Microsoft Technology Licensing, LLC

Costel Radu

Ryan W Battle

Robert Hall

Ashvin Mathew

Anush Prabhu Ramachandran

Yagnesh Setti Subramanian

Roberto Santos

Vladimir Lozhkin

Aditya Makarand Desai

Michael Wilde

Matthew G Humphrey

David W Bailey

Jared Lambert

Walter Oliver

Barry I Kelman

Kanaka Komandur

A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Computing resource management system

A computing system for managing storage relative to a storage subsystem is provided. The computing system includes a processor and a first interface configured to interact with a deployed software system using a representational state transfer communication technique. A second interface is configured to interact with the storage subsystem in accordance with the representational state transfer technique. The computing system is configured to interact with the storage subsystem via the second interface in response to a request from the deployed software system via the first interface and to provide an output to the deployed software system through the first interface based on the interaction with the storage subsystem.

Aggregated access to storage subsystem

A secure storage system secures information of a client by first encrypting the information with a first key to generate first-key encrypted data. The secure storage system then encrypts with a second key the first-key encrypted data and the first key to generate second-key encrypted data. The system provides the client with a first portion of the second-key encrypted data. The system stores a second portion of the second-key encrypted data and the second key. When the confidential information is needed, the client provides the first portion. The system retrieves the second portion. The system then decrypts with the second key the first portion and the second portion to generate the first-key encrypted data and the first key. The system then decrypts with the first key the first-key encrypted data to generate the unsecure confidential information.

Two-party storage of encrypted sensitive information

Providing access to a resource via authorization data that conditionally defines the access by an expression that identifies the resource by name and by at least one property of the resource. An authorization service issues the authorization data (e.g., as a token) and evaluating authorization data received from a client. The authorization service evaluates the expression in the authorization data to identify the resource and determine the rights associated with the user for the resource. The authorization service implements role-based access control to control access to resources in a distributed, multi-site network.

Authorization and access control service for distributed network resources

Growing community of inventors

Redmond, WA, United States of America

Costel Radu