Microsoft Technology Licensing, LLC

Hari Krishnan

Dharma Kiritkumar Shukla

Matthew S Augustine

Arash Ghanaie-Sichanie

Matthew J Burdick

Vipindeep Vangala

Venkata Seshu Kumar Kurapati

Ankur Agrawal

Vijay Amrit Agrawal

An application host (such as a web application server) may execute a set of applications on behalf of a set of users. Such applications may not be fully trusted, and a two-way isolation of the distributed resources of an application (e.g., the executing application, the application user interface on the user's computer, and server- and client-side stored resources) from other applications may be desirable. This isolation may be promoted utilizing the cross-domain restriction policies of each user's computer by allocating a distinct subdomain of the application host for each application. The routing of network requests to a large number of distinct subdomains may be economized by mapping all distinct subdomains to the address of the domain of the application host. Moreover, the application user interfaces may be embedded in an isolation construct (e.g., an IFRAME HTML element) to promote two-way isolation among application user interfaces and client-side application resources.

Hosted application sandbox model

Methods, systems, and computer-storage media for intelligently creating and using routing connections between on-premises servers within a client and nodes of a data center are provided. When routing connections being requested by the client are not presently established, a caching service within the data center is programmed to direct a client's cache request over available routing connections, thereby scaling out storage capacity across the data center. When routing connections being requested by the client are established, a load balancer within the data center is programmed to direct the cache request over a requested routing connection, thereby bypassing intervening hops within the data center, such as gateway nodes that host instances of the caching service. To bypass intervening hops, the client network is provided with access to a client-side routing table for identifying an appropriate network key and a connection table for identifying a routing connection mapped to the network key.

Caching service with client-enabled routing

Portions of a computing environment (such as a user's mesh) may restrict accessing to particular types of access by particular applications. The computer may support applications executing within a virtual environment (such as a web browser) by brokering such access through a token-based system. When an application requests a particular type of access (e.g., writing to a particular data object), the computer may contact an authorization server with the credentials of the application to request the specified access, and may receive and store an authorization token. The computer may then access the computing environment with the authorization token, and may return the results to the application within the virtual environment. Additional features may further support such applications; e.g., a programmatic interface may be provided in a familiar language, such as JavaScript, whereby applications can request access to particular data objects and identify authorized access capabilities.

Data access programming model for occasionally connected applications

Growing community of inventors

Hyderabad Telangana, India

Hari Krishnan