Apple Inc.

Other

Kazu Yanagihara

Gregory Bjorn Vaughan

Robin E Martherus

Matthew S Holloway

Steven F Peralta

Gregory Robert Burns

Eric Zelenka

Greg Vaughan

Some embodiments provide a method for authenticating a user to access computing resources that uses transient event data regarding previous interactions of the user with the computing resources. The method receives a notification that a user is unable to provide a correct user identifier and password. The method generates authentication questions for the remote user using the transient event data. The authentication questions are presented to the user. The method authenticates the user based on answers to the password recovery questions. The user may be a remote user and the computing resources are a set of application servers to which the user has forgotten a password. The computing resources may be a portable device that the user wishes to access remotely in order to delete data from the portable device.

Authentication using transient event data

A portable device initially accesses a secure server and requests a certificate. The secure server generates a random key and encodes the generated key to generate a representation of the key, such as a two-dimensional bar code or an audio signal, and communicated to a local device, such as a laptop or desktop computer, using a web interface. The local device is used to present the representation of the key to a mobile device. The mobile device then captures the representation of the key from the local device, for example using an image capture device or audio capture device, and extracts the key by decoding the representation of the key. The key is then stored by the mobile device and used to securely communicate with the secure server without manually entering the key.

Secure provisioning of a portable device using a representation of a key

Authentication of a request by a computer for access to a resource is accomplished by means of a randomly generated password that can only be used a limited number of times. In a disclosed embodiment of the invention, a network computer sends a boot request to a network server. In response, the network server generates a random password, and sets a use counter to a value which indicates the number of times that the password can be used for access to network resources. This password is transmitted to the network computer, which uses it to initiate a session with a network file server, and access network resources. The network server then invalidates the password, by decrementing the use counter to zero. As a result, even if the password becomes known to an unauthorized user as it is being transmitted from the network server to the network computer, it cannot be improperly employed to gain access to any network resources.

Authenticated communication procedure for network computers

A method and apparatus for processing information in a data processing system which is coupled to an information storage device having information stored therein. The method includes defining on a first processor a first search request which includes at least one parameter which specifies a first desired type of information, then performing a first search using the first request to determine whether the first type of desired information is stored in the information storage device. While performing the first search the first processor executes another process associated with searching for information in the data processing system. This other process typically includes defining a further search request and performing a further search using the further search request while the first search is being performed. The apparatus of the present invention includes a first processor coupled to the information storage device and a second processor coupled to a network to the first processor. An input device is coupled to the first processor which is used to define a first search request. According to another aspect of the invention, a first search request may be defined and the performance of the first search request may be scheduled such that a first search may be performed at a first scheduled search time or a report of the first search may be retrieved at a first scheduled time. A report in summary format is generated following performance of the first search at the first scheduled search time.

Growing community of inventors

Mountain View, CA, United States of America

Kazu Yanagihara