Validating online access to secure device functionality
AssigneeApple Inc.
InventorsKarl Anders Carlsson, Anton K. Diederich, Christopher Sharp, Gianpaolo Fasoli, Maciej Stachowiak, Matthew C. Byington, Nicholas J. Shearer, Samuel M. Weinig
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer-readable media for validating online access to secure device functionality are provided that may use shared secrets between different subsystems and limited use validation data.
Claims20
A method for providing a transaction between a merchant subsystem and an electronic device, the method comprising, at a commercial entity subsystem:
- receiving, from the merchant subsystem, a challenge request that includes a merchant identifier that is associated with (1) the merchant subsystem, and (2) a merchant online resource of the electronic device, wherein the challenge request includes a signature established using a merchant key associated with the merchant subsystem;
- obtaining the merchant key based on the merchant identifier;
- validating the signature using the merchant key;
- indicating to the electronic device that the merchant online resource is valid;
- receiving validation data and secure data from the electronic device;
- validating the electronic device based on the validation data;
- encrypting, using the merchant key, the secure data to establish encrypted secure data;
- and
- providing the encrypted secure data to the electronic device to cause the electronic device to execute the transaction with the merchant subsystem.
A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a computing device of a commercial entity subsystem, cause the commercial entity subsystem to carry out steps that include:
- receive, from a merchant subsystem, a challenge request that includes a merchant identifier that is associated with (1) the merchant subsystem, and (2) a merchant online resource of an electronic device, wherein the challenge request includes a signature established using a merchant key associated with the merchant subsystem;
- obtain the merchant key based on the merchant identifier;
- validate the signature using the merchant key;
- indicate to the electronic device that the merchant online resource is valid;
- receive validation data and secure data from the electronic device;
- validate the electronic device based on the validation data;
- encrypt, using the merchant key, the secure data to establish encrypted secure data;
- and
- provide the encrypted secure data to the electronic device to cause the electronic device to execute a transaction with the merchant subsystem.
A commercial entity subsystem configured to provide a transaction between a merchant subsystem and an electronic device, the commercial entity subsystem comprising:
- a processor;
- and
- a memory configured to store instructions that, when executed by the processor, cause the commercial entity subsystem to carry out steps that include:
- receiving, from the merchant subsystem, a challenge request that includes a merchant identifier that is associated with (1) the merchant subsystem, and (2) a merchant online resource of the electronic device,
- wherein the challenge request includes a signature established using a merchant key associated with the merchant subsystem;
- obtaining the merchant key based on the merchant identifier;
- validating the signature using the merchant key;
- indicating to the electronic device that the merchant online resource is valid;
- receiving validation data and secure data from the electronic device;
- validating the electronic device based on the validation data;
- encrypting, using the merchant key, the secure data to establish encrypted secure data;
- and
- providing the encrypted secure data to the electronic device to cause the electronic device to execute the transaction with the merchant subsystem.
Dependencies are inferred from the claim text.