Apple Inc.

Authentec, Inc.

Jeffrey C Lee

Jerrold Von Hauck

Craig Alan Marciniak

Conrad Sauerwald

Michael Boshra

Gregory Thomas Minteer

Tristan F Schaap

James R Waldron

Gary S Porter

Andrew J Vandamia

Zachary F Papilion

Peter Eric Sherlock

Robert Scott Brandt

Dale R Setlak

Mitchell David Adler

Ahmer Ali Khan

George R Dicker

Andrew Roger Whalley

Wade Benson

Techniques are disclosed relating to the secure communication of devices. In one embodiment, a first device is configured to perform a pairing operation with a second device to establish a secure communication link between the first device and the second device. The pairing operation includes receiving firmware from the second device to be executed by the first device during communication over the secure communication link, and in response to a successful verification of the firmware, establishing a shared encryption key to be used by the first and second devices during the communication. In some embodiments, the pairing operation includes receiving a digital signature created from a hash value of the firmware and a public key of the second device, and verifying the firmware by extracting the hash value from the digital signature and comparing the extracted hash value with a hash value of the received firmware.

Secure device pairing

A system for provisioning credentials onto an electronic device is provided. The system may include a payment network subsystem, a service provider subsystem, and one or more user devices that can be used to perform mobile transactions at a merchant terminal. The user device may communicate with the service provider subsystem in order to obtained commerce credentials from the payment network subsystem. The user device may include a secure element and a corresponding trusted processor. The trusted processor may generate a random authorization number and inject that number into the secure element. Mobile payments should only be completed if the random authorization number on the secure element matches the random authorization number at the trusted processor. The trusted processor may be configured to efface the previous random authorization number and generate a new random authorization number when detecting a potential change in ownership at the user device.

Apparatuses and methods for using a random authorization number to provide enhanced security for a secure element

Systems and methods are disclosed for securely injecting one or more key values into an electronic device by reading with a fingerprint sensor a manufactured key device having a key value. A secure communication channel between a fingerprint sensor and a secure processing system enables the reading, processing, and storing of the fingerprint sensor data from the key device. The key device includes a conductive substantially planar substrate ('substrate') with raised conductive portions configured to encode a key value. The substrate can be made from a non-conductive material and have conductive material applied to the substrate to encode the key value. The substrate can be covered with an opaque, conductive layer so that the encoding cannot be visually perceived. The encoding scheme can be a QR code, a bar code, an image, an alphanumeric string, or other encoding. One or more electronic device access policies can be associated with a key value to control how an electronic device can be used when the electronic device is accessed with the manufactured key device.

Method for secure key injection with biometric sensors

A finger sensing apparatus may include a finger sensor including an integrated circuit (IC) substrate, an array of finger sensing elements on the IC substrate, and match circuitry on the IC substrate for performing final finger matching. The finger sensing apparatus may also include a host platform cooperating with the array of finger sensing elements for performing at least one finger prematch function. In addition, the finger sensor and the host platform may implement at least one security function therebetween. The at least one security function may include a watermarking function, and/or an encryption/decryption function.

Finger sensing apparatus using hybrid matching and associated methods

A finger sensing device may include an integrated circuit (IC) substrate, an array of finger sensing elements on the IC substrate, and image watermark circuitry on the IC substrate and cooperating with the array of finger sensing elements for generating finger image data with an image watermark embedded therein. The finger sensing apparatus may also include match circuitry on the IC substrate for performing finger matching based at least upon the image watermark. The array of finger sensing elements may include an array of finger sensing pixels. The image watermark circuitry may distort values from the array of finger sensing pixels to generate the finger image data with the image watermark embedded therein. The watermark circuitry may distort position values from the array of finger sensing pixels.

Finger sensing apparatus using image watermarking and associated methods

A finger sensing apparatus may include an integrated circuit (IC) substrate, an array of finger sensing elements on the IC substrate, and encryption circuitry on the IC substrate cooperating with the array of finger sensing elements for encrypting a user template comprising finger template data and at least one user credential. The at least one user credential may enable another device, such as a host platform, to perform at least one protected operation.

Finger sensing apparatus using encrypted user template and associated methods

Growing community of inventors

Melbourne, FL, United States of America

Jeffrey C Lee