IP Library Granted Patent US 11,790,365
Granted Patent B2
US 11,790,365 · App. 17/384,488 · Granted Oct 17, 2023

Secure element having multiple users

Inventors: Herve Sibert (Le Mans, FR); Oren M. Elrad (San Francisco, CA); Jerrold V. Hauck (Windermere, FL); Onur E. Tackin (Sunnyvale, CA); Zachary A. Rosen (San Francisco, CA); Matthias Lerch (Paris, FR)
Assignee: Apple Inc.
G06Q20/40145G06F21/31G06F21/32G06Q20/204G06Q20/3278G06Q20/382G06Q20/4014H04L9/3231H04W12/065H04W12/068
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,790,365
App. No.
17/384,488
Granted
Oct 17, 2023
Kind
B2
Abstract

Techniques are disclosed relating to secure data storage. In various embodiments, a mobile device includes a wireless interface, a secure element, and a secure circuit. The secure element is configured to store confidential information associated with a plurality of users and to receive a request to communicate the confidential information associated with a particular one of the plurality of users. The secure element is further configured to communicate, via the wireless interface, the confidential information associated with the particular user in response to an authentication of the particular user. The secure circuit is configured to perform the authentication of the particular user. In some embodiments, the mobile device also includes a biosensor configured to collect biometric information from a user of the mobile device. In such an embodiment, the secure circuit is configured to store biometric information collected from the plurality of users by the biosensor.

Claims (57)

1. A multi-user device, comprising:

a secure processor circuit;

a secure element comprising a first processor and a first memory, wherein the first memory stores program instructions that when executed by the first processor cause the first processor to perform:

storing, in the first memory, payment information associated with a plurality of users;

receiving a first payment request to communicate the payment information associated with a first user of the plurality of users;

sending a request to perform an authentication of the first user to the secure processor circuit;

communicating the payment information associated with the first user in response to the authenticating of the first user; and

the secure processor circuit comprising a second processor and a second memory, wherein the second memory stores program instructions that when executed by the second processor cause the second processor to perform:

authenticating the first user in response to the request from the secure element.

2. The multi-user device of claim 1 , further comprising:

a wireless interface.

3. The multi-user device of claim 2 , wherein the wireless interface is a near field communication (NFC) interface.

4. The multi-user device of claim 1 , further comprising:

a biosensor that collects biometric information.

5. The multi-user device of claim 4 , wherein the biometric information includes fingerprint data.

6. The multi-user device of claim 4 , wherein the biometric information includes image data collected from a user's face.

7. The multi-user device of claim 1 , further comprising:

a third processor; and

a third memory, wherein the third memory stores programs instructions that executed by the third processor cause the third processor to perform:

receiving, via an interface application, a user request to use a first applet associated with the payment information of the first user in the secure element.

8. The multi-user device of claim 1 , wherein the first memory stores additional program instructions that when executed by the first processor cause the first processor to perform:

storing a user applet associated with the first user;

storing, in the user applet, the payment information associated with the first user;

instantiating an instance of a contactless registry service (CRS) applet; and

associating the instantiated instance of the CRS applet with the first user.

9. The multi-user device of claim 1 , wherein the first memory stores additional program instructions that when executed by the first processor cause the first processor to perform:

instantiating a single instance of a contactless registry service (CRS) applet; and

storing, in the instantiated instance of the CRS applet, ownership information that associates each of a plurality of users to a respective user applet that stores the payment information associated with that user.

10. The multi-user device of claim 1 , wherein the second memory stores additional program instructions that when executed by the second processor cause the second processor to perform:

storing ownership information associating the first user with a set of applets in the secure element, wherein the set of applets are associated with payment information of the first user;

receiving, from the secure element, a request to execute an applet in the set to cause communication of the first user's payment information; and

determining whether execution of the applet is permitted based on the ownership information and the authenticating.

11. One or more non-transitory computer readable media storing program instructions that when executed by a first processor in a secure element of a multi-user device cause the first processor of the secure element to perform operations comprising:

storing, in a memory of the secure element, payment information associated with a plurality of users;

receiving a first payment request to communicate the payment information associated with a first user of the plurality of users;

sending, to a secure processor circuit in the multi-user device, a request to perform an authentication of the first user;

communicating the payment information associated with the first user in response to the secure processor circuit authenticating of the first user; and

wherein the one or more non-transitory computer readable media storing additional program instructions that when executed by a second processor of the secure processor circuit in the multi-user device to perform:

authenticating the first user in response to the request from the secure element.

12. The one or more computer readable media of claim 11 , wherein the communicating the payment information associated with the first user comprises communicating, via a contactless interface of the multi-user device, the payment information associated with the first user to a merchant system.

13. The one or more computer readable media of claim 11 , wherein the authenticating is a biometric authentication.

14. The one or more computer readable media of claim 11 , wherein the program instructions that when executed by the first processor in the secure element further cause the first process to perform additional operations:

instantiating one or more instances of a contactless registry service (CRS) applet; and

storing, in the one or more instantiated instances of the CRS applet, ownership information that associates each of a plurality of users to a respective user applet that stores the payment information associated with that user.

15. A method, comprising:

storing, by a secure element of a multi-user device and in a memory of the secure element, payment information associated with a plurality of users;

receiving, by the secure element, a first payment request to communicate the payment information associated with a first user of the plurality of users;

sending, by the secure element, a request to perform an authentication of the first user to a secure processor circuit of the multi-user device;

authenticating, by the secure processor circuit, the first user in response to the request from the secure element; and

communicating, by the secure element, the payment information associated with the first user in response to the authenticating of the first user.

16. The method of claim 15 , wherein the communicating the payment information associated with the first user comprises communicating, via a wireless interface of the multi-user device, the payment information associated with the first user to a merchant system.

17. The method of claim 16 , wherein the wireless interface is a near field communication (NFC) interface.

18. The method of claim 15 , wherein the authenticating the first user in response to the request from the secure element further comprises:

comparing, by the secure processor circuit, biometric information from a biosensor with biometric information of the first user.

19. The method of claim 15 , further comprising:

instantiating, by the secure element, one or more instances of a contactless registry service (CRS) applet; and

storing, by the secure element in the one or more instances of the CRS applet, ownership information that associates each of a plurality of users to a respective user applet that stores the payment information associated with that user.

Continuity (3)
Continuation 15709925 · Sep 20, 2017
Provisional Application 62399297 · Sep 23, 2016
Related Publication 20220051257A1 · Feb 17, 2022