Microsoft Technology Licensing, LLC

Ian C Jirka

Mark Eugene Russinovich

George M Moore

Kahren Tevosyan

Travis Austin Wright

Krishnan Gopalan

Lorenzo Rizzi

Brijesh D Bhatia

Corey M Sanders

Varsha Jayasimha

Mohit Srivastava

Abbot Moffat

Gerardo Dilillo

Marc D Reyhner

Sandeep Phadke

An invention is described for securely deploying a provable identity for virtual machines (VMs) in a dynamic environment. In an embodiment, a fabric controller instructs a VM host to create a VM and sends that VM a secret. The fabric controller sends that same secret (or a second secret, such as the private key of a public/private key pair) to the security token service along with an instruction to make an account for the VM. The VM presents proof that it possesses the secret to the security token service and in return receives a full token. When a client connects to the deployment, it receives the public key from the security token service, which it trusts, and the full token from the VM. It validates the full token with the public key to determine that the VM has the identity that it purports to have.

Secure deployment of provable identity for dynamic application environments

One or more online configuration settings are received prior to deployment and execution of a software appliance. Once the configuration settings have been received, the online configuration settings can be utilized to configure a software appliance image prior to executing the image at a host computer. Once the application of the configuration settings to the image has been completed, the image may executed at a host computer.

Pure offline software appliance configuration

State data can be separated from an existing software stack stored in one or more computer storage units in a computer system. The existing software stack can include operating system software and application software, and the state data can represent one or more states of the existing software stack. An image can be stored in one or more computer storage units in the computer system, and the stored image can form an updated software stack including operating system and application software. In addition, the updated software stack can be configured using the state data.

Image-based software update

In a distributed computer system, data to be communicated is assigned to one of a plurality of virtual queues. The plurality of virtual queues includes a first representative virtual queue associated with a first fault group and a second representative virtual queue associated with a second fault group. The data to be communicated is assigned to one of the plurality of virtual queues prior to transmission based on fault group information associated with the data.

Data transmission queuing using fault prediction

Multi-session connection across a trust boundary is described. In an embodiment, a trust boundary can be implemented to restrict access to resources in a secure region from an unsecure region. A connection can be established that is configured as a client-server connection from the secure region to the unsecure region across the trust boundary. A communication engine in the secure region can then control and maintain the established connection as a two-way simultaneous communication link to the unsecure region across the trust boundary such that session messages can be initiated for communication via the two-way simultaneous communication link from either of the secure region or the unsecure region.

Multi-session connection across a trust boundary

In a management system, a management server authorizes users to access computing devices based on class space and instance space. The management server further determines whether users are authorized to use particular computing devices and/or applications provided by the particular computing devices. Alerts may also be provided to the users by the management server.

Growing community of inventors

Snoqualmie, WA, United States of America

Ian C Jirka