Microsoft Technology Licensing, LLC

Andrew Vincent Spiziri

Lawrence Fubini Waldman

Paresh Lukka

Anton Leo Dukeman

Eric Scott Albright

Alexander Weiss

Dustyn J Tubbs

A notification service may act as an intermediary between message channels and/or other sources of actionable notifications and/or action items contained in messages, aggregating actionable notifications for a given recipient across multiple message channels and/or across multiple tools or services, sending notification messages with selectable response options to the recipient in a unified format, and processing the user's responses, e.g., by transmitting the responses back to the applicable sources.

Universal actionable notifications

A notification service may act as an intermediary between one or more sources of text-based communications and intended recipients of action items contained in the communications. The notification service may analyze the messages posted to the source(s) to identify action items, determine multiple response options for each identified action item, generate structured notification messages including the response options for the action items and send them to the respective intended recipient users, and upon receipt of a user response that specifies a selected response option, automatically perform the associated action(s).

A notification service may act as an intermediary between senders and recipients of actionable notification messages, generating such messages based on an actionable notification data structure including arguments for the message text, a list of recipients, and response options and associated actions, sending the messages to the respective recipients; and receiving and processing selected response options from at least some of the recipients to perform the associated actions.

A system can control access to encrypted data shared by a group of users by the use of a vault key that is associated with a group of users. The encrypted data can include encrypted secret data generated from the secret data using a secret key, an encrypted secret key can be generated from the secret key by the use of a vault key, and an encrypted vault key generated from the vault key by the use of a public key associated with a user of the group of users. The system can allow users to store and access the encrypted data only if the user is a current member of the group. The system can verify the user's membership status from a group manager, such as a system managing a channel or chat session. Users added to the group are also granted permission to grant access to new users.

Dynamic change in administrative rights for controlling secret data stored for user groups

A notification service may act as an intermediary between sources of text-based communications (e.g., message channels within a communication and collaboration platform) and the intended recipients of action items contained in messages posted to these sources. The notification service may store, for each action item, an instance of a universal actionable notification data structure specifying, among other things, response options for the action items, and may, for a specific user, aggregate action items intended for that user across multiple sources, aggregate and send notification messages generated from the respective instances of the universal actionable notification data structures to a central notification inbox accessible by the user, and upon receipt of a response from the user, generate and post a response message to the source from which the action item originated.

This disclosure provides enhanced management of access rights for dynamic groups of users sharing secret data. Instead of relying on traditional administrative techniques for modifying access rights for stored data, the techniques disclosed herein allow a storage service to communicate with a group management system to verify membership of user groups, e.g., channels, chat session, or meetings, and automatically change access rights to stored data as users leave or join a group. Encrypted data can be stored within a storage vault. The storage vault can be dedicated to storing encrypted data shared between a user group, e.g. a channel. A server managing the storage vault can receive membership data from a group management service. As users join the group or leave a group managed by the group management service, each user's access permissions to the storage vault can be added, removed or modified.

Enhanced management of access rights for dynamic user groups sharing secret data

A system can control access to encrypted data shared by a group of users by the use of a vault key that is associated with a group of users. The encrypted data can include encrypted secret data generated from the secret data using a secret key, an encrypted secret key can be generated from the secret key by the use of a vault key, and an encrypted vault key generated from the vault key by the use of a public key associated with a user of the group of users. The system can allow users to store and access the encrypted data only if the user is a current member of the group. The system can verify the user's membership status from a group manager, such as a system managing a channel or chat session.

Enhanced security of secret data for dynamic user groups

This disclosure provides enhanced management of encryption key updates based on user group activity. A system utilizes a vault key and a combination of other security keys to control access to secret data shared by members of a group who are participating in a collaborative session, such as a channel or chat session. The vault key allows a system to control access to secret data with users that join a particular group while immediately restricting access from users that leave the group. Updates to the keys are initiated based on the activity of the members of a group, which can include, but is not limited to, a threshold change in a number of group members, a total number of group members, an amount of data shared between the group members, and/or an age of one or more keys used to secure data shared by the group.

Growing community of inventors

Seattle, WA, United States of America

Andrew Vincent Spiziri