Microsoft Technology Licensing, LLC

Microsoft Corporation

John Anthony Messec

Mark Fishel Novak

Nir Ben-Zvi

Christopher Warner McCarron

David Matthew Kruse

Anders Bertil Vinberg

Niels Thomas Ferguson

Samartha Chandrashekar

Qiang Wang

Yevgeniy Anatolievich Samsonov

Amitabh Prakash Tamhane

Kinshumann

Kinshuman Kinshumann

Jonathan Marshall Rowlett

Daniel Thomas Travison, Jr

Jeffrey P Snover

Daniel T Travison

Hilal Al-Hilali

Abhishek Gulati

Yi Sun

Samuel Li

Mark Sok-Man Hong

Bo Wu

Christopher Mccarron

Robert ST Gibson

Sumit Siva Dasan

Daniel T Travison Jr

A virtual secure mode is enabled for a virtual machine operating in a computing environment that is associated with a plurality of different trust levels. First, a virtual secure mode image is loaded into one or more memory pages of a virtual memory space of the virtual machine. Then, the one or more memory pages of the virtual memory space are made inaccessible to one or more trust levels having a relatively lower trust level than a launching trust level that is used by a virtual secure mode loader to load the virtual secure mode image. A target virtual trust level is also enabled on a launching virtual processor for the virtual machine that is higher than the launching trust level.

Secure management of operations on protected virtual machines

Booting a machine in a secure fashion in a potentially unsecure environment. The method includes a target machine beginning a boot process. The method further includes the target machine determining that it needs provisioning data to continue booting. The target machine contacts a secure infrastructure to obtain the provisioning data. The target machine provides an identity claim that can be verified by the secure infrastructure. As a result of the secure infrastructure verifying the identity claim, the target machine receives a request from the secure infrastructure to establish a key sealed to the target machine. The target machine provides the established key to the secure infrastructure. The target machine receives the provisioning data from the secure infrastructure. The provisioning data is encrypted to the established key. The target machine decrypts the encrypted provisioning data, and uses the provisioning data to finish booting.

Secure creation of encrypted virtual machines from encrypted templates

Deploying an encrypted entity on a trusted entity is illustrated herein. A method includes, at a trusted entity, wherein the trusted entity is trusted by an authority as a result of providing a verifiable indication of certain characteristics of the trusted entity meeting certain requirements, receiving an encrypted entity from an untrusted entity. The untrusted entity is not trusted by the authority. At the trusted entity, a trust credential from the authority is used to obtain a key from a key distribution service. The key distribution service is trusted by the authority. The key is used to decrypt the encrypted entity to allow the encrypted entity to be deployed at the trusted entity.

A management user interface can be generated at run time via subtractive extensible context-based filtering. Definitions of user interface elements can include an indication of appropriate contexts for which the user interface elements are to be shown. Context factors can include application state, external state, surface or element definitions, or some combination thereof. The context-based filtering approach allows definition of user interface elements and user interface surfaces so that appearance of additional elements in the appropriate surfaces can be accomplished without programming. For example, a user interface surface definition can specify categories of user interface elements. At run time, those user interface elements of the category can be chosen for display. When new elements relating to the category are added, the new elements appear when the surface is rendered. Other features include heterogeneous type selection and exact number homogeneous type selection.

Context-based management user interface supporting extensible subtractive filtering

Runtime polymorphism may be enabled with metadata that is usable for casting objects to casted objects. In an exemplary media implementation, processor-executable instructions cause operations including: discover at least one type of an object while in a runtime environment; and create a casted object from the object by casting the object to the casted object using metadata. An exemplary computing device implementation includes: one or more processors; and one or more media in operative communication therewith, the one or more media including: an object of a first type; metadata that is capable of being used to cast unknown objects in a runtime environment; and processor-executable instructions that, when executed, cause the one or more processors to perform an action including: casting the object of the first type to a casted object of a second type using the metadata in the runtime environment, the first type differing from the second type.

Runtime polymorphism

Example embodiments improve the lookup times and modification costs of indexing on a dynamically sorted list by using a combination of data structures to determine index values for secondary keys and vice versa. More specifically, exemplary embodiments provide a combination of a binary tree (e.g., a balanced binary tree) with a lookup table (e.g., linear dynamic hash table) to provide scalable retrieval of entries by either an array index or a secondary key. For example, given a key, a hash thereof returns a node placement within a balanced binary tree. This positioning can then be used at runtime to determine an index value for a data record, resulting in a near real-time lookup cost. Also note that modifications, such as reordering, insertions, and deletions, become a function of the nodes depth in the binary tree, rather than a linear function of number of records within the data array.

Scalable retrieval of data entries using an array index or a secondary key

Growing community of inventors

Bellevue, WA, United States of America

John Anthony Messec