Abstract: Methods, systems, apparatus, and computer-readable media for generating and presenting customized information cards. In some implementations, an indication of a data set is received. Data indicating a selection of an element of the data set is received. An indication of items in the data set that are associated with the selected element is received. Data is received indicating a selection of one or more of the items that are associated with the selected element of the data set. Card data defining an information card for the selected element of the data set is stored. The card definition data can indicate the selected one or more items and a reference to the data set.

Abstract: Methods, systems, and apparatus, including computer programs stored on computer-readable media, for inline and contextual delivery of content, which may include content selectively determined using private database content. In some implementations, interface data indicating text of a user interface of a electronic device is obtained. A particular term in the text of the user interface of the electronic device is determined to satisfy one or more criteria. Based on determining that the particular term satisfies the one or more criteria, the particular term is annotated to alter the appearance of the particular term in the user interface. After annotating the particular term, user interaction with the annotated term is detected and a card is provided for display in the user interface. The card can include information that corresponds to the term and that was determined using content from a private database for an organization of the user.

Abstract: Methods, systems, and apparatus, including computer programs stored on computer-readable media, for inline and contextual delivery of content, which may include content selectively determined using private database content. In some implementations, interface data indicating text of a user interface of a electronic device is obtained. A particular term in the text of the user interface of the electronic device is determined to satisfy one or more criteria. Based on determining that the particular term satisfies the one or more criteria, the particular term is annotated to alter the appearance of the particular term in the user interface. After annotating the particular term, user interaction with the annotated term is detected and a card is provided for display in the user interface. The card can include information that corresponds to the term and that was determined using content from a private database for an organization of the user.

Abstract: Methods, systems, and apparatus, including computer programs stored on a computer storage medium, for providing a dynamic contextual library. In some implementations, an interactive element is provided for display in a user interface. Context data that indicates a context of one or more computers is generated. Document data indicating a subset of documents from a document collection associated with a user is obtained, with the subset of documents being selected from the document collection based on the context data. After obtaining the data indicating the subset of documents, data indicating user interaction with the interactive element is received. Data identifying the subset of documents for display is provided in response to receiving the data indicating user interaction with the interactive element.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, a computing device detects an attempt to access the computing device while the computing device is in a secured state. In response to detecting the attempt to access the computing device, the computing device sends a first message to a server system over a network. After sending the message, the computing device receives a second message from the server system over the network, the second message comprising authentication data for the computing device. The computing device determines that a mobile device that was previously designated as an authentication factor for accessing the computing device is located within a predetermined level of proximity of the computing device, and the computing device grants access to the computing device.

Abstract: Methods, systems, and apparatus, including computer programs stored on computer-readable media, for inline and contextual delivery of content, which may include content selectively determined using private database content. In some implementations, interface data indicating text of a user interface of a electronic device is obtained. A particular term in the text of the user interface of the electronic device is determined to satisfy one or more criteria. Based on determining that the particular term satisfies the one or more criteria, the particular term is annotated to alter the appearance of the particular term in the user interface. After annotating the particular term, user interaction with the annotated term is detected and a card is provided for display in the user interface. The card can include information that corresponds to the term and that was determined using content from a private database for an organization of the user.

Abstract: Methods, systems, apparatus, and computer-readable media for generating and presenting customized information cards. In some implementations, an indication of a data set is received. Data indicating a selection of an element of the data set is received. An indication of items in the data set that are associated with the selected element is received. Data is received indicating a selection of one or more of the items that are associated with the selected element of the data set. Card data defining an information card for the selected element of the data set is stored. The card definition data can indicate the selected one or more items and a reference to the data set.

Abstract: In some implementations, one or more computers receive a search query input. One or more search results identified based on the search query input are provided. Data indicating interaction of the user with a particular search result from the one or more search results is received. In response to receiving the data indicating the interacting, a filter determined based on the particular search result is applied to a set of search results identified in response to a subsequent search query input.

Abstract: Methods, systems, and apparatus, including computer programs stored on a computer storage medium, for providing a dynamic contextual library. In some implementations, an interactive element is provided for display in a user interface. Context data that indicates a context of one or more computers is generated. Document data indicating a subset of documents from a document collection associated with a user is obtained, with the subset of documents being selected from the document collection based on the context data. After obtaining the data indicating the subset of documents, data indicating user interaction with the interactive element is received. Data identifying the subset of documents for display is provided in response to receiving the data indicating user interaction with the interactive element.

Abstract: Methods, systems, apparatus, and computer-readable media for generating and presenting customized information cards. In some implementations, an indication of a data set is received. Data indicating a selection of an element of the data set is received. An indication of items in the data set that are associated with the selected element is received. Data is received indicating a selection of one or more of the items that are associated with the selected element of the data set. Card data defining an information card for the selected element of the data set is stored. The card definition data can indicate the selected one or more items and a reference to the data set.

Abstract: Methods, systems, and apparatus, including computer programs stored on a computer storage medium, for providing a dynamic contextual library. In some implementations, an interactive element is provided for display in a user interface. Context data that indicates a context of one or more computers is generated. Document data indicating a subset of documents from a document collection associated with a user is obtained, with the subset of documents being selected from the document collection based on the context data. After obtaining the data indicating the subset of documents, data indicating user interaction with the interactive element is received. Data identifying the subset of documents for display is provided in response to receiving the data indicating user interaction with the interactive element.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, an electronic device receives a first message over a network over a first communication channel. In response to receiving the first message, the electronic device increases a frequency that the electronic device scans for messages over the second communication channel. After increasing the frequency that the electronic device scans for messages over the second communication channel, the electronic device receives a second message from a secured resource over the second communication channel. The electronic device determines that the electronic device is located within a predetermined level of proximity to the secured resource, and in response, sends authentication data to the secured resource over the second communication channel.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based device access. In some implementations, a first electronic device receives, over a wireless communication link, a message from a second electronic device in proximity to the first electronic device. The first electronic device determines that the second electronic device has been previously associated with the first electronic device as an authentication factor for accessing the first electronic device. The first electronic device receives an encrypted form of a password from the second electronic device over the wireless communication link. The first electronic device determines the password from the encrypted form of the password and provides the password to software executing on the first electronic device to enable access to the first electronic device.

Abstract: Techniques for searching using metadata indexing. In some implementations, a computing device receives data indicating a search request from a client device. The computing device analyzes the received data indicating the search request to determine content of the search request. The computing device receives one or more dossiers based on the content of the search query. The computing device identifies metadata and one or more index templates corresponding to each of the one or more retrieved dossiers. The computing device determines one or more matches between the data indicating the search query to the metadata and the one or more index templates corresponding to each of the one or more retrieved dossiers. The computing device generates search results that include the one or more matches based on characteristics of a type of match and weight values applied to each of the one or more matches based on the characteristics of the type of the match.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based logical access. In some implementations, a method includes receiving, by a mobile electronic device, a request from a server system to approve a session for a logical resource accessed by a second electronic device. In response to receiving the request, the mobile electronic device, initiates communication over a wireless communication link using a radio of the mobile electronic device. The mobile electronic device receives data from the second electronic device over the wireless communication link, the received data from the second electronic device indicating a session identifier. After receiving the data from the second electronic device, the mobile electronic device provides a response to the server system that indicates approval of the session and indicates the session identifier.

Abstract: Techniques for natural language visualizations using query formatting. In some implementations, a computing device receives data indicating a natural language query from a client device that indicates a topic of interest to a user. The computing device parses the data indicating the natural language query from the client device using a predefined delimiter. The computing device identifies one or more objects that represent each term parsed from the data indicating the natural language query. The computing device determines a visualization type based on the one or more objects to visualize a response to the natural language query provided by the mobile device. The computing device visualization data based on the visualization type, the one or more objects that represent each term parsed from the data, to a rendering component to transmit to the client device for display in response to the natural language query.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, for automatically providing a user with access to a secured resource. In some implementations, a client device detects that a second device that has been designated as an authentication for a user is within a predetermined level of proximity to the client device. The client device sends data indicating that the second device is within the predetermined level of proximity of the client device to a server system. The client device receives data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device. The client device sends an authentication request to the server system. The client device receives data indicating approval of the authentication request and provides access to the resource.

Abstract: A system enables use of credentials, including determining that a user has been authorized by a first credential-issuing organization and enabling the user to use a first credential issued by the first credential-issuing organization based on the determination that the user has been authorized by the first credential-issuing organization. Trust data indicating whether the user should be enabled to use a second credential issued by a second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization is accessed. A determination is made that the accessed trust data indicates that the user should be enabled to use the second credential issued by the second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization, and the user is enabled to use the second credential.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, a computing device detects an attempt to access the computing device while the computing device is in a secured state. In response to detecting the attempt to access the computing device, the computing device sends a first message to a server system over a network. After sending the message, the computing device receives a second message from the server system over the network, the second message comprising authentication data for the computing device. The computing device determines that a mobile device that was previously designated as an authentication factor for accessing the computing device is located within a predetermined level of proximity of the computing device, and the computing device grants access to the computing device.

Abstract: Methods, systems, and apparatus, including computer programs stored on a computer storage medium, for providing a dynamic contextual library. In some implementations, an interactive element is provided for display in a user interface. Context data that indicates a context of one or more computers is generated. Document data indicating a subset of documents from a document collection associated with a user is obtained, with the subset of documents being selected from the document collection based on the context data. After obtaining the data indicating the subset of documents, data indicating user interaction with the interactive element is received. Data identifying the subset of documents for display is provided in response to receiving the data indicating user interaction with the interactive element.