Microsoft Technology Licensing, LLC

Jerry Huang

Zhen Liu

QingHu Li

Chen Liu

Jun He

Chiu Chun Bobby Mak

Bobby Chiu Chun Mak

Xiaomin Deng

Wei Pu Zhang

Howard Liu

Weipu Zhang

In a first step of a two step content selection operation, initial content can be selected by detecting movement of a content selection object with respect to a computing device. The selection area can be calculated based on the object movement that is detected. The content within the selection area can be selected and displayed in a second display area overlaying the original content. The initial content can be copied into the second display area. All or part of the initial content can be enlarged, enabling the second step of the selection operation in which a subset of the initial content is selected.

Two step content selection

A computing device is described herein that automatically enters a data protection mode in response to the detected presence or absence of certain user input and/or user input behaviors during a device boot-up state, a user login state, or a device shut-down state. When the device enters the data protection mode, sensitive data stored on the device is automatically rendered invisible and/or inaccessible to a user thereof. The sensitive data may be rendered invisible and/or inaccessible in a manner that is not likely to be apparent to the user of the computing device.

Data protection based on user input during device boot-up, user login, and device shut-down states

Methods, systems, and computer program products are provided for protecting data stored on a device, even when the device is powered off. The device includes a first operating system and a security module. The first operating system (OS) is the main OS for the device, managing computer resources when the device is powered up in an 'on' mode. The security module is separate from the main OS, and is configured to monitor for undesired tampering of the device. The security module is implemented in hardware that functions even when the device is turned off, and thus can protect data against unauthorized access even when the device is off. The security module may be implemented in the form of a circuit, a system-on-chip (SOC), a secondary OS that executes in a processor circuit separate from the processor hardware that operates the main OS, and/or in another manner.

System for data protection in power off mode

Methods, systems, and computer program products are provided for protecting data stored on a device based on user input patterns. The device may have one or more types of user interfaces. The user interacts with a user interface of the device according to a pattern. The interaction pattern is monitored, and compared to one or more stored acceptable user interface patterns associated with sensitive data. If the interaction pattern of the user does not match an acceptable user interface pattern, a data protection response assigned to the data is enacted.

Data protection system based on user input patterns on device

Methods, systems, and computer program products are provided for protecting stored data. A user interface module enables a data sensitivity level, a data protection response, and a contextual trigger to be associated with data stored in a computing device. The user interface is configured to enable the data protection response to be selected from a plurality of data protection responses that includes a soft delete and a hard delete. A contextual trigger monitor is configured to monitor for an occurrence of the contextual trigger. A data protection enactor is configured to enact the data protection response associated with the data when an occurrence of the contextual trigger is detected.

System for context-based data protection

In a first step of a two step content selection operation, initial content can be selected by detecting movement of a content selection object with respect to a computing device. The selection area can be calculated based on the object movement that is detected. The content within the selection area can be selected and displayed in a second display area in which content of different types are separated into logical units. All or part of the initial content can be enlarged, enabling the second step of the selection operation in which a subset of the initial content is selected. Content can be transformed before being pasted into the target.

Two step content selection with auto content categorization

A computing device is described herein that automatically enters a data protection mode in response to determining that a certain number of persons are located proximate to the computing device, that an owner or authorized user is not located proximate to the computing device, or that a certain user gesture has or has not been recognized. When the device enters the data protection mode, sensitive data stored on the device is automatically rendered invisible and/or inaccessible to a user thereof. The sensitive data may be rendered invisible and/or inaccessible in a manner that is not likely to be apparent to the user of the computing device.

Data protection based on user and gesture recognition

A computing device is described that utilizes two file systems to enable sensitive data stored thereon to be deleted automatically, quickly, and discretely when the computing device is in a risky environment or context or when data protection has otherwise been activated. A first file system on the computing device manages a first memory area that stores non-sensitive data while a second file system on the computing device manages a second memory area that stores sensitive data. Only the first file system operates to receive data requests from other processes executing on the computing device. In a first operating mode, the first file system interacts with the second file system to ensure that both non-sensitive and sensitive data is returned in response to data requests. In a second operating mode, communication between the two file systems is disabled and the second file system deletes the sensitive data.

Fast data protection using dual file systems

The present invention extends to methods, systems, and computer program products for brokering data access requests and responses. Aspects of the invention include a brokering pipeline that sequentially processes data access requests and data access responses. The brokering pipeline manages access authentications, request brokering, response rewrite, cache, and hosting multiple (e.g., business) entities.

Growing community of inventors

Redmond, WA, United States of America

Jerry Huang