Apple Inc.

Nok Nok Labs, Inc.

Ka Yang

Gianpaolo Fasoli

David W Silver

Ahmer Ali Khan

Policarpo Bonilla Wood

Christopher Brooke Sharp

Thomas John Miller

Gordon Y Scott

Ho Cheung Chung

Franck Farian Rakotomalala

Irene M Graff

Haya Iris Villanueva Gaviola

Mayura D Deshpande

Antonio Allen

Martijn Theo Haring

Vinay Ganesh

Yannick L Sierra

Frederic Jacobs

Rupamay Saha

Rantao Chen

Vishnu Janardhanan

Ravi Chotrani

Vishnu Pillai Janardhanan Pillai

Dian Wen

Bruno Kindarji

Libor Sykora

Petr Kostka

Pablo Pons Bordes

Tyler Gentles

Rohit Narula

Antonio A Allen

A computing device can receive a request from a requesting device for one or more data elements associated with a digital credential. The computing device can store the digital credential which includes a set of data elements and a security object. The computing device can determine a subset of the data elements based at least in part on the request. The computing device can generate the response, wherein the response includes the subset of the data elements and the security object. The computing device can transmit the response to the requesting device.

Techniques for generating and using nonlinkable digital credentials

A computing device can generate a set of transaction keys, the computing device configured to present a digital credential to a requesting device. The computing device can generate a request bundle. The request bundle can include the set of transaction keys. The computing device can transmit, to a first server, the request bundle. The first server can be configured to verify the request bundle. The first server can be configured to send the request bundle to a second server with a request for a set of credentials. Each credential of the set of credentials can correspond to a transaction key of the set of transaction keys. Each credential can include data elements and a security object. The data elements for each credential can be the same. The security object for each credential can be different. The computing device can receive, from the first server, the set of credentials. The computing device can store the set of credentials. The computing device can be configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.

The present disclosure generally relates to digital identification user interfaces.

User interfaces for digital identification

An embodiment includes a method to increase the efficiency of security checkpoint operations. A security checkpoint kiosk serves as a Relying Party System (RPS). The RPS establishes a secure local connection between the RPS and a User Mobile-Identification-Credential Device (UMD). The RPS sends a user information request to the UMD, via the secure local connection, seeking release of user information associated with a Mobile Identification Credential (MIC). The RPS obtains authentication of the user information received in response to the user information request. The RPS retrieves user travel information based on the user information. The RPS determines that the user travel information matches the user information. When the user travel information matches the user information, the RPS approves the user to proceed past the security checkpoint kiosk.

Checkpoint identity verification using mobile identification credential

Embodiments described herein provide cryptographic techniques to enable a recipient of a signed message containing encrypted data to verify that the signer of the message and the encryptor of the encrypted data are the same party, or at the least, have joint possession of a common set of secret cryptographic material. These techniques can be used to harden an online payment system against interception and resigning of encrypted payment information.

Guaranteed encryptor authenticity

The present disclosure generally relates to digital identification credential user interfaces.

Digital identification credential user interfaces

A system, apparatus, method, and machine readable medium are described for performing user authentication. For example, one embodiment of a system comprises: media capture logic implemented as a component within a browser executed on a client, the media capture logic configured to capture a user's voice from a microphone on a client or images of the user's face or other portion of the user's body from a camera on the client, the media capture logic exposing an application programming interface (API); and a web authentication application implemented as another component within the browser for communicating with an authentication server to perform biometric authentication of a user, the web authentication application making calls to the API of the media capture logic to capture raw biometric data comprising the user's voice from the microphone and/or images of the user's face or other portion of the user's body from the camera, the web authentication application to implement a biometric authentication process to authenticate the user with the raw biometric data.

Web-based user authentication techniques and applications

Growing community of inventors

San Jose, CA, United States of America

Ka Yang