US 12,141,266 B2
Proof of affinity to a secure event for frictionless credential management
Benjamin D. Chester, Mountain View, CA (US); Hubert Greiche, Santa Clara, CA (US); Richard W. Heard, San Francisco, CA (US); Yousuf H. Vaid, Fremont, CA (US); and Gianpaolo Fasoli, Redwood City, CA (US)
Assigned to Apple Inc., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jul. 6, 2020, as Appl. No. 16/921,283.
Claims priority of provisional application 62/871,168, filed on Jul. 7, 2019.
Prior Publication US 2021/0004454 A1, Jan. 7, 2021
Int. Cl. G06F 21/45 (2013.01); G06Q 20/36 (2012.01); G06Q 30/018 (2023.01); G06Q 40/02 (2023.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01); G06Q 20/40 (2012.01)
CPC G06F 21/45 (2013.01) [G06Q 20/3674 (2013.01); G06Q 30/0185 (2013.01); G06Q 40/02 (2013.01); H04L 9/3236 (2013.01); H04L 63/083 (2013.01); H04L 63/0853 (2013.01); H04L 63/102 (2013.01); G06Q 20/4018 (2013.01); G06Q 2220/00 (2013.01); H04L 2463/082 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for provisioning credentials to computing devices, the method comprising, at an administration entity (AE) subsystem:
authenticating a first login by a first computing device that is performed using a user account that is known to the AE subsystem;
receiving, from the first computing device, a proof of ownership of a funding account;
provisioning, to the first computing device, a credential associated with the funding account that enables the first computing device to perform transactions using the funding account;
generating an ownership token based on the credential and the user account;
in response to authenticating a second login by a second computing device that is also performed using the user account:
automatically providing the ownership token to the second computing device to enable the second computing device to issue a request to provision the credential to the second computing device, wherein the request includes the ownership token; and
in response to receiving the request from the second computing device:
authenticating, based on the inclusion of the ownership token in the request, that the second computing device is authorized to receive the credential, and
provisioning the credential to the second computing device to enable the second computing device to perform transactions using the funding account.