Apple Inc.

Ahmed M Bashir

Roberto Garcia

Pierre Jonathan De Filippis

Michael W Brandt

Stephen M Lottermoser

Van Hong

Gavin B Thomson

Chelsea J Leblanc

Theodore Hong

Kevin Y He

Randall S Becker

Ge Yan

Nicholas Joseph Circosta

Matthew Elliot Shepherd

Justin S Titi

Thomas Francis Pauly

Jared A Crawford

Frederic Jacobs

Jose A Lozano Hinojosa

Aniket A Zamwar

Elliot T Garner

Sean Geiger

Vasilii Vlasov

Chelsea J LeBlanc

Yevgeni Pekurovsky

Nishchaie Khanna

Michael Joel Brandt

A device implementing a system for sharing groups of files within a messaging application includes a processor configured to provide, within the messaging application, a user interface element for sending at least one file to a participant in an active message thread of the messaging application, the at least one file having been determined to be relevant to the participant. The processor is further configured to, responsive to receiving a selection of the user interface element: transmit, to a server, a request to store the at least one file in association with a shared storage area, and to transmit, via the messaging application, a message to the participant in the active message thread, the message comprising information for accessing the at least one file associated with the shared storage area.

Sharing content in a messaging application

Techniques are provided for securely routing network traffic data. A kernel routine in a computing device obtains content metadata from the network traffic data associated with an application. The kernel routine can evaluate the content metadata and determine whether security and privacy policies should be applied to the network traffic data associated with the content metadata. The kernel routine can automatically create or identify tags for the content metadata based on intent and context information that is determined by the kernel routine. The tags can be associated with particular security and privacy policies, such as anonymization and encryption.

Traffic splitting in kernel for targeted traffic protection

Aspects of the subject technology provide for privacy-preserving electronic publication and subscription. A publisher device may establish a publication channel with a publication server and receive a channel identifier and a channel ownership token for the channel. The publisher device may provide the channel identifier and a key for the publication channel to a subscriber device. The publisher device may publish data encrypted using the key to the publication server, the subscriber device may obtain the encrypted published data from the server using the channel identifier, and may decrypt the published data using the key obtained from the publisher device. The published data may include status information for a user of the publisher device, in some examples.

Privacy-preserving electronic publication and subscription systems

A server (or server instance) may receive data during a plurality of sequential blocks of time. The server may store the data received in each block of time in a corresponding separate directory within a data store. The server may determine that a threshold storage capacity of the data store has been reached and, in response to the determining, may clear a directory in which oldest data received in an earliest block of time has been stored.

Managing data using a time-based directory structure

The embodiments set forth a technique for providing a stateless technique for distributing uploads. According to some embodiments, a system can include various computing devices, authorization servers, and storage destinations. Within the system, an authorization server assigns weight properties to each storage destination, and generates a set of tokens for subsequent assignment to the different storage destinations in accordance with their weight properties. More specifically, the authorization server is configured to perform an initial token drafting process that involves assigning the tokens to different storage destinations. As the current health of each storage destination changes over time, the authorization server is also configured to periodically perform (e.g., at a set interval) a supplemental token drafting process that involves updating the weight properties of each storage destination and redistributing the tokens in view of the updated weight properties.

Stateless technique for distributing data uploads

Growing community of inventors

Saratoga, CA, United States of America

Ahmed M Bashir