Microsoft Technology Licensing, LLC

Infogation Corporation

David Hetherington

Rajalakshmi Dani

Liqiang Zhu

Yi Zeng

Neil Shipp

Santosh Kumar

Anand Madhava Menon

Jiahui Wang

Luke Schoen

Zhaoan Liu

Pavel Stankoulov

Kent Qing Pu

Vikas Ahuja

Siddhartha Mathur

Shane Brady

Nick Voicu

Gavin Ackroyd

Guanghui He

Yu Huang

Yu (Kyle) Huang

Ramesh Arimilli

Marc-Andre Schier

When a user inputs an action request, such as a requested command, to be performed on a target machine, a management system receives the request and verifies it with a separate authentication and permission system. The verified command request is sent to the target machine. An authentication worker on the target machine accesses a set of policies, local to the target machine, to identify a least privileged execution environment in which the requested command can be performed. The authentication worker on the target machine launches the requested command within the identified least privileged execution environment on the target machine.

Security and permission architecture

Techniques to contain lateral movement of attackers through just-in-time (JIT) provisioned accounts comprising an account management component to receive a request from a first account via a client device for a second account to access a server device in a set of server devices, an account authorization component to authorize the request for the second account based at least partially on account information associated with the first account, an account provisioning component to provision the second account to enable a client to access the server device, and an account notification component to provide account information associated with the second account to a client via the client device. Other embodiments are described and claimed.

Techniques to provide network security through just-in-time provisioned accounts

Computer-assisted navigation is achieved with component-oriented programming and instructions that provide a distributed component programming navigation system. The computer-assisted navigation is achieved with a computing device having program memory. Operationally, the component-oriented application loaded in the memory provides a distributed navigation system comprising a User Interface component, a Service Manager component, a User Positioning category of components that provides a user position based on navigation sensor data, and a Mapping category of components that accesses a map database and places the user position on a road segment of the map database. The components within the component-oriented application are managed by the service manager component to perform distributed navigation services.

Distributed navigation system

Growing community of inventors

Redmond, WA, United States of America

David Hetherington