Microsoft Technology Licensing, LLC

Microsoft Corporation

Chandrasekhar Nukala

David Michael Callaghan

Nir Nice

Anat Eyal

Eugene John Neystadt

Sreenivas Addagatla

Paul Frederick Bawel

Eugene Neystadt

A system and method are disclosed for enforcing a normalized set of policy-based behaviors across two or more disparate client devices. The policy definition can be a common description of expected behavior, while a client-side policy engine interprets and implements platform specific details associated with the client. In one embodiment, a client device receives a generic policy definition from a network. The generic policy definition is applicable to disparate device types having different hardware and/or software platforms. A client policy engine can analyze the generic policy definition, compare it to client-side applications or functions and make intelligent decisions on how to apply the policy for the specific client.

Unified policy over heterogenous device types

A network with authentication implemented using a client health enforcement framework. The framework is adapted to receive plug-ins on clients that generate health information. Corresponding plug-ins on a server validate that health information. Based on the results of validation, the server may instruct the client to remediate or may authorize an underlying access enforcement mechanism to allow access. A client plug-in that generates authentication information formatted as a statement of health may be incorporated into such a framework. Similarly, on the server, a validator to determine, based on the authentication information, whether the client should be granted network access can be incorporated into the framework. Authentication can be simply applied or modified by changing the plug-ins, while relying on the framework to interface with an enforcement mechanism. Functions of the health enforcement framework can be leveraged to provide authentication-based functionality, such as revoking authorized access after a period of user inactivity or in response to a user command.

Authentication in a network using client health enforcement framework

Embodiments enable content sharing using event notifications that include a global identifier and a private identifier. The event notifications are sent to potential participants to an event. Potential participants that accept the event notification or otherwise request to join the event use the private identifier to submit content to a content sharing service. Based at least on the private identifiers associated with event participants, the content from event participants is selectively shared among the other event participants.

Automatic sharing of event content by linking devices

Growing community of inventors

Redmond, WA, United States of America

Chandrasekhar Nukala