Microsoft Technology Licensing, LLC

Jeremy Dominic Viegas

Paul J Leach

Mark Fishel Novak

Nelly L Porter

Oludare Victor Obasanjo

Liqiang Zhu

Himanshu Soni

Yi Zeng

Philip Joseph Hallin

Vijay G Bharadwaj

Stephen R Gordon

Violet Anna Barhudarian

Arthur Baker

Karanbir Singh

K Michiko Short

Paul J Miller

Aleksandr Radutskiy

Alexandru Hanganu

Jeffrey Edwin Shipman

John D T Wood

Atanas D Oskov

Daniel C Kitchener

The techniques and systems disclosed herein pertain to preventing unauthorized access to computing resources by unauthorized persons by deploying biometric security. To implement biometric security, the computing device, possibly by the OS, may obtain samples of one or more biometric factors unique to the owner. The computing device may construct pattern-matching templates corresponding to the biometric samples, which may be stored for later use when a protected resource is requested. Computing resources may be selected for protection by a biometric security mechanism by an authorized user or by other techniques or default settings. Before allowing certain restricted actions, the OS may request that the user provide one of the previously registered biometric samples. If the biometric sample matches the user's stored pattern-matching template, the OS may grant access to the computing resource, otherwise, the OS may deny access to the computing resource.

Resource management based on biometric data

Techniques for resource access authorization are described. In one or more implementations, an application identifier is used to control access to user resources by an application. A determination is made whether to allow the application to access the user resources by comparing an application identifier received from an authorization service with a system application identifier for the application obtained from a computing device on which the application is executing.

Resource access authorization

A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.

Back-end constrained delegation model

Growing community of inventors

Redmond, WA, United States of America

Jeremy Dominic Viegas