Microsoft Technology Licensing, LLC

Babak G Jahromi

Chia-Chi Teng

Travis Muhlestein

Dhananjay Madhusudan Mahajan

Scott Christopher Seely

Daniel W Roth

John F Noss

Stefanus Martinus Van Der Wiele

James Marino

Paul Latzelsperger

Peter Koen

Pamela Dingle

Embodiments of the present disclosure include systems and methods for providing a decentralized federation for attribute-based access control. A request for a list of unique identifiers (IDs) associated with members belonging to the federation is sent to a federation authority. For a unique ID in the list of unique IDs associated with a second member belonging to the federation, a set of communication information for communicating with the second member is determined. Based on the set of communication information associated with the second member, the second member is sent a request for a list of available services. The second member is provided a set of verifiable credentials associated with the first member. The second member determines the list of available services based on the set of verifiable credentials and a set of policies and rules. The list of available services is received from the second member.

Decentralized attribute-based access control

The present invention extends to methods, systems, and computer program products for securely inspecting electronic messages. A computer system receives a control message that is passed through one or more receiving path components, positioned in a message receiving path, to a security component. The security component authenticates the received control message and passes the received control message to an inspection control component. The inspection control component activates message inspection in accordance with instructions contained in the received control message. When message inspection is activated, the computer system passes accessed messages to corresponding inspection components positioned in message paths (either receiving or sending) of the accessed message. The inspection component generates an inspection report (e.g., including a portion of contents of the accessed message) in accordance with instructions contained in a previously authenticated control message.

Securely inspecting electronic messages

The present invention extends to methods, systems, and computer program products for integrating messaging diagnostics into a messaging pipeline. A messaging pipeline receives a control message and passes the control message through one or more pipeline components (potentially a security component) positioned in the messaging pipeline. The control message is passed to a diagnostic control component positioned in the messaging pipeline subsequent to passing the received control message through one or more pipeline components. The diagnostic control component activates message diagnostics at diagnostic components positioned within one or more messaging pipelines in accordance with instructions contained in the control message. When message diagnostics are activated, messaging pipelines pass accessed messages to diagnostic components positioned in the messaging pipeline. The diagnostic components perform diagnostic operations based on the contents of the accessed message in accordance with instructions contained in the previously processed (and potentially authenticated) control message.

Integrating electronic messaging diagnostics into a messaging pipeline

An implementation of a computer network which provides the ability for a network client to submit data to a network server for performing a job at a logical endpoint associated with the network server. By way of example, the data may be a print job, the job a printing operation, and the logical endpoint a printer. The logical endpoint is assigned a uniform resource locator (URL) address which allows the data to be routed thereto and the computer network communication messages are formatted into the hypertext transfer protocol (HTTP). A further implementation of the computer network also provides the network client with the ability to perform system administration utilizing a standard Internet browser application.

Computer network

System and method for collecting printer administration information

A method of distributing software files resident on a network server to a network client. To effectuate the distribution, the network client issues an HTTP formatted request message to the network server which requests that certain software files resident on the network server be downloaded to the network client. The HTTP formatted request message may include information indicative of one or more of the operating system or processor architecture associated with the network client that the network server can use as an aide in determining which software files to return to the network client. The software files are bundled into a cabinet file by the network server and returned to the network client which, in turn, automatically unbundles the cabinet file, checks the authenticity of certain of the individual software files, and installs the software files in an appropriate memory location associated with the network client. In this manner, a world wide distributed printing solution is provided that is capable of working transparently on intranets and the Internet.

Growing community of inventors

Bellevue, WA, United States of America

Babak G Jahromi