Google Inc.

Mark Larson

Manish Lachwani

Pratyus Patnaik

Abhinav Singh

Chase Phillips

Sumit Gwalani

Glenn Wilson

Jayendran Srinivasan

Jose Ricardo Vargas Puentes

Carlos E Pizano

Nicolas Sylvain

Finnur Breki Thorarinsson

An example system may include a first device connected over respective communications interfaces to a plurality of second devices. The first device may establish respective remote terminals between the first device and one or more second devices. Establishing the respective remote terminals may indicate that the devices are in an online state. The first device may periodically update respective heartbeat files on the second devices. A respective second device may detect that a pre-determined time period has elapsed since the heartbeat file was updated. The respective second device may determine that a respective remote terminal between the first device and the respective second device has been terminated. Determining that the remote terminal has been terminated may indicate that the device is in an offline state. The respective second device may reset itself so as to transition the respective second device from the offline state to the online state.

Device cloud monitoring and stability

Methods for scheduling data download requests for a device are provided. In one aspect, a method includes assigning to a device a first wait period of a random length below a first pre-determined maximum value, and receiving a notification that data is available for download to the device. The method also includes determining whether an amount of time elapsed since the data was made available for download to the device exceeds the first wait period, and when the determination indicates that the amount of time elapsed since the data was made available for download exceeds the first wait period, downloading the data available for the device. Systems and machine-readable media are also provided.

Automatic update distribution for managed devices

Embodiments of the present invention relate generally to application security. In an embodiment, a method for altered token sandboxing includes creating a process based on a naked token and suspending the process. The method further includes obtaining an impersonation token and resuming the process with the impersonation token. The method further includes acquiring resources needed for the process with the impersonation token. The method also includes replacing the impersonation token with the naked token. In a further embodiment, the method further includes executing the suspended process with the naked token and the acquired resources. In another embodiment, a system for user-mode, altered token sandboxing includes a security module, an acquisition module and a replacement module. In a further embodiment, the system may include an execution module. In another embodiment, the system may include a request module.

Altered token sandboxing

Growing community of inventors

San Carlos, CA, United States of America

Mark Larson