Microsoft Technology Licensing, LLC

Ajay S Kang

Vijay Gajjala

Stephane Plante

Timothy Arthur Gill

Siddharth Mantri

David E W Mercer

Pierre N Martin

James T Jacoby

Craig Alan Gick

Richard K Costleigh

Luke Jared Lenhart

Craig A Gick

Embodiments are disclosed for managing and providing access to a collection of digital resources. One embodiment provides a method comprising receiving a request to access a resource for a principal and determining one or more principal groups to which the principal belongs. The method further comprises obtaining resource set membership information indicating a resource set to which the resource belongs, and obtaining resource set access policy information for the resource set to which the resource belongs. The method yet further comprises determining whether the principal is allowed to access the resource based on the principal group membership information and the resource set access policy information, and, if the principal is allowed to access the resource, then permitting access to the resource by the principal.

Discretionary policy management in cloud-based environment

Systems and methods for managing a content encryption key and a seed to generate the content encryption key are provided. In one example, a method may include receiving a request for a content encryption key at a content encryption key service. The request includes a requesting entity fingerprint that corresponds to a requesting entity and a seed identifier that corresponds to a seed. The seed identifier is mapped to the seed and the requesting entity fingerprint mapped to a corresponding seed permission. If the seed permission entitles the requesting entity to receive the content encryption key, the key is derived using the seed and provided to the requesting entity.

Content encryption key management

Growing community of inventors

Redmond, WA, United States of America

Ajay S Kang