Microsoft Technology Licensing, LLC

Dmitri Gavrilov

Ethan Joseph Bernstein

Patrick Tousignant

Joe Keng Yap

Bradford R Clark

Tali Roth

Ayla Kol

James Charles Kleewein

Gurashish Brar

Aditi Desai

Brian Kress

Umut Alev

Fernando Garcia

Jonathan Lecroy

Victor Wang

Vamsi Kanamaluru

Mike Borysenko

Parul Manek

Ganesh Pandey

Shankaranand Arunachalam

Anshul Dube

Andrew Burke Ryan

Xiaoqin Zhu

Gokay Hurmali

Eric Fleischman

Gregory Irving Thiel

Nathan Daniel Muggli

Xin He

Kannan C Iyer

Stephanie Cheung

Sanjeev Balarajan

Eric S Fleischman

A service computing system receives an API call in which an authorization token, that contains an identifier in the content of the authorization token, is included in a header of the API call. The identifier is also included as a parameter passed in with the API call. The service computing system parses the API call to obtain the authorization token, and the identifier included in the authorization token. It also obtains the identifier passed in as a parameter of the API call. The service computing system compares the identifier obtained from the authorization token to the identifier passed in as a parameter of the API call to determine whether they match. If they do not match, the API call is processed as an unauthorized API call. A security system in the service computing system authorizes the API call based on the comparison.

Client-server security enhancement using information accessed from access tokens

A cloud service stores and aggregates content that is obtained from different content sources using different protocols. For example, the content may include electronic messages, calendar information, contacts, social network content, feed data, search results, and the like. The cloud service aggregates content for each user based on the user's configuration settings. The cloud service may perform processing on the aggregated content before it is delivered and displayed to the user on the client device. For example, one or more views may be generated and stored by the cloud service before the view is requested from the client. Changes made to the aggregated content on the client may be synchronized with the content source. Searches may be made across all or a portion of the different content sources that are aggregated for a user.

Aggregating content from different content sources at a cloud service

A data replication mechanism is proposed that relies on existing federation infrastructure enabling distributed authentication instead of storing and using explicit credentials for a remote forest. The data replication mechanism requests a federation token with data replication capabilities targeted to the remote forest and passes this token to the remote forest in lieu of explicit credentials.

Federated authentication for mailbox replication

Optimizations for data transmission may be provided. A portion of a data block may be read into a batch by a read thread on a first server. The batch may be passed to a transmission thread. The transmission thread may then transmit the first batch to a second server while the read thread asynchronously reads a second portion of the data block into another batch.

Massive structured data transfer optimizations for high-latency, low-reliability networks

The embodiments generally relate to systems and methods for determining changes in a directory schema. In embodiments, directory changes are recorded in a change log. The change log may have one or more entries. A determination is made as to which change log entries should be retrieved. Once retrieved, the directory schema changes are determined. In embodiments, the directory changes are then interpreted for presentation to a user.

Server directory schema comparator

A data resiliency layer provides manageable data resiliency policy options for email related applications. Through one or more APIs such applications are enabled to query whether a data resiliency policy is satisfied for a given mailbox or database at a given point in time. Email related applications may consume this information to modify their behavior such as to wait, repeat, or fail the actions at hand to the point where data committal is guaranteed to a degree specified by the data resiliency policy.

Policy driven distributed data resiliency

Described are embodiments directed to processing write requests using designated servers with global knowledge of information within a distributed system. The designated servers are used to enforce a data rule that limits the data that may be written to the distributed system. In order to ensure that data written to the distributed system is consistent with the data rule, when another server within the distributed system receives a request to write information that is subject to the data rule, it must consult with one of the designated servers before it can accept the write request. If the designated server determines that the data is consistent with the data rule, the write request is approved. Otherwise, the write request is denied.

Processing write requests with server having global knowledge

A data store is distributed between a server and a client. The distributed data store includes global data. A transformation is applied to the global data to generate client-specific data based on the global data. The client-specific data is stored on the client which uses the client-specific data to perform tasks relating to the client-specific data.

Client-specific transformation of distributed data

A cyclic graph may be partitioned. The partitions of the cyclic graph may include an acyclic component of the cyclic graph and a set of partitioned links. The partitions of the cyclic graph may have a particular order. The elements of the cyclic graph may be serialized with a particular serialization order. The serialization order of the elements of the cyclic graph may correspond to the order of the partitions of the cyclic graph. The elements of the acyclic component of the cyclic graph may be serialized before the elements of the set of partitioned links. A computer system may include a graph synchronization component configured to partition the cyclic graph and determine the serialization order of the elements of the cyclic graph. A serialization of the cyclic graph does serialize the elements of the cyclic graph in the determined serialization order.

Method and system for graph analysis and synchronization

Systems, methods, computer-readable media and application program interfaces are disclosed for enabling server applications to verify purported authentication information, such as passwords, provided by clients in connection with server access requests by leveraging trusted credentials maintained by separate trusted authorities. In some cases, the server applications may lack trusted credentials that may be used to verify the purported authentication information. In those cases, the server applications may identify security principal accounts managed by the separate trusted authorities for which the provided authentication information may be purported to be valid for by the requesting clients. Further, the server applications may request the separate trusted authorities to authenticate the purported authentication information before granting access to the requesting clients. In other cases, the server applications may maintain locally trusted credentials that may be used to verify the provided authentication information without involving the separate trusted authorities.

Globally trusted credentials leveraged for server access control

Growing community of inventors

Redmond, WA, United States of America

Dmitri Gavrilov