Microsoft Technology Licensing, LLC

Andrew Burke Ryan

Shankaranand Arunachalam

Anshul Dube

Parul Manek

Ganesh Pandey

Jason Craig Nelson

Dmitri Gavrilov

Steven Mark Silverberg

Robert Allen Lowe

Xiaoqin Zhu

Gokay Hurmali

Vipul Agarwal

Brian Alan Day

Jeff Todd Kizner

Connor David Copus

Ankita Mishra

Seyed Mohammad Kiaei

Billy Goethetaro Norcilien

Virat Satyam Mishra

Kimberly Gail Del Rosario Cabamalan

A batching system accesses user interaction data to identify relationships between users and between users and resources. The relationships are weighted and users are grouped for migration based upon the weighted relationships. The groups are displayed for administrator interaction and are provided to a migration system for migration of the users between two tenants. This enhances migration efficiency and accuracy and makes migration much less disruptive to the end users.

Extracting user interactions to generate batches for migration between tenants

A client application is specified by a target tenant and represented in an OAuth provider, along with a corresponding secret. A source tenant consents to permissions to be executed by the client application on a resource of the source tenant. A target service uses the secret to obtain an access token from an authorization server coupled to the source tenant and uses the access token to obtain access, specified by the permissions, to the resource served by a source service acting on behalf of the source tenant.

Authentication framework for resource access across organizations

A service computing system receives an API call in which an authorization token, that contains an identifier in the content of the authorization token, is included in a header of the API call. The identifier is also included as a parameter passed in with the API call. The service computing system parses the API call to obtain the authorization token, and the identifier included in the authorization token. It also obtains the identifier passed in as a parameter of the API call. The service computing system compares the identifier obtained from the authorization token to the identifier passed in as a parameter of the API call to determine whether they match. If they do not match, the API call is processed as an unauthorized API call. A security system in the service computing system authorizes the API call based on the comparison.

Client-server security enhancement using information accessed from access tokens

Growing community of inventors

Seattle, WA, United States of America

Andrew Burke Ryan