Apple Inc.

Other

Dallas Blake De Atley

Mitchell David Adler

Joshua P De Cesare

Jerrold Von Hauck

Michael R Smith

John Andrew Wright

Michael Brouwer

Matthew Reda

Gordon J Freedman

Jerry Hauck

Thomas Brogan Duffy, Jr

Michael J Smith

Simon P Cooper

Jeffrey Alan Bush

David Rahardja

Shantonu Sen

Paul William Chinn

Tahoma Madrone Toelkes

Thomas P Mensch

Muralidhar S Vempaty

Curtis Galloway

Matthew G Watson

Steve P Jobs

Scott James Forstall

Jeffrey L Robbin

Ronald Keryuan Huang

Conrad Sauerwald

Jonathan Jay Andrews

James C Wilson

Michael Lambertus Hubertus Brouwer

Michael D Ford

Jason D Gosnell

David P Remahl

Bailey E Basile

Edward E Thomas

Robert M Marini

Kelsey J Skillman

Venkat V Memula

Patrick L Coffman

Gregory N Christie

Arun Godfrey Mathias

Patrice Olivier Gautier

Nitin Ganatra

Jeremy A Wyld

Jean-Marc Padova

Dieter W Siegmund

Eddy Cue

Stan Jirman

David Elias Fleischman

Brian H Cassidy

Brainerd Sathianathan

Sebastien P Sahuc

Bruno Posokhow

Christophe Allie

Roberto G Yépez

Audra Men-jhi Liu

Shruti Chugh

Ashutosh Chaubey

Heath Culp

John N Lehner

Thomas M Alsina

Augustin J Farrugia

Dominic Benjamin Giampaolo

Gregory B Novick

David Heller

Sean Boland Kelly

George R Dicker

Byron Bay Han

John Joseph Iarocci

Christopher S Linn

Craig Alan Marciniak

Haining Zhang

Jason Clay Beaver

Max Muller

Onur E Tackin

Eric Brandon Tamura

Pierre-Olivier J Martel

Damien Pascal Sorresso

Carsten Guenther

Lucia Elena Ballard

Kenneth Buffalo McNeil

Louis G Gerbarg

Gordie Freedman

Andre M Boule

Benjamin C Trumbull

Nick G Kledzik

Toby Paterson

Cherif Jazra

Peter Cooper

Vrajesh Rajesh Bhavsar

Luke Theodore Hiesterman

Joshua Matthew Williams

Arjuna Sivasithambaresan

Paul A Seligman

Julien Oster

Maxim Khutornenko

Stephen Schell

Andrew Dennis Boyko

Raymond N Walsh

Ryan Nielsen

Embodiments described herein provide a system and method for secure delivery of assets to a trusted device. Multiple levels of verification are implemented to enable components of a software update and asset delivery system to verify other components within the system. Furthermore, updates are provided only to client devices that are authorized to receive such updates. In one embodiment, the specific assets provided to a client device during a software update can be tailored to the client device, such that individual client devices can receive updated versions of software asset at a faster or slower rate than mass market devices. For example, developer or beta tester devices can receive pre-release assets, while enterprise devices can receive updates at a slower rate relative to mass market devices.

Secure delivery of assets to a trusted device

An online store can transmit an online account token to an electronic device or to a biometric sensing device after a user successfully enters his or her account password. The electronic device or the biometric sensing device can countersign the online account token when the one or more biometric images match reference biometric images and the account password matches user identifier data stored in the electronic device or in the biometric sensing device. The countersigned online account token can then be transmitted to the online store. The user can then make one or more purchases after the online store receives the countersigned online account token.

Methods of authenticating a user

Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

System and method for wiping encrypted data on a device having file-level content protection

In an embodiment, a system supports an external trust cache. That is, the trust cache is separate from the kernel image on the non-volatile storage in the system. During boot, the boot code may read the trust cache from the storage and write it to the working memory of the system (e.g. the Random Access Memory (RAM) forming the memory system in the system). The boot code may also validate the kernel image and write it to the memory system. The boot code may program a region register in the processor to define a region in the working memory that encompasses the kernel image and the trust cache, to protect the region from modification/tampering.

External trust cache

A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a ROM (read only memory) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

Securely recovering a computing device

Some embodiments provide, for a particular device in a set of related devices, a method for backing up data synchronized between the set of related devices. The method stores the backup data encrypted with a set of data encryption keys. The method also stores the set of data encryption keys encrypted with a master recovery key. The method also stores several copies of master recovery key data, each copy of the master recovery key data encrypted with a public key of a different one of the related devices. The backup data is only recoverable by accessing a private key of any one of the related devices.

Backup system with multiple recovery keys

Some embodiments provide non-transitory machine-readable medium that stores a program which when executed by at least one processing unit of a device synchronizes a set of keychains stored on the device with a set of other devices. The device and the set of other devices are communicatively coupled to one another through a peer-to-peer (P2P) network. The program receives a modification to a keychain in the set of keychains stored on the device. The program generates an update request for each device in the set of other devices in order to synchronize the set of keychains stored on device with the set of other devices. The program transmits through the P2P network the set of update requests to the set of other devices over a set of separate, secure communication channels.

Keychain syncing

A method of restoring confidential information items of a first device to a second device by using a set of servers. The method generates a public and private key pair and ties the private key to the hash of executable code of the servers at the time of generating the public and private keys. The method receives the encrypted confidential information items in a secure object which is encrypted with a user-specific key and the public key. The method only provides the confidential information to the second device when the second device provides the same user-specific key as the key that encrypts the secure object and the hash of the executable code of the servers at the time of accessing the private key to decrypt the secure object matches the hash of the executable code running on the servers at the time of generating the private key.

Secure escrow service

Methods, systems, and computer-readable medium for providing telecommunications carrier configuration at activation of a mobile device. In one implementation, a method is provided. The method includes receiving a request for activation of a mobile device, and during activation of the mobile device, determining for the mobile device a telecommunications carrier from a number of telecommunications carriers, and identifying information associated with the determined telecommunications carrier for configuring the mobile device.

Postponed carrier configuration

Disclosed herein are techniques for performing dynamic linking at a computing device. According to some embodiments, the techniques can involve receiving a request to perform a dynamic linking of a software application. The request can be issued in conjunction with installing the software application, launching the software application for a first time, and so on. In response to the request, a closure file can be generated based on different properties associated with the software application (e.g., environment variables, object files, etc.). Notably, the closure file is generated 'out-of-process' relative to the execution environment of the software application. Additionally, the techniques can involve caching the closure file such that the closure file is accessible to the software application. In turn, the software application can utilize the closure file at launch/execution times to reduce a number of dynamic linking operations that otherwise are required to take place using conventional approaches.

Techniques for performing dynamic linking

Embodiments of the present disclosure provide for upgrades and synchronization of applications installed on a device, such as a mobile device. In one embodiment, a device may include applications purchased and downloaded via a content management system. The device maintains a list or database of applications that are authorized for each device. This list is also replicated in a remote cache that is maintained by an archive host. The device may then synchronize and upgrade these applications across multiple platforms, such as one or more computers that can be coupled to the device or the archive host. The archive host allows for files of the application be provided back to the device. Upon installation, the device can then confirm the authorization and identity of the newly installed application.

Methods and systems for upgrade and synchronization of securely installed applications on a computing device

Methods, systems and apparatus that facilitate activation of mobile devices, such as communication devices or multi-function devices, via a computer are disclosed. According to one aspect of the invention, a mobile device can be forced into a limited service mode until properly activated with a service provider for a wireless network. According to another aspect of the invention, a mobile device can defer its attempt to send a location update request to a wireless network. According to still another aspect of the invention, a mobile device can be automatically controlled to reset a portion of its internal hardware to initiate a location update request.

Mobile device activation

In various embodiments, methods, devices and systems for securely generating, sealing, and restoring factory-generated calibration and provisioning data for an electronic device are described, in which calibration and provisioning data for an electronic device are generated in a distributed manner and stored on a storage system. The calibration data can be retrieved from the storage system during device assembly and finalized calibration and provisioning data for each electronic device can be stored to the storage system. In one embodiment, a sealing server, to attest to the authenticity of the factory generated data, seals the finalized calibration data. In one embodiment, an electronic device can access a data store containing the factory-generated data and can update or restore calibration or provisioning data for the device from the data store.

Secure factory data generation and restoration

Growing community of inventors

San Francisco, CA, United States of America

Dallas Blake De Atley