Microsoft Technology Licensing, LLC

John Michael Walton

Scott Field

Alex Mark Semenko

Dayi Zhou

Avraham Michael Ben-Menahem

Aravind N Thoram

Eugene Wilson Hodges, Iv

Shawn Valentine Hernan

Scott A Field

Karen Lowe Dahmen

Shrikant Adhikarla

Kadri Tahsildoost

Filip Šebesta

Techniques are described herein that are capable of using multi-factor and/or inherence-based authentication to selectively enable performance of an operation prior to or during release of code. For example, a user-specific digital signature that identifies a user of a code development service is generated based at least in part on factor(s) obtained from the user as a result of initiating or receiving a request to perform an operation with regard to the code prior to or during the release of the code. Multi-factor and/or inherence-based authentication may be selectively performed based at least in part on the user-specific digital signature. The performance of the operation is selectively enabled based at least in part on whether the user is authenticated.

Using multi-factor and/or inherence-based authentication to selectively enable performance of an operation prior to or during release of code

A system includes determination of first public key certificate policies based on first data files, generation of a first public key certificate conforming to the first public key certificate policies, storage of the first public key certificate in a secret store system, reception of a second public key certificate, determination of second public key certificate policies based on second data files stored in the secret store system, determination of whether the received second public key certificate conforms to the second public key certificate policies, and storage of the second public key certificate in the secret store system if it is determined that the received second public key certificate conforms to the second public key certificate policies.

Management of public key certificates within a distributed architecture

Systems and methods are provided for adding security to client data by maintaining keys providing access to the client data remotely from the client data. In some circumstances, the systems encrypt a cluster of data using an encryption key, associate the cluster of encrypted data with a unique identifier and send the unique identifier and the decryption key to a server for storage. The decryption key is then received from the server and is used to decrypt the cluster of encrypted data. A server can also perform policy checks or trigger additional authentication such as SMS, phone, or email notification before allowing access to a key. Furthermore, in some instances, the server can also prevent access to the stored keys in response to anomalies, such as decommissioning and other asset management events.

Theft and tamper resistant data protection

Systems and methods are provided for adding security to client data by maintaining decryption keys at a server that provide access to encrypted keys that are maintained at a client system with encrypted client data. A specialized protocol is utilized for accessing the decryption keys from the server. Once obtained, the decryption key is used to decrypt the encrypted key at the client and then the newly decrypted decryption key is used to decrypt the encrypted data. A server can also perform policy checks or trigger additional authentication such as SMS, phone, or email notification before allowing access to the server decryption key. Furthermore, in some instances, the server can also prevent access to the server decryption keys in response to anomalies, such as decommissioning and other asset management events.

Growing community of inventors

Redmond, WA, United States of America

John Michael Walton