Microsoft Technology Licensing, LLC

Alexander Thomas Weinert

Vadim Meleshuk

Craig V McMurtry

Mark E Gabarra

Octavian Tony Ureche

Nelly L Porter

Benjamin Richard Vincent

Vijay G Bharadwaj

Anooshiravan Saboori

Tarek Bahaa El-Din Mahmoud Kamel

Daniel M C Caiafa

Brian R Morin

Luis Felipe Cabrera

Paul J Leach

Daniel Ron Simon

Mark H Lucovsky

Richard Bruce Ward

Shaun Douglas Pierce

George M Moore

Kan Zhang

Jonathan D Pincus

Arthur Zwiegincew

Jack Kabat

Robert M Hyman

Michael Burner

Jasjeet Gill

Yordan Ivanov Rouskov

Pui-Yin Winfred Wong

Caleb Geoffrey Baker

Laurentiu Bogdan Cristofor

Xiao Xie

Carlos Adrian Lopez Castro

Michael Vincent McLaughlin

Vivek Gundotra

Asaf Kashi

Bruce P Bequette

Corissa Lea Koopmans

Laxmi Bhavani Malkareddy

Brian Fabian

Richard B Arthur

Darren Wang

Laurence Melloul

Lorenz S Prem

Craig Mcmurtry

Michael V Mclaughlin

Craig V Mccurtry

The techniques disclosed herein enable systems to generate intuitive security reports that illustrate security events that occur during a predefined time period (e.g., thirty days). The security report visual can include a pair of parallel axes where the first axis includes a plurality of time-series segments respectively representing security event types (e.g., obfuscation, phishing) and the second axis includes two time-series segments representing security events that are not remediated and security events that are remediated. A plurality of first lines originating at respective points along the first axis and terminating within a GUI element can represent security events of various types that occur at a particular time unit (e.g., a day) within the predefined time period. A plurality of second lines originating within the GUI element and terminating at respective points along the second axis can represent security events that are either remediated or not remediated.

Intuitive computer security report visuals

A multi-factor user authentication framework using asymmetric key includes a host device, a user agent, a gesture system, and an authentication system. The multiple factors include a user credential as well as a user gesture that indicates that the user is present. The user interacts with the user agent via the host device in order to obtain access to something for which user authentication is needed. The authentication system maintains the user credentials, which are provided to authenticate the user in response to the authentication system determining that the user is present (which can be determined in different manners, such as using a personal identification number (PIN), biometric information regarding the user, geographic location of the gesture system, etc.). The user agent, gesture system, and authentication system can be implemented on the same device (e.g., the host device), or alternatively implemented across one or more different devices.

Multi-factor user authentication framework using asymmetric key

Methods, systems, and apparatuses in a computing device enable user access to a resource. The method includes receiving, from a user, a request for access to a resource; accessing an authentication flow for granting access to the resource; obtaining first claims for a user from a first claims provider in the authentication flow; determining a second claims provider in the authentication flow, the second claims provider having a trust relationship with the claims facilitator; directing the user to the second claims provider; receiving second claims for the user from the second claims provider; and enabling the user to access the resource in response to at least the received first and second claims.

Extensible framework for authentication

Requests for access to Web service resources are evaluated based on the type of request that is received. Requests are not granted unless sufficient proof of authentication is provided to grant that request. An authentication service evaluates one or more factors to determine whether or not to authenticate the client. After being authenticated by the authentication service, proof of authentication is provided to the Web service, which grants access to the Web service resource.

Request-specific authentication for accessing web service resources

Request-specific authentication for accessing Web service resources

Defining a unified access management policy expression that unifies access control policy with events or workflows. Unified management policy information is stored. The unified management policy information defines permissions for access to resources together with events or workflows. A request is received to execute the one or more operations on one or more objects. The requested operation is verified against the unified management rules. Verifying includes performing a single retrieval, retrieving both the access control information and the events or workflows and calculating the applicability of the rule to the conditions represented by the request. Matching rules are applied, access control decisions performed and associated workflows are executed.

Unified management policy

The embodiments described herein generally relate to a method and system of injecting repeatable processes, or workflows, into the processing of data-oriented or procedural requests in an entity management system. A request in such a system is subject to authentication, authorization, and action phases of processing, and workflows may be associated with each phase for automatic processing upon the triggering of a certain request under particular circumstances. A declarative mapping associates workflows with the request type, phase, requester, and target. The mapping may be created at the system administrator level, or by any person with the necessary capabilities, through the application of the processing concept in API or UI and may be consulted and invoked upon receipt of a request matching the mapping's criteria. Mappings may also be created and retrieved to manage state changes resulting from processing in other phases of the request processing model.

Request processing with mapping and repeatable processes

Enforcing access control based on resource state. A method includes receiving a request for an operation on one or more objects stored on computer readable media. One or more pre-operation states of the one or more objects are determined. One or more post-operation states of the one or more objects are determined. One or more access control rules are referenced. The access control rules control access to resources based on pre-operation state and post operation state. It can then be determined that the one or more access control rules allow the operation to succeed based on the one or more pre-operation states and the one or more post operation states. Based on determining that the one or more access control rules allow the operation to succeed, the operation is allowed to succeed.

Resource state transition based access control system

Several embodiments disclosed herein are directed to methods, computer program products, and systems configured to track operation dependencies. For example, in one embodiment, at a first entity, a first identifier corresponding to a first operation is accessed. For a second operation occurring as a result of the first operation, a second identifier is generated. A directed event including the first and second identifiers is emitted. The directed event is logged. The second identifier is sent to a second entity. An operation call for the second operation is also sent to the second entity. The second identifier is made available at the second entity for use in creating directed events for subsequent operations occurring as a result of the second operation.

Transparently capturing the causal relationships between requests across distributed applications

A web service includes a protected resource. A requester requests access to the protected resource by sending a request to the web service. The web service prevents access to the web service until the request has been authorized by an authorizer. After the request has been authorized by the authorizer, the web service allows the requester to access the protected resource.

Authorization for access to web service resources

Growing community of inventors

Seattle, WA, United States of America

Alexander Thomas Weinert