Microsoft Technology Licensing, LLC

Kevin Andrew Chan

Jose Araujo Barreto

Jyotsana Rathore

Gregory Powell Young

Gabriela Kornelia Kaczka

Daron Spektor

Deepak Sreenivas Pemmaraju

Robert C Turner

Steven James Bailey

Aleksander R Kolcz

John David Rodrigues

Bruce Wayne Copeland

Andrew Keith Glover

Meir Elie Abergel

Ryan Charles Colvin

Robert L McCann

Ronakkumar N Desai

Patrick Moulhaud

Chad W Mills

Bradley J Barrows

Jackson Stuart Cowan

Aakash Kambuj

Filip C Lazar

Shepherd Walker

Stephane Cavin

Peter Daniel Henderson

Jacob C Schieber

Jahnavi Akella

YanWen Qiao

Data associated with a user account is stored at the cloud-based storage service. A portion of the data is associated with a heightened authentication protocol. A request for an application to access data that is associated with the heightened authentication protocol is received at the cloud-based storage service. The request may include an indication that the application is configured to interact with data with the heightened authentication protocol. The request is authenticated based on the heightened authentication protocol. In response to authenticating the first request, permission is granted to the application to access the data that is associated with the heightened authentication protocol. In response receiving requests that do not include the indication that the application is configured to interact with data with the heightened authentication protocol, data pertaining to the portion of the data with the heightened authentication protocol is hidden.

Hiding secure area of a file storage system based on client indication

A system is provided for controlling access to data stored in a cloud-based storage service. Data associated with a user account is stored at the cloud-based storage service. A first request to cause a portion of the data to be associated with a heightened authentication protocol is received. In response, the portion of the data is caused to require the heightened authentication protocol for access. A second request for a file that is stored in the area that is associated with the heightened authentication protocol is received. The second request is authenticated based on the heightened authentication protocol. In response to authenticating the second request, permission is granted to access the file. In response to a failure to authenticate the second request, access to the file is denied, while access to files stored in other areas associated with the user account is allowed.

Secure area in a file storage system

A system is provided for facilitating access to data stored in a cloud-based storage service. Data associated with a user account is stored at the cloud-based storage service. A portion of the data is associated with a heightened authentication protocol. A request for an application to receive data that is associated with the heightened authentication protocol is received at the cloud-based storage service. In response to the request, the request is authenticated based on the heightened authentication protocol. In response to authenticating the request, permission is granted for the application to receive the data that is associated with the heightened authentication protocol. In response to a locking of the data that is associated with the heightened authentication protocol, an indication that the data is unavailable is sent to the application.

Synchronization in a file storage system using authentication-state-based permissions

A system is provided for controlling access to data stored in a cloud-based storage service. A first request is received to access data stored at the cloud-based storage service, the data associated with a user account. The first request is authenticated based on a username and password associated with the user account. A second request is received for a file that is stored in an area associated with a heightened authentication protocol. The heightened authentication protocol is performed to authenticate the second request. In response to authenticating the second request, permission is granted to a temporary strong authentication state. The permission is to access the file that is stored in the area associated with the heightened authentication protocol. In response to a failure to authenticate the second request, access to the file that is stored in the area associated with the heightened authentication protocol is denied, while access to files stored in other areas associated with the user account is allowed.

Authentication state-based permission model for a file storage system

A system is provided for controlling access to data stored in a cloud-based storage service. Data associated with a user account is stored at the cloud-based storage service. A portion of the data is associated with a heightened authentication protocol, a first request receiving, at the cloud-based storage service, for an application to access data that is associated with the heightened authentication protocol. The first request is authenticated based on the heightened authentication protocol. In response to authenticating the first request, permission is granted to the application to access the data that is associated with the heightened authentication protocol. The permission is time-limited. It is determined that the application is editing the data that is associated with the heightened authentication protocol. Permission for the application to access the data while the application is editing the data is temporarily extended.

Editing using secure temporary session-based permission model in a file storage system

Systems, methods, and software technology for governing resource utilization in a computing environment. In an implementation, a governance thread started by a job manager process identifies threads running within the job manager process and associates each of the threads with one of various jobs. The governance thread then tracks a resource utilization level of each of the jobs based on the resource utilization level of each of the threads associated with the job. When the resource utilization level of any of the jobs exceeds a threshold, the governance thread is able to shut down at least one of the threads associated with the job.

Enhanced governance for asynchronous compute jobs

Variety of approaches to provide an autonomous governor in a distributed system for preserving a shared resource are described. A hosted service initiates operations to provide the autonomous governor upon determining the shared resource to be managed. An initial lease count is designated to the shared resource. The initial lease count corresponds to an estimated capacity of the shared resource. Next, an assigned lease count is determined by incrementing or decrementing the initial lease count based on a detected actual capacity of the shared resource. Upon detecting a steady state of the assigned lease count, the assigned lease count is incremented to determine whether the actual capacity of the shared resource is increased.

Autonomous resource governor in distributed systems for protecting shared resources

One or more techniques and/or systems are disclosed for efficiently storing metadata of partitioned data (e.g., directed to a specific individual/user). A first subset of data is identified from the set of partitioned data. The first subset of data comprises data that has a high frequency of access, and may be identified, at least in part, by frequency of access metadata that is associated with the data in the set. Metadata, such as discovery information, permissions, version info, etc., that is associated with the data in the first subset can be stored in low latency (e.g., fast) storage, proving more efficient access. Metadata associated with data from the set of partitioned data that is not in the first subset (e.g., that is not accessed frequently) can be stored in higher latency (e.g., slower, less expensive) storage.

Efficient metadata storage

Detecting spam from metafeatures of an email message. As a part of detecting spam, the email message is accessed and a distribution of numerical values is accorded to a set of features of the email message. It is determined whether the distribution of numerical values accorded the set of features of the email message is consistent with that of spam. Access is provided to the determination of whether the email message has a distribution of numerical values accorded the set of features that is consistent with that of spam.

Detecting spam from metafeatures of an email message

Growing community of inventors

Redmond, WA, United States of America

Kevin Andrew Chan