Microsoft Technology Licensing, LLC

Rovi Technologies Corporation

Benjamin E Nick

Scott Manchester

Trevor William Freeman

Dalen Matthew Abraham

Carl J Ledbetter

Aditha May Adams

Steven T Kaneko

Shai Guday

William Jefferson Westerinen

Pasquale DeMaio

Thomas G Phillips

Adrian Mark Chandley

Miller Thomas Abel

Dale Clark Crosier

Dennis A Morgan

David V Gunter

Taryn K Beck

Sherwood H Lawrence

Innokentiy Basmov

Peter Novotney

Michael J Grass

Magnus Nystrom

Anton W Krantz

Cristian Marius Ilac

Niels Thomas Ferguson

Mohammad Shabbir Alam

Salim S AbiEzzi

Jean-Pierre Duplessis

Magnus Bo Gustaf Nyström

Christopher J Corbett

Yogesh Kant Roy

Jugal Parikh

Ram Shankar Siva Kumar

William Blum

Daniel L Mace

Nils Dussart

Edir Vinicio Garcia Lazo

Amir Rubin

Bill Hanlon

Jeremias Eichelbaum

Nihal Irmak Pakis

Peter A Bryan

Scott A Manchester

Salim S Abiezzi

Christoper J Corbett

Dalen Abraham

Trevor W Freeman

A computer-implemented method of generating a security language query from a user input query includes receiving, at a computer system, an input security hunting user query indicating a user intention; selecting, using a trained machine learning model and based on the input security hunting query, an example user security hunting query and corresponding example security language query; generating, using the trained machine learning model, query metadata from the input security hunting query; generating a prompt, the prompt comprising: the input security hunting user query; the selected example user security hunting query and the corresponding example security language query; and the generated query metadata; inputting the prompt to a large language model; receiving a security language query from the large language model corresponding to the input security hunting query reflective of the user intention.

Generating security language queries

In one embodiment, an encryption system may protect user login metadata from hammering attacks. A data storage may store an integrity protected data set for an operating system in a storage location. A processor may register a counter reading from a remote counter in a secure location separate from the storage location. The processor may determine a lockout state of the integrity protected data set based on the counter reading.

Rollback protection for login security policy

In one embodiment, an encryption system may protect user login metadata from hammering attacks. A data storagemay store an integrity protected data setfor an operating system in a storage location. A processormay register a counter reading from a remote counterin a secure locationseparate from the storage location. The processormay determine a lockout state of the integrity protected data setbased on the counter reading.

A key recovery request for a device is received at a key recovery service and a particular one-time recovery credential in a sequence of multiple one-time recovery credentials is identified. In the sequence of multiple one-time recovery credentials, previous one-time recovery credentials in the sequence are indeterminable given subsequent one-time recovery credentials in the sequence. A recovery key associated with the device is also identified. The particular one-time recovery credential in the sequence is generated based on the recovery key, and is returned in response to the key recovery request. The particular one-time recovery credential can then be used by the device to decrypt encrypted data stored on a storage media of the device.

One-time recovery credentials for encrypted data access

The claimed subject matter provides a system and/or a method that facilitates connecting a wireless device to a secure network. A device can establish a near field communication link with a verified device on a network, wherein the near field communication link can be a secure and/or encrypted link to provision the device without comprising security constraints within the network. An installation component can invoke the transfer of provisioning data to the network via the near filed communication link to secure a wireless connection for the device to the network.

Provisioning of wireless connectivity for devices using NFC

A portable computer-readable media device and method of use enable automatic configuration of a computing device, such as a conventional network device or a thin client device, for operation in a network. Configuration information, including network settings and security information, is incorporated in an XML file written to the portable media device while it is installed in a first device. This configuration is then automatically transferred to a second device by installing the portable media device in the second device. The second device then writes device information, incorporated in an XML file, to the portable media device, to be uploaded to the first device.

Configuring network settings using portable storage media

A method and system for configuring a new device are disclosed. The method includes using a host system to create a configuration file including data useable to configure the new device. A portable storage device is interfaced to the host and the configuration file is transferred to the storage device. The storage device is then interfaced to the new device and the configuration file is transferred to the new device. The configuration file is optionally used to configure the new device for communication over a network. A method for configuring the new device using a direct connection between the new device and a system bus of the host is also disclosed.

Configurable multi-connector storage device

Secure network access is provided by connecting a secure network provisioning device to a security authority, acquiring one or more network profiles, configuring one or more network interfaces of the secure network provisioning device with data corresponding to attributes of the acquired network profiles, switching the secure network provisioning device from an acquisition mode to a gateway mode, and connecting the secure network provisioning device to a client device. The secure network provisioning device includes a first set of network communication interfaces requiring configuration blocks to enable access to associated networks, a second set of network communication interfaces free from a requirement for configuration prior to network access, a communication interface gateway module configured to gate network traffic between network communication interfaces and a network profile acquisition module configured to acquire network profiles containing data required to configure the communication interfaces of the first set.

System and method for providing secure network access

Method and system for configuring an electronic device

The claimed subject matter provides a system and/or a method that facilitates connecting a wireless device to a secure network. A device can establish a near field communication link with a verified device on a network, wherein the near field communication link can be a secure and/or encrypted link to provision the device without compromising security constraints within the network. An installation component can invoke the transfer of provisioning data to the network via the near field communication link to secure a wireless connection for the device to the network.

An Extensible Mark-up Language (XML) schema is used to generate configuration settings files. A wireless configuration XML schema defines an XML file for configuring wireless network settings on a wireless device. A wide area network (WAN) configuration schema defines an XML file for configuring a WAN device. A local area network (LAN) configuration schema defines an XML file for configuring a LAN device. A broadband modem configuration schema defines an XML file for configuring a broadband modem device. A device configuration schema defines an XML file for reporting the configuration of a device.

XML schema for network device configuration

Growing community of inventors

Redmond, WA, United States of America

Benjamin E Nick