Microsoft Technology Licensing, LLC

Ankit Srivastava

Hari R Pulapaka

Benjamin M Schultz

Giridhar Viswanathan

Frederick Justus Smith

Balaji Balasubramanyan

Matthew David Kurjanowicz

Sergey M Yekhanin

Joshua Stanley Allen

Margarit Simeonov Chenchev

Tushar Suresh Sugandhi

Ahmed Saruhan Karademir

Janardhan Dattatreya Kulkarni

Michael Trevor Pashniak

Sudeep Kumar Ghosh

Ralph Kennedy Johnston, Jr

Wei W Wang

Mehmet Iyigun

Ling Tony Chen

Jyh-Han Lin

John Andrew Starks

Jonathan D Schwartz

Daniel Vasquez Lopez

Charles Glenn Jeffries

Paresh J Maisuria

Gareth Alun Jones

Sandeep Patnaik

Stephen E Bensley

Abhinav Mishra

Graham Wong

Narasimhan Ramasubramanian

Ian James McCarty

Jay Ongg

Darren Glenn Austin

Prakhar Srivastava

Fanguang Kong

David Guy Weston

Nived Kalappuraikal Sivadas

Raphael Gianotti Serrano Dos Santo

Haiyang Wang

Guy Daher

Kiky Wibowo Tangerine

Mun Ying Leong

Joshua David Ebersol

Hu Lu

XiWen Yue

Lingxiao Hang

Fan Yin

Nandita Sharma

Naga Venkata Rajagopal Ramadugu

Yanir Shahak

Jorge Eugenio Aguirre Gonzalez

Rahee Ghosh

Paresh Maisuria

Ralph Kennedy Johnston

Charles G Jeffries

The present disclosure relates to systems, methods, and computer-readable media for receiving usage data for a virtual device (or other virtual service), analyzing the usage data to determine a usage bucket characteristic of usage of the virtual device over a period of time, and determining a usage score for the virtual device. The systems described herein further involve causing a deployment of the virtual device to be upgraded, downgraded, or otherwise modified based on the usage bucket and associated usage score. The features and functionalities described herein can provide an efficient mechanism for administrating a tenant deployment as well as implementing a more efficient utilization of cloud computing resources for a variety of virtual services.

Upgrading a virtual device deployment based on spike utilization

A secure enclave may be used to satisfy privacy requirements and audit requirements. Code may be loaded into the secure enclave. The code may generate a predefined report based on data and added noise. The pre-defined report may be subject to audit requirements. The data may be subject to the privacy requirements. The secure enclave may generate an encryption key and a decryption key based on the code. Only the secure enclave may have access to the decryption key. And the secure enclave may allow only a verified copy of the code to access the decryption key. With the added noise, the report may satisfy a pre-defined differential privacy guarantee. Encrypting the code and ensuring that the report satisfies the differential privacy guarantee may satisfy the privacy requirements. Retaining the report, the code, the secure enclave, and the encrypted data may satisfy the audit requirements.

Using a secure enclave to satisfy retention and expungement requirements with respect to private data

Techniques for secure sharing of data in computing systems are disclosed herein. In one embodiment, a method includes when exchanging data between the host operating system and the guest operating system, encrypting, at a trusted platform module (TPM) of the host, data to be exchanged with a first key to generate encrypted data. The method also includes transmitting the encrypted data from the host operating system to the guest operating system and decrypting, at the guest operating system, the transmitted encrypted data using a second key previously exchanged between the TPM of the host and a virtual TPM of the guest operating system.

Secure sharing of license data in computing systems

Securely performing file operations. A method includes determining a licensing characteristic assigned to a file. When the licensing characteristic assigned to the file meets or exceeds a predetermined licensing condition, then the method includes performing a file operation on the file in a host operating system while preventing the file operation from being performed in the guest operating system. When the licensing characteristic assigned to the file does not meet or exceed the predetermined licensing condition, then the method includes performing the file operation on the file in the guest operating system while preventing the file operation from being performed directly in the host operating system.

Method and system for persisting files

A host operating system running on a computing device monitors resource access by an application running in a container that is isolated from the host operating system. In response to detecting resource access by the application, a security event is generated describing malicious activity that occurs from the accessing the resource. This security event is analyzed to determine a threat level of the malicious activity. If the threat level does not satisfy a threat level threshold, the host operating system allows the application to continue accessing resources and continues to monitor resource access. When the threat level satisfies the threat level threshold, the operating system takes corrective action to prevent the malicious activity from spreading beyond the isolated container. Through the use of security events, the host operating system is protected from even kernel-level attacks without using resources required to run anti-virus software in the isolated container.

Isolated container event monitoring

Techniques for memory assignment for guest operating systems are disclosed herein. In one embodiment, a method includes generating a license blob containing data representing a product key copied from a record of license information in the host storage upon receiving a user request to launch an application in the guest operating system. The method also includes storing the generated license blob in a random memory location accessible by the guest operating system. The guest operating system can then query the license blob for permission to launch the application and launching the application in the guest operating system without having a separate product key for the guest operating system.

Memory assignment for guest operating systems

Freeform input is not native to several application or document types, but is desired by users as an input mode, especially for collaboration. Systems and methods are therefore provided to enable the insertion of an electronic collaboration workspace that accepts and stores freeform input for use as an object embeddable in various documents. An external host application provides the functionalities needed for freeform input, and the inputs may be committed to the document or stored as a separate document which may be referenced and accessed by multiple users for purposes of collaboration.

Web-based embeddable collaborative workspace

Deploying containers constrained by power profiles on a host system. A method includes identifying a container template, a set of reusable stored characteristics, to be used for deploying a container instance. The method further includes obtaining a power profile, defining at least one power consumption threshold, for the container instance based on at least one of the set of reusable stored characteristics of the container template or other information about the container instance. The method further includes deploying the container instance on the host system by applying the set of reusable stored characteristics and the power profile by applying one or more configuration layers which causes power to the container instance to be at least one of regulated or monitored based on information in the power profile.

Power and energy profiling for efficient virtual environments

A cover for a mobile device includes solar panels and an integrated keyboard. The solar panels are positioned on a stand of the cover and an angle associated with the solar panels can be changed so as to maximize input from a light source. The cover can be used to supply power and keyboard input to a mobile device while in use.

Mobile device cover with integrated solar panel

Anonymous containers are discussed herein. An operating system running on a computing device, also referred to herein as a host operating system running on a host device, prevents an application from accessing personal information (e.g., user information or corporate information) by activating an anonymous container that is isolated from the host operating system. In order to create and activate the anonymous container, a container manager anonymizes the configuration and settings data of the host operating system, and injects the anonymous configuration and settings data into the anonymous container. Such anonymous configuration and settings data may include, by way of example and not limitation, application data, machine configuration data, and user settings data. The host operating system then allows the application to run in the anonymous container.

Anonymous containers

Growing community of inventors

Seattle, WA, United States of America

Ankit Srivastava