for the finger is sufficient to enroll the fingerprint of the finger, the device enrolls the fingerprint of the finger with the device. When the collected fingerprint information for the finger is not sufficient to enroll the fingerprint of the finger, the device displays a message in the fingerprint enrollment interface prompting a user to perform one or more additional finger gestures on the fingerprint sensor with the finger.

Device, method, and graphical user interface for manipulating user interfaces based on unlock inputs

In one embodiment, a unique (or quasi unique) identifier can be received by an application store, or other on-line store, and the store can create a signed receipt that includes data desired from the unique identifier. This signed receipt is then transmitted to a device that is running the application obtained from the on-line store and the device can verify the receipt by deriving the unique (or quasi-unique) identifier from the signed receipt and comparing the derived identifier with the device identifier stored on the device, or the vendor identifier assigned to the application vendor.

Securing in-app purchases

Some embodiments provide a method for a first device that identifies definitions of different groups of devices, each of which is defined by a set of properties required for a device to be a member. The method monitors properties of the first device to determine when the device is eligible for membership in a group. When the first device is eligible for membership in a first group of which the device is not a member, the method sends an application for membership in the first group signed with at least a private key of the device to at least one other device that is a member of the first group. When the first device becomes ineligible for membership in a second group of which the first device is a member, the method removes the device from the second group and notifies other devices that are members of the second group.

Dynamic group membership for devices

Some embodiments provide a method for an electronic device. The method stores user data associated with a web-based third party service based on user interaction with a web domain for the third party service through a web browser. The method receives a request from a service-specific application to utilize the user data stored for the third party service. The method provides the user data to the application only when the application is verified by the web domain for receiving user data associated with the third party service.

Sharing account data between different interfaces to a service

Techniques are disclosed relating to relating to a public key infrastructure (PKI). In one embodiment, an integrated circuit is disclosed that includes at least one processor and a secure circuit isolated from access by the processor except through a mailbox mechanism. The secure circuit is configured to generate a key pair having a public key and a private key, and to issue, to a certificate authority (CA), a certificate signing request (CSR) for a certificate corresponding to the key pair. In some embodiments, the secure circuit may be configured to receive, via the mailbox mechanism, a first request from an application executing on the processor to issue a certificate to the application. The secure circuit may also be configured to perform, in response to a second request, a cryptographic operation using a public key circuit included in the secure circuit.

Secure circuit for encryption key generation

Device, method, and graphical user interface for manipulating user interfaces

Device, method, and graphical user interface for manipulating user interfaces based on fingerprint sensor inputs

Some embodiments provide a method for a first device to synchronize a set of data items with a second device. The method receives a request to synchronize the set of data items stored on the first device with the second device. The method determines a subset of the synchronization data items stored on the first device that belong to at least one synchronization sub-group in which the second device participates. Participation in at least one of the synchronization sub-groups is defined based on membership in at least one verification sub-group. The first and second devices are part of a set of related devices with several different verification sub-groups. The method sends only the subset of the synchronization data items that belong to at least one synchronization sub-group in which the second device participates to the second device using a secure channel.

Synchronization and verification groups among related devices

Some embodiments provide convenient auto-authentication for user data on a primary device, while still providing a significant level of security, by taking advantage of existing security and cryptographic measures used to communicate with a secondary device. The primary device of some embodiments encrypts the user data on the primary device using a cryptographic key based on a set of keys received from the secondary device. In some embodiments, the primary device encrypts authentication data, or a local key generated from the authentication data, using a remote key received from the secondary device, and encrypts the user data with the local key. In some embodiments, the keys received from the secondary device are an existing set of keys for establishing an encrypted channel of communication for transmitting digital rights management (DRM) protected content according to a DRM protection scheme.

Method for securing user data with DRM keys

A wireless device can obtain a network information record from another device operating as a credential source. The network information record can include network access information for a wireless network (e.g., SSID and password) and a usage policy specifying conditions under which the wireless device should search for the wireless network (e.g., temporal and/or spatial conditions). The wireless device can implement the usage policy by searching for the wireless network only when the conditions are satisfied. In some instances, the network access information can include instructions for dynamically generating time-varying network access information, and the wireless device can use the instructions to generate network access information during a search for wireless networks.

Privacy enhancements for wireless devices

Growing community of inventors

San Francisco, CA, United States of America

Andrew Roger Whalley