Microsoft Technology Licensing, LLC

Other

Ashok Chandrasekaran

Christopher Lane Boedigheimer

Kahren Tevosyan

Donald McNamara

John Peter Bruno, Jr

Brian Scott Lounsberry

Chandan Rama Reddy

Mark Eugene Russinovich

Michael Alyn Miller

Joseph Cusimano

Per-Ola Anders Orvendal

Scott Q Longstreet

Vyom P Munshi

David James Whiteford

Chuang Wang

Chetan S Shankar

Abhishek Pratap Singh Chauhan

Pavel Zakharov

George M Moore

Curt Andrew Steeb

Chad Gibson

David Richard Reed

Zeyong Xu

Saurav Sinha

Kristof Roomp

Munisamy Prabu

Gokul P Thirumalai

Abhinav Bose

Alexander Felsobuki Nagy

Novia Rosalinda Wijaya

Srinivas S Nidadavolu

Chuanxin Fang

Various methods and systems are provided for autonomous orchestration of secrets renewal and distribution. A secrets management service ('SMS') can be utilized to store, renew and distribute secrets in a distributed computing environment. The secrets are initially deployed, after which, SMS can automatically renew the secrets according to a specified rollover policy, and polling agents can fetch updates from SMS. In various embodiments, SMS can autonomously rollover client certificates for authentication of users who access a security critical service, autonomously rollover storage account keys, track delivery of updated secrets to secrets recipients, deliver secrets using a secure blob, and/or facilitate autonomous rollover using secrets staging. In some embodiments, a service is pinned to the path where the service's secrets are stored. In this manner, secrets can be automatically renewed without any manual orchestration and/or the need to redeploy services.

Autonomous secrets renewal and distribution

Various methods and systems are provided for providing on-demand emergency management. On-demand emergency management includes emergency management operations (e.g., certificate update operations or managed-secrets rollover operations) for accelerated deployment and expedited installation of certificates or secrets. In operation, a host secret manager on a host machine communicates with client secret managers on virtual machines running the host machine, to provide expedited installation of secrets on the virtual machines. During the certificate update operations, the host secret manager communicates the certificate update secret package having a new secret state to a client secret manager that installs the new certificate state on the virtual machine. And, during managed-secrets rollover operations, based on accessing a managed-secrets rollover secret package having a notification-based new secret state, the host secret manager polls a dSMS service, and communicates with a client secret manager, such that client secret manager installs the new secret on the virtual machine.

On-demand emergency management operations in a distributed computing system

Various methods and systems are provided for autonomous orchestration of secrets renewal and distribution across scope boundaries. A cross-scope secrets management service ('SMS') can be utilized to store, renew and distribute secrets across boundaries in a distributed computing environment such as regional boundaries. In some embodiments, locally scoped secrets management services subscribe to receive updates from the cross-scope secrets management service. As secrets are renewed, they are automatically propagated to a subscribing local scope and distributed by the local secrets management service. In various embodiments, SMS can autonomously rollover storage account keys, track delivery of updated secrets to secrets recipients, deliver secrets using a secure blob, and/or facilitate autonomous rollover using secrets staging. In some embodiments, a service is pinned to the path where the service's secrets are stored. In this manner, secrets can be automatically renewed without any manual orchestration and/or the need to redeploy services.

Autonomous cross-scope secrets management

Various methods and systems are provided for autonomous management for a managed service identity. A first token request, for a secret, is generated at a managed service. The secret supports authenticating the managed service for performing operations in a distributed computing environment. The first token request includes an identity identifier of the managed service. The first token request is communicated to a credentials manager which is associated with a secrets management service ('SMS') that can be utilized to store, renew and distribute secrets in the distributed computing environment. Based on communicating the first token request to credentials manager, the token is received, via the credentials manager, from the secret token service. The token is received based in part on the credentials manager generating a second token request for the token and communicating the second token request and a secret associated with the managed service to the secret token service.

Autonomous secrets management for a managed service identity

In various embodiments, methods and systems for game development based on an integrated game development cloud computing platform are provided. Development components that facilitate game development using an integrated game-cloud component are initiated. An input is received to perform a game development task. The game development task is associated with one or more games. The game development task is executed using the integrated game-cloud component. The integrated game-cloud component comprises a game-development-platform development component and a cloud-computing-platform development component combined into an integrated development component supported on the integrated game development cloud computing platform. The game development task can be associated with a first game-platform and a second game-platform of a selected game. The game-platform functions with a cross-platform support component having an integrated core module and an integrated game-platform module.

Integrated game development cloud computing platform

Embodiments of the present invention monitor and dynamically allocate computing resources to a game service. A game service provides a remote gaming environments to which users connect over a wide area network, such as the internet. A game session runs a single instance of a game title. The game session runs the video game code responsible for creating the playing experience for the users. In another embodiment, the number of active game sessions is monitored and computing resources are allocated dynamically as the number of sessions increases or decreases.

Resource allocation to game titles in a remote gaming environment

Embodiments provide automated access policy enforcement, content rule enforcement, and data transformations in a binary large object (blob) storage service. Verified and unverified clients are allowed varying degrees of access to stored blobs. In response to a read request associated with a target blob of a particular blob type, criteria from the read request are used to execute one or more transformation functions defined by the blob type to create transformed data, and the transformed data is provided to the client. In response to a write request including a target blob of a particular blob type, a set of content rules associated with the blob type is executed against the target blob. The target blob is stored based on the content rules being successfully executed.

Manipulating binary large objects

Embodiments of the present invention monitor and dynamically allocate computing resources to game sessions running within a game service. A game service provides a remote gaming environments to which users connect over a wide area network, such as the internet. A game session runs a single instance of a game title. The game session runs the video game code responsible for creating the playing experience for the users. Various characteristics of the game session may be monitored and used to allocate computing resources. Usage of computing resources, such as central processing unit ('CPU') may be monitored directly. In another embodiment, the number of players connected to the game session is monitored and computing resources are allocated dynamically as the number of players increases or decreases.

Dynamic allocation of computing resources in remote gaming environment

Embodiments provide rule-based application configuration using a network service. A configuration parameter associated with an application includes a rule that specifies configuration data based on one or more criteria, such as by selecting a configuration value from a plurality of available configuration values. A request for configuration data corresponding to the configuration parameter is received from a client. The request includes one or more criteria describing a user associated with the client. Customized configuration data is determined based on the rule and the criteria of the request, and the customized configuration data is provided to the client. The client executes the application (e.g., a game) based on the customized configuration data.

Application configuration using binary large objects

This document describes various techniques for efficiently sequencing structured data in a particular order to provide a sequence of data elements suitable for storage or communication. The sequence may contain values representing a number of default-value structured data elements omitted from the sequence and/or a byte length of the sequence.

Efficient encoding of structured data

In a pay-per-use computer environment, particularly when network access is limited, self-monitoring tools on a pay-per-use computer may require special support from a host/server. The host/server must be able to respond to requests quickly and efficiently and yet maintain full information required to service requests and updates. A key management table and a device management table provide critical information required to service requests. Use of SQL notifications allows local database caches to remain current but quickly accessible.

Portal and key management service database schemas

Growing community of inventors

Redmond, WA, United States of America

Ashok Chandrasekaran