Microsoft Technology Licensing, LLC

Other

Christopher Leonard Walstad

Octavian Tony Ureche

Scott Randall Shell

Innokentiy Basmov

Peter Novotney

Yogesh A Mehta

Vishal Agarwal

Preston Derek Adam

Narendra Shripati Acharya

Himanshu Soni

Jonathan D Schwartz

Prabu Raju

Fengfen Liu

Karanbir Singh

Yifan Wang

Aleksandr Radutskiy

Levi P Broderick

Sainath Narendranath Thadkal

Reed Molbak

Klaudia Leja

A computing device can perform operations to unlock encrypted volumes of the computing device while the computing device is in a recovery environment. In some examples, the computing device can work in conjunction with a test computing device to unlock the encrypted volumes using an unlock token and a PIN. In other examples, the computing device can perform operations without a test computing device. For example, the computing device can, while in the recovery environment, use credentials associated with a user of the computing device to obtain a recovery password to unlock keys for interpreting the encrypted volumes. In some examples, the computing device can use a shortened recovery password in conjunction with anti-hammering capabilities of a Trusted Platform Module in order to unlock keys for interpreting the encrypted volumes. These and other operations can facilitate secure unlock of volumes of encrypted data on a consumer device.

Unlock and recovery for encrypted devices

A data protection policy can specify which applications are allowed and/or dis-allowed from accessing cloud data that is subject to a data protection policy (i.e., data that has been assigned a classification and/or an owner.) To enforce that policy, the operating system (or other trusted entity) that stores or caches access credentials only provides these credentials to applications that are allowed by the policy. In this manner, because they are not provided with the credentials required to access the network resource, the dis-allowed applications cannot access the 'protected' data thereby helping prevent these dis-allowed (or non-compliant) applications from leaking data.

Data classification and access control for cloud based data

A facility for enrolling a software implementer in a code signing. In one example facility, the facility receives information identifying the implementer, and credentials authenticating the implementer. The facility generates secret state for the implementer. Based on at least one or both of (1) at least a portion of the received credentials and (2) at least a portion of the generated secret state, the facility generates for the implementer a key pair comprising a private key and a public key, and persistently stores the secret state.

Code signing service

A data protection policy can specify which applications are allowed and/or dis-allowed from accessing cloud data that is subject to a data protection policy (i.e., data that has been assigned a classification and/or an owner.) To enforce that policy, the operating system (or other trusted entity) that stores or caches access credentials only provides these credentials to applications that are allowed by the policy. In this manner, because they are not provided with the credentials required to access the network resource, the dis-allowed applications cannot access the 'protected' data thereby helping prevent these dis-allowed (or noncompliant) applications from leaking data.

Single sign-on techniques via an application or browser are described. In one or more implementations, a single instance of entry of authentication information is received that is entered via interaction with an application or browser of a computing device. Responsive to this receipt, the single instance of the entry of authentication information is used by the computing device automatically and without user intervention to cause authentication to obtain access to one or more network services that are accessible via a network by the application and the browser.

Single sign-on via application or browser

Growing community of inventors

Seattle, WA, United States of America

Christopher Leonard Walstad