Microsoft Technology Licensing, LLC

Dejan Subotic

Tarek B Kamel

Kim Cameron

Jonathan David Perlow

Melissa Wood Dunn

Benjamin Richard Vincent

Walter R Smith

Scott Robert Ramsby

J Patrick Thompson

Brian D Remick

Adrian Frei

James Shang Kai Chou

Allan Wetter

Jia Le He

Francisco Jose Garcia-Ascanio

Li Qing Xia

Sparky Toews

Guruprasad B Aphale

Peter E Zenzerovich

Alan Jonathan Lundeen

Sanket Kaluskar

Michael F Palermiti

Guruprasad Aphale

User-authentication-based approval of a first device via communication with a second device over a channel (e.g., an insecure channel) is described. The first device receives a session ID and first user-observable information, or an identifier thereof, from an identity provider, presents the first user-observable information to a user, and sends the session ID to the second device. The second device sends the session ID to the identity provider to obtain therefrom second user-observable information, or an identifier thereof, and a security challenge. The second user-observable information bears a user-discernable relationship to the first user-observable information and is presented to the user by the second device. The second device is capable of generating a response to the security challenge for transmission to the identity provider based at least on input received from the user, the response to the security challenge being indicative of the suitability of the first device for approval.

User-authentication-based approval of a first device via communication with a second device

Facilitating single sign-on on a device having sandboxed applications. A method includes identifying a plurality of associated applications. Criteria are evaluated to identify a primary application. Authentication state is stored at the primary application. One or more portions of the authentication state can be used by the applications in the plurality of associated application for authentication.

Single sign-on without a broker application

In one embodiment, a user devicemay access a network serviceusing a secure cookie. A high trust process may create an authentication proofusing a secure key. The high trust process may provide a browsing tokenand the authentication proofto a low trust process to send to an authentication service

Proof of possession for web browser cookie based security tokens

Both an edited version of a first image and an original version of the first image are stored at a first computing device. In response to a user request to synchronize images across multiple computing devices, both the edited version of the first image and the original version of the first image are synchronized with a second computing device. A user is allowed to revert to the original version of the first image regardless of on which of the multiple computing devices the edited version was changed.

Supporting media content revert functionality across multiple devices

A schema is provided that defines people, groups and organizations by their corresponding contact information and other related characteristics. The schema defines a person by personal data, name data, location data, and e-address data. A group is defined by group membership data and e-address data. An organization is defined by location data and by e-address data. The schema also defines role occupancies for interrelating the various contacts. The role occupancies are defined by role occupancy data that may include employee data, team member data, group membership data, family data, customer or business data, and other types of data that can link two or more contacts. By interrelating contacts based on role occupancies, the schema is able to provide rich querying of one or more databases for obtaining desired contact information.

Contact schema

Growing community of inventors

Kirkland, WA, United States of America

Dejan Subotic