Apple Inc.

Braden Jacob Thomas

Christopher S Linn

Peter Kiehtreiber

Jacques Anthony Vidrine

Randy D Saldinger

Augustin J Farrugia

Arun Godfrey Mathias

Joe S Abuan

Justin N Wood

Gianpaolo Fasoli

Sean Boland Kelly

Patrice Olivier Gautier

Andrew H Vyrros

Andrew Roger Whalley

Patrick G Gates

Justin Edward Santamaria

Conrad Sauerwald

Payam Mirrashidi

Matthew Scott Klahn

Jeremy Brown

Michael Kuohao Chu

Thomas Matthieu Alsina

Kenneth W Scott

Drew Yao

Rajit Shinh

Scott T Boyd

Pedraum R Pardehpoosh

John Martin Hörnkvist

Kaelin Lee Colclasure

Pedraum Pardehpoosh

Natthew Klahn

In one embodiment, a unique (or quasi unique) identifier can be received by an application store, or other on-line store, and the store can create a signed receipt that includes data desired from the unique identifier. This signed receipt is then transmitted to a device that is running the application obtained from the on-line store and the device can verify the receipt by deriving the unique (or quasi-unique) identifier from the signed receipt and comparing the derived identifier with the device identifier stored on the device, or the vendor identifier assigned to the application vendor.

Securing in-app purchases

A novel security framework that is part of an operating system of a device is provided. The framework includes a security assessor that performs security policy assessments for different operations that need to be performed with respect to an application executing on the device. Examples of such operations include the installation of the application, execution of the application, and the opening of content files (e.g., opening of documents) by the application.

Centralized operation management

Registering a client computing device for online communication sessions. A registration server receives a message that has a push token that is unique to the client computing device and a phone number of the client computing device from an SMS (Short Message Service) transit device, which received an SMS message having the push token from the client computing device and determined the phone number of the client computing device from that SMS message. The registration server associates the push token and the phone number and stores it in a registration data store, which is used for inviting users for online communication sessions.

Registering client computing devices for online communication sessions

According to one aspect of the invention, a file received from a first user is stored in a storage device, where the file includes private metadata encrypted by a secret key associated with a second user. A private metadata identifier is stored in a predetermined storage location, indicating that private metadata of the file has not been decrypted and indexed. In response to an inquiry subsequently received from the second user, the predetermined storage location is scanned to identify the private metadata identifier based on the inquiry. The encrypted metadata identified by the private metadata identifier is transmitted to the second user for decryption. In response to the metadata that has been decrypted by the second user, the decrypted metadata is indexed for the purpose of subsequent searches of at least one of the metadata and the file.

Methods for processing private metadata

Growing community of inventors

San Jose, CA, United States of America

Braden Jacob Thomas