Microsoft Technology Licensing, LLC

Microsoft Corporation

John E Brezak

Richard Bruce Ward

Sterling M Reasor

Mohammed Samji

Paul J Leach

Chris J Guzak

Eric R Flo

David George De Vorchik

Christopher Andrew Evans

Anshul Rawat

Michael M Swift

Brian D Wentz

Ming Hong Zhu

Jason Alan Christensen

Scott Field

Todd R Manion

Jason Fergus Moore

Praerit Garg

Rob M Mensching

Bhalchandra Pandit

Wissam S Kazan

Robert P Reichel

Donald E Schmidt

Patrick Jakubowski

Anil Kumar Yadav

Giles Edward Van Der Bogert

Sierra M Giampiero

Matthew S Baker

David A Nichols

Sean O Lyndersay

Michael G Sheldon

David Allison Bennett

Jonathan D Schwartz

Klaus U Schutz

Clifford P Van Dyke

Roy A Leban

Peter T Brundrett

Andrew Peter Sinclair

John M Hawkins

David R Mowers

Albert Peter Hwang

Oded Yehuda Shekel

Ronakkumar N Desai

Ramesh Chinta

Ram Viswanathan

Adam D Stritzel

Gyorgy K Schadt

Ciprian Gociman

Daniel Doubrovkine

Joerg Christof Zender

Chin Hung Lam

Nicholas John Tomacelli

Sarita Gupta

Nicholas Malaguti

Daniel Microsoft Corporation International Patents Doubrovkine

Ram Microsoft Corporation International Patents Viswanathan

Roy Leban

Mechanisms for synchronizing an object set with a remote data store are often performed at a particular frequency, e.g., once per hour or day. However, the objects of the object set may have different priorities, and it may be advantageous to synchronize higher-priority objects more often than regular-priority objects. The synchronization mechanisms may also differ (e.g., high-priority object synchronization may be direct and/or holistic, while regular-priority object synchronization may be differential, cached, and/or involving version and/or conflict resolution). Additionally, a resource-based threshold may be applied to the high-priority objects (e.g., a bandwidth cap) in order to reduce resource exhaustion, and high-priority objects that are not synchronized within the threshold may be synchronized with the regular-priority objects. These techniques may be particularly advantageous for synchronizing objects comprising an application state of applications of current or recent usage by a user, where application state 'staleness' is acutely visible to the user.

Opportunistic, priority-based object synchronization

Techniques for data synchronization policies are described. In one or more implementations, techniques may be employed to set data synchronization ('sync') policies for devices in a data sync environment. The sync policies specify parameters for sync operations in the sync environment, such as how frequently data sync operations are performed, what types of data are synced to particular devices, how frequently particular types of data are synced, and so on. In implementations, the sync policies consider the number of devices that are participating in a sync environment and attributes of the devices in specifying parameters for sync operations. Data can be synchronized among devices in the sync environment based on the sync policies.

Data synchronization policies

Application settings are roamed across multiple computing devices. Provider modules on the computing devices are run to retrieve application settings to be roamed and to roam those application settings across the multiple computing devices. Application setting changes initiated on a particular computing device are added to a history of application setting changes on the particular computing device, and also added to synchronization communication module for communication to one or more additional computing devices of the multiple computing devices. Application setting changes initiated by one of the one or more additional computing devices are received by the particular computing device and added to a history of application setting changes on the particular computing device, and are also incorporated into the application settings on the particular computing device.

Roaming application settings across multiple computing devices

A system and method for controlling access to a computer provides for loose security within a local network while retaining strong security against external access to the network. In one embodiment, a user has access to trusted nodes in a secured group within an unmanaged network, without being required to choose, enter and remember a login password. To establish such a secure blank password or one-click logon account for the user on a computer, a strong random password is generated and stored, and the account is designated as a blank password account. If the device is part of a secured network group, the strong random password is replicated to the other trusted nodes. When a user with a blank password account wishes to log in to a computer, the stored strong random password is retrieved and the user is authenticated.

Method and system for controlling access privileges for trusted network nodes

A method and data structure for separating application data from user data in a namespace. The data structure provides an intuitive profile layout for developers or users while supporting legacy applications. The namespace utilizes a hierarchical structure allowing access by developers or users over a network to information contained in identified public folders and/or a user's profile.

User data profile namespace

A platform supports an unmanaged secured workgroup, without a server, for common user access and secure resource sharing among the computers in the group. User accounts are synchronized by replicating and modifying the accounts at each computer of the unmanaged secured workgroup. A computer advertises a change in account information to other computers in an unmanaged secured workgroup. If one of computers in the unmanaged secured workgroup determines that the change is not reflected in the current account information, the computer requests the updated account information from the advertising computer. Any conflicts between user accounts at different computers are resolved before synchronizing the user account in the unmanaged secured workgroup. Also, an application program interface (API) enables an application to query properties of a networked computer system and an unmanaged secured workgroup and to join the unmanaged secured workgroup.

Account synchronization for common identity in an unmanaged network

System(s), method(s), and/or technique(s) ('tools') are described that enable a user to permit multiple tasks requiring elevated rights with as little as one rights elevation. For example, the tools may enable an installation wizard operating within a limited-rights context to perform multiple tasks that require a higher-rights context with a single rights elevation by the user. The tools may do so using an object agent, an instance of which may be created by the installation wizard following a single rights elevation. This instance of the object agent then creates instances of other objects without requiring that the user elevate his or her rights. These other objects' instances may then run the tasks that require the higher-rights context.

Permitting multiple tasks requiring elevated rights

A system and method for generating aggregated content views in a computing network are provided. A host computing device obtains a request for an aggregated view of content corresponding to a set of criteria. The host computing device queries itself and each computing device in a defined network for locally stored content matching the set of criteria. The query results are merged and displayed to a user at the host computing device as an aggregated list view.

System and method for generating aggregated data views in a computer network

Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.

Enhanced computer intrusion detection methods and systems

A host computer system obtains a request for an aggregated view of content in a computer network corresponding to a criterion. The host computer system queries networked computer systems to identify data objects according to the criterion. Each responding computer system provides an identification set of specified data objects that are stored at the responding computer to the host computer systems. The host computer system merges the identification sets to form the aggregated view of content to a user. If a specified data object is replicated to networked computers, the host computer system provides one instance of the specified data object in the query result. Consequently, concurrent utilization of file synchronization and the aggregated view of data objects are facilitated. If a specified data object is stored at the host computer system, the host computer system blocks querying of networked computers about the specified data object.

Single view of data in a networked computer system with distributed storage

Methods and systems are provided for controlling the scope of delegation of authentication credentials within a network environment. A server is configured to provide a trusted third-party with a ticket authenticating the server, information about a target service that a server seeks to access on behalf of the client, and a service ticket associated with the client. This service ticket may be provided by the client or may be a previously granted service ticket granted to the server for itself in the name of the client. The trusted third-party grants a new service ticket to access the target service to the server, in the client's name, if such delegation is permitted according to delegation constraints associated with the client.

Methods and systems for controlling the scope of delegation of authentication credentials

Computers on a local computer network, such as a home network or a small business network, are formed into a secured network group that provides common user access control and enables resource sharing among the computers in the group. A computer on the local network discovers whether there are secured network groups existing on the local network. If one secured network group is found, the computer indicates to a second computer in the group its desire to join the group, and establishes trust with that computer, such as by entering a proper user name and password, or a secret identification number. Once the trust is established, the first computer joins the group. Within the secured network group, user accounts and user profiles are replicated to each of the computers in the group. The establishment of trust and the replication of user accounts and profiles among the computers in the group enable the implementation of security policies and user access control in a group-wide manner.

Small-scale secured computer network group without centralized management

Growing community of inventors

Woodinville, WA, United States of America

John E Brezak