Microsoft Technology Licensing, LLC

Jeffrey B Kay

Malcolm Erik Pearson

Trevor William Freeman

John David Bruner

Todd Carlyle Luttinen

Eric Dean Tribble

Mahendra D Sekaran

Victor Boctor

Gursharan Singh Sidhu

Mayank Mehta

Hao Zhang

Anish Desai

Jesse M Dougherty

Rod G Fleck

Humayun Mukhtar Khan

Frank Byrum

Shawn M Thomas

Jeremy De Souza

Yamin Wang

Mansoor Jafry

Ray Froelich

Gautam Pulla

Eugen Pajor

Malcom Pearson

Vishal Vikram Ghotge

J Andrew Goossen

Shaun Douglas Pierce

Mihai Costea

Dhigha D Sekaran

Matthias Adam Leibmann

Sankaran Narayanan

Tolga Acar

Namendra Kumar

Wilbert De Graaf

Roy Williams

Jason Matthew Gould

Ketan K Dalal

Krishnan Ananthanarayanan

Amey Parandekar

Abhilash Chandrasekharan Nair

Vishal Soni

Eric S Hamilton

Frank Stephen Serdy, Jr

Kerry Woolsey

David Ruzyski

Ladislau Conceicao

Ramesh Chinta

Reid Joseph Kuhn

John D Skovron

Sara L Manning

Vijay Kishen Hampapur Parthasarathy

Ganapathy V Raman

Andrew Dadi

Gaurav Pancholi

Mayerber Carvalho Neto

Steven Hubbell

Steven Michael Clagg

Fabian Nunez-Tejerina

Tript Singh Lamba

Steve Clagg

Robert Charles Aldinger

Victor W H Boctor

Rui Zhou

Robert C Fruth

Ramkumar Natarajan

Tony Bell

Ken Wolfe

Bayo Olatunji

Andrew Peter Schoorl

Naveen A Palavalli

Naveen Chand

Jain Chandresh

A method for confidential electronic communication between a sender workstation and a receiver workstation is provided, whereby privacy is guaranteed for the electronic communications transmitted over the public Internet. The method of confidential communication is equipped with message tracking and message receipt verification. The system for implementing the method includes a sender server that creates a session content encryption key along with a message envelope that includes a content encryption key encrypted message and a confidential mail token. The content encryption key is stored securely inside the sender organization's system which transmits the message envelope to an intended recipient. The intended recipient processes the message envelope in order to generate a message receipt verification, which is transmitted to the sender. The message receipt verification is processed by the sender server to verify that the message envelope reached the intended recipient. The message receipt verification, which is comprised of the confidential mail token and unique verification data generated by the intended recipient allows the sender server to verify that the message envelope reached the intended receiver and that the message envelope identified as received is authentic. Following verification that the message transmitted by the sender reached the intended receiver and is authorized, the sender transmits the content encryption key to the intended receiver.

Confidential mail with tracking and authentication

Signaling from a mobile device is transparently tunneled through a cellular voice network to a Voice over Internet Protocol ('VoIP') core network so that multi-party calls, including conference calls and call waiting, can be managed entirely within the VoIP core network. The tunneled signals enable call control to be implemented in the VoIP core network and also establish a way to communicate requests, instructions, and call state. The signaling is transparent to the cellular network because that network does not receive and interpret the signaling. Instead, the cellular network's existing and unmodified control plane is repurposed by the mobile device by placing new, brief outgoing calls through the cellular network to the VoIP core network where the called party number (i.e., the caller-ID) encodes specific information. The VoIP core network immediately releases the new cellular call once the caller-ID is received and the encoded information is interpreted.

Tunneling VoIP call control on cellular networks

Methods and apparatus for executing a client-based, over-the-top (OTT) application, the client-based OTT application for maintaining communications with a second communication device, comprising, in one embodiment, a first transceiver for transmitting and receiving user traffic, a memory for storing processor-executable instructions, and a processor, coupled to the transceiver and the memory, for executing the processor-executable instructions that cause the wireless communication device to establish a first control plane connection, establish a second control plane connection, establish a first data plane for transporting the user traffic, the first data plane connection relating to the first control plane connection, establish a second data plane connection for transporting the user traffic if at least one predetermined event has occurred, the second data plane connection related to the second control plane connection, and to transmit and receive the user traffic over the second data plane connection via the first transceiver.

Optimization of over-the-top (OTT) services on carrier networks

A mobile device utilizes a two-stage dialing solution when roaming on a visited mobile operator (MO) network to implement centralized routing so that a home network portion of a hybrid network is inserted into the path of outbound calls. A remote centralized routing (CR) service interoperates with a CR client on the mobile device. When a call is initiated to a remote party, the CR client calls into an arbitrary roaming routing number that is terminated in the home network. Once the call is connected between the mobile device and home network, the CR client sends a dialing string that includes a destination number of the remote party. The CR service calls the destination number and then bridges the calls to the mobile device and remote party to establish an end-to-end call path between the local and far ends of the call that traverses the home network.

Centralized routing in hybrid networks

Voice call continuity is provided for calls that are carried over a hybrid network infrastructure in which access connections are distributed over loosely coupled network portions including a backend network such as a core VoIP (Voice over Internet Protocol) service network, one or more cellular mobile networks, and a public switched telephone network ('PSTN'). The calls are routed through the core VoIP network regardless of their points of origination or termination in other network portions so that signaling and call context are anchored in the core VoIP network. The conditions under which user equipment operate are continuously monitored so that when a connection is determined to have been unacceptably degraded or is likely to be interrupted, and/or a more optimal connection is available, a handover of the call to another connection is initiated so that call continuity is maintained using the lowest cost connection that provides acceptable call quality.

Voice call continuity in hybrid networks

A system for acquiring access to a web-based application includes one or more computer-readable storage media and an application (e.g., a web browser) for accessing and retrieving over a network a plurality of resources. The system also includes a program interface embodied on the one or more computer-readable storage media. The program interface is configured to present a common set of application program interfaces (APIs) that can be used by the application to demonstrate that a user of the application is entitled to access a first resource. The system also includes programming logic configured to determine if the user of the application is authorized to access the first resource. If it is determined that authorization has not been established to access the first resource, the application is directed to communicate with a marketplace to obtain authorization to access the first resource.

Client services for web-based applications

Establishing secure, mutually authenticated communication between a trusted network and a perimeter network. Servers on the perimeter network may be securely and automatically configured to communicate with the trusted network. Servers not functioning properly may be stopped from communicating with the other servers. Credential information relating to a perimeter server may be automatically, and regularly, updated without intervention.

Establishing secure, mutually authenticated communication credentials

Architecture that stores specific passwords on behalf of users, and encrypts the passwords using encryption keys managed by a distributed key management system. The encryption keys are stored in a directory service (e.g., hierarchical) in an area that is inaccessible by selected entities (e.g., administrative users) having superior permissions such as supervisory administrators, but accessible to the account components that need to access the unencrypted passwords. The distributed key management system makes the encryption key stored in the directory service available to all hardware/software components that need the key to encrypt or decrypt the passwords.

Distributed key encryption in servers

Content is rendered for display using a plurality of rendering contexts. Rendering is performed, at least in part, using a graphics processing unit (GPU). The plurality of rendering contexts can comprise a lower priority rendering context and a higher priority rendering context. One or more components can be associated with each of the lower priority rendering context and the higher priority rendering context. Different restrictions can be imposed on each rendering context. Restrictions can include a restriction on block size, prioritization of requests for each context, and a restriction on the number of requests in a GPU queue at a time.

Managing multiple GPU-based rendering contexts

Architecture that facilitates transport high availability for messaging services by providing the ability of a receiving entity (e.g., receiving message transfer agent (MTA)) to detect if a sending entity (e.g., sending MTA or client) is a legacy sending entity. When the receiving entity detects that the sending entity is a legacy system, by advertising transport high availability capability to the sending entity, if the sending entity does not opt-in to this capability, the receiving entity keeps the sending entity client 'on hold', that is, waiting for an acknowledgement (ACK) until the receiving entity delivers the message to the next hops (immediate destinations). This approach maintains at least two copies of the message until the message is successfully delivered (to the next hop(s)). Hence, if the legacy sending entity or the receiving entity fails, the message is still delivered successfully.

Transport high availability via acknowledge management

Techniques for reconciliation and remediation of messages sent by a server for storage in an archive are described. Some techniques may comprise receiving a message to be reconciled corresponding to a message sent by a server to be stored in an archive. The received message may be categorized for reconciliation, and a delivery confirmation query may be issued to the archive according to categorization of the message for reconciliation. Based on the response to the delivery confirmation query, it can be determined with certainty whether the message sent to the archive for storage is indeed stored at the archive. Other embodiments are described and claimed.

Reconciliation and remediation with communication archives

In a distributed electronic messaging system authorized information comprising metadata concerning a message is passed along from one mail server to another mail server. A receiving computer determines if the sending computer has the necessary authorizations to pass along the metadata. If so, the authorized information is passed along with the message body, enabling repetitious actions to be eliminated. If the sending computer is not authorized to pass along the metadata, the metadata is stripped off the message, changed or annotated.

Mail server coordination activities using message metadata

Certificate remoting and recovery may be provided. A computer may identify required security certificates and determine whether at least one required security certificate is not available. If the certificate is not available, the computer may identify a peer server and request the missing certificate from the peer server. The computer may also be operative to receive certificate management instructions from other computers.

Certificate remoting and recovery

Growing community of inventors

Redmond, WA, United States of America

Jeffrey B Kay