Microsoft Technology Licensing, LLC

Henrik Frystyk Nielsen

Georgios Chrysanthakopoulos

Lance Olson

Erik B Christensen

Henry L Sanders

Andrew Layman

Richard L Firth

Pavel Khijniak

Steven E Lucco

John Peter Shewchuk

John Anthony Taylor

Christopher Lee Mullins

Christopher G Kaler

David Gerard Conroy

Bradford H Lovering

George M Moore

Robert Standefer, Iii

David Edwin Levin

Angshuman Sarkar

Satish Ramchandra Thatte

Cem Paya

Gopal Krishna R Kakivaya

Jason Michael Allor

Chen Egozi

Luis Felipe Cabrera

Christian F Huitema

Robert George Atkinson

Donald F Box

David Wortendyke

Christian Liensberger

David E Langworthy

James M Lyon

Hen Fitoussi

Jeffrey C Schlimmer

Alfred Lee

Craig Andrew Critchley

Geary L Eppley

Harris Syed

Glenn Block

Keith Coleman Herold

HongMei Ge

Jonathan E Hamaker

Erez Altus

Alexander Corradini

Randall Tombaugh

Ronald A Cain

Paul S Bloom

Mark H Lukovsky

Pauline Chao

Robert Iii Standefer

Examples of the present disclosure describe systems and methods of delegating authorization to access isolated collections of data. In aspects, a request to access an isolated collection of resource identifiers and relationships may be received by an application. The resource identifiers may correspond to resources in one or more remote data repositories. Upon receiving the request, the application may interrogate a remote data repository to determine whether the requestor is currently authorized to access the one or more resources corresponding to the resource identifiers in the isolated collection. If the requestor is determined to be authorized, the application may use an authorization indication provided by the remote data repository to provide the requestor with access to the isolated collection. If the requestor is determined to be unauthorized, the application may prohibit access to the isolated collection.

Delegated authorization for isolated collections

Techniques are described herein that are capable of providing source control of custom code in a backend-as-a-service (BaaS) module. For instance, the custom code may be automatically loaded dynamically (e.g., on-demand) in a runtime that is hosted by the BaaS module while the runtime is running to provide custom backend features that are defined by the custom code to an application in response to receipt of a request from the application. Source control of the custom code may be provided without providing source control of host code that defines the runtime.

Enabling access to backend code that defines custom backend feature(s) without enabling access to host code that hosts the backend code

Techniques are described herein that are capable of providing extensibility with regard to a context-aware digital personal assistant. For instance, a description of a capability of a target (e.g., a software target) may be received. Examples of a target include but are not limited to an application (e.g., a software application), a service, a bot, and a website. In a first example, a digital personal assistant may be caused to perform operation(s) based at least in part on a context of a user. In a second example, whether the digital personal assistant performs operation(s) that are configured to be triggered by first aspect(s) of the context of the user is controlled based at least in part on second aspect(s) of the context of the user. The operation(s) include notifying the user of the capability and/or implementing the capability on behalf of the user.

Extensibility for context-aware digital personal assistant

At least some embodiments described herein relate to computer-assisted conversation. The set of available conversation segments is updated by addressing conversation segments at the granularity of a conversation segment or a group of conversation segments. For instance, an entire class of conversation segments may be addressed to add, delete, turn on, or turn off, the class of conversation segments. Groups of class of conversation segments may also be similarly addressed. Thus, as the scope of a conversation changes, the available set of conversation segments may likewise change with fine-grained control. Accordingly, rather than pre-plan every set of possible conversations, the context and direction of the conversation may be evaluated by code to thereby determine what new sets of conversation segments should be added, deleted, turned on, or turned off. New conversation segments may even be generated dynamically, taking into account the values of parameters that then exist.

Computer-assisted conversation using addressible conversation segments

Examples of the present disclosure describe systems and methods of conditionally authorization access to isolated collections of data. In aspects, a request to access an isolated collection of resource identifiers and relationships may be received by an application. A set of conditions may control access to the isolated collection. Upon receiving the request, the application may attempt to determine whether the set of conditions has been satisfied. If the set of conditions is determined to be satisfied, the application may provide the requestor with access to the isolated collection. If the set of conditions is determined to be unsatisfied, the application may prohibit the requestor from accessing the isolated collection.

Conditional authorization for isolated collections

Examples of the present disclosure describe systems and methods of data ingress and egress using callback notifications. In an example, a callback notification may be received. The notification may comprise one or more resources, which may be extracted. The extracted resources may be associated with resource identifiers. One or more inference rules from an inference ruleset may be applied to the extracted resources to generate any related inferred relationships. The resource identifiers and inferred relationships may be stored in an isolated collection. The content or structure of the isolated collection may satisfy a notification rule within a notification ruleset. The notification rule may be associated with a recipient. As a result of the determination, the recipient may receive a callback notification. In some examples, the callback notification may comprise a change notification or one or more resource identifiers, associated resources, or relationships from the isolated collection.

Ingress and egress of data using callback notifications

A facility maintains a cardinality schema to manage indications of property cardinality on behalf of a database such as a graph database that is indifferent to the cardinality of properties stored within it. The facility can add cardinality indications to the cardinality schema for a property based on (1) semantics used to refer to one or more values of the property in an update request, (2) the number of values specified for the property in an update request, or (3) an explicit client declaration of the property's cardinality. Where a query or update request against the database uses cardinality semantics for a property that are inconsistent with the cardinality schema's indication for the property, the facility can reject the query or update request. The facility can also use the cardinality schema to automatically complete incomplete queries using the proper cardinality semantics for each involved property.

Systems and methods for maintaining cardinality schema to prevent corruption in databases indifferent to cardinality

Providing source control of custom code for a user without providing source control of host code for the user

Various implementations are described herein for detecting and modifying security settings on a computing device to run a web application using a web browser. A loader application detects security settings on the computing device, determines if the security settings will allow the web application to run and function correctly on the computing device, and if necessary, modifies the security settings to allow the web application to run and operate successfully. Further, described herein are techniques for facilitating communication between components corresponding to a web application running in a web browser and external resources.

Detecting and modifying security settings for deploying web applications

Embodiments allow developers to use HTTP message abstractions inline within their Web API methods to directly access and manipulate HTTP request and response messages. A hosting layer is provided for in-process, in-memory and network-based services. Message handlers and operational handlers may be combined to create a message channel for asynchronous manipulations of the HTTP requests and response. A formatter may be used on the server or client for consuming HTTP and providing desired media types.

Web API framework

Various embodiments of the present invention transform devices into Web services or special-purpose servers that are capable of communicating with personal computers. Various embodiments of the present invention allow various low-level aspects of device drivers to reside in the devices, eliminating the need for the devices to be compatible with legacy specification. Various embodiments of the present invention allow various devices to be shipped from the factory with low-level software already built in so that users are liberated from having to deal with the experience of installing and upgrading device drivers. In various embodiments of the present invention, each device is preferably a network node identifiable by a Uniform Resource Identifier (URI).

Devices as services in a decentralized operating system

Growing community of inventors

Hunts Point, WA, United States of America

Henrik Frystyk Nielsen