Microsoft Technology Licensing, LLC

Docusign, Inc.

Allan Wetter

Adrian Frei

Yordan Ivanov Rouskov

David Steeves

Peter M Tsang

Tarek B Kamel

Dejan Subotic

Guruprasad B Aphale

Sanket Kaluskar

Guruprasad Aphale

Embodiments described herein provide enhanced computer- and network-based systems and methods for providing data security with respect to computing services, such as a digital transaction service (DTS). Example embodiments further provide a discovery service that enables nodes that are included in, or otherwise communicatively coupled to, the DTS to actively or passively 'discover' roles and keys associated with the nodes. These node roles are associated with the various services provided by the DTS.

Systems and methods for secure data exchange

Providing access to a cloud service includes a system receiving an application request to access a cloud service. In response, the system sends an identity provider (IP) a token request, comprising an application identifier (ID), an operating system (OS) cloud credential associated with login credentials of a user of an OS hosting the application, and a cloud service ID of the cloud service. Based on sending the token request, and on the IP authenticating the user and verifying the application ID is valid, the system receives a token from the IP. The token, which is signed with an IP signature, comprises the cloud service ID, the application ID, and a user assigned ID associated with the cloud service. The system provides the token to the application for submission to a cloud service provider for access, and obtains cloud service access based on the cloud service provider validating the IP signature.

Cloud service authentication

In one embodiment, a user devicemay access a network serviceusing a secure cookie. A high trust process may create an authentication proofusing a secure key. The high trust process may provide a browsing tokenand the authentication proofto a low trust process to send to an authentication service

Proof of possession for web browser cookie based security tokens

One or more techniques and/or systems are provided for obtaining access to a cloud service. In particular, a user may log into a client device using an operating system (OS) cloud login ID. The user may access cloud services (e.g., a music streaming service, a data storage service, etc.) through applications executing on the client device using merely the OS cloud login ID without providing additional login credentials specific to the cloud services. A client side application may request a token to access a cloud service. The token may be generated by an identity provider based upon the identity provider verifying an application ID identifying the application, a cloud service ID identifying the cloud service and/or OS cloud credentials. In this way, the application may present the token to a cloud service provider for verification to gain access to the cloud service hosted by the cloud service provider.

Growing community of inventors

Seattle, WA, United States of America

Allan Wetter