Google Inc.

Sumit Gwalani

William Alexander Drewry

Randall Spangler

Luigi Semenzato

Gaurav Shah

Arjita Madan

Glenn Wilson

Mattias Stefan Nissler

Ryan Tabone

Heman Khanna

Christopher Masone

Paridhi Rawat

Darren David Krahn

Kenneth Edward Mixter

Daniel Kenneth Clifford

Edward Chiang

Kishore Nandakumar

Alexander Friedrich Kuscher

Min Li Chan

William Frank Richardson

Johann Tomas Sigurdsson

Zelidrag Hornung

Willis Calkins

Mark Larson

Steven Houtchens

Jayendran Srinivasan

Joao Paulo Pagaime Da Silva

Raymond Lo

Bin Zhao

Royans Kurian Tharakan

Tan Gao

Cem Paya

Controlling wireless access to target devices by initiating, by a user device, wireless pairing with a target device. The user device collects, concurrent with the initiating, a wireless signal of at least the target device. One or more computing devices builds a profile for the user device based on the collected wireless signal. The one or more computing devices controls access of the user device to functionality of the target device based on the profile.

Audio signal based identification

The present disclosure provides systems, methods, and computer program products for transmitting data to computing devices via audio communication channels. A computer-implemented method performed by one or more processing devices may include, for example, providing an audio token to a broadcasting device for broadcast via an audio communication channel, receiving the audio token from a user computing device, the audio token being received from the user computing device based on an audio broadcast of the audio token by the broadcasting device via the audio communication channel, and obtaining, in response to determining data that is associated with the received audio token, approval to process a payment transaction by at least in part transmitting the data to the user computing device.

Mobile service requests to any sound emitting device

A first device listens for a communication token across an audio bandwidth covering a transmit frequency one or more audio frequency broadcasting device. The first device receives at least one token broadcast from the one or more broadcasting devices. The first device demodulates and decodes each received token. One or more computing devices validates each decoded token. The first device determines, based on the validating, a broadcasting device of the broadcasting devices with which to establish a communications channel. The one or more computing devices generates a response token based on the token received from the determined device. The first device broadcasts the generated response token in a response band of the determined device. The determined device demodulates decodes, and validates the token broadcast from the first device. Upon determining the token broadcast from the first device valid, the first device and the determined device establish a wireless communication channel.

Audio communication tokens

A user device receives a service device identifier via a Wi-Fi scan at a location and transmits the received service device identifier to an management system via a network. If the management computing system receives multiple service device identifiers from the user computing device, the management computing system receives location data of the user computing device and signal strength data associated with each of the service device identifiers. The management system receives location data from the user computing device and determines a particular service device identifier from the multiple identified service device identifiers having a strongest signal strength where the user computing device location data also indicates the user computing device to be located within a geofence boundary associated with the service device. The management system transmits user account information to the selected service system computing device.

Identifying users via mobile hotspots

Methods and apparatus for verifying a boot process of a computing system are disclosed. An example computer-implemented method includes reading, by a computing system during a boot process, a header section of a read-write portion of firmware of the computing system. The example method further includes generating, using a first cryptographic hash algorithm, a message digest corresponding with the header. The example method also includes decrypting, using a first public-key, an encrypted signature corresponding with the header. The example method still further includes comparing the message digest corresponding with the header and the decrypted signature corresponding with the header. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header match, the example method includes continuing the boot process. In the event the message digest corresponding with the header and the decrypted signature corresponding with the header do not match, the example method includes halting the boot process.

Firmware verified boot

An information system generates data, generates an audio token, associates the audio token with the data, and transmits the audio token along with the data to the account management system. The information system configures a broadcasting computing device to broadcast the audio token at a location. User computing devices at the location via an audio communication channel receive the broadcast token and retransmit the audio token to the account management system via a network. The account management system receives the audio token from a particular user computing device along with a request for data associated with the audio token, extracts the data associated with the audio token data, and transmits the data associated with the audio token to the particular user computing device.

Systems and methods for providing access to secure information are disclosed. In one aspect, a computer-implemented method for providing access to secure information comprises receiving a first one-time password (OTP) from a computing device, and verifying whether the first OTP is valid. The method also comprises, if the first OTP is valid, performing the steps of generating a second OTP for accessing the secure information, and transmitting the second OTP to the computing device. In another aspect, a computer-implemented method for providing access to secure information comprises generating a first one-time password (OTP), and transmitting the first OTP to an OTP device. The method also comprises, in response to the first OTP, receiving a second OTP from the OTP device, and sending the second OTP to a system that controls access to the secure information, wherein the first OTP is different from the second OTP.

Systems and methods for device authentication

Techniques for peer to peer attestation are provided. An example method includes receiving, at a first device, a discovery message from a second device, based on the discovery message, establishing a communication channel between the first device and the second device, receiving, at the first device, identity information from the second device, the identity information including one or more of: a trusted platform module (TPM) endorsement key certificate, a public portion of an identity key, one or more platform control register (PCR) values or a quote of the PCR values with the identity key, verifying, at the first device, one or more of the PCR values, the quote or the endorsement key certificate and authenticating one or more of the communication channel or the identity information of the second device based on the verification of a signature received from the second device.

Peer to peer attestation

Systems and methods for installing network certificates on a client computing device are provided. In some aspects, a method includes automatically determining that the certificate associated with the network is not installed on the computing device. The method also includes determining that the certificate can be installed on the computing device without assistance. The method also includes determining whether end-user input is required to install the certificate. The method also includes, if end-user input is required to install the certificate, displaying a graphical component which prompts an end-user for an input associated with generating the certificate, receiving the input, and providing a request to generate the certificate based on the input. The method also includes, if end-user input is not required to install the certificate, providing a request to generate the certificate. The method also includes storing the certificate. The method also includes connecting to the network using the certificate.

Installing network certificates on a client computing device

A non-transitory machine-readable medium embodying instructions that, when executed by a machine, allow the machine to perform a method are provided. In one aspect, a method includes receiving, at a computing device, user account credentials associated with an online user account. The method includes sending the user account credentials to a server. The method includes receiving, in response to sending the user account credentials to a server, a user profile associated with the user account. The method includes configuring an operating system session on the device based on the user profile. The method includes receiving an indication to terminate the operating system session. The method includes, erasing, upon termination of the operating system session, the received user profile and data stored locally on the computing device during the operating system session. Systems and methods are also provided.

Ephemeral user account system

Methods for scheduling data download requests for a device are provided. In one aspect, a method includes assigning to a device a first wait period of a random length below a first pre-determined maximum value, and receiving a notification that data is available for download to the device. The method also includes determining whether an amount of time elapsed since the data was made available for download to the device exceeds the first wait period, and when the determination indicates that the amount of time elapsed since the data was made available for download exceeds the first wait period, downloading the data available for the device. Systems and machine-readable media are also provided.

Automatic update distribution for managed devices

Systems and methods for installing policy settings on a client computing device are provided. In some aspects, the client computing device receives policy data and a public key from a server. The policy data are authenticated based on the public key. Policy settings based on the authenticated policy data are installed on the client computing device. Installing the policy settings based on the authenticated policy data on the client computing device includes storing information based on the policy data in a module on the client computing device. The module is secured by the public key from the server and a signature generated on the client computing device to prevent the stored information from being moved or copied by a user of the client computing device.

Growing community of inventors

Sunnyvale, CA, United States of America

Sumit Gwalani