Microsoft Technology Licensing, LLC

Bryan R Born

Adrian J Oney

Quintin Swayne Burns

Hari R Pulapaka

Benjamin M Schultz

Ravinder S Thind

Frederick Justus Smith

Balaji Balasubramanyan

Giridhar Viswanathan

Margarit Simeonov Chenchev

Matthew David Kurjanowicz

Narasimhan Ramasubramanian

Avi Ben-Menahem

Vincent Bannister

Devin Jenson

Joe Downing

Brahmnes Fung

Nived Kalappuraikal Sivadas

Raphael Gianotti Serrano Dos Santo

Peteris Ledins

Securely performing file operations. A method includes determining a trust characteristic assigned to a file. When the trust characteristic assigned to the file meets or exceeds a predetermined trust condition, then the method includes performing a file operation on the file in a host operating system while preventing the file operation from being performed in the container operating system. When the trust characteristic assigned to the file does not meet or exceed the predetermined trust condition, then the method includes performing the file operation on the file in the container operating system while preventing the file operation from being performed directly in the host operating system.

Method and system for persisting untrusted files

Various embodiments relating to validating a user's entitlement to play a game are provided. In one embodiment, a request for a user to play a game is received at a validation service. The request may include an obfuscate-encoded bundle including a signed user ID identifying the user, a signed hardware ID of a computing machine on which the game is requested to be played, and a signed receipt. The obfuscate-encoded bundle may be decoded and the request may be validated according to a plurality of security checks including determining that one or both of the signed hardware ID or the signed user ID respectively match a hardware ID and/or a user ID included in the signed receipt. If the request to play the game is valid, an authentication token may be sent to the computing machine that allows the user to play the game on the computing machine.

Validation of user entitlement to game play

A cryptographic process is provided which allows a server to verify that a client device is genuine. The client device is provisioned with first and second data elements and a key which can be stored in fuses at the time of manufacture. When the client device requests digital content such as multimedia from the server, the server issues a genuineness challenge to the client device. The genuineness challenge is a message which includes a message authentication code (MAC) derived from a secret key of the server, in addition to an encrypted timestamp nonce. The client device prepares a response which includes a MAC derived from the client's key and the genuineness challenge. The response also includes the first and second data elements but not the client's key. The server processes the response to confirm that the client device is genuine.

Proof of device genuineness

Encrypted content streaming is provided by a method comprising holding an encrypted content stream that is cryptographically encrypted from a content stream with a content key, and holding an encrypted content key that is cryptographically encrypted from the content key with one or more blackout encryption keys. Each blackout encryption key is paired to a blackout decryption key corresponding to a specific audience, and each blackout decryption key is obtainable by audiences other than the specific audience corresponding to the blackout decryption key. The method further comprises serving the encrypted content stream to the plurality of different audiences. The encrypted content stream is embedded with a leaf license comprising the encrypted content key, and the encrypted content key is cryptographically decryptable by audiences having the one or more blackout decryption keys paired to the one or more blackout encryption keys.

Encrypted content streaming

Encrypted content streaming is provided by a method comprising holding an encrypted content stream that is cryptographically encrypted from a content stream with a content key, and holding an encrypted content key that is cryptographically encrypted from the content key with one or more intermediate encryption keys. The method further comprises serving the encrypted content stream to a plurality of content consumption devices, wherein the encrypted content stream is embedded with a leaf license comprising the encrypted content key, and wherein the encrypted content stream is cryptographically decryptable by a content consumption device having a scalable root license providing one or more intermediate root keys from which the content consumption device derives the one or more intermediate decryption keys paired to the one or more intermediate encryption keys.

Growing community of inventors

Redmond, WA, United States of America

Bryan R Born