Microsoft Technology Licensing, LLC

Manu Vasandani

Scott David Guthrie

Mark T Anders

Erik B Olson

Dmitry Robsman

Erik B Christensen

Stephen James Millet

Nikhil Kothari

David S Ebbo

Stefan Harrington Pharies

Keith W Ballinger

Anthony J Moore

Yann Christensen

Fabio A Yeon

Susan M Warren

Robert Michael Howard

Adam Wade Smith

Suzanne Maurine Cook

Mark A Boulter

Jayanth V Rajan

Satoshi Nakajima

John Peter Shewchuk

Michael Joseph Toutonghi

Jonathan C Hawkins

Stewart P MacLeod

Gary Steven Burd

Casey Kiernan

Bilal Alam

Jeffrey M Cooperstein

Anders Hejlsberg

Gopala Krishna R Kakivaya

Amit Gupta

Yan Valerie Leshinsky

Christopher Wellington Brumme

Giovanni Moises Della-Libera

Michael M Magruder

Raja Krishnaswamy

David Bau

Brian LaMacchia

Gregory Darrell Fee

Lance Olson

Henry L Sanders

Julie D Bennett

James S Miller

Sean Edwin Trowbridge

Travis Muhlestein

Krzysztof J Cwalina

Seth Mitchell Demsey

Brian M Grunkemeyer

Luca Bolognese

Christopher L Anderson

Shawn Patrick Burke

Yung-Shin Lin

Loren Kohnfelder

Brian Keith Pepin

Jun Fang

James H Hogg

Corina Eva Feuerstein

Nicholas M Kramer

Craig T Sinclair

David S Mortenson

Caleb L Doise

Shajan Dasan

Alan Geoffrey Boshier

Chad W Royal

Manish S Prabhu

Radu Rares Palanca

Tarun Anand

Mark W Fussell

Joseph L Roxe

John I McConnell

Jesus Ruiz-Scougall

Omri Gazitt

Joe Dennis Long

Ramasamy Krishnaswamy

Sreeram Nivarthi

Hany E Ramadan

Nithyalakshmi Sampathkumar

Daniel Takacs

Daniel Dedu-Constantin

Neetu Rajpal

Blaine J Dockter

William A Adams

Mark P Ashton

Subhag P Oak

Tarun Ramsinghani

Parthasarathy Krishnaswamy

Marchel Cohn

Parasuraman Narasimhan

Eric B Olsen

Embodiments are directed to securing mixed-mode applications in a semi-trusted environment. In an embodiment, a computer system securely loads native data files associated with a mixed-mode application. The secure loading ensures that the native components upon which the managed component depends are authentic. The computer system implements a securely stored handle associated with the loaded native data files to provide secure communications between the managed component and the loaded native data files. The handle provides a trusted function pointer to an associated mixed-mode application function. The computer system also initiates a security permission request for each resource that is passed to the native components during execution of the mixed-mode application, so that each resource is verified before execution.

Securing mixed-mode applications

An application program interface (API) provides a set of functions for application developers who build Web applications on Microsoft Corporation's .NET&#x2122; platform.

Application program interface for network software platform

Computing system and method for allowing plurality of applications written in different programming languages to communicate and request resources or services via a common language runtime layer

System and methods for protecting sensitive data stored in a text-based configuration file. In a web server application, data associated with sensitive information such as connection information for a remote database may be stored within a configuration file and accessed whenever a request for information from that database is received. To prevent unwanted access to remote database, the portion of the configuration file with sensitive information is encrypted. A decryption provider selected by the requesting server or client application decrypts the sensitive data using the decryption key, retrieves protected data from the remote database, and the configuration server provides a response based on the sensitive data protecting access to the remote database. The encryption/decryption process is transparent to the web server application consuming the configuration.

System and method for protecting configuration settings in distributed text-based configuration files

A network-based distributed application system is provided in accordance with the present invention for enabling services to be established locally on a client system. The system may include an application and presentation logic, at least a portion of which is interchangeably processed by a server or a client without modification to the portion. The core functionality provided by the application may be preserved between the client and the server wherein improved network performance may provided along with improved offline service capabilities.

System and method providing multi-tier applications architecture

A method, system, and article of manufacture for providing an authentication and authorization pipeline for use in a web server to grant access to web resources to users. The server creates an entry within an userID to roles database for each user who may access resources present on the web server and creates an entry within the roles to resource database for each resource that may be accessed on the web server. The server then authenticates the identify of each user accessing a resource on the web server using a userID, one or more authentication parameters, and a resource access request, creates a data object having an authenticated userID and one or more roles corresponding to the authenticated userID obtained from the userID to roles database, and authorizes access to a resource identified within the resource access request if one or more roles within the data object correspond to an access role corresponding to the roles listed within the roles to resource database for the identified resource.

Authentication and authorization pipeline architecture for use in a server

An application program interface includes a first class to provide information regarding a current HTTP request. The application program interface also includes a second class to manage HTTP output to a client and an object to provide access to server-side utilities and processes. Particular application program interfaces include additional classes to manipulate cookies, handle file transfers, provide exception information, or control operation of an output cache.

Application program interface that enables communication for a network software platform

Authentication and authorization pipeline architecture for use in a web server

A user specifies one or more queries comprising a batch of SQL statements. Each query submitted is displayed and represented as a tree, with each operation in the execution plan for the query represented by a corresponding tree node. This representation intuitively conveys the DBMS execution strategy which would be used to process the queries. The tree nodes are displayed as icons, with a unique one of such icons corresponding respectively to each of the possible query operations. In addition, the computing cost of each operation (each node) as a percentage of overall query cost is displayed, as is the cost of each query as a percentage of the overall cost of the specified query batch. A user may select an operation (tree node) with a conventional mouse, whereupon a user interface will show more detailed cost statistics relating to the selected operation.

Graphical query analyzer

Growing community of inventors

Bellevue, WA, United States of America

Manu Vasandani