Microsoft Technology Licensing, LLC

Ladislau Conceicao

Frank Byrum

Michael Thomas McLean

Amit Gupta

Matthias Adam Leibmann

Mayank Mehta

James Charles Kleewein

Sarat Chandra Subramaniam

Michael Nelte

Chandresh Kumar Jain

Brian Kress

Chris Barnes

Shashi R Singaravel

Greg Gourevitch

Alfons A Staerk

Priyank Deepak Sanghavi

Jayant Kishorbhai Manglani

Li Erran Li

Jeffrey B Kay

Trevor William Freeman

Glenn Block

Vanessa C Feliberti

Paul David Tischhauser

Steven Hubbell

Dean Shiyu Chiang

Timothy Yu-Rui Chen

Li Li

Systems and methods for generating a shared collaborative channel for collaboration are provided. In particular, a computing device may receive a request, from an originating member of an organization, to create the shared collaborative channel, the request including an invitee to be added to the shared collaborative channel. In response to receipt of the request, the computing device may provision a substrate group by creating a container associate with the shared collaborative channel including a substrate database associated with the shared collaborative channel, generate an invitation including a custom link to the shared collaborative channel for the invitee, and determine whether the invitee belongs to an originating collaboration team associated with the originating member based on the substrate database. If the invitee belongs to the originating collaboration team, the computing device may further update the substrate group to add the invitee as a new member of the shared collaborative channel.

Roster management across organizations

Systems and methods for enabling cross-tenant access are provided. In particular, a computing device may receive an access request, from a user of a first tenant, requesting access to a resource of a plurality of resources on a shared collaborative channel of a second tenant. The computing device may further evaluate cross-tenant access policies of the first and second tenants to determine that access to the plurality of resources is authorized by the first and second tenants, validate that the user is a member of the shared collaborative channel, and generate a validation token indicating the user is validated to access the plurality of resources. Based on the validation token, the computing device may further validate that the user is in compliance with the cross-tenant access policies for accessing the resource and grant the user a set of permissions to access the resource.

Cross-tenant access to lightweight group assets

A method performed by a computing system comprises accessing group subscription data that is associated with a user and identifies a plurality of different groups, each group being hosted by a corresponding client system. The group subscription data indicates that the user is subscribed to receive resource updates from the plurality of different groups. An aggregated set of resource updates is generated by aggregating resource updates associated with resources in the plurality of different groups. An integrated view renders the aggregated set of resource updates and includes an action user input mechanism representing a computing action to be performed in a corresponding one of the groups associated with at least one resource update. Based on user actuation of the action user input mechanism, a machine instruction instructs the client system, that hosts the corresponding group, to perform the computing action.

Integration of client system groups

A user interface provides mechanisms for a user to select resources from a plurality of different groups, across clients. Updates from all of the selected resources are aggregated and displayed to the user, across clients, in an integrated view.

Cross-client integration of groups

An email security system is described that allows users within different organizations to securely send email to one another. The email security system provides a federation server on the Internet or other unsecured network accessible by each of the organizations. Each organization provides identity information to the federation server. When a sender in one organization sends a message to a recipient in another organization, the federation server provides the sender's email server with a secure token for encrypting the message to provide secure delivery over the unsecured network.

Secure message delivery using a trust broker

Certificate remoting and recovery may be provided. A computer may identify required security certificates and determine whether at least one required security certificate is not available. If the certificate is not available, the computer may identify a peer server and request the missing certificate from the peer server. The computer may also be operative to receive certificate management instructions from other computers.

Certificate remoting and recovery

In one embodiment, a host entity may create a trusted connection with a guest entity. The host entity may encrypt a trusted connection invitation for an external guest entity using a proof of possession of a trusted token for the external guest entity. The host entity may transmit the encrypted trusted connection invitation to the external guest entity. A guest entity may decrypt the trusted token, and then use the proof of possession to decrypt the trusted connection invitation.

Establishing secure data transmission using unsecured E-mail

Growing community of inventors

Redmond, WA, United States of America

Ladislau Conceicao