Microsoft Technology Licensing, LLC

Craig V McMurtry

Alexander Thomas Weinert

Vadim Meleshuk

Mark E Gabarra

Nima Ganjeh

Kan Zhang

Jasjeet Gill

Asaf Kashi

Bruce P Bequette

Stephen J Pek

Darren Wang

Requests for access to Web service resources are evaluated based on the type of request that is received. Requests are not granted unless sufficient proof of authentication is provided to grant that request. An authentication service evaluates one or more factors to determine whether or not to authenticate the client. After being authenticated by the authentication service, proof of authentication is provided to the Web service, which grants access to the Web service resource.

Request-specific authentication for accessing web service resources

Identification of the root cause of a change in the system, as well as any side-effects ('ancillary changes') caused by the change via an object attribute. A change resulting from a request in a system, whether originating from a user, service, or workflow, has an associated request object that captures the details of the change. An ancillary change resulting from the prior change is correlated to the prior change through a parent attribute on the request object that identifies the prior change as the immediate parent. Thus, all downstream ancillary changes resulting from a request can be correlated back to the root request (change) via the parent attributes of the ancillary changes.

Cause-chain analysis using objects

Request-specific authentication for accessing Web service resources

The present invention extends to methods, systems, and computer program products for managing set membership. A set definition is translated into one or more membership conditions. Each membership condition includes statements about the attributes of a resource that are to be true if the resource is to be included in the set. For any given resource request, resources touched by the request are compared to membership conditions applicable to the touched resources. Thus, embodiments of the invention minimize the work that is done to determine which sets a resource may or may not belong to whenever a resource is modified. Accordingly, based on available resources, embodiments of the invention can scale to accommodate larger numbers of sets and larger numbers of potential members of sets.

Managing set membership

The embodiments described herein generally relate to a method and system of injecting repeatable processes, or workflows, into the processing of data-oriented or procedural requests in an entity management system. A request in such a system is subject to authentication, authorization, and action phases of processing, and workflows may be associated with each phase for automatic processing upon the triggering of a certain request under particular circumstances. A declarative mapping associates workflows with the request type, phase, requester, and target. The mapping may be created at the system administrator level, or by any person with the necessary capabilities, through the application of the processing concept in API or UI and may be consulted and invoked upon receipt of a request matching the mapping's criteria. Mappings may also be created and retrieved to manage state changes resulting from processing in other phases of the request processing model.

Request processing with mapping and repeatable processes

A web service includes a protected resource. A requester requests access to the protected resource by sending a request to the web service. The web service prevents access to the web service until the request has been authorized by an authorizer. After the request has been authorized by the authorizer, the web service allows the requester to access the protected resource.

Growing community of inventors

Sammammish, WA, United States of America

Craig V McMurtry