Apple Inc.

Jonathon Sodos

Xudong Liu

Robert D Butler

Guozhi Huang

Li Li

Craig Michael Federighi

Arun Godfrey Mathias

Daniel Ben Pollack

Gianpaolo Fasoli

Roberto Garcia

Darin Benjamin Adler

Najeeb M Abdulrahiman

Nicholas Joseph Circosta

Matthew Elliot Shepherd

Pierre Jonathan De Filippis

Gokul P Thirumalai

Hervé Sibert

Sudhakar N Mambakkam

Francisco J Gonzalez

Hannah S Story

Jose A Lozano Hinojosa

Nelson M Leduc

Elliot Aaron Barer

Ryan W Baker

David G Knipp

Elliot T Garner

David A Schaefgen

Huan He

Sean Geiger

Timothy Shaw

Cisto Cyriac

Mursalin Akon

Pierre J Defilippis

This application sets forth techniques for managing phone number-based user accounts. According to some embodiments, a server computing device can be configured to carry out the steps of (1) receiving, from a first client computing device, a request to create a user account based on a phone number, (2) in response to authenticating that the first client computing device is associated with the phone number: creating the user account based on the phone number, creating a hidden contact address based on the phone number, and assigning the hidden contact address to the user account, and (3) in response to receiving a notification that a second client computing device is associated with the phone number: requiring the user account to be updated to be based on a different phone number, or assigning, to the user account, a visible contact address based on the phone number.

Techniques for implementing phone number-based user accounts with permissions to access varying levels of services utilizing visible and hidden contact addresses

The subject disclosure provides systems and methods for sender verification for encrypted electronic messaging. The discloses systems and methods may facilitate reducing or preventing spam messages between electronic devices. An electronic device may determine, prior to sending an electronic message to another device with a first level of encryption that is higher than a second level of encryption, whether the electronic device is eligible to send the message with the first level of encryption. If an electronic device determines that it is ineligible to send the message with the first level of encryption to another electronic device, a first message from the electronic device to the other electronic device may be sent with the second level of encryption as part of an unencrypted or low encryption handshake between the devices.

Sender verification for encrypted electronic messaging

A push notification distribution system centralizes the management and delivery of push notifications to applications executing on electronic devices. Registration requests to register applications for push notifications may be aggregated and sent as an aggregated registration request. The delivery priority of push notifications may be managed according to specified preferences. Upon receiving a push notification intended for an electronic device, a delivery priority of the push notification may be changed if an application identifier associated with the push notification is found on a list of application identifiers with designed delivery priorities.

Push notification distribution system

Implementations of the subject technology provide for performing, by a device, a request for obtaining information related to a phone authentication certificate (PAC) that was generated for the device, the PAC authenticating that a particular phone number is associated with the device, the request including packets of data. The subject technology receives the information related to the PAC, the information including an indication that the PAC was generated for the device. The subject technology sends, from the device, a request for validating the PAC to a remote server based at least in part on the information related to the PAC. Further, the subject technology receives a confirmation of validating the PAC from the remote server based at least in part on the information related to the PAC.

Two-factor device authentication

Disclosed herein are techniques for enabling a user to activate a new device with a Mobile Network Operator (MNO) without requiring the user to provide MNO authentication credentials that are easily forgotten. The user activates the new device using credentials from an existing device (associated with the user) that is trusted by the MNO and also using a trust score provided by a third-party server that has knowledge of associations between the user and the existing device. The new device can be a supplemental device, such as a wearable device to a cellular phone, where both devices remain capable of accessing services provided by the MNO after the new device is activated with the MNO. The new device can also be a replacement device, such as a new phone, tablet, or wearable device, where the new device supplants access to services provided by the MNO for an existing device.

Server trust evaluation based authentication

Growing community of inventors

Los Gatos, CA, United States of America

Jonathon Sodos