Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Edward Thomas Banti

Frank Byrum

Christopher Barnes

James R Knibb

Selvaraj Nalliah

Palash Biswas

Mayerber L Carvalho Neto

Thomas Jay Hoover

Alexander Michael Spinelli

Mayank Mehta

Gregory Kostal

Vladimir Yarmolenko

Chandresh Kumar Jain

Yuhui Zhong

Pankaj Mohan Kamat

Tejas Patel

Victor Boctor

Scott C Cottrille

Hao Zhang

Amit Fulay

Krassimir Emilov Karamfilov

Giovanni Zappella

Luis Antonio Diniz Fernandes De Morais Sarmento

Paul Daniel Jaye

Michael Nelte

Harvey Rook

Cédric Philippe Charles Jean Ghislain Archambeau

Kumarswamy P Valegerepura

Sean Phillip Forde

Zheshen Wang

Michael Patrick Loughry

Ayse Yesim Koman

Aurash Steven Abnar Behbahani

Michael Brueckner

Elroy Dyksen

Robert Congdon

Ilya Smirnov

Gareth Charles Farrington

Martin Milicic

Jurgen Ommen

Dmitrij Scsadej

Sunitha Samuel

Tiffany Celeste Michelon

Borys Marchenko

A testing environment in which offline simulations can be run to identify policies and/or prediction models that result in more valuable content being included in content pages is described herein. For example, the offline simulations can be run in an application executed by an experiment device using data gathered by a production content delivery system. The simulation application can test any number of different policies and/or prediction models without impacting users that use a production content delivery system to request content.

Offline simulation system for optimizing content pages

Disclosed are various embodiments that involve selecting supplemental content. A compatibility rule is determined to require supplemental content from a first content provider to be a predetermined minimum distance from supplemental content from a second content provider. A layout is generated to include a first slot and a second slot. A first content item from the first content provider is assigned to the first slot, and a second content item from the second content provider is assigned to the second slot. A network page is generated using the layout.

Selecting supplemental content for inclusion in a network page

Aspects of connected phrase search queries and titles are described. In one embodiment, a phrase in a search string may be identified with reference to a compilation data store. The compilation data store may include various collaborative, taxonomy, and brand name data, for example. After a phrase is identified in the search string, a search query may be generated based on the phrase. For example, a catalog of items may be queried to generate a query result, and the query result may be parsed for display to a user. In various embodiments, a plurality of phrases may be identified in a search string, and a plurality of search queries may be generated based on combinations of the phrases. In this manner, more search results may be obtained, especially for constrained search strings. The identification of phrases may also be applied to generate variations on titles, in certain embodiments.

Connected phrase search queries and titles

Architecture that employs encryption and storage of encryption keys to protect trusted client message content from an untrusted third-party hosted service. Each trusted user machine is configured to optionally apply security to messages. Rules determine when automatic protection is applied and the level of protection to apply. The trusted client automatically downloads the rules (or rules policies) from a trusted rules service and caches the rules locally. During composition, the rules analyze the message and automatically apply security template(s) to the message. The security template(s) encrypt the body of the message, but not the headers or subject. The untrusted message service processes the header and delivers the message to the correct recipient. The hosted service cannot view the contents of the message body, and only intended recipients of the protected message can view the message body. Offline protection is supported, and the user can override protection by the rules.

Protecting content from third party using client-side security protection

Disclosed are various embodiments that involve selecting supplemental content to be included with search results in a network page. At least one search result is generated by executing a search based at least in part on relevance to a search query. Supplemental content is selected based at least in part upon relevance to the search query without regard to the at least one search result. A subset of the supplemental content is selected in response to determining that the subset is permitted to be presented together in a search results page as defined by at least one compatibility rule. The search results page is generated to include the subset of the supplemental content and the search results.

Selecting supplemental content for inclusion in a search results page

Deleted property information relating to deleting an item, such as an electronic message, is stored for later use. The stored deleted property information may relate to one or more different properties that are associated with the deletion of the item, such as: a time when the item was deleted, a device from which item was deleted, a device on which the item was stored when deleted, a location of a user where the item was deleted, an application associated with the item, and the like. The deleted property information may be used to perform various operations. For example, deleted items may be sorted using the deleted item property information (e.g. time of deletion, device, location, application), rules may be created to use the deleted property information, deleted items may be restored based on the deleted property information, and the like.

Performing operations on deleted items using deleted property information

Deleted property information relating to deleting an item, such as an electronic message, is used for restoring the deleted item. The deleted property information is stored in response to deleting the item. The stored deleted property information identifies a location of where the item was deleted from and may include other information. The location information may be a specific location such as a folder (e.g. inbox, sent, folder 1, . . . ), a calendar, a network location, and the like. In response to a request to restore a deleted item, the deleted property information is used to restore the deleted item to the location where the item was when deleted. A graphical user interface may be used to assist a user in restoring deleted items. The user interface may display a user friendly name (e.g. 'Inbox', 'Folder 1', . . . ) of where the deleted item(s) will be/have been restored.

Restoring deleted items with context

Techniques to provide proxies for web services are described. A technique may include providing proxies for web services that translate one format to a format native used, or understood, by the web service without having to rewrite existing APIs. In one embodiment, for example, an apparatus may comprise a processing unit and a network interface coupled to the processing unit. The apparatus may further include a web service executing web service requests on the processing unit using a native format. The apparatus may further include a proxy to receive a web service request in a first format via the network interface and to translate the web service request from the first format to the native format. Other embodiments are described and claimed.

Techniques to provide proxies for web services

Disclosed are various embodiments that involve selecting supplemental content to be included in a search results page. A search query is received. A set of search results is generated by executing a search based at least in part on the search query. A subset of supplemental content providers is selected based at least in part on respective relevancies of the supplemental content providers to the search query. A search results page is generated. The search results page is configured to present supplemental content from the subset of supplemental content providers in association with the set of search results.

Business to business secure mail may be provided. Consistent with embodiments of the invention, a protected message may be received. The recipient may request a token from a trust broker, submit the token to an authorization server associated with the sender, receive a user license from the authorization server; and decrypt the protected message using the user license. The protected message may restrict actions that may be taken by the recipient, such as forwarding to other users.

Business to business secure mail

The present invention extends to methods, systems, and computer program products for separating authorization identity from policy enforcement identity. Embodiments of the invention extend the consumption phase for protected information. Two identities, an authorization identity and a policy enforcement identity, are used for acquiring, issuing and enforcing usage license instead of one identity certificate. The authorization identity is used to evaluate against usage policy. The authorization identity is similar to identification information in an identity certificate. The policy enforcement identity is used to ensure the confidentiality of granted permissions and content key. The policy enforcement identity enforces a usage license on an authorization principal's (e.g., recipient's) machine. The policy enforcement identity's enforcement of a usage license is similar use of a cryptographic key in an identity certificate.

Separating authorization identity from policy enforcement identity

Growing community of inventors

Seattle, WA, United States of America

Edward Thomas Banti