Apple Inc.

Gokul P Thirumalai

Daniel Ben Pollack

Robert Y Loh

Roberto Garcia

Scott Lopatin

Tommy Rochette

Yannick L Sierra

Dmitry V Belov

Hannah S Story

Justin N Wood

Kevin P McLaughlin

Anush G Nadathur

Matthew C Lucas

Andrew W Burks

Keetae Ryu

Felipe Marin Cypriano

Yan Yang

Berkat S Tung

Nicholas Joseph Circosta

Wayne Loofbourrow

Alexandre A Aybes

Frank De Jong

Grant Ritchie

Mithilesh Kumar

Austin Marusco

Aniket A Zamwar

Philomena F Lobo

Jonathan Birdsall

Ori Herrnstadt

Nagarjuna Thottempudi

Alexandre Perematko

Patrick L Coffman

Hyeonkuk Jeong

Mathieu Ciet

Thomas Icart

Pierre Jonathan De Filippis

Benoit Chevallier-Mames

Bhaskar P Sarma

Kevin J Lindeman

Sudhakar N Mambakkam

Michael D Ford

Gobind Johar

Oliver J Hunt

Munish K Poonia

Jonathon Sodos

David G Knipp

Raghav V Pisolkar

Mayur P Mahajan

Aleksei Naiden

Marcel Van Os

Freddy Allen Anzures

Li Li

Arun Godfrey Mathias

Jae Woo Chang

Joe S Abuan

Bob Bradley

Marc Jason Krochmal

Gianpaolo Fasoli

Hoan K Pham

Najeeb M Abdulrahiman

Andrew H Vyrros

Nicole R Ryan

Justin Edward Santamaria

Hervé Sibert

Roberto Garcia, Jr

Aaron M Melim

Thomas P Devanneaux

Steven Andrew Myers

Francisco J Gonzalez

Jason R Thorpe

Frederic Jacobs

Amol V Pattekar

Keaton F Mowery

Ryan W Baker

Kalyan C Gopavarapu

Robert D Butler

Brian E Korver

Nihar Sharma

Carmen S Yu

Justin M N Wood

Mischa Mclachlan

Jean-Luc Giraud

Rebekah H Mercer

Assar E Westerlund

Kevin Mclaughlin

This Application sets forth techniques for establishing a custodial relationship between a user device and a custodian device for recovering access to a user account and/or to encrypted user data with assistance provided by the custodian device to effect access recovery. A server of a cloud network service provides an anonymous identifier to associate with the custodian device and an account recovery key to store at the custodian device. Identity of an account of the cloud network service associated with the custodian device can be hidden from the server. The user device generates a data recovery key and provides a first portion of the data recovery key to the custodian device and a second portion of the data recovery key to the server. Integrity of the stored account recovery key and portions of the data recovery key are checked regularly by the custodian device and the user device.

Techniques for user account and data recovery

A method and apparatus of a device that endorses a proximity authorization for an authorization requesting device is described. In an exemplary embodiment, the device receives a proximity authorization request from the authorization requesting device, wherein the authorization requesting device is in proximity with the authorization endorsing device. The device additionally presents a local authorization request to a user of the authorization endorsing device and receives a set of user credentials for the local authorization request. The device further performs a local authorization on the device using at least the set of user credentials. In addition, the device sends a server authorization request to an identity management server, receives an authorization response from the identity management server, and returns the authorization response.

Systems and methods for proximity single sign-on

Data items such as files or database records associated with particular applications (such as messaging applications and other applications) can be stored in one or more remote locations, such as a cloud storage system, and synchronized with other devices. The remote storage can be configured such that each application executing on a client device can only view data items stored at the remote location to which the application has permission to access. An access manager on each client device enforces application specific access policies. Storage at the remote location can be secured for each application associated with a user or user account, for example, using isolated containers. The cloud storage of data can be anonymized and anonymous group data can be stored in the cloud storage.

Cloud messaging system

The present disclosure generally relates to setting up an account for a service. A request to set up an account for a first service is received. In response to receiving the request to set up the account for the first service, a first login option and a second login option are displayed. If an input selecting the first login option is detected, a request to use first contact information for a user to set up the account for the first service is transmitted. If an input selecting the second login option is detected, a request to use second contact information for the user to set up the account for the first service is transmitted. The second contact information is automatically generated for the service and does not reveal the first contact information for the user.

User interface for accessing an account

The present disclosure generally relates to account recovery. An example method includes, at a computer system in communication with a display generation component and one or more input devices: performing a recovery contact set up process including providing a notification to a contact; after performing the recovery contact set up process, receiving, via the one or more input devices, a request to initiate an account recovery process; in response to the request to initiate the account recovery process and without providing a request to the contact, displaying, via the display generation component, a recovery code interface for receiving a set of recovery credentials; while displaying of the recovery code interface, receiving the set of recovery credentials; in accordance with a determination that the recovery credentials are valid, performing a recovery function; and in accordance with a determination that the recovery credentials are not valid, forgoing performing the recovery function.

Methods and user interfaces for account recovery

Techniques disclosed herein relate to the authentication of a first user in a communication session between the first user using a user device and a second user using a remote computer system. The computer system sends an authentication request in the session, and the user device receives the authentication request in the session via a messaging program. The user device then causes a different program to access an authentication token received from an authentication computer system. The user device sends an indication of the authentication token to the remote computer system which the remote computer system verifies to authenticate the first user within the session.

Authenticating a messaging program session

A relay service can relay messages between controllers and electronically controllable accessory devices that may be located remotely from the controllers. Relaying of messages by the relay service can be decoupled from any knowledge of the functionality of the accessory or the content of the messages. Device identification and relaying of messages can be managed using 'relay aliases' that are meaningful only to the relay service and the endpoint devices (the controller and accessory). The endpoint devices can implement end-to-end security for messages transported by the relay service.

Relay service for communication between controllers and accessories

Establishing a communication channel via a relay server with reduced setup time. Upon request by an initiating communication device a relay allocation server may allocate a single relay server for use in a communication session between the initiating communication device and one or more recipient communication devices. The relay server may be selected to perform favorably for the initiating communication device. Messaging for establishment of the communication session may be performed using persistent messaging connections, to avoid connection establishment cost. Messaging may also be performed using address tokens to avoid the cost of discovering global IP addresses. Following establishment of the communication session, the relay server may discover the IP address of one or more recipient communication devices, and may initiate reallocation of those devices to another relay server.

Relayed communication channel establishment

A messaging system, in one embodiment, can establish messaging accounts for a plurality of organizations (e.g., businesses) to allow customers or users of the organizations to conduct two-way messaging sessions between a customer and an organization. The messaging system can use a registration portal to allow an organization to set up a business/organization messaging account by providing account information. The account information can then be used to update one or more searchable databases that allow a customer to have multiple entry points into a messaging session with each of the registered businesses in the messaging system. For example, a search through a web browser or a map application can provide search results that contain or otherwise provide access to a selectable messaging option that is presented on a customer's device.

Messaging system for organizations

Implementations of the subject technology provide for performing, by a device, a request for obtaining information related to a phone authentication certificate (PAC) that was generated for the device, the PAC authenticating that a particular phone number is associated with the device, the request including packets of data. The subject technology receives the information related to the PAC, the information including an indication that the PAC was generated for the device. The subject technology sends, from the device, a request for validating the PAC to a remote server based at least in part on the information related to the PAC. Further, the subject technology receives a confirmation of validating the PAC from the remote server based at least in part on the information related to the PAC.

Two-factor device authentication

A messaging system uses a cloud storage backup system for messages and a temporary storage for messages that are not deliverable to offline devices at the time that the messages are sent by one or more messaging servers. The messages are backed up through a synchronization process that transfers a batch of a plurality of messages rather than a single message or an entire database of messages. A conversation state can be synchronized first before synchronizing messages through the transfer of one or more batches of messages.

Cloud storage and synchronization of messages

Growing community of inventors

Mountain View, CA, United States of America

Gokul P Thirumalai