Microsoft Technology Licensing, LLC

Krishna Kumar Parthasarathy

Hao Zhang

Neelamadhaba Mahapatro

Salil Kapoor

William James Whalen

Wayne Merl Cranston

Piyush Gupta

Anatoly Victor Koretsky

Mashuri R Libman

Lucy Chao

Faina Sigalov

Jonathan Sturgeon

Vinh Trinh

Yu Meng Li

Christopher Scott Dickens

Dheepak Ramaswamy

Nakul Garg

George Evangelos Roussos

Mingquan Xue

Kannan Dhanasekaran

Yongjun Xie

David Alexander Blyth

Liming Chen

Jinhao Li

Yonghua Yang

Martin Gagne

Rui Chen

Sowmy Srinivasan

Jack Kabat

Sridharan Ramanathan

Liphi Gao

Anatoliy Panasyuk

Shrey Nitin Shah

Wilbert De Graaf

Puhazholi Vetrivel

Philip Newman

Victor S Lee

Ashish Mishra

Jinghua Chen

Sudhakar Narayanamurthy

Michael Wilde

Binyan Chen

Shaun Michael Wallace

Syed Salah Ahmed

Prasanta Ghosal

Manas Singh

William Thompson

JiYe Gao

David Duan

Irfan Somani

Mingfeng Xiong

Anurag Pahwa

Bulent Egilmez

Zhi Wang

Keyan Raahemifar

Bhaswar Banerjee

Jitender Bisht

Christopher S Dickens

Lucy L Chao

Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Systems and methods for implementing content aware file management labeling

An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable access to the encrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in another mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Enhanced email service

An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable decrypted access to the decrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in an organizational mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with decrypted access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

The techniques described herein enable a user that sends an email message that includes encrypted content to define a time period during which a recipient of the encrypted content has decrypted access rights. To effectively define the time period, the user can set a time at which the decrypted access rights for the recipient expire. The time occurs after a time at which the email message is sent to the recipient. Upon expiration of the time period, the decrypted access rights to the encrypted content is revoked for the recipient of the email message, thereby providing a proactive element of security for confidential and/or sensitive information. Further, the techniques enable a user to revoke decrypted access rights to the encrypted content for a recipients at any given time after the email message has already been sent, thereby adding a reactive element of security for confidential and/or sensitive information.

Managing decrypted access rights to encrypted content in a message

Technologies are described for dynamic attachment delivery in emails for advanced malicious content filtering. An email service may intercept emails with attachments (or other threats such as links, embedded objects, etc.) and detach the threat (e.g., attachment) from the email allowing the email to be forwarded to the recipient without delay. The threat may be sequestered and analyzed. If the threat is determined to be harmless, it may be reattached to the email and the client notified so they can open the attachment, activate the link, or perform comparable actions.

Dynamic attachment delivery in emails for advanced malicious content filtering

An electronic mail (email) message is received at in email transport infrastructure and has a traffic type identifier identifying a traffic type. Function processing logic in the email transport infrastructure conditionally processes the email message based on the traffic type.

Electronic mail (e-mail) system support for messages with different traffic types

Techniques for labeling data files that enable a file management label to persist on a data file. Variations disclosed herein enable a file management label to be embedded within a data file so that the file management label propagates with the data file when the data file is copied and/or moved between systems and/or workloads. In some embodiments, an application may be configured to write the file management label directly into a stream of the data file. For example, an application client that is run locally on a client device may open the data file by accessing its corresponding stream. While the data file is open within the application client such that a user may edit content of the data file, the application client may be caused to associate the file management label with the data file. Ultimately, the application client may write this association directly into the stream.

Systems and methods for enabling a file management label to persist on a data file

Threat intelligence management is provided in a security and compliance environment. A threat explorer platform or module of a security and compliance service may detect, investigate, manage, and provide actionable insights for threats at an organizational level. Working with a data insights platform that collects different types of signals (metadata, documents, activities, etc.) and correlates in a multi-stage evaluation, the threat intelligence module may provide actionable visual information on potential threats, affected areas, and actionable insights derived from internal threat data and external information using contextual correlation of data within the data insight platform. User experience may be dynamically adjusted at multiple levels based on context and allow users to drill down arbitrarily deep.

Threat intelligence management in security and compliance environment

Technologies are described herein for providing instant processing of email messages. In particular, instant processing of email messages is provided for sending emails to allow for instant communication and collaboration. According to one aspect presented herein, a method is provided for instant or near instant delivery of a message across multiple organizations. The method includes receiving the message from a client. Additionally, the method sends the message via email to multiple recipients across multiple organizations.

Instant delivery of messages

Technologies are described herein for altering message properties within a message to indicate acknowledgement. In particular, types of acknowledgment may include delivery receipts, read receipts and non-read receipts. According to one aspect presented herein, a method is provided for acknowledging a message. The method includes receiving a message from a client and attempting to send the message to a recipient mailbox. Additionally, the method alters properties of the message in response to attempting to send the message.

Enhanced acknowledgment for messages

Technologies are described herein for providing delivery optimization of email messages. In particular, direct delivery system is provided for sending emails to allow for instant communication and collaboration. According to one aspect presented herein, a method is provided for instant or near instant delivery of a message. The method includes receiving the message from a client. Additionally, the method analyzes the message to determine if it meets one or more factors for taking a direct path.

Conditional instant delivery of email messages

Technologies are described herein for providing post-processing of messages. In particular, the post-processing of messages occurs without any condition that the message was delivered. This post-processing of messages allows for system redundancy. A message to be sent is received and undergoes a subset of operations prior to being sent out. Currently, the processing operations are more extensive prior to sending off a message. After the message is sent for delivery, the message outgoes additional processing, even if the message is not successfully delivered.

Enhanced delivery of a message for multiple recipients

Various embodiments are generally directed to techniques and apparatuses to facilitate message communication between registered entities of an email system and other non-registered entities. In one embodiment, a transport component executes on a logic circuit to receive a request to perform a function on an encrypted message. Information embedded in the request is identified to determine if the original request was sent by a registered entity. The embedded information is authenticated with information contained in an authentication information store associated with the original request and if the information is authenticated, the requested function is executed. In addition, if the requested function by the non-registered entity is to send an email message, rich scanning is performed on the email message to ensure the safety thereof.

Rich content scanning for non-service accounts for email delivery

Growing community of inventors

Redmond, WA, United States of America

Krishna Kumar Parthasarathy