Microsoft Technology Licensing, LLC

Microsoft Corporation

Jeremy Thomas Buch

David J Simons

Nikhil P Bobde

Ajay P Chitturi

Vishwajith Kumbalimutt

Sean C Olson

Robert I Brown

Zachary Taylor

Srikanth Shoroff

Ann Demirtjis

Gur Kimchi

Timothy Mark Moore

Scott C Forbes

Paul D Tidwell

James Evan Undery

Vlad Eminovici

Michael Trommsdorff

Dan A Knudson

Ross Garrett Cutler

Dawson Yee

Vadim Eydelman

Sankaran Narayanan

Robert Osborne

Jinyan Su

Charles Frankel

Anthony J Bawcutt

Cody Keawe Yancey

Vladimir Eminovici

Kalyan Shankar Basu

A system and method for uniquely identifying an SIP device extends the SIP communications protocol with an end point identifier, carried for example in the header of an SIP transmission. The end point identifier is useful for routing, registration, subscription, and authentication. The end point (device) of a given user epid can be uniquely identified by creating a key from an epid and a user's address-of-record (URI). This in turn enables improved connection management and security association management when the connections/IP addresses are transient, such as when HTTPS tunneling is used.

End-point identifiers in SIP

Handling an incoming call from a caller to a user includes prompting a caller to record a message to the user and sending a special command to a user communication device indicting that the incoming call is available for screening and retrieving. In response to the user indicating a desire to screen the incoming call, the user listens to the message while the caller is leaving the message. In response to the user indicating a desire to retrieve the incoming call, the call is transferred to the user communication device. In response to the user indicating a desire to screen the call, an incoming media stream from the incoming call may be forked so that the message is being recorded while the user is listening to the message at the user communication device.

Voicemail screening and call retrieval

The claimed subject matter provides a system and/or a method that facilitates enhancing connectivity associated with data communications. An interface can receive a portion of communication state data, wherein the communication state data is related to at least one of a data communication mode and a user context state. A routing component can evaluate the portion of communication state data to identify an optimized data communication mode, wherein the optimized data communication mode is dynamically linked to a virtual contact identifier. Moreover, the routing component can automatically and seamlessly employ an optimized communication session utilizing the dynamically identified optimized data communication mode based upon an activation of the virtual contact identifier.

Virtual contact identifier

Among other things, one or more techniques and/or systems are disclosed for identifying an area of interest comprising a desired object in imagery (e.g., so an image comprising the desired object may be altered in some manner). A determination can be made as to whether a capture event occurs within a proximity mask, where an object is not likely to be out of range if an image of the object is captured from within the proximity mask. For an image captured within the proximity mask, a determination can be made as to whether capture event imagery metadata for the image overlaps a footprint mask for the desired object. If so, the image may be regarded as comprising a discernible view of at least some of the desired object and is thus identified as an area of interest (e.g., that may be modified to accommodate privacy concerns, for example).

Identifying an area of interest in imagery

Stateless human detection for real-time systems allows a real-time message system to challenge incoming messages suspected of being generated by an automated application. When a suspect message is detected, a challenge is presented to a sender of the message. The challenge is designed to require human intervention to provide a correct answer to the challenge. A challenge packet is sent with the challenge and includes a challenge answer and, possibly, a server identifier, a challenge identifier and/or a time stamp that can be used to prevent attacks on the challenge. The challenge packet is encrypted so that the sender cannot access the contents thereof. When the sender provides a response to the challenge, the sender returns the challenge packet. The challenge packet is decrypted and the challenge answer is compared to a sender answer. If the answers match, the sender is allowed subsequent access to the messaging system.

Stateless human detection for real-time messaging systems

End-to-end authentication capability based on public-key certificates is combined with the Session Initiation Protocol (SIP) to allow a SIP node that receives a SIP request message to authenticate the sender of request. The SIP request message is sent with a digital signature generated with a private key of the sender and may include a certificate of the sender. The SIP request message my also be encrypted with a public key of the recipient. After receiving the SIP request, the receiving SIP node obtains a certificate of the sender and authenticates the sender based on the digital signature. The digital signature may be included in an Authorization header of the SIP request, or in a multipart message body constructed according to the S/MIME standard.

End-to-end authentication of session initiation protocol messages using certificates

Open federation security techniques with rate limits are described. An apparatus may include a network interface operative to communicate messages, and a secure open federation (SOF) module operative to manage a message rate between multiple federated networks. The SOF module may comprise a peer authentication module operative to determine whether a peer making the message is an untrusted peer. The SOF module may comprise a peer rate tracking module operative to retrieve a message rate value and a message rate limit value associated with the untrusted peer, and compare the message rate value with the message rate limit value to form a threat status indicator value. The SOF module may comprise a peer authorization module operative to authorize communication of the message based on the threat status indicator value. Other embodiments are described and claimed.

Open federation security techniques with rate limits

Techniques to protect from open enhanced federation user enumeration are described. An apparatus may include a network interface operative to establish connections. The access edge server may further include an open enhanced federation (OEF) module communicatively coupled to the network interface. The OEF module may be operative to manage connections between multiple federated networks. In one embodiment, for example, the OEF module may comprise a peer authentication module operative to determine whether a peer making the request is an untrusted peer domain. The OEF module may further comprise a peer tracking module operative to retrieve a total request number and a total limit number associated with the untrusted peer, and compare the total request number with the total limit number to form a threat status indicator value. The OEF module may also comprise a peer authorization module operative to authorize the request based on the threat status indicator value. Other embodiments are described and claimed.

Open enhanced federation security techniques

An interactive information distribution system that facilitates automatic transmission of a variety of information packets to the communication devices of a calling party and parties called during a call. The information packets are comprised of actual files and or links to files or websites, and are automatically transmitted following the initiation of a call. Upon initiating a call, an indicator that may include metadata linked to information packets is processed to identify at least one database for locating information packets to which the metadata is linked. The interactive information distribution system also includes a verbal communication conversion engine that allows verbal telephone communications to be converted to text and filtered to generate keywords which are used in additional database searching to identify additional information packets. The information packets automatically identified are retrieved from a database and are transmitted to the communication devices of parties participating in a call during the call.

Appending content to a telephone communication

Techniques for secure federation of data communications networks are provided. The techniques employ an edge proxy server to route messages depending on a federation mode. In Direct federation mode, an edge proxy server of a network is configured to exchange messages with a specified set of entities, such as other networks, servers, other devices, or users. In Automatic federation mode, an edge proxy server may accept all incoming messages from entities that have a valid certificate. In Clearinghouse federation mode, the edge proxy server forwards all outgoing messages to a specified, trusted clearinghouse server.

Secure federation of data communications networks

Growing community of inventors

Redmond, WA, United States of America

Jeremy Thomas Buch