Microsoft Technology Licensing, LLC

Erik B Olson

David S Ebbo

Erik B Christensen

Stefan Harrington Pharies

Anthony J Moore

Yann Christensen

Fabio A Yeon

Adam Wade Smith

Suzanne Maurine Cook

Jayanth V Rajan

Manu Vasandani

Anders Hejlsberg

Gopala Krishna R Kakivaya

Christopher Wellington Brumme

Nikhil Kothari

Michael M Magruder

Raja Krishnaswamy

David Bau

Brian LaMacchia

Scott David Guthrie

Lance Olson

Henry L Sanders

Julie D Bennett

James S Miller

Travis Muhlestein

Sean Edwin Trowbridge

Jonathan C Hawkins

Krzysztof J Cwalina

Seth Mitchell Demsey

Brian M Grunkemeyer

Christopher L Anderson

Shawn Patrick Burke

Loren Kohnfelder

Yung-Shin Lin

Mark T Anders

Jeffrey M Cooperstein

James H Hogg

Craig T Sinclair

Corina Eva Feuerstein

David S Mortenson

Caleb L Doise

Alan Geoffrey Boshier

Shajan Dasan

Manish S Prabhu

Radu Rares Palanca

John I McConnell

Tarun Anand

Joseph L Roxe

Hany E Ramadan

Jesus Ruiz-Scougall

Joe Dennis Long

Ramasamy Krishnaswamy

Daniel Takacs

Stephen James Millet

Gregory Darrell Fee

Dmitry Robsman

Keith W Ballinger

Anil K Ruia

Susan M Warren

Robert Michael Howard

David Owen Driver

Michael D Volodarsky

Mark A Boulter

Eric Kenneth Zinda

Satoshi Nakajima

John Peter Shewchuk

Yan Valerie Leshinsky

Giovanni Moises Della-Libera

Michael Joseph Toutonghi

Simon Calvert

Luca Bolognese

Gary Steven Burd

Brian Keith Pepin

Bilal Alam

Jun Fang

Andres Sanabria

Nicholas M Kramer

Jaroslav Dunajsky

Chad W Royal

Mark W Fussell

Roger F Grambihler

Sreeram Nivarthi

Omri Gazitt

Nithyalakshmi Sampathkumar

David Wang

Vellore T Vetrivelkumaran

Daniel Dedu-Constantin

Neetu Rajpal

Blaine J Dockter

William A Adams

Mark P Ashton

Subhag P Oak

Helen Yan

George D Fee

Peixin Han

Marchel Cohn

Qing Ye

System and methods for asynchronous processing within a web page lifecycle, enabling web page developers to integrate asynchronous work within the web page implementation that can store state inside the page and is applied to requests to the particular page. Handlers initiate event-based or task-based asynchronous operations without keeping a dedicated thread while waiting for a response. The thread is returned to a pool of available threads upon initiation of the process. Results are received on other threads and provided to the page before rendering. Timeout errors are also provided, if a particular result is not received within specified period. The events are delivered in a serial manner so that the page developer uses request instance data without explicit synchronization. This makes a high-scale, asynchronous processing model less complex and more accessible to developers accustomed to web scripting, which is traditionally synchronous.

System and method for asynchronous processing in page lifecycle

Methods are provided for utilizing a modular server architecture for processing requests for services, such as authorization and authentication, in a web server. The modular server architecture includes self-contained modular components that can be plugged in and out of the web server, as needed, to provide requested web services. The modular server architecture is also extensible in that it provides set of server APIs for processing requests for supporting built-in server functionality as well as functionality provided by third party modular components. The modular server architecture also supports the integration of request processing tasks for both native and managed modular components, such as ASP.NET modules, by virtue of a managed module host component. The modular server architecture also optimizes server performance by only providing modular component functionality when needed. By utilizing the modular server architecture, server functionality is extended, duplication of request processing tasks is eliminated and performance administrative overhead is reduced.

Modular server architecture for multi-environment HTTP request processing

A method for caching data may be practiced, for example, in a computing environment including a server system that provides data to client systems. The server system includes a number of caches for storing data. The method allows a least expensive cache to first cache data or return data requested by a client. The method includes receiving data to be cached at a cache. The method further includes determining that the data has not been previously cached at a preceding cache. If the data has not been previously cached at a preceding cache the data is cached at the cache. Alternatively, requests for data may be received at a first cache. If the data is at the first cache, the first cache returns the data. If the data is not at the first cache, the request for data is forwarded to a subsequent cache.

Multi-cache cooperation for response output caching

An application program interface (API) provides a set of functions for application developers who build Web applications on Microsoft Corporation's .NET&#x2122; platform.

Application program interface for network software platform

The present invention extends to methods, systems, and computer program products for managing network response buffering behavior. A computer system receives a request for content from a client. The computer system has a default response buffering behavior used when transferring content. The computer system maps the request to a handler configured to serve the requested content. The computer system accesses buffering behavior data for the handler. The computer system determines that the requested content is to be transferred in accordance with altered response buffering behavior based at least on the buffering behavior data. The altered response buffering behavior corresponds to the requested content as an exception to the default response buffering. The computer system accesses a portion of the requested content from the handler. The computer system transfers the portion of requested content to the client in accordance with the altered response buffer behavior.

Managing network response buffering behavior

A method and system for preventing undesired behaviors by executable code modules in a peer-to-peer computer system are provided. When a code module is received, an assembly inspection module queries a blacklist for the received code module. When the received code module is found on the blacklist, the computer system prevents execution of the received code module. Each peer includes an assembly inspection module. When the received code module is not found on the blacklist, the assembly inspection module inspects the received executable code module, prior to execution, to determine whether the code module can perform any undesired behaviors. If so, the received code module is added to the blacklist and prevented from executing.

Peer assembly inspection

Computing system and method for allowing plurality of applications written in different programming languages to communicate and request resources or services via a common language runtime layer

An application program interface (API) provides a set of functions, including a set of base classes and types that are used in substantially all applications accessing the API, for application developers who build Web applications on Microsoft Corporation's .NET&#x2122; platform.

System and methods for protecting sensitive data stored in a text-based configuration file. In a web server application, data associated with sensitive information such as connection information for a remote database may be stored within a configuration file and accessed whenever a request for information from that database is received. To prevent unwanted access to remote database, the portion of the configuration file with sensitive information is encrypted. A decryption provider selected by the requesting server or client application decrypts the sensitive data using the decryption key, retrieves protected data from the remote database, and the configuration server provides a response based on the sensitive data protecting access to the remote database. The encryption/decryption process is transparent to the web server application consuming the configuration.

System and method for protecting configuration settings in distributed text-based configuration files

A virtual path provider allows a Web application to access content source that is maintained by a file system, and/or content source that is maintained separately from a file system. When the Web application receives a request for processed content from a requesting computer system, the Web application access the processed content in cache if there is a valid cache entry, or accesses the corresponding content source through a virtual path provider. If appropriate for the content source, the virtual path provider streams the content source to the Web application through a virtual path. In one implementation, the virtual path provider provides a hash value of the content source, which can be compared to a cache entry. Implementations of the present invention, therefore, allow content source from any virtual store at any location to be processed or compiled by a Web application.

Accessing Web content from any virtualized store

In a distributed computing architecture, a method and system for authenticating a message as originating from an unaltered or unmodified node is provided. Prior to sending a messages, a black box software module in a node validates the node to determine whether the node has been altered or modified without authorization. Once validated, the black box alters a message, using a black box protection scheme, in such a manner that the message can be subsequently authenticated. The black box module sends the altered message to a peer node, whose own black box authenticates the message using an authentication scheme corresponding to the protection scheme. Because validation is performed, each node may assume that the message originated from an unaltered node. The protection and/or validation scheme can be changed in regular intervals so that attackers do not have time to reverse engineer the black box. Alternatively, validation may be skipped and the key used to alter/protect each message may be based on the environment of the node performing the alteration/protection, so that nodes that have been altered will generate different keys than unaltered nodes, and will not be able to communicate.

Prevention of software tampering

An application program interface includes a first class to provide information regarding a current HTTP request. The application program interface also includes a second class to manage HTTP output to a client and an object to provide access to server-side utilities and processes. Particular application program interfaces include additional classes to manipulate cookies, handle file transfers, provide exception information, or control operation of an output cache.

Application program interface that enables communication for a network software platform

A network-based distributed application system is provided in accordance with the present invention for enabling services to be established locally on a client system. The system may include an application and presentation logic, at least a portion of which is interchangeably processed by a server or a client without modification to the portion. The core functionality provided by the application may be preserved between the client and the server wherein improved network performance may provided along with improved offline service capabilities.

System and method providing multi-tier applications architecture

Growing community of inventors

Sammamish, WA, United States of America

Erik B Olson