Microsoft Technology Licensing, LLC

Lynn Ayres

Yordan Ivanov Rouskov

Rui Chen

Trevin M Chow

Sarah Faulkner

Erren Dusan Lester

Wei-qiang Guo

Wei-Quiang Michael Guo

Michael C Kunz

Anatoly Victor Koretsky

Mashuri R Libman

Lin Huang

Vidyaraman Sankaranarayanan

Campbell D Gunn

Jack Kabat

Benjamin Travis Stull

David W Bailey

Andrey Shur

Kok Wai Chan

Vikram Kakumani

Brett A Tanzer

Naresh Jain

Joseph Schulman

Asaf Kashi

Jonathan Jay Cadiz

Tariq Sharif

Mark Rolland Knight

Pui-Yin Winfred Wong

Yamin Wang

Shobana Balakrishnan

Matteo Venanzi

Choon-mun Hooi

Rachel Sirkin

Raja Charu Vikram Kakumani

Alice Jane Brush

Tore L Sundelin

Amy Huyen Phuoc Nguyen

Robin Thomas

Nelson Siu

Christophe Jacky Henri Van Gysel

Kathryn Elizabeth Suskin

WeiQiang Michael Guo

Bhaskar Mitra

Kirk Fernandes

Mrigankka Fotedar

Grzegorz Stanislaw Kukla

Nicola Cancedda

Roy Rosemarin

Sri Ramya Mallipudi

Systems and methods are provided that automatically process a message input, construct an intelligent query based on the processing of the message input, and provide at least one attachable entity according to the processing results and the intelligent query. In some example aspects, a message is received. A natural language processor to determine if the message is requesting content may then process the message. If the message is determined to be requesting content, then candidate sub-queries may be generated to serve as a training set for a query that will be sent to an external search engine to retrieve the attachable entity. The sub-queries may be ranked in order of relevance and performance score. The highest ranked sub-queries may then be used in the actual query that is fired against the external search engine. The external search engine may search local and remote repositories for the top K most relevant attachable entities and present them to a user for attachment in a reply message.

Intelligent query system for attachments

Life events relating to a user are displayed on a calendar. A user may navigate to different time periods in the calendar and see past life events relating to the user displayed on the calendar. The life events that are displayed on the calendar may include different types of content and be determined from different sources. For example, the life events for the time period may be: pictures, events, social media posts, messages, and the like. Different content sources may be used to locate the life events relating to the user. The life events that are selected for display on the calendar may be shown differently from other content that is included on the calendar. The life events may be processed to adjust an appearance of the life event before it is displayed. A user may also share a life experience with other users.

Displaying life events while navigating a calendar

Systems and/or methods for deploying and implementing data loss prevention (DLP) policy definition that may encapsulate the requirements, control objectives and directives, and/or the definitions of sensitive data types as stipulated directly or indirectly by the regulatory policy are disclosed. In one embodiment, DLP policies may be identified by an organization to run on top of a set of electronic file systems (e.g., email systems, file systems, web servers and the like). Organizations and their administrators may implement a set of DLP policy instance which are derived from DLP policy templates. DLP policy templates may comprise both structure and meaning&#x2014;and may acquire a given DLP policy by the replacement of parameterized expressions with desired parameter values. In another embodiment, the state of the DLP policy instance may change according to the lifecycle of the policy instance deployment.

Data detection and protection policies for electronic file systems

A federated realm discovery system within a federation determines a 'home' realm associated with a portion of the user's credentials before the user's secret information (such as a password) is passed to a non-home realm. A login user interface accepts a user identifier and, based on the user identifier, can use various methods to identify an account authority service within the federation that can authenticate the user. In one method, a realm list of the user device can be used to direct the login to the appropriate home realm of the user. In another method, an account authority service in a non-home realm can look up the user's home realm and provide realm information directing the user device to login at the home realm.

Federated realm discovery

Embodiments of authenticating linked accounts are presented herein. In an implementation, an authentication service provides functionality to form links between a plurality of user accounts. A client may then authenticate by providing credentials for one account in a group of linked accounts, and is permitted access to each account in the group of linked accounts based upon the linking. Thus, a single sign-in of a client to one account may permit the client to obtain services for service providers corresponding to multiple linked accounts, without an individual sign-in to each account.

Authenticating linked accounts

Disclosed herein are methods for protecting user information on a client device that may have a plurality of users. A user interface with a public machine designation portion is presented to a user prior to the start of the authentication process. The public machine designation removes web service account descriptions and any user specific information stored on the client device. Also, the client device is prevented from storing any new user specific information that is provided to the client device. The public machine designation is a persistent feature that may only be disabled by an affirmative action from the user.

Persistent public machine setting

System and methods for the implementation and/or enforcement of an email policy for an organization's email system are presented. A Data Loss Prevention (DLP) policy may be implemented on top of the email system. In one embodiment, the DLP policy may comprise modules and/or processing that tests emails for such sensitive data within emails. If an email comprises such sensitive data, then the DLP policy directives may specify processing to be applied as part of each stage of mail processing, from authoring to mail processing on the server and delivery. A single policy may be authored and managed that will apply the policy directives uniformly across all aspects of the message lifecycle. Each of the message policy enforcement systems may evaluate the single policy definition and apply the policy directives in a manner consistent with the contextual evaluation of the policy.

Uniform policy for security and information protection

An authoring component determines the sensitivity of an authored document and generates a user interface conveying contextual educational information about data dissemination policies that apply to the document. The user interface also provides user input mechanisms that allow the user to provide inputs affect the enforcement of a given data dissemination policy on the document.

Educating users and enforcing data dissemination policies

Data detection and protection policies for e-mail

Embodiments of multi-user web service sign-in client side components are presented herein. In an implementation, the currently authenticated user account of a first application of a client is transferred to another application of a client. In another implementation, a common credential store is used to share data for a plurality of user accounts associated with a client between a plurality of applications of the client, and for the applications to output multi-user interfaces having portions corresponding to the plurality of accounts.

Multiuse web service sign-in client side components

Systems, computer-implemented methods, and computer-readable media for establishing an online account with a resource provider are provided. An authentication token including identification of a user from an authentication server is received. The identification of the user from the authentication token is utilized to establish an online account for the user with the resource provider. Additional credentialing information from the user for the online account is received. The additional information received from the user is associated with the online account for the user with the resource provider.

Identity ownership migration

Growing community of inventors

Bellevue, WA, United States of America

Lynn Ayres