Apple Inc.

Richard J Mondello

Patrick L Coffman

Steven J Falkenburg

Reza Abbasian

Jessie Berlin

Chelsea Elizabeth Pugh

Darin Benjamin Adler

Adele C Peterson

Maureen Grace Daum

Craig Michael Federighi

Kevin W Decker

Kyle C Brogle

Dmitry V Belov

Alan Hshieh

Conrad A Shultz

Alexander D Sanciangco

Dan Bernstein

Chanaka G Karunamuni

Marc Jason Krochmal

Brent Michael Ledvina

Ada Y Chan

Jacob S Klapper

David P Quesada

Morgan H Winer

Sudhakar N Mambakkam

Paul Russell Knight

Kalyan C Gopavarapu

Jonathan Birdsall

Brent A Fulgham

Edgar Tonatiuh Barragan Corte

Shuchen Li

Jay S Mulani

Dennis S Park

Ivan Krstic

Vijay Sundaram

Samuel M Weinig

Peter Walter Roman

Neil Patrick Cormican

Guillaume Borios

Patrick Robert Burns

Charilaos Papadopoulos

Caleb Davenport

Pavan Rajam

Benjamin Poulain

Brian Weinstein

I-Ting Liu

Alex Christensen

Connor David Graham

Shengkai Wu

Libor Sykora

Zhuo Li

Elizabeth Caroline Cranfill

Ryan David Shelby

Gavin Barraclough

Frank De Jong

Hannah S Story

Keetae Ryu

Eryn R Wells

Damian Kaleta

Steven Falkenburg, Iii

Elaine Y Knight

Mark A Rowe

Conrad Aarne Schultz

Richard Houle

Steven Falkenburg

Parick L Coffman

A method and apparatus of a device that authorizes a device for a service is described. In an exemplary embodiment, the device intercepts a request for a web page from a web browser executing on the device, wherein the request includes an indication associated with an authorization request for the service and the web page provides the service. In addition, the device presents an authorization user interface on the device. The device further performs a local authorization using a set of user credentials entered via the authorization user interface. The device additionally performs a server authorization with a server. Furthermore, the device redirects the web browser to the requested web page, wherein the web browser is authorized for the service provided by the web page.

Systems and methods of application single sign on

The present disclosure generally relates to techniques for managing and sharing authentication information (e.g., passkeys, verification codes, and/or passwords) using electronic devices. A first computing system being associated with a first user account of a first user receives, via one or more input devices, one or more inputs that corresponds to a request to access a remote service that requires authentication, and in response to receiving the one or more inputs that correspond to the request to access the remote service, provides authentication information to the remote service that is based on a private key that is accessible to the first computing system, where the authentication information does not include the private key, the private key was established by a second computer system that is different from the first computer system, and the second computer system is also associated with the first user account.

Passkey management and sharing

In some embodiments a second electronic device with which an output device is associated facilitates associating the output device with a first electronic device. In some embodiments, a second electronic device that is associated with an additional user facilitates associating the additional user with a first electronic device.

User interfaces for setting up an electronic device

The present disclosure generally relates to managing passwords. In some examples, a computer system displays an autofill user interface object corresponding to a one-time password generated by the computer system and for use in authenticating a user with a remotely-authenticated service. In some examples, a computer system enters, saves, and submits a new username and a new password created via a password manager to a remotely-authenticated service.

User interfaces for managing passwords

The present embodiments relate to entry and management of identifiers and credentials. The present embodiments display a credential affordance that, upon selection, provides a credential-assistance user interface for enabling swift access to various credential and management options. The credential affordance can be displayed based on a determination by electronic device that a webpage includes a text entry field associated with a set of one or more restricted resources (e.g., document and/or webpage).

Credential entry and management

A method and apparatus of a device that converts an account associated with an application to use a single sign-on service is described. In an exemplary embodiment, the device receives an indication of a weak password associated with the account. The device further sends a request to verify an account credential for a user associated with the device. In addition, the device receives the verification of the account credential. The device additionally requests a single sign-on credential for the account and receives the single sign-on credential. Furthermore, the device sends a message to a server associated with a service for the application that the application is registered for the single sign-on service.

Systems and methods of account verification upgrade

Techniques are disclosed relating to sharing a user credential between computing devices. In some embodiments, a first computing device stores a set of user credentials usable to authenticate a user and receives, from a second computing device, a request for a user credential to be provided responsive to an authentication prompt associated with the second computing device. In such an embodiment, the request includes an indication of a service for which the authentication prompt is being presented. Based on the indication, the first computing device determines whether the stored set of user credentials includes a user credential relevant to the authentication prompt and presents a selection prompt asking a user of the first computing device to select a one of the stored set of user credentials to provide to the second computing device for authentication to the service, the relevant user credential being identified in the selection prompt.

Multiple device credential sharing

Techniques are disclosed relating to user authentication. In some embodiments, a first computing device receives, from a second computing device, a request for a user credential to be input into an authentication prompt associated with the second device. The first computing device determines a proximity associated with the second computing device based on a received wireless location beacon and, based on the request and the determined proximity, presents a selection prompt asking a user of the first computing device to select a user credential stored in the first computing device. The first computing device then provides the selected user credential to the second computing device to input into the authentication prompt. In some embodiments, the first computing device receives the wireless location beacon from a remote controller of the second computing device and determines a proximity based on a signal strength associated with the received location beacon.

Proximity credential sharing

Techniques are disclosed relating to credential managers. In some embodiments, a computing device maintains a credential manager that stores, in a protected manner, a set of credentials for authenticating a user and metadata about the credentials. The computing device stores an instance of the metadata externally to the credential manager. The computing device uses the externally stored metadata to determine whether the set of credentials includes a particular credential associated with a service and, in response to determining that the set of credentials includes the particular credential, displays an indication of the particular credential. In some embodiments, the computing device receives a selection of the displayed indication by the user and, in response to the selection, sends a request for the particular credential to the credential manager.

Credential manager integration

The present disclosure generally relates to methods for providing an upgrade option for accessing an account on a service. In some embodiments, the method is performed at a computer system that is in communication with a display generation component and one or more input devices, and includes displaying a user interface that includes information associated with a service provided by a first entity, receiving a first user input, and in response to receiving the first user input, displaying a first selectable user interface object corresponding to an upgrade option. Enabling the upgrade option causes login requests corresponding to requests to log in to the service using an access account to be authenticated by a second entity different from the first entity.

User interfaces for accessing an account

Growing community of inventors

San Jose, CA, United States of America

Richard J Mondello