Microsoft Technology Licensing, LLC

David Charles Oliver

Parul Manek

Simon Clarke

Daniel Keith Winter

Ming-wei Wang

Miko Arnab Sakhya Singha Bose

Shyam Narayan

Joe Keng Yap

Burra Gopal

Andrew Sean Watson

Adrian Fanaru

Steven James Rayson

Mingquan Xue

Simon Bourdages

Mitesh Patel

Wenyu Cai

James P Rupke

Christopher Paul Holder

Malgorzata Anna Malaczek

Christopher Hugh Pratley

Ziyi Wang

Erik Rucker

Roberta Cannerozzi

Bradley Joseph Gussin

Kentaro Urata

Gang Zhao

Zachary Adam Koehne

Miko Arnab S Bose

Ron Shimon Estrin

Jeffrey Lamar McDowell

Yang Xiang

Hani Gamal Loza

Zejian Wang

Brent James Van Minnen

Wan Chin Wu

Trent Green

Dustin Alan Lee

Venkatesh Ashok Phadnavis

Yahui Sun

Chetan Pawgi

Avery Morin

Hale Zheng

Dan Winter

The system described herein provides the ability to efficiently back up and restore files within a service, such as a network-based file hosting service or a collaboration service. The system is configured to improve file restoration (may also be referred to as recovery) that occurs in response to an event (may also be referred to as an incident) that compromises a tenant device on which the files reside, thereby preventing access to the files or corrupting the files that are available to the tenant. An example of an event includes a ransomware attack. The described system utilizes a set of defined resources within a boundary to back up tenant files and restore the files. The resources include a metadata database and a blob store. The system combines mutable metadata with immutable content objects within the service to provide faster restoration than the conventional approach.

Optimizing the backup and restoration of files within a service

Systems and methods for exporting logical object metadata. In one example, the system includes an electronic processor configured to receive a first input from a user. The first input includes a logical object location and at least one metadata export option. The electronic processor is also configured to create an export job based upon the first input. The electronic processor is also configured to store the export job in a job queue, determine when a computing resource is available to execute the export job, and execute the export job when the computing resource is available. The electronic processor is also configured to store a job manifest in a memory location. In one example, the job manifest includes metadata for each logical object located in the logical object location.

System and method for exporting logical object metadata

Concepts and technologies are described herein for cache management. In accordance with the concepts and technologies disclosed herein, the server computer can be configured to communicate with a client device configured to execute a cache module to maintain a cache storing data downloaded from and/or uploaded to the server computer by the client device. The server computer can be configured to receive requests for data stored at the server computer. The server computer can be configured to respond to the request with hashes that correspond to the requested data. The client device can search the cache for the hashes, obtain the data from the cache if the hashes are found, and/or download the data from the server computer if the hashes are not found. The client device also can be configured to update the cache upon uploading the data to the server computer.

Cache management

A data file is encrypted with a file-specific encryption key and sent to a remote data storage system. The file-specific encryption key is encrypted with a master key. The encrypted file-specific encryption key and the master key are both stored remotely from the encrypted file and they are stored remotely from one another.

Securely storing data in a data storage system

The concepts relate to data handling, and more specifically to data handling scenarios where data is revised on one computer and stored on another computer. One example can obtain a set of blobs relating to revisions of a file. The example can determine a target size of datastore blobs. In an instance where a total size of the set of blobs is less than the target size, this example can aggregate the set of blobs into an individual datastore blob. Otherwise, the example can identify new or edited individual blobs of the set and aggregate the new or edited individual blobs into first datastore blobs. The example can also aggregate other individual blobs of the set into second datastore blobs.

Data handling

Data to be moved from a source system to a target system, for a set of tenants, is first identified. It is then isolated into its own container. The contents are then moved.

Isolating data to be moved across boundaries

Various systems and methods for provisioning migration containers are disclosed. A system includes a memory and a processor to generate a migration container and migration metadata. The migration container can store data verified as encrypted with an encryption key and the migration metadata can include a lifespan value indicating a time limit for the migration container. In an example, the system can, in response to a request from a user device, provide the encryption key and a migration container path corresponding to a location of the migration container to the user device. In an example, the system can store data in the migration container in response to detecting the data from the user device via the migration container path. The system can migrate the data in the migration container to a server, and delete the migration container in response to the time limit of the lifespan value being exceeded.

Migration containers

Data to be moved from a source system to a target system, for a set of tenants, is first identified. The data is enumerated by a first computing instance in the source system to obtain an enumeration list. Data is copied from the source system to the target system based on the enumeration list by a second computing instance. The data in the source and target systems is then enumerated by a third computing instance to determine whether any data is still to be moved and another enumeration list is generated. The data still to be moved is then moved based on the other enumeration list.

Securely moving data across boundaries

Re-directing tenants during a data move

A system for remotely storing data includes a communication component that is configured to receive a data file to be stored on a remote data storage system. An encryption system is configured to obtain at least one key and encrypt the data file with the at least one key. A processor is configured to generate a request to a master key storage system through the communication component to operatively encrypt the at least one key using a master key stored in the master key storage system. The communication component is configured to transmit the encrypted data file to at least one remote storage location. The processor is configured to receive the encrypted key(s) from the master key storage system and store the encrypted key(s) in a data store.

Secure key management in a data storage system

As changes are made to a document, each change may be assigned an extended identifier comprising a globally unique identifier (GUID) component and an integer component. Upon determining that the same GUID component is used in identifiers for multiple changes, the GUID component may be mapped to a range of indices. Each index of the range of indices may then be used to represent the same GUID component in each extended identifier.

Identifier compression for file synchronization via soap over HTTP

Converting an incoming phonetically-coded string representing an East Asian language into its proper text characters. Conversion is triggered when dynamic IME analysis of the string indicates a threshold probability of correct conversion. Conversion of unconverted phonetic text is also triggered when the user relocates the insertion point. The user may select portions of text affected by conversion error and access a corresponding editable phonetic string and a prioritized list of alternate conversions for that string. The corresponding phonetic string is generated from the selected text if the original input string is unavailable.

Method for converting a phonetic character string into the text of an Asian language

Growing community of inventors

Bellevue, WA, United States of America

David Charles Oliver