Microsoft Technology Licensing, LLC

David G Thaler

Dmitry A Anipko

Andrew J Ritz

Ravi Rao

Srinivas Raghu Gatta

Kamalavasan Srinivasan

Osman Nuri Ertugay

Poornananda R Gaddehosur

Deepak Bansal

Benjamin M Schultz

Rohit Gupta

Abolade Gbadegesin

Todd R Manion

Tomer Weisberg

Rajesh Sundaram

Upshur Warren Parks, Iii

Stefan Thom

Tin Qian

Jeroen Vanturennout

Torsten Stein

Alexander Malysh

Anirudh Anirudh

Mohammad Saifur Rahman

Alexander Corradini

Michael A Ziller

Kevin R Tao

Andre R Classen

Suhail Khalid

Sandeep Singhal

Brian Don Zill

Art Shelest

Noah Horton

Scott A Senkeresty

Gregory O'Shea

Michael Roe

Ari Pekka Niikkonen

Aaron J Schrader

Patrice Lynn Miner

David T Jones

Alireza Dabagh

Cesare John Saretto

Aaron Wesley Cunningham

Murari Sridharan

Henry L Sanders

Alexandru Gavrilescu

Jeremy Lee Dewey

John S Holmes

Marieke Iwema Watson

Arvind M Murching

Paul G Mayfield

John R Selbie

Justin Allen Hutchings

Brian R Lieuallen

Sumit Garg

Eliot John Flannery

Bill Begorre

Carmen Zlateff

Narendra C Gidwani

Steven Shafer

Daniel Stelian Mihai

Alok Sinha

Ranjit Puri

Arvind R Padole

Radu Simionescu

Greg M Zaverucha

Kevin M Kane

Amit Aggarwal

Mahender Hari

Pawel R Winogrodzki

Ravi T Rao

A system manages access to an asset using a separate physical cryptographically-secure key device. A memory stores a public key as an unalterable record. An access configuration controller reads the public key from the memory to control the access to the asset. The public key is cryptographically paired with a private key securely recorded in the separate physical cryptographically-secure key device. The access configuration controller receives an access control change instruction signed by the private key and verifies a valid signing of the access control change instruction by the private key using the public key read from the memory. A storage system secured by the access configuration controller stores access authorization records managing access to the asset. The access configuration controller alters access authorization records according to the access control change instruction, responsive to verification of the valid signing of the access control change instruction.

Cyber physical key

The application is directed to a computer-implemented method and apparatus for provisioning an Internet of Things (IoT) device on an IoT network. The application is also directed to a method for managing access to functionality of an IoT device in a networked group.

Leveraging pre-existing groups for IoT device access

The cyber owner of the asset can transfer cyber ownership to a second entity based on a transaction and using an escrow entity. An escrow service in association with an escrow entity is utilized to secure transfer of ownership to the second entity in accordance with the conditions of the transaction. The cyber owner initiates an escrow process by transmitting an escrow instruction to the access configuration controller. A new cryptographic key is generated responsive to the escrow instruction and is managed by a generated escrow policy indicating an escrow period. Different components of the cryptographic key are transmitted to the second entity and the escrow service. When the conditions of the transaction are satisfied during the escrow period, the escrow service transmits the component of the cryptographic key to the second entity. The second entity may use the recomposed cryptographic key to assert ownership of the asset.

Cyber ownership transfer

A load balancer receives a client request from a client device for a connection to an application. The load balancer queries a monitoring server for a list of one or more application servers associated with the application. The monitoring server determines, based on cache state information of the plurality of application servers, the list of one or more application servers. The load balancer establishes a connection on behalf of the client device to one of the application servers.

State-aware load balancing of application servers

Network communication and cost awareness techniques are described. In one or more implementations, functionality is exposed through one or more application programming interfaces (APIs) that is accessible to a plurality of applications of the computing device to perform network communication. Data is returned to one or more of the plurality of applications regarding a cost network used to perform the network communication.

Network communication and cost awareness

Operating system management of network interface devices is described. In one or more implementations, a determination is made by an operating system that network traffic associated with one or more applications of the computing device has completed. Responsive to the determination, a network interface device is caused to transition to a mode to reduce power consumption of the network interface device by the operating system.

Operating system management of network interface devices

Keep alive management techniques are described. In one or more implementations, a keep alive interval is calculated by an operating system of the computing device. The keep alive interval is used to maintain one or more notification channels between one or more applications of the computing device and a network.

Keep alive management

Disclosed are an approach form managing and assigning addresses in a connectivity platform that allows for proprietary connectivity modules (Providers) to plug into the operating system. In this disclosure, when a user/application/computing device, connects to another user on another computing device an address is generated for that user. However, because of a limited number of addresses that are available in an address space, it is necessary to ensure that a conflicting address is not present. To ensure this the connectivity platform determines if the address assigned is in conflict with another address associated with users that are located on the other computing devices. If an address is found to be in conflict the connectivity platform reassigns the address until a non-conflicting address is found. If a non-conflicting address cannot be found the connectivity platform blocks the connection between the user and the other user.

Address management in a connectivity platform

Wake pattern management techniques are described. In one or more implementations, network traffic received by a network interface device of a computing device is monitored and a traffic pattern is recognized in the monitored network traffic. An application of the computing device is identified that corresponds to the recognized traffic pattern and responsive to this identification, at least a portion of the identified application is woken.

Wake pattern management

Disclosed are a connectivity platform that allows for proprietary connectivity modules to plug into the operating system and also allows the operating system users and various existing networking applications in the operating system that are authorized by those providers to use that connectivity via existing APIs without the need for the applications to change or for extra configuration of the application to be performed. In an example disclosed herein, the providers provide NAT or firewall traversal and implement the appropriate transport mechanism. This allows for applications and computing devices to communicate in environments where connectivity is prevented by intermediate systems.

Connectivity platform

Growing community of inventors

Redmond, WA, United States of America

David G Thaler