Microsoft Technology Licensing, LLC

Microsoft Corporation

Douglas A Walter

Christopher G Kaler

Giovanni Moises Della-Libera

Erik B Christensen

Kenneth David Wolf

John Peter Shewchuk

Donald F Box

Arun K Nanda

Hervey O Wilson

Michael James Coulson

Tomasz Janczuk

Richard L Hasha

Stephen James Millet

David Wortendyke

Melissa Wood Dunn

James Ernest Johnson

Tirunelveli R Vishwanath

Lance Olson

Richard Douglas Hill

Stefan R Batres

Umesh Madan

Stefan Harrington Pharies

John David Doty

Craig Andrew Critchley

Michael Marucheck

Uday Sooryakant Hegde

Vijay Gajjala

Krishnan Srinivasan

Elliot Lee Waingold

Matthew Thomas Tavis

Geary L Eppley

Stephen T Swartz

Michael Steven Vernal

David Edwin Levin

Shy Cohen

Max A Feingold

Richard Dievendorff

Douglas M Purdy

Natasha Harish Jethanandani

David Owen Driver

Aaron Stern

Siddhartha Puri

Saurab Nog

Jesus Ruiz-Scougall

Anastasios Kasiolas

Kapil Gupta

Vipul A Modi

Ryan Thomas Sturgell

Sowmyanarayanan K Srinivasan

Vaithialingam Balayoghan

Scott Christopher Seely

Mohammad Makarechian

Jonathan T Wheeler

Evgeny Osovetsky

Alexander Martin DeJarnatt

Chaitanya Dutt Upadhyay

Michael Thomas Dice

Yaniv Pessach

Mauro Ottaviani

Erin Honeycutt

Alfred M Lee, Iv

Yasser Shohoud

Eugene Shvets

Martin Gudgin

Anand Rjagopalan

Mohamed-Hany Essam Ramadan

Serge Sverdlov

Vaithialingam B Balayogan

A cryptographic session key is utilized to maintain security of a digital identity. The session key is valid only for a limited period of time. Additional security is provided via a bimodal credential allowing different levels of access to the digital identify. An identity token contains pertinent information associated with the digital identity. The identity token is encrypted utilizing public-key cryptography. An identifier utilized to verify the validity of the digital identity is encrypted with the cryptographic session key. The encrypted identity token and the encrypted identifier are provided to a service for example. The service decrypts the encrypted identity token utilizing public key cryptography, and decrypts, with the cryptographic session key obtained from the identity token, the encrypted identifier. If the identifier is determined to be valid, the transaction proceeds normally. If the identifier is determined to be invalid, the transaction is halted.

Securely roaming digital identities

In a computerized system, a sending computer system and recipient computer system exchange an interchange format message in a resource-efficient manner. For example, a transformation writer at the sending computer system selects and transforms only one or few of a plurality of units of the message at the time. The transformed message units are then streamed to the recipient computer system in accordance with a relevant transformation standard, such as the canonicalization standard in the case of XML messages. A transformation reader at the recipient computer system transforms the messages using a buffer big enough for received message units, and passes the transformed units to a file. Thus, the transformation writer acts as a stream writer to pass a message, and the transformation reader acts as a stream reader at the recipient computer system.

Efficient transformation of interchange format messages

The present invention extends to methods, systems, and computer program products for selecting policy for compatible communication. Hierarchical policy document data structures represent communication (e.g., security) aspects and options such that lower aspects and options are accessed in the context of corresponding higher aspects and options to define applicable scope. Use of a hierarchical description also facilitates separation of what is being protected from how it is being protected thereby allowing security policy to be considered at different locations of a description document.

Selecting policy for compatible communication

A data structure with endpoint address and security information. The data structure includes an address field that includes one or more endpoint addresses for an entity. The data structure further includes a security field that includes one or more keys for facilitating secure communications with the entity. The data structure may also be such that the contents of the address field and the security field are serialized in the data structure. The data structure may be extensible such that new address fields and security fields may be added.

Endpoint identification and security

A web services namespace pertains to an infrastructure for enabling creation of a wide variety of applications. The infrastructure provides a foundation for building message-based applications of various scale and complexity. The infrastructure or framework provides APIs for basic messaging, secure messaging, reliable messaging and transacted messaging. In some embodiments, the associated APIs are factored into a hierarchy of namespaces in a manner that balances utility, usability, extensibility and versionability.

Interface infrastructure for creating and interacting with web services

Methods, systems, and computer program products that reduce buffer requirements in a messaging system so that the messaging system can send or receive relatively larger messages using a given buffer size. Message handlers are provided, each identifying a corresponding processing operation to perform on a message object having a streamed portion with a stream oriented interface. Pipelines comprising ordered collections of the message handlers are provided as well. The message object is processed by the message handlers in the message pipelines, such that at least one message handler encapsulates the streamed portion of the message object with its corresponding processing operation. The corresponding processing operation is to be performed at a future time, and encapsulates the streamed portion of the message object without materializing the stream portion in a buffer. The messaging system may be an intermediary for routing a message object or an endpoint.

Message processing pipeline for streams

Growing community of inventors

Issaquah, WA, United States of America

Douglas A Walter