Microsoft Technology Licensing, LLC

Docusign, Inc.

David Steeves

Todd L Carpenter

Gregory D Hartrell

Luke Abrams

David Abzarian

Kim Cameron

Yordan Ivanov Rouskov

Krishna C Vitaldevara

Eric Fleischman

David Jay Foster

Quentin S Miller

Ryan J Cox

Joshua D Wise

Gregory J Alger

Ezer Farhi

Peleg Atar

Jayson C McCleery

Efim Hudis

Prabu Raju

Ramesh Manne

Winfred Wong

Hersh Dangayach

Niyantha Shekar

Payoj Baral

Meenakshi Ramaswamy

Pui-Yin Winfred Wong

Rajesh Viswanathan

Robert Alexander Sim

Mark A Nikiel

Mark Myers

Laurentiu Bogdan Cristofor

Harry Simon Katz

Todd Alan Buiten

Dana Scott Kaufman

Allan Wetter

Aaron Small

Adrian Kreuziger

Alexa Lynn Keizur

Collin Tibbetts

Charles Hayden

William J Reid

Mwende Window Snyder

Ariel Nicolas Gordon

Harish Kulkarni

Jason L Cohen

Ryan M Burkhardt

Vikas Rajvanshy

Sean Christian Wohlgemuth

Tarek Bahaa El-Din Mahmoud Kamel

Nicholas Mitchell

Orville Charles McDonald

Rammohan Nagasubramani

WeiQiang Michael Guo

Michael William Cummings

Vikrant Minhas

Thomaz DeSouza

Andrew Charles Pope

Jayson C Mccleery

Information identifying a message scanning system is encoded into URLs. A document management system can decode the identifying information to verify that a document accessed via a URL was accessed by a trusted entity rather than by an unknown user. The document management system sends a message including a URL to access a document. When a message scanning system known to the document management system reviews the message for threats, it encodes its identity into a modified form of the URL in the message and uses the modified URL to access the resource. The document management system can decode the identity of the messaging system using a decoding key. Based on the identification, the document management system updates records associated with the document to include the document acce by the message scanning system.

Identification of document access by a message scanning system

A system and method are described in which a document transaction management platform coordinates performance of trust actions across a plurality of trust service providers. For example, a method can include operations executing on a connector module in communication with a digital transaction management platform and a trust service provider, such as the following. Receiving, from the digital transaction management platform, a transaction request including a token and a requested trust action. Accessing user information for a recipient involved in the requested trust action using the token. Obtaining, from the digital transaction management platform, transaction data associated with the requested trust action. Coordinating, with the trust service provider, performance of the trust action on at least a portion of the transaction data. Transmitting, to the digital transaction management platform, a proof received from the trust service provider confirming performance of the trust action.

Universal access to document transaction platform

A method includes receiving a first transaction request and a second transaction request including identification of a first trust action and a second trust action requested to be performed with respect to an electronic document. A first trust service provider and a second trust service provider, different from the first trust service provider, are selected to perform the requested first trust action and the second trust action, respectively. Performance of the first trust action and the second trust action on the same electronic document is coordinated with the selected first trust service provider and the second trust action provider. A first proof and a second proof are obtained confirming performance of the requested first trust action and the requested second trust action by the respective trust service providers.

Embodiments described herein provide enhanced computer- and network-based systems and methods for providing data security with respect to computing services, such as a digital transaction service (DTS). Example embodiments further provide a discovery service that enables nodes that are included in, or otherwise communicatively coupled to, the DTS to actively or passively 'discover' roles and keys associated with the nodes. These node roles are associated with the various services provided by the DTS.

Systems and methods for secure data exchange

A token or other storage device uses Internet identities to set file access attribute rights. Subsequently, requests to access a file can be controlled by confirming the Internet identity of the requestor by either validating the request with a known public key or retrieving the public key from an Internet identity provider. Files may be stored encrypted and may be re-encrypted with the public key associated with Internet identity making the request.

Trusted internet identity

In one embodiment, a user authentication server may use geo-location tracking to determine whether to present an enhanced identity challenge. A communication interfacemay receive a user login attempt by a user and a current location of the user login attempt. A data storagemay store a user location profile of the user. A processormay execute a comparison of the current location to the user location profile. The communication interfacemay present the user with an enhanced identity challenge before allowing user access based on the comparison.

Protection from unfamiliar login locations

A system and method are described in which a document transaction management platform coordinates performance of trust actions across a plurality of trust service providers. For example, a method can include operations such as send a first transaction request, selecting a first trust provider, facilitating performance of a first trust action, sending a second transaction request, selecting a second trust provider, and facilitating performance of a second trust action. Sending the first transaction request can include a first trust action associated with an electronic document. Selecting the first trust provider to execute the first trust action occurs in response to a first user accepting the first transaction request. Performance of the first trust action is facilitated through the first trust provider. Sending the second transaction request can include a second trust action associated with the electronic document. Selecting the second trust provider to execute the second trust action occurs in response to acceptance of the second transaction request by a second recipient. Performance of the second trust action is facilitated through the second trust provider.

Technology is described for enabling passive enforcement of security at computing systems. A component of a computing system can passively authenticate or authorize a user based on observations of the user's interactions with the computing system. The technology may increase or decrease an authentication or authorization level based on the observations. The level can indicate what level of access the user should be granted. When the user or a component of the computing device initiates a request, an application or service can determine whether the level is sufficient to satisfy the request. If the level is insufficient, the application or service can prompt the user for credentials so that the user is actively authenticated. The technology may enable computing systems to 'trust' authentication so that two proximate devices can share authentication levels.

Passive security enforcement

A system and method are described in which a document transaction management platform coordinates performance of trust actions across a plurality of trust service providers. For example, a system including one or more processors, working memory, persistent storage device and a network connect executes instructions to evaluate a policy including multiple rules controlling performance of trust actions. The instructions when executed cause the system to perform operations including processing a first transaction request including a first trust action, evaluating the first transaction request to determine a type of the first trust action, selecting, based on applying the policy against the type of the first trust action, a trust provider rule from the plurality of trust provider rules, and facilitating performance of the first trust action according to the selected trust provider rule.

A malware analysis system for automating cause and effect analysis of malware infections is provided. The malware analysis system monitors and records computer system activities. Upon being informed of a suspected malware infection, the malware analysis system creates a time-bounded snapshot of the monitored activities that were conducted within a time frame prior to the notification of the suspected malware infection. The malware analysis system may also create a time-bounded snapshot of the monitored activities that are conducted within a time frame subsequent to the notification of the suspected malware infection. The malware analysis system provides the created snapshot or snapshots for further analysis.

Malicious code infection cause-and-effect analysis

Growing community of inventors

Seattle, WA, United States of America

David Steeves