Apple Inc.

Gianpaolo Fasoli

Augustin J Farrugia

Mathieu Ciet

Christopher Brooke Sharp

Ka Yang

Bertrand Mollinier Toublet

Srinivas Vedula

Nicholas Thomas Sullivan

Julien Lerouge

David W Silver

Ahmer Ali Khan

Jean-Francois Riendeau

Policarpo Bonilla Wood

Sean Boland Kelly

Thomas John Miller

Gordon Y Scott

Michael Kuohao Chu

Nicholas John Shearer

Ho Cheung Chung

Anton K Diederich

Matthew C Byington

Franck Farian Rakotomalala

Haya Iris Villanueva Gaviola

Thomas Matthieu Alsina

Irene M Graff

Mayura D Deshpande

Martijn Theo Haring

Daniel P Carter

Antonio Allen

Vinay Ganesh

Eugene Jivotovski

Patrice Olivier Gautier

Andrew Roger Whalley

Thomas E Dowdy

Conrad Sauerwald

Payam Mirrashidi

Braden Jacob Thomas

Petr Kostka

Kenneth W Scott

Rupamay Saha

Gelareh Taban

Gianluca Barbieri

Scott T Boyd

Rajit Shinh

Yannick L Sierra

Abhinav Gupta

Roberto G Yepez

Maciej Stachowiak

Pierre Betouin

Bruno Kindarji

Richard W Heard

Samuel M Weinig

Eric Daniel Friedman

Ritwik K Kumar

Libor Sykora

Frederic Jacobs

Pedraum R Pardehpoosh

Lucas Olen Winstrom

Tanya Michelle Lattner

Amine El Kamel

Apoorva Govind

Raffi T Khatchadourian

Hubert Greiche

Karl Anders Carlsson

Rantao Chen

Jill Surdzial

Edouard Godfrey

Kuangyu Wang

Vishnu Pillai Janardhanan Pillai

Dian Wen

Daniel Ben Pollack

Jean-Pierre Ciudad

Benoit Chevallier-Mames

Gokul P Thirumalai

David M'Raihi

Hervé Sibert

Yousuf H Vaid

Sudhakar N Mambakkam

Jon McLachlan

Filip Paun

Hannah S Story

Gideon M Myles

Amol V Pattekar

Jonathan McLachlan

Ryan W Baker

Ginger Marie Myles

Charles T Ahn

Brandon K Leventhal

Robert D Butler

Daniel F Reynaud

Benjamin D Chester

Jonathon Sodos

Justin Henzie

David G Knipp

Michael L H Brouwer

Zhiyuan Zhao

Stacey Rebecca Abrams

Delfin Jorge Rojas

Rod Schultz

Pablo Pons Bordes

A computing device can receive a request from a requesting device for one or more data elements associated with a digital credential. The computing device can store the digital credential which includes a set of data elements and a security object. The computing device can determine a subset of the data elements based at least in part on the request. The computing device can generate the response, wherein the response includes the subset of the data elements and the security object. The computing device can transmit the response to the requesting device.

Techniques for generating and using nonlinkable digital credentials

A computing device can generate a set of transaction keys, the computing device configured to present a digital credential to a requesting device. The computing device can generate a request bundle. The request bundle can include the set of transaction keys. The computing device can transmit, to a first server, the request bundle. The first server can be configured to verify the request bundle. The first server can be configured to send the request bundle to a second server with a request for a set of credentials. Each credential of the set of credentials can correspond to a transaction key of the set of transaction keys. Each credential can include data elements and a security object. The data elements for each credential can be the same. The security object for each credential can be different. The computing device can receive, from the first server, the set of credentials. The computing device can store the set of credentials. The computing device can be configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.

This application relates to embodiments for providing a content stream to a device from a content server based on a protocol that is established between the device and an account server. The account server can initiate a session with the device and provide the device with a list of channels available for a user account associated with the device. When a channel is selected at the device, conditional access information can be provided from the account server to the device, which can thereafter relay the conditional access information to the content server. The content server can use the conditional access information to verify that the device has the appropriate permission to receive streaming content. In this way, because the conditional access information originates at the account server, permission to access streaming content can be managed by correspondence between the account server and the device, rather than the content server.

Provision of a lease for streaming content

In one embodiment, a unique (or quasi unique) identifier can be received by an application store, or other on-line store, and the store can create a signed receipt that includes data desired from the unique identifier. This signed receipt is then transmitted to a device that is running the application obtained from the on-line store and the device can verify the receipt by deriving the unique (or quasi-unique) identifier from the signed receipt and comparing the derived identifier with the device identifier stored on the device, or the vendor identifier assigned to the application vendor.

Securing in-app purchases

The present disclosure generally relates to digital identification user interfaces.

User interfaces for digital identification

An embodiment includes a method to increase the efficiency of security checkpoint operations. A security checkpoint kiosk serves as a Relying Party System (RPS). The RPS establishes a secure local connection between the RPS and a User Mobile-Identification-Credential Device (UMD). The RPS sends a user information request to the UMD, via the secure local connection, seeking release of user information associated with a Mobile Identification Credential (MIC). The RPS obtains authentication of the user information received in response to the user information request. The RPS retrieves user travel information based on the user information. The RPS determines that the user travel information matches the user information. When the user travel information matches the user information, the RPS approves the user to proceed past the security checkpoint kiosk.

Checkpoint identity verification using mobile identification credential

Systems, methods, and computer-readable media for facilitating frictionless credential provisioning on a user computing device are provided. Special 'frictionless tokens' (e.g. ownership tokens) may be generated for each existing credential in a user's digital wallet. Such tokens may be stored in a user's AE locker (e.g. iCloud keychain) and synchronized across the user's devices using any suitable security features (e.g. using any suitable secure enclave processor (“SEP”)-based encryption). Such a token, as may be stored in a device's SEP, may be configured only to be read on that physical device. In this manner, the user may no longer need provide further proof of ownership of a credential or be hassled by passing any other challenge, but, instead, the additional security may be achieved using the ownership token, which may use the user's AE or device passcode in association with the user's physical device (and its SEP).

Proof of affinity to a secure event for frictionless credential management

Embodiments described herein provide cryptographic techniques to enable a recipient of a signed message containing encrypted data to verify that the signer of the message and the encryptor of the encrypted data are the same party, or at the least, have joint possession of a common set of secret cryptographic material. These techniques can be used to harden an online payment system against interception and resigning of encrypted payment information.

Guaranteed encryptor authenticity

Systems, methods, and computer-readable media for validating online access to secure device functionality are provided that may use shared secrets between different subsystems and limited use validation data.

Validating online access to secure device functionality

The subject technology receives assessment values determined by a first machine learning model deployed on a client electronic device, the assessment values being indicative of classifications of input data and the assessment values being associated with constraint data that comprises a probability distribution of the assessment values with respect to the classifications of the input data. The subject technology applies the assessment values determined by the first machine learning model to a second machine learning model to determine the classifications of the input data. The subject technology determines whether accuracies of the classifications determined by the second machine learning model conform with the probability distribution for corresponding assessment values determined by the first machine learning model. The subject technology retrains the first machine learning model when the accuracies of the classifications determined by the second machine learning model do not conform with the probability distribution.

Semantics preservation for machine learning models deployed as dependent on other machine learning models

A method for distributing content. The method distributes a single media storage structure to a device (e.g., a computer, portable player, etc.). The media storage structure includes first and second pieces of encrypted content. Based on whether the device is allowed to access the first piece of content, the second piece of content, or both, the method provides the device with a set of keys for decrypting the pieces of the content that the device is able to access. The provided set of keys might include one or more keys for decrypting only one of the two encrypted pieces of content. Alternatively, it might include one or more keys for decrypting both encrypted pieces of content. For instance, the selected set of keys might include a first key for decrypting the first encrypted piece and a second key for decrypting the second encrypted piece.

Use of media storage structure with multiple pieces of content in a content-distribution system

Growing community of inventors

Palo Alto, CA, United States of America

Gianpaolo Fasoli