Apple Inc.

Christopher Brooke Sharp

Yousuf H Vaid

David T Haggerty

Jerrold Von Hauck

Ahmer Ali Khan

Li Li

Arun Godfrey Mathias

Gianpaolo Fasoli

George R Dicker

Matthew C Byington

Kevin P McLaughlin

Brendan A McCarthy

Xiangying Yang

Stuart Slack

Glen W Steele

Gordon Y Scott

Carsten Guenther

Mehdi Ziat

Ho Cheung Chung

Policarpo Bonilla Wood

Timothy S Hurley

Thomas John Miller

Nicholas John Shearer

Anton K Diederich

Christopher D Adams

Ka Yang

Yan J Arrouye

Pavel Cisler

Marc Jason Krochmal

Joakim Linde

Najeeb M Abdulrahiman

John Joseph Iarocci

Christopher S Linn

Abhinav Gupta

Roberto G Yepez

Samuel M Weinig

Karl Martin Groethe

Augustin J Farrugia

Mitchell David Adler

Irene M Graff

Franck Farian Rakotomalala

Haya Iris Villanueva Gaviola

David W Silver

Mayura D Deshpande

Antonio Allen

Martijn Theo Haring

Vinay Ganesh

Simon P Cooper

Richard F Murphy

John S Baumgarten

Jeff W Lin

Vineet Chadha

Mikhail Gonodanov

Ben-Heng Juang

Maciej Stachowiak

Avinash Narasimhan

Andy Belk

Petr Kostka

Rupamay Saha

Jenna Yi

Gianluca Barbieri

Richard William Thomas Heard

Karl Anders Carlsson

Matthew R Murphy

Rahul Narayan Singh

Brandon K Leventhal

Sourabh Dugar

Benjamin D Chester

Ramiro Sarmiento

Pritesh Mukeshbhai Dave

Scott D Blakesley

Brendan A Mccarthy

Jean-Marc Padova

Zachary A Rosen

Akila Suresh

Lucia Elena Ballard

Libor Sykora

Bhaskar Korlipara

Vishnu Janardhanan Pillai

Vamshi Krishna Aileni

Medhi Ziat

Rob Butler

Sinduja Murari

Yousaf H Vaid

Jerroid V Hauck

Antonio A Allen

Kevin P Mclaughlin

Jeff Lin

Methods and systems are presented for remotely commanding a mobile device. In one aspect, a method includes receiving input identifying a mobile device, presenting to a user one or more remote commands corresponding to the mobile device, receiving user input selecting a remote command from the one or more presented remote commands, generating a remote command message instructing the mobile device to execute the selected remote command, and transmitting the remote command message to a server for publication in a message topic. Further, a selectable list of mobile devices associated with a remote management account can be presented to the user, the selectable list including information uniquely identifying each mobile device. Additionally, the selectable list of mobile devices can include an indication of whether an included mobile device is online.

Remotely locating and commanding a mobile device

An embodiment includes a method to increase the efficiency of security checkpoint operations. A security checkpoint kiosk serves as a Relying Party System (RPS). The RPS establishes a secure local connection between the RPS and a User Mobile-Identification-Credential Device (UMD). The RPS sends a user information request to the UMD, via the secure local connection, seeking release of user information associated with a Mobile Identification Credential (MIC). The RPS obtains authentication of the user information received in response to the user information request. The RPS retrieves user travel information based on the user information. The RPS determines that the user travel information matches the user information. When the user travel information matches the user information, the RPS approves the user to proceed past the security checkpoint kiosk.

Checkpoint identity verification using mobile identification credential

To facilitate conducting a financial transaction via wireless communication between an electronic device and another electronic device, the electronic device determines a unique transaction identifier for the financial transaction based on financial-account information communicated to the other electronic device. The financial-account information specifies a financial account that is used to pay for the financial transaction. Moreover, the unique transaction identifier may be capable of being independently computed by one or more other entities associated with the financial transaction (such as a counterparty in the financial transaction or a payment network that processes payment for the financial transaction) based on the financial-account information communicated by the portable electronic device. The electronic device may also associate receipt information, which is subsequently received from a third party (such as the payment network), with the financial transaction by comparing the determined unique transaction identifier to the computed unique transaction identifier.

Generating transaction identifiers

A secure trusted service manager provider may include at least one processor configured to provide, to an electronic device, a first script to provision an applet instance corresponding to a third party server, the script including a public key corresponding to the third party server. The at least one processor may be configured to receive, from the electronic device, an encrypted symmetric key and provide the encrypted symmetric key to the third party server, the symmetric key being encrypted with the public key. The at least one processor may be configured to receive, from the third party server, an encrypted data element corresponding to a transaction to be performed by the applet instance, the encrypted data element being encrypted with the symmetric key, generate a second script that includes the encrypted data element and provide, to the electronic device, the second script that includes the encrypted data element.

Secure trusted service manager provider

A device implementing a user configurable direct transfer system may include at least one processor configured to receive, from an electronic device associated with a user account, a request to establish a type of transfer between a first account associated with an entity and a second account associated with the user account, the request including an entity identifier and a transfer type identifier. The at least one processor may be further configured to generate a transfer alias that is stored in association with the entity identifier, a second account identifier, and the transfer type identifier, and provide the transfer alias to the electronic device and a server associated with the entity to facilitate the type of transfer between the first account associated with the entity and the second account associated with the user account.

User configurable direct transfer system

Systems, methods, and computer-readable media for validating online access to secure device functionality are provided that may use shared secrets between different subsystems and limited use validation data.

Validating online access to secure device functionality

A device for controlled identity credential release may include at least one processor configured to receive a request to release an identity credential of a user, the identity credential being stored on the device. The at least one processor may be further configured to authenticate the user associated with the identity credential. The at least one processor may be further configured to, responsive to the authentication, provide at least a portion of the identity credential, such as for display and/or to a terminal device over a direct wireless connection. The at least one processor may be further configured to cause the electronic device to enter a locked state and/or to remain in a locked state, responsive to providing the at least the portion of the identity credential.

Controlled identity credential release

The present disclosure generally relates to digital identification credential user interfaces.

Digital identification credential user interfaces

A device implementing a system for using a verified claim of identity includes at least one processor configured to receive a verified claim including information to identify a user of a device, the verified claim being signed by a server based on verification of the information by an identity verification provider separate from the server, the verified claim being specific to the device. The at least one processor is further configured to send, to a service provider, a request for a service provided by the service provider, and receive, from the service provider and in response to the sending, a request for the verified claim. The at least one processor is further configured to send, in response to the receiving, the verified claim to the service provider.

Providing verified claims of user identity

If a user loses an electronic device that has the capability to conduct financial transactions, the user may report that the electronic device is lost using a lost-device software application to a management electronic device associated with a provider of the electronic device. In response to receiving this information, a disabling command is sent to a payment network associated with the financial account of the user to temporarily disable use of the electronic device to conduct the financial transactions. In particular, the electronic device may include a secure element that stores a payment applet for a financial account, and the disabling command may disable a mapping from a virtual identifier for the financial account to a financial primary account number. Subsequently, if the user finds the electronic device, the user may re-enable the capability (and, thus, the mapping) by providing authentication information to the electronic device.

Disabling mobile payments for lost electronic devices

Systems, methods, and computer-readable media for using an online resource to manage credentials on an electronic device are provided. In one example embodiment, a method, at an electronic device, includes, inter alia, receiving account data via an online resource, accessing commerce credential status data from a secure element of the electronic device, providing initial credential management option data via the online resource based on the received account data and based on the accessed commerce credential status data, in response to the providing, receiving a selection of an initial credential management option via the online resource, and changing the status of a credential on the secure element based on the received selection. Additional embodiments are also provided.

Management of credentials on an electronic device using an online resource

Systems, methods, and computer-readable media for managing secure transactions between electronic devices and service providers. In one embodiment, an administration entity system may receive device order data from an electronic device, wherein the received device order data is indicative of an order for an item of value of a service provider system to be stored on the electronic device, transmit administration order data to the service provider system based on the received device order data, wherein the administration order data is indicative of the order for the item of value, receive service provider fulfillment data from the service provider system based on the transmitted administration order data, wherein the service provider fulfillment data includes the item of value, and transmit administration fulfillment data to the electronic device based on the received service provider fulfillment data, wherein the administration fulfillment data includes the item of value.

Managing secure transactions between electronic devices and service providers

Growing community of inventors

San Jose, CA, United States of America

Christopher Brooke Sharp