Microsoft Technology Licensing, LLC

Julien Couvreur

Josh D Benaloh

Stephen Harris Toub

Iulian Doroftei Calinov

Jared Porter Parsons

Richard S Szeliski

Patrice Y Simard

Ismail Cem Paya

Mads Torgersen

David Charles Wrighton

Trevin M Chow

Jan Kotas

Jeffrey Earl Steinbok

Raja Pazhanivel Perumal

Erren Dusan Lester

Danpo Zhang

David M Fowler

Jonathan Wilkins

Richard Steele Gibson

Christopher Sienkiewicz

Andrew Spenser Gocke

Utilizing role types that extend underlying types. Within a program definition, a computer system identifies a statement assigning an object of an underlying type to a role type that extends the underlying type. The underlying type implements a first interface, and the role type implements a second interface. Based on the role type extending the underlying type, the computer system assigns the object of the underlying type to the role type. Based on assigning the object of the underlying type to the role type, the role type is usable to interact with the object of the underlying type using both the first interface and the second interface.

Runtime support for role types that extend underlying types

Improved compilers recognize interception declarations in source code, and emit code that replaces invocations of specified artifacts with invocations of specified interceptors instead. Source generators proactively modify program behavior in arbitrary desired ways without introducing hidden security violations and without requiring edits by the program's developers. Interception declarations are visible in source code and development tools. In some cases, different invocations of a particular method at respective locations are intercepted by different replacement methods. Replacement methods have identical signatures, or are otherwise compatible. Some interceptors specify optional parameters. Method calls, field accesses, and property calls may be intercepted. Work to modify program behavior is moved in the program lifecycle from runtime to compile time, thus improving runtime performance and eliminating JIT compilation security risks.

Member invocation declarative interception

Restricting a web page's access to web services that do not display advertisements endorsed by the web service or its owner is described herein. A web page includes an IFrame where an advertisement is presented. The web page provides the functionality of a web service by communicating requests to a server hosting the web service. On a client computing device, a user may initiate a request to access the web service. The request may be sent to a broker configured to submit the request to the hosting server. The web service is exposed in such a way that it can only be called by an endorsed IFrame, also responsible for displaying advertisement on the web page.

Ad-funded web services

Methods for preventing unauthorized scripting. The invention generates a human interactive proof to distinguish a human from a machine by generating a random set of characters and altering each of the characters individually to inhibit computerized character recognition. The invention also includes concatenating the altered characters into a character string to be rendered to a user as a test. The character string may be altered to further inhibit computerized character recognition. Other aspects of the invention are directed to computer-readable media for use with the methods.

Content alteration for prevention of unauthorized scripts

Methods and system of preventing unauthorized scripting. The invention includes providing one or more tests to a user for distinguishing the user from a machine when the user requests access to the server. By storing information on a correct solution to the test in a block of data and sending the block of data together with the test, the invention provides stateless operation. Moreover, maintaining a database of previously used correct responses prevents replay attacks. The invention also includes providing combinations of alternative tests, such as visually altered textual character strings, audible character strings, and computational puzzles. Other aspects of the invention are directed to computer-readable media for use with the methods and system.

Prevention of unauthorized scripts

A human interactive proof (HIP) service is described. In response to a request from a web server, the HIP service generates a HIP challenge and an associated attestation. The web server can then embed the generated HIP challenge in a requested web page. The attestation is used to determine whether or not a user response to the HIP challenge is correct.

Human interactive proof service

Growing community of inventors

Kirkland, WA, United States of America

Julien Couvreur