Apple Inc.

Nihar Sharma

Steven Andrew Myers

Van Hong

Yannick L Sierra

Per Love Hornquist Astrand

Xixi Lu

Michelle D Linington

Gokul P Thirumalai

Alexandre A Aybes

Olivier Bonnet

Sudhakar N Mambakkam

Dmitry V Belov

Xiaonan Ma

Frederic Jacobs

Jean-Gabriel Morard

Keaton F Mowery

Kalyan C Gopavarapu

Munish K Poonia

Jean-Luc Giraud

Rebekah H Mercer

Assar E Westerlund

This Application sets forth techniques for establishing a custodial relationship between a user device and a custodian device for recovering access to a user account and/or to encrypted user data with assistance provided by the custodian device to effect access recovery. A server of a cloud network service provides an anonymous identifier to associate with the custodian device and an account recovery key to store at the custodian device. Identity of an account of the cloud network service associated with the custodian device can be hidden from the server. The user device generates a data recovery key and provides a first portion of the data recovery key to the custodian device and a second portion of the data recovery key to the server. Integrity of the stored account recovery key and portions of the data recovery key are checked regularly by the custodian device and the user device.

Techniques for user account and data recovery

The subject technology may be implemented by a device that includes at least one processor configured to encrypt a data object based at least in part on an encryption key. The at least one processor may be further configured to sign the encrypted data object with a private key and transmit the signed encrypted data object to a server for retrieval by another device. The at least one processor may be further configured to generate a sharing object corresponding to the data object, wherein the sharing object includes an encryption key and a public key that corresponds to the private key. The at least one processor may be further configured to encrypt the sharing object using a key of the other device and transmit, over a secure channel, the encrypted sharing object to the other device for subsequent retrieval and verification of the signed data object from the server.

Synchronizing content

Some embodiments provide a method for storing multiple data assets in a folder structure on a cloud services platform. The method stores a separate encrypted structure for each of the data assets on the cloud services platform. A same first key provides access to each of the encrypted structures. The method stores, on the cloud services platform, a folder structure with an encrypted copy of the first key. The method stores a parent structure of the folder on the cloud services platform. The parent structure includes an encrypted copy of a second key that provides access to the encrypted copy of the first key.

Hierarchical encryption of data

Growing community of inventors

Cupertino, CA, United States of America

Nihar Sharma