How Apple Devices Securely Display Digital Passes and Tickets

A system for securely displaying digital tickets or account codes on a screen only after verifying the user's identity, and automatically hiding them once used or if time runs out.

What it covers

This patent describes a secure method for managing digital passes, like boarding passes or event tickets, on a mobile device. When a user wants to view their ticket's machine-readable code (like a QR code), the device requires authentication, such as a passcode or biometric scan. Once verified, the code appears, but the system monitors for a second authentication or a time limit to ensure the display remains secure. If the code is successfully scanned or the time expires, the system automatically hides the code and confirms the transaction, preventing unauthorized access to the underlying account.

What it doesn't cover

• —Does not cover the physical scanning hardware or optical sensors used to read the code.
• —Does not cover the underlying network protocols used to transmit the pass data from a server.
• —Does not cover methods of authentication that do not rely on a predetermined time-based verification window.
• —Does not cover the creation or issuance of the digital passes by the service provider.

The clever bit

The system treats the display of the code as a temporary, high-security state that is automatically revoked upon confirmation of use, rather than just a static image stored in an app.

Why it matters

As digital wallets replace physical cards and paper tickets, security becomes a major concern. This patent provides a standardized way to ensure that sensitive account information is only exposed for the exact moment it is needed, reducing the risk of shoulder-surfing or unauthorized use if a phone is left unlocked.

Real-world examples

• 1.Apple Wallet boarding passes
• 2.Digital event tickets in mobile apps
• 3.Secure QR-based transit passes