Microsoft Technology Licensing, LLC

Konstantin E Ryvkin

Srinivasachakrapani Kotipalli

Gregory Irving Thiel

Parul Manek

Ayla Kol

Chittaranjan Sadanand Pattekar

Brad D Rutkowski

Paul James Andrew

Timothy Mark Moore

Malcolm Erik Pearson

Ariel Nicolas Gordon

Mihai Costea

Roy Williams

Benjamin Richard Vincent

Todd Carlyle Luttinen

Guruprakash Rao

Ross Peter Adams

Bryan Louis Porter

Saurabh Vats

Balasubramanian Swaminathan

Stephen M Patrick

Nasko Oskov

Michael Andres Carrillo Pinzon

Vijay Mohan Ankireddi

Shayon Gupta

Brad Rutkowski

Odin J Anderson

A client-side system detects a current location of a client device and a cloud interaction metric. The geographic area around the location of the client device is divided into grid sections. The client-side system identifies a pre-defined reference location corresponding to the grid section that the client device location resides in. The pre-defined reference location, corresponding to that grid section, and the cloud interaction metric are provided to a remote server computing system.

Abstracting geographic location to a square block of pre-defined size

A latency processing system detects traffic at a cloud service end point and analyzes packets in the detected traffic to identify a network configuration of a client that is accessing the cloud service. Latency components corresponding to different parts of the network configuration are identified and quantified. A recommendation engine is controlled to generate and surface an output indicative of recommendations for reducing network latency.

Detecting and quantifying latency components in accessing cloud services

Non-personal network attributes of a user's network connection are detected. A user's physical location is classified as being onsite or remote based upon the non-personal network attributes. Connectivity performance information is generated indicative of a performance of a user device in connecting with the host computing system over the network, and a control signal is generated to surface performance information through an administrative system.

Detecting non-personal network and connectivity attributes for classifying user location

A method for directing network traffic includes, at a network device, receiving network traffic provided by one or more client computing devices. The network device directs the network traffic to a service entity over a first network path. A path quality indicator is received that indicates whether the network traffic directed over the first network path satisfies one or more experience criteria. Based at least on the path quality indicator indicating that the network traffic directed over the first network path does not satisfy the one or more experience criteria, the network device redirects some or all of the network traffic to the service entity over a second network path.

Network path redirection

Allowing an entity managed device to access a tenant associated with the e on a public cloud service while preventing the device from accessing one or more other tenants on the cloud service. A method includes, at the cloud service, obtaining policy from the entity with respect to tenant access. The method further includes, at the cloud service, receiving a request from the entity managed device to access a tenant at the cloud service. The method further includes granting or denying the access request based on the policy obtained from the entity.

Restricting access to public cloud SaaS applications to a single organization

Authentication requests are redistributed among a plurality of authentication servers and to centrally managing authentication affinities among distributed servers using a secure channels affinity service. A computer system instantiates a secure channel management service configured to manage secure channel connections. The secure channel management service receives state inputs from currently deployed authentication servers. The authentication servers may be configured to queue authentication requests for transmission to authentication servers. The computer system determines that, based on the received state input, at least one of the secure channels is to be remapped to a different authentication server. The computer system also remaps the determined secure channels to distribute future authentication requests among the authentication servers. In some cases, the current state of an authentication proxy server is embedded in communications transmitted by the authentication server, such that the secure channel connections are managed using the embedded state information.

Dynamic load redistribution among distributed servers

An electronic mail message (EMM) addressed to a distribution list of an enterprise is received at a server of the enterprise from a sending address outside of the enterprise. If the distribution list has no external addresses, then the EMM is blocked from being delivered to the distribution list. In an embodiment, if the distribution list has an external address and the sending address is identified in a safe sender list corresponding to the distribution list, then the EMM is delivered to the distribution list. In an embodiment, if the distribution list has an external address, the sending address is not in a safe sender list corresponding to the distribution list, and the content of the message is approved, then the EMM is delivered to the distribution list.

Access limited EMM distribution lists

Growing community of inventors

Bellevue, WA, United States of America

Konstantin E Ryvkin