Microsoft Technology Licensing, LLC

Daniel John Carroll, Jr

Ramarathnam R Venkatesan

Parul Manek

Panagiotis Antonopoulos

Roberto C Taboada

Ganesh Pandey

Kameshwar Jayaraman

Charles Glenn Jeffries

Nishanth Chandran

Srinath T V Setty

Steven Mark Silverberg

Stuart Kwan

Kartik Tirunelveli Kanakasabesan

Shefali Gulati

Basil Cherian

Jason Sydney Barnwell

Embodiments described herein enable at least one of a plurality of entities to access data protected by a security policy in response to validating respective digital access requests from the entities. The respective digital access requests are received, each comprising a proof. For each request, an encrypted secret share is obtained from a respective ledger database. Each request is validated based at least on the respective encrypted secret share and the proof, without decrypting the respective encrypted secret share. In response to validating all of the requests, a verification that an access criteria of a security policy is met is made. If so, at least one of the entities is provided with access to data protected by the security policy. In an aspect, embodiments enable a blind subpoena to be performed. In another aspect, embodiments enable the at least one entity to access the data for an isolated purpose.

Blind subpoena protection

Access to data and resources in a multi-tenant computing system is managed by tagging the data and resources with attributes, as well as by tagging users with attributes. Tenant-specific access policies are configured. When an access request is received from a workload, a policy decision engine processes the attributes that are tagged to the requesting workload (e.g., user, application, etc.) as well as those tagged to the requested data or resource, given a relevant tenant-specific policy. An access decision is provided in response to the access request, and the access decision can be enforced by a tenant-specific enforcement system.

Controlling access to cloud resources in data using cloud-enabled data tagging and a dynamic access control policy engine

Growing community of inventors

Columbia, MD, United States of America

Daniel John Carroll, Jr