Microsoft Technology Licensing, LLC

Daniel Dawson

George Ringer

Charles McDaniels

Karin Meier-Magruder

David Wells

Shawn Becker

Jeromy Scott Statia

Elizabeth Anne Phippen

Aaron Richard Davis

Satish Devan

Darrin Earl Curtis

Bum Su Jung

Derek Ingalls

Douglas Anthony Rasler

Jeffrey Ryan Bacon

Charles Mcdaniels

Confining lateral traversal within a network. An authorization request identifies a credential, a protected first resource, and an identifier of a protected second resource for which authorization is requested. A lateral traversal policy associated with the second resource is identified, which constrains access to the second resource to only resources that belong to a subset of resources including the second resource. When it is determined that the credential is configured for access to the second resource, and when it is determined that the first resource belongs to the subset of resources including the second resource, an authorization token is issued, which authorizes the credential to access the second resource via the first resource. Alternatively, when it is determined that the credential is granted access to the second resource, and when it is determined that the first resource is outside of the particular subset of resources, the authorization request is denied.

Confining lateral traversal within a computer network

In one embodiment, a change data monitoring system may gather change data from multiple data sources each with a different proprietary source format. The change data monitoring system may receive a change data report having a change data set describing changes made to an online system from a data source of a data source set tracking the online system using multiple proprietary source formats. The change data monitoring system may convert the change data set from a proprietary source format to a standardized data presentation format. The change data monitoring system may present the change data set to a user in the standardized data presentation format.

Real-time change data from disparate sources

Example apparatus and methods manage membership in a collection of servers participating in providing a service. An example device may provide a user interface that provides a single coherent view of the in-service state (e.g., in-service, out-of-service) of members of the collection of servers. The example device may also provide a request monitor that selectively blocks a membership request to a target device when the membership request will cause the set of functionalities to be suspended. If a service manager tries to take the only in-service server out-of-service, the action may be selectively blocked and the service manager may receive a notification of the potential result of the action. Taking a server out-of-service may include stopping messages from flowing to the server.

Managing server membership

Growing community of inventors

Bothell, WA, United States of America

Daniel Dawson