Data verification via independent processors of a device

• US 11,025,644 B2
• Filed: 07/11/2019
• Issued: 06/01/2021
• Est. Priority Date: 09/06/2016
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Fasoli, Gianpaolo, Byington, Matthew C., Sharp, Christopher, Diederich, Anton K., Shearer, Nicholas J., Yepez, Roberto G., Kostka, Petr, Barbieri, Gianluca, Gupta, Abhinav
• Primary Examiner(s): Schmidt, Kari L
• Application Number:
  US16/509,412
• Publication Number:
  US 20190334925A1
• Time in Patent Office: 691 Days
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A content request communication, e.g., generated using a first processor of a device, can be transmitted to a web server. A response communication including content identifying a first value can be received from the web server. The first processor can facilitate presentation of the content on a first display of the device. A communication can be received at a second processor of the device from a remote server. The communication can include data representing a second value and can be generated at the remote server using information received from the web server. Further, the second processor can produce a secure verification output that can be presented on a separate, second display, representing at least the second value. The presentation on first display can at least partially overlap in time with the presentation on the second display.

Claims

1. An electronic device comprising:

a first display configured to output visual stimuli;

a multi-function display configured to output visual stimuli, the multi-function display being configured to alternately operate in a first mode, in which at least one representation of a selectable function is output, and a second mode, in which a secure verification output is output;

one or more first hardware processors configured to output particular content received from a web server on the first display, the one or more first hardware processors being communicatively coupled to the first display, and the electronic device being configured such that output at the multi-function display cannot be controlled by the one or more first hardware processors; and

one or more second hardware processors, separate from the one or more first hardware processors, configured to output, in the second mode, the secure verification output to the multi-function display concurrently with the output of the particular content on the first display, the secure verification output being based on a data item received form a verification server,

wherein the secure verification output indicates whether at least part of the particular content is consistent with the data item.

2. The electronic device of claim 1, wherein the one or more second hardware processors comprise a secure processor configured to control the multi-function display independently of any of the one or more first hardware processors.

3. The electronic device of claim 1, wherein:

the particular content further identifies a first destination name;

the data item further represents a second destination name; and

the secure verification output further identifies the second destination name.

4. The electronic device of claim 1, further comprising:

a secure data store that stores secure information;

wherein the one or more second hardware processors are coupled to the secure data store and configured to;

retrieve the secure information from the secure data store; and

transmit a secure communication to the verification server, the secure communication including the secure information.

5. The electronic device of claim 4, further comprising:

a secure element that hosts the secure data store.

6. The electronic device of claim 1, wherein the data item further includes a signature of the data item, and wherein the one or more second hardware processors are further configured to:

determine, based on the signature, that the data item is valid;

wherein the secure verification output is selectively output when the data item is valid.

7. The electronic device of claim 1, further comprising:

a secure data store that stores secure information;

wherein the one or more second hardware processors are further configured to;

detect, during the concurrent output of the particular content on the first display and the secure verification output on the multi-function display, an input corresponding to a request to transmit secure information; and

in response to detecting the input;

retrieve the secure information from the secure data store; and

transmit a secure communication to the verification server, the secure communication including the secure information.

8. The electronic device of claim 1, wherein:

the first display includes a primary integrated display of the electronic device.

9. The electronic device of claim 1, wherein:

the electronic device includes;

first code corresponding to a first operating system; and

second code corresponding to a second operating system comprising a secure operating system;

the one or more first hardware processors are configured to execute the first code corresponding to the first operating system; and

the one or more second hardware processors are configured to execute the second code corresponding to the second operating system, but not to execute the first code corresponding to the first operating system.

10. The electronic device of claim 1, wherein the electronic device includes a laptop computer that includes:

a display panel that includes the first display; and

a base assembly that includes the one or more first hardware processors, the one or more second hardware processors, and the multi-function display;

wherein the display panel is connected to the base assembly via one or more hinges.

11. A method for using multiple processors on a device to generate verification outputs based on web server communications, the method comprising:

transmitting, using a first processor of the device, a content request communication to a web server;

receiving a response communication from the web server, the response communication comprising particular content;

facilitating, using the first processor, a first presentation of the particular content on a first display of the device;

receiving, from a verification server, a data item having been generated at the verification server in response to receipt of another communication received at the verification server from the web server;

generating, using a second processor, a secure verification output, the secure verification output being based on the data item received from the verification server, wherein the secure verification output indicates whether at least part of the particular content is consistent with the data item; and

facilitating, using the second processor, a second presentation of the secure verification output at the device concurrently with the first presentation of the particular content, wherein the second presentation is presented on a multi-function display of the device is separate from the first display.

12. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein:

the second processor comprises a secure processor configured to control the multi-function display independently of the first processor.

13. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein:

the particular content further identifies a first destination name;

the data item further represents a second destination name; and

the secure verification output further identifies the second destination name.

14. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, further comprising:

retrieving, using the second processor, secure information from a secure data store at the device; and

transmitting a secure communication to the verification server, the secure communication including the secure information.

15. The method for using multiple processors to generate verification outputs based on web server communications of claim 14, further comprising:

a secure element that hosts the secure data store.

16. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein the data item further includes a signature of the data item, and wherein the method further includes:

determining, based on the signature, that the data item is valid;

wherein the secure verification output is selectively presented when the data item is valid.

17. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, further comprising:

detecting, during the concurrent first presentation and second presentation, an input corresponding to a request to transmit secure information; and

in response to detecting the input;

retrieving secure information from a secure data store at the device; and

transmitting a secure communication to the verification server, the secure communication including the secure information.

18. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein:

facilitating the first presentation of the particular content at the device includes facilitating the first presentation of the particular content on a primary integrated display of the device.

19. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein:

the device includes;

first code corresponding to a first operating system; and

second code corresponding to a second operating system comprising a secure operating system;

the first processor is configured to execute the first code corresponding to the first operating system; and

the second processor is configured to execute the second code corresponding to the second operating system, but not to execute the first code corresponding to the first operating system.

20. The method for using multiple processors to generate verification outputs based on web server communications of claim 11, wherein the device includes a laptop computer that includes:

a display panel that includes the first display; and

a base assembly that includes the first processor, the second processor, and the multi-function display;

wherein the display panel is connected to the base assembly via one or more hinges.