Microsoft Technology Licensing, LLC

Douglas Anthony Rasler

Jeromy Scott Statia

George Ringer

Daniel Dawson

Elizabeth Anne Phippen

Bum Su Jung

Jeffrey Ryan Bacon

Aaron Richard Davis

Satish Devan

Darrin Earl Curtis

Daniel James Dawson

George Kenneth Ringer

Confining lateral traversal within a network. An authorization request identifies a credential, a protected first resource, and an identifier of a protected second resource for which authorization is requested. A lateral traversal policy associated with the second resource is identified, which constrains access to the second resource to only resources that belong to a subset of resources including the second resource. When it is determined that the credential is configured for access to the second resource, and when it is determined that the first resource belongs to the subset of resources including the second resource, an authorization token is issued, which authorizes the credential to access the second resource via the first resource. Alternatively, when it is determined that the credential is granted access to the second resource, and when it is determined that the first resource is outside of the particular subset of resources, the authorization request is denied.

Confining lateral traversal within a computer network

Growing community of inventors

Sammamish, WA, United States of America

Douglas Anthony Rasler