Microsoft Technology Licensing, LLC

Bogdan M Tepordei

Roberto Anthony Franco

Marc Adam Silbey

John Green Bedworth

Peter T Brundrett

Jianrong Gu

Roland Tokumi

Jeremiah S Epling

Anantha P Ganjam

Daniel Sie

Vidya Nallathimmayyagari

Shai Herzog

Michael Eric Deem

Marie Hagman

In various embodiments, applications that are configured to interact with the Internet in some way are executed in a restricted process with a reduced privilege level that can prohibit the application from accessing portions of an associated computing device. For example, in some embodiments, the restricted process can prohibit applications from read and write access to portions of a system's computer-readable media, such as the hard disk, that contains administrative data and settings information and user data and settings. In these embodiments, a special portion of the disk, termed a 'containment zone', is designated and used by applications in this restricted process.

Running internet applications with low rights

A general-purpose proxy mobile device management architecture. The architecture serves as a proxy for a mobile client seeking services from backend systems. A virtual client image of state information associated with the mobile client is stored such that when the mobile client interacts with the proxy, the virtual image updates to the latest client state. Based on the changes to the state, the proxy system asynchronously accesses one or more arbitrary services of the backend systems on behalf of the mobile client. When the mobile client connects to the proxy, the proxy will have the latest services associated with the states of the virtual image, and updates the state of the mobile client. Updating and accessing occurs asynchronously on the frontend between the proxy and mobile devices and on the backend between the proxy and the backend systems.

Mobile device management proxy system

Growing community of inventors

Seattle, WA, United States of America

Bogdan M Tepordei