Apple Inc.

Paul William Chinn

Ronnie G Misra

Gregory B Novick

Tyler D Hawkins

Eric Olaf Carlson

Dallas Blake De Atley

Gordon J Freedman

Michael J Smith

Karthik Narayanan

David Rahardja

Tahoma Madrone Toelkes

Thomas Brogan Duffy, Jr

Christopher G Wilson

Rudolph Van Der Merwe

Conrad Sauerwald

Roberto G Yepez

Raghunandan K Pai

Neil Gareth Crane

Samuel Noble

Daniel Ben Pollack

Peter D Anton

Anthony Joseph Guetta

Myra Mary Haggerty

Christopher K Thomas

Jonathan E Drummond

Weijie Zhang

Cameron Stuart Birse

Jeffrey Y Hayashida

John Andrew Wright

Kelsey Yukio Ho

Julien A Poumailloux

Anand Dalal

Simon P Cooper

Sean Matthew Gies

Andrew B Cato

David C Donley

Eric S Brown

Curtis Rothert

Benjamin Biron

Patrick O Heynen

James L Mensch

David Makower

Jacques Anthony Vidrine

Kelly B Yancey

Anders Bertelrud

Nathaniel S Brown

Donald Matthew Firlik

Timothy P Hannon

Rohan Sehgal

Stephen F Holt

Pau Sastre Miguel

Robert M Marini

David A Schaefgen

Andrew Dennis Boyko

Christopher T Parker

Pierre D'herbemont

Nils M Hayat

Jin Bing Lin

Karol B Gasinski

Curtis C Galloway

Aspects of the subject technology relate to electronic devices that can provide protected use of user-related information to applications, for generating user-specific outputs. The protected access may allow an application to process the user-related information within a processing environment of a processor that is separate from a primary processor of an electronic device. Within that processing environment, the application can utilize the user-related information to generate a user-specific output from the device. However, the application is prevented from extricating the user-related information, and information derived from the user-related information, from that processing environment.

Protected access to rendering information for electronic devices

A device locator mode or find my device (FMD) mode can allow a lost, stolen, or misplaced mobile device to be located. The FMD mode can be enabled or disabled on a mobile device. Sometimes thieves or unauthorized parties attempt to disable the FMD mode. To prevent this, the mobile device can transmit a unique device identifier to a remote server. The remote server can link the device identifier to a cloud-based user account associated with the user of the mobile device. Before an FMD mode is disabled on the mobile device, before the content or settings can be erased, and/or before a mobile device is permitted to be activated/reactivated, a user of the mobile device can be challenged for the credentials of the cloud-based user account. If valid credentials are provided, FMD can be disabled, the content or settings can be reset, and/or the device can be activated/reactivated.

Device locator disable authentication

In an embodiment, a device may include an attention detection service. The attention detection service may monitor various peripheral devices in the device for indications that a user is paying attention to the device. Various clients may register for notification of attention detection and attention lost (attention no longer detected) events, or may poll the service for the events. If a user is not paying attention to the device, it may be possible to take various actions to permit reduced energy consumption.

Attention detection service

Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

System and method for wiping encrypted data on a device having file-level content protection

A companion device can obtain a new version of a software program (e.g., in portions) from a server at the request of an accessory device, and provide the new version of the software to the accessory device. The software update of the accessory device can be initiated at the companion device. The companion device can communicate with the accessory device before and after the update to determine whether the update was successful. A notification about the update can then be provided to a user.

Revision locking

A system is described to create and transmit a streamable ZIP file container. The streamable ZIP file container contains stream metadata, files, and a central directory. The stream metadata, files, and central directory can be saved in a contiguous stream without any intervening bytes. When the streamable ZIP file container is read by a client device that supports streamable ZIP file containers, the client device can exit the data stream without receiving the central directory. Interruptions during transmission of the ZIP file container can be resumed.

Streaming zip

Disclosed herein is a technique that can selectively display secure content on a computing device. The technique can detect both lock and unlock events and issue appropriate control signals that cause an application to display a more secure version of the application when necessary based on a particular UI context file. The UI context file can specify a configuration that includes pre-configured hidden or removed UI elements that do not need to be adjusted at runtime. Moreover, the technique can seamlessly pivot to a different UI context file that specifies a configuration of the application that allows the user to experience the full-capabilities of the application when the computing device is in an unlocked-mode.

Techniques for displaying secure content for an application through user interface context file switching

The disclosed technology addresses the need in the art for assigning multiple containers to a single application. A container can be a specified area of a file system that an assigned application can access to store data, while other applications are restricted access to the container. In some instances, it may be beneficial for multiple applications to share some data, while still maintaining other data in a secure location, thus an application can be assigned to multiple containers, a personal container that can only be accessed by the application, and a shared container that can be accessed by multiple applications. Further, an application can be assigned an alternate container, in addition to the personal container. The alternate container can be used when an alternate user is using the client device, thus restricting the alternate user from accessing any sensitive data stored in the personal container.

Multiple containers assigned to an application

A method of establishing communications with a first device is disclosed. The method includes: the first device presenting connection information to a second device; receiving a response from a second device; establishing an association with the second device; transmitting, in response to a determination that the first device and the second device are connected for data, first data to the second device, the first data comprising addressing information for a server; receiving second data from the second device, the second data comprising second information for establishing communications with the first device; and configuring the first device to receive third data from a location remote to the first device using the second information from the second data.

Method of establishing communications

Growing community of inventors

San Jose, CA, United States of America

Paul William Chinn