Apple Inc.

Kalyan C Gopavarapu

Sudhakar N Mambakkam

Dmitry V Belov

Richard J Mondello

David G Knipp

Brent A Fulgham

Edgar Tonatiuh Barragan Corte

Tyler D Hawkins

Paul W Salzman

David S Clark

Reed E Olsen

Nagarjuna Thottempudi

Robert F Lee

Libor Sykora

Justin K Bennett

Gokul P Thirumalai

Alexandre A Aybes

Steven Andrew Myers

Frederic Jacobs

Keaton F Mowery

Munish K Poonia

Peter J Hare

Nihar Sharma

Patrick J Rogers

Jean-Luc Giraud

Rebekah H Mercer

Assar E Westerlund

Natalie Calvert

Bagath S Pugazhendhi

Kashyap Jogi

Sivasankar Ponnambalam

Nora J Shoemaker

A method and apparatus of a device that authorizes a device for a service is described. In an exemplary embodiment, the device intercepts a request for a web page from a web browser executing on the device, wherein the request includes an indication associated with an authorization request for the service and the web page provides the service. In addition, the device presents an authorization user interface on the device. The device further performs a local authorization using a set of user credentials entered via the authorization user interface. The device additionally performs a server authorization with a server. Furthermore, the device redirects the web browser to the requested web page, wherein the web browser is authorized for the service provided by the web page.

Systems and methods of application single sign on

This Application sets forth techniques for establishing a custodial relationship between a user device and a custodian device for recovering access to a user account and/or to encrypted user data with assistance provided by the custodian device to effect access recovery. A server of a cloud network service provides an anonymous identifier to associate with the custodian device and an account recovery key to store at the custodian device. Identity of an account of the cloud network service associated with the custodian device can be hidden from the server. The user device generates a data recovery key and provides a first portion of the data recovery key to the custodian device and a second portion of the data recovery key to the server. Integrity of the stored account recovery key and portions of the data recovery key are checked regularly by the custodian device and the user device.

Techniques for user account and data recovery

Representative embodiments set forth techniques for verifying an identity of a primary user of a primary account on a client device. A method may include receiving, for the primary account, a request for identity verification responsive to an action of a secondary account associated with the primary account and identifying a payment registration characteristic of a payment registration associated with the primary account. The method also includes retrieving identity information associated with the primary account based on the payment registration characteristic and, in response to a determination that the identity information corresponds to a verification indicator, verifying an identity of a user of the primary account. The method also includes, in response to verifying the identity of the user of the primary account, generating a payment verification token and associating the payment verification token with an authorization indication for the action of the secondary account.

System and method for identity verification

Embodiments described herein provide for a satellite device that can be associated with a user account of a minor aged (e.g., child or adolescent) user that does not have a smartphone that can be used as a companion device to the satellite device. The satellite device can be configured to be used as a primary device, without reliance upon a paired smartphone. Certain information can be synchronized with the satellite device via the association with the family account. During initial configuration, a set of cryptographic keys can be generated to associate the account of the satellite device with the set of accounts in the family. The satellite device can then access calendars, media, or other data that is shared with user accounts within a family of user accounts.

Authenticating and creating accounts on behalf of another user

Growing community of inventors

Sunnyvale, CA, United States of America

Kalyan C Gopavarapu