Microsoft Technology Licensing, LLC

Luke Abrams

David Steeves

Krishna C Vitaldevara

Yordan Ivanov Rouskov

Eric Fleischman

Prabu Raju

Ramesh Manne

Winfred Wong

Hersh Dangayach

Niyantha Shekar

Payoj Baral

Meenakshi Ramaswamy

Pui-Yin Winfred Wong

Robert Alexander Sim

Mark A Nikiel

Laurentiu Bogdan Cristofor

Harry Simon Katz

Dana Scott Kaufman

Aaron Small

Adrian Kreuziger

Alexa Lynn Keizur

Collin Tibbetts

Charles Hayden

Ariel Nicolas Gordon

Ryan M Burkhardt

Aby John

In one embodiment, a user authentication server may use geo-location tracking to determine whether to present an enhanced identity challenge. A communication interfacemay receive a user login attempt by a user and a current location of the user login attempt. A data storagemay store a user location profile of the user. A processormay execute a comparison of the current location to the user location profile. The communication interfacemay present the user with an enhanced identity challenge before allowing user access based on the comparison.

Protection from unfamiliar login locations

One or more techniques and/or systems are provided for risk assessment. Historical authentication data and/or compromised user account data may be evaluated to identify a set of authentication context properties associated with user authentication sessions and/or a set of malicious account context properties associated with compromised user accounts (e.g., properties indicative of whether a user recently visited a malicious site, created a fake social network profile, logged in from unknown locations, etc.). The set of authentication context properties and/or the set of malicious account context properties may be annotated to create an annotated context property training set that may be used to train a risk assessment machine learning model to generate a risk assessment model. The risk assessment model may be used to evaluate user context properties of a user account event to generate a risk analysis metric indicative of a likelihood the user account event is malicious or safe.

Risk assessment modeling

In one embodiment, a cloud service interfaceor a device interfacemay filter messages in a message synchronization between a message service account and a cloud service account. A cloud service interfaceor a device interfacemay associate a message service accounton a user messaging devicewith a cloud service account. The cloud service interfaceor a device interfacemay execute a message synchronization between the cloud service accountand the message service account. The cloud service interfaceor a device interfacemay apply a message filter to the message synchronization.

Safety protocols for messaging service-enabled cloud services

When a user account is in an alternate (fault) state, communication or sync between an application provider and a device or client application typically is interrupted. When parties do not support rich fault messaging, communication of the reason for the interruption and remediation steps has been impossible. An application server provides rich fault messaging using applications that do not provide explicit error messaging and protocols that do not provide explicit error messaging without changing either the application or the protocol by additional interactions between an identity provider and the application server. The application server uses authentication state information provided by the identity server to generate a notification sync event that appears to the application and the protocol to be a normal sync event. The notification sync event is used to provide the user with information needed to determine what the problem with the account is and how to fix it.

Communicating state information to legacy clients using legacy protocols

Growing community of inventors

Seattle, WA, United States of America

Luke Abrams