Google Inc.

Timothy M Dierks

Arturo Crespo

Louis Perrochon

Il-Sung Lee

Ariel Joseph Feldman

Jimmy C Chau

Aditya Sinha

Sidharth Durgesh Telang

Pedro Henrique Ribeiro Morais E Silva

Tianyuan Liu

Gregory David Laun

Netanel Keidar

Hunter James Freyer

Geoffrey R Smith

Xiaolan Zhang

Michael A Halcrow

Qingshan Luo

Marcel Catalin Rosu

Eugene Gluzberg

Pradipta Mitra

Xioalan Zhang

Piyush Mangalick

Arturo E Crespo

Louis Vincent Perrochon

Provided are computer systems and methods that enable the remote control of a hardware security module (HSM) device. In particular, aspects of the present disclosure enable HSM device management to be split into two components: physical management, which can be handled by a cloud provider or other IT service provider; and logical management, which can be performed by the HSM end user. Thus, a user computing system can be enabled to remotely control a HSM device that is installed in a server computing system that is remotely located from the user computing system.

Remote controlled hardware security module

A method for integrating third-party encryption managers with cloud services includes receiving, at data processing hardware, an operation request requesting a cryptographic operation on data comprising an encryption operation or a decryption operation. When the operation is an encryption operation, the method includes transmitting a data encryption key associated with the data to a remote entity. The remote entity encrypts the data encryption key with a key encryption key and transmits the encrypted data encryption key to the data processing hardware. When the operation is a decryption operation, the method includes transmitting the encrypted data encryption key to the remote entity which causes the remote entity to decrypt the encrypted data encryption key with the key encryption key and transmit the decrypted data encryption key and transmit to the data processing hardware.

Integration of third-party encryption key managers with cloud services

A method of operating a distributed storage system includes receiving, at data processing hardware of the distributed storage system, a customer-supplied encryption key from a customer device (i.e., a client). The customer-supplied encryption key is associated with wrapped persistent encryption keys for encrypted resources of the distributed storage system. The wrapped persistent encryption keys are stored on one or more non-volatile memory hosts of the distributed storage system. The method also includes unwrapping, by the data processing hardware, a wrapped persistent encryption key that corresponds to a requested encrypted resource using the customer-supplied encryption key. The unwrapped persistent encryption key is configured to decrypt the requested encrypted resource. The method further includes decrypting, by the data processing hardware, the requested encrypted resource using the corresponding unwrapped persistent encryption key. After ceasing access of the decrypted resource, the method includes destroying, by the data processing hardware, the customer-supplied encryption key.

Volatile encryption keys

A computer-implemented method includes generating on a user terminal a merchant web site associated with a merchant with code for a merchant web page, transmitting a product selection request for the user to a remote open payment system that is separate from the merchant, and displaying purchase information responsive to the product selection request using the code for the merchant web page.

On-line payment transactions

A customer interacts with merchants to identify items to purchase, and the merchants provide virtual shopping carts identifying the items to a broker. The cart requests that the broker utilize custom merchant calculations for the transaction, such as for determining shipping costs. The customer interacts with the broker to identify customer information, such as a shipping address, and to purchase the items. The broker sends the customer information to the merchant and requests that the merchant perform the custom calculations. If the merchant provides a valid response to the request, the broker uses the merchant calculations to calculate the total price for the transaction. If the merchant provides an invalid response, the broker utilizes backup calculations specified in the cart to calculate the price.

Electronic commerce system utilizing custom merchant calculations

An electronic commerce system includes a broker that enables customers to purchase items from merchants. A customer interacts with the merchant to identify items to purchase, and the merchant directs the customer to the broker in order to complete the transaction. The broker receives a description of a virtual shopping cart generated by the merchant and presents the customer with an interface allowing the customer to select shipping and other options for the purchase. The broker calculates a total amount for the transaction based on the shopping cart description and the options selected by the customer. The broker informs the merchant of the purchase and coordinates the shipment of the purchased items from the merchant to the customer.

Distributed electronic commerce system with centralized point of purchase

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for panel surveys. In one aspect, a method include accessing television history data for viewing devices associated with panelists and that describes, for each viewing device, television advertisements that were presented by use of the viewing device; a proper subset of panelists are selected based on the determinations of television advertisements that were presented and television advertisements that were not presented by use of the viewing device associated with the panelists, and for each of the selected panelists, a survey for the panelist is generated, the survey including one or more questions, each of the questions having been selected based on the television advertisements that were presented and television advertisements that were not presented by use of the viewing device associated with the panelist.

Exposure based customization of surveys

In general, the subject matter described in this specification can be embodied in methods, systems, and program products for determining a time zone for a computing device. A computing system identifies an approximate location of the computing device. The computing system identifies multiple time zones that correspond to the approximate location of the computing device. The computing system identifies a time offset for the computing device at a point in time. The computing system determines, as being a time zone for the computing device, a single time zone of the multiple time zones that matches the time offset at the point in time.

Time zone determination

A methodology and system for allowing a third-party system to institute online commerce services such as a shipping service. In the described embodiments, a third-party web page and/or a third party server sends and receives information from a merchant server to seamlessly update information used in the display without requiring the customer to perform additional mouse clicks. In some embodiments, sending and receiving information can be performed across address domains.

Growing community of inventors

New York, NY, United States of America

Timothy M Dierks