Microsoft Technology Licensing, LLC

Shieldip, Inc.

Ntt Docomo, Inc.

David Alexander Molnar

Jiahe Helen Wang

Benjamin Livshits

Alexander Nikolavich Moshchuk

Dennis E Shasha

Ramon Caceres

Weidong Cui

Tadayoshi Kohno

Michael O Rabin

Patrice Godefroid

Franziska Roesner

Yossi Beinart

Timir Karia

Jacob Rubin Lorch

Bryan Jeffrey Parno

Brendan Dolan-Gavitt

Sean Rolinson

Douglas Christopher Burger

Eyal Ofek

Barry Clayton Bond

Margus Veanes

Stuart Schechter

Prateek Saxena

Alan M Dunn

Loris D'Antoni

Philip Andrew Chou

Alastair Wolman

Zulfikar Ramzan

William B Dolan

Craig B Gentry

Oliver H Foehr

John C Tang

Stefan Saroiu

Christopher Brian Quirk

Sasa Junuzovic

Jeremy Eric Elson

Christopher John Brockett

Ronnie Chaiken

Robert Alexander Sim

Lior Shapira

Vikram Reddy Dendi

Kori M Inkpen

Pallavi Choudhury

Aaron C Hoff

Ran Gal

William Blum

Timothy Scott Saponas

Carleton J Bosley

Scott Laufer

Christopher Ian Charla

Noelle Mallory Sophy

Blair MacIntyre

Michael Y Levin

Jon Howell

John Vilk

Suman Jana

Christopher Stephen Frederick Smowton

Nicole Beaudry

Thomas E Woolsey

Aaron Ingram

Seungwon Kim

Lucas S Figueiredo

Alexander Moshchuk

Alexander N Moshchuk

Blair Macintyre

Aspects of the subject disclosure are directed towards providing contextual information (such as high resolution still images) during an audio or video call. A receiver of the contextual information may send commands to the sending device to specify a desired resolution and frame rate of such images. A receiving user also may determine how to display any video call frames and/or the contextual information on one or more display devices available to the receiving user. Other contextual information such as location-related data by which a user can determine and display a location of the other call participant (or participants) may be transmitted during the call.

Compositing and transmitting contextual information during an audio or video call

Apparatus and methods can be implemented to perform software testing or to perform emulated hardware testing using a cloud architecture that can utilize centralized testing technology and can enable scaling up to test for multiple tenants and scaling up to arbitrary numbers of programs tested for each tenant. A user can configure an initial test virtual machine on a cloud platform for a cloud service over a physical network such as the Internet. Components of the cloud architecture can create a set of clones of the initial test virtual machine and inject tools into each clone for testing. Testing of one or more clones of the set can be conducted in an environment isolated from the physical network and isolated from a backend of the cloud service. Additional apparatus, systems, and methods are disclosed.

Cloud architecture for automated testing

The claimed subject matter includes techniques for processing gestures. An example method includes receiving a gesture from an application. The gesture includes one or more primitives from a language that is domain-specific to gestures. The method also further includes receiving skeletal data from a motion detection system. The method also includes comparing the skeletal data with the gesture from the application in a runtime module. The method also further includes sending a gesture event to the application.

Gesture processing using a domain-specific gesture language

An automatic context-sensitive sanitization technique detects errors due to the mismatch of a sanitizer sequence with a browser parsing context. A pre-deployment analyzer automatically detects violating paths that contain a sanitizer sequence that is inconsistent with a browsing context associated with outputting an untrusted input. The pre-deployment analyzer determines a correct sanitizer sequence which is stored in a sanitization cache. During the runtime execution of the web application, a path detector tracks execution of the web application in relation to the violating paths. The correct sanitizer sequence can be applied when the runtime execution follows a violating path.

Automatic context-sensitive sanitization

Functionality is described herein for receiving events which characterize features in an environment, and for identifying at least one policy based on the events. The functionality consults a certificate, associated with the policy, to determine whether the policy is valid. If valid, the functionality uses the policy to govern the behavior of at least one application, such as by controlling the application's consumption of events. A trusted passport authority may be employed to generate the certificates. Each certificate may: (1) identify that it originated from the trusted passport authority; (2) contain context information which describes a context in which the policy is intended to be applied within an environment; and/or (3) contain machine-readable content that, when executed, carries out at least one aspect of the policy.

World-driven access control using trusted certificates

An 'AR Privacy API' provides an API that allows applications and web browsers to use various content rendering abstractions to protect user privacy in a wide range of web-based immersive augmented reality (AR) scenarios. The AR Privacy API extends the traditional concept of 'web pages' to immersive &#x201c;web rooms&#x201d; wherein any desired combination of existing or new 2D and 3D content is rendered within a user's room or other space. Advantageously, the AR Privacy API and associated rendering abstractions are useable by a wide variety of applications and web content for enhancing the user's room or other space with web-based immersive AR content. Further, the AR Privacy API is implemented using any existing or new web page coding platform, including, but not limited to HTML, XML, CSS, JavaScript, etc., thereby enabling existing web content and coding techniques to be smoothly integrated into a wide range of web room AR scenarios.

Protecting privacy in web-based immersive augmented reality

Methods and systems for application monitoring through collective record and replay are disclosed herein. The method includes recording a number of execution traces for an application from a number of user devices at a runtime library, wherein the number of execution traces relates to non-deterministic data. The method also includes replaying the number of execution traces to determine whether a behavior of the application creates a security risk.

Application monitoring through collective record and replay

Various technologies pertaining to authenticating a password in a manner that prevents offline dictionary attacks are described. A protected module, which can be a hardware security module, a trusted platform module, or the like, is in communication with an authentication server. The protected module comprises a key that is restricted to the protected module. The key is employed in connection with authenticating the password on the protected module.

Utilization of a protected module to prevent offline dictionary attacks

A shared renderer maintains shared state information to which two or more augmented reality application contribute. The shared renderer then provides a single output presentation based on the shared state information. Among other aspects, the shared renderer includes a permission mechanism by which applications can share information regarding object properties. The shared renderer may also include: a physics engine for simulating movement of at least one object that is represented by the shared state information; an annotation engine for managing a presentation of annotations produced by plural applications; and/or an occlusion engine for managing the behavior of the output presentation when two or more objects, produced by two or more applications, overlap within the output presentation.

Managing shared state information produced by applications

Functionality is described herein for managing the behavior of one or more applications, such as augmented reality applications and/or other environment-sensing applications. The functionality defines permission information in a world-driven manner, which means that the functionality uses a trusted mechanism to identify cues in the sensed environment, and then maps those cues to permission information. The functionality then uses the permission information to govern the operation of one or more applications.

World-driven access control

Functionality is described herein by which plural environment-sensing applications capture information from an environment in a fine-grained and least-privileged manner. By doing so, the functionality reduces the risk that private information that appears within the environment will be released to unauthorized parties. Among other aspects, the functionality provides an error correction mechanism for reducing the incidence of false positives in the detection of objects, an offloading technique for delegating computationally intensive recognition tasks to a remote computing framework, and a visualization module by which a user may inspect the access rights to be granted (or already granted) to each application.

Managing access by applications to perceptual information

The virtual vision correction technique described herein pertains to a technique for determining a user's vision characteristics and/or adjusting a display to a user's vision characteristics. The virtual vision correction technique described herein provides vision correction for people with vision problems by making the video displayed adapt to the person's vision correction needs. In one embodiment of the technique, the user can state their vision prescription needs and the video displayed is processed to appear '20/20' to that person. Alternatively, the video display, for example, video display glasses, can 'auto-tune' a representative image (such as an eye chart) to determine the appropriate video processing for that person.

Virtual vision correction for video display

Described is a technology by which the identity of a person (e.g., a customer in a commercial transaction) is determinable without active identification effort, via biometric data is obtained without action by the person. Machine processing of the biometric data over a set of possible persons, determined from secondary proximity sensing, is used to determine or assist in determining the identity of the person.

Personal identification combining proximity sensing with biometrics

A method, system, and computer-readable storage medium for application monitoring through continuous record and replay are described herein. The method includes continuously recording execution traces including external non-deterministic input data for an application at a user device and analyzing the recorded execution traces to identify relevant execution traces for determining a behavior of the application. The method also includes reporting the relevant execution traces to a server, wherein the server is configured to replay the relevant execution traces to determine whether the behavior of the application is as expected.

Application monitoring through continuous record and replay

Growing community of inventors

Seattle, WA, United States of America

David Alexander Molnar