Microsoft Technology Licensing, LLC

Other

Mark Robbin Brown

Jeffrey Bruce Parham

Murli D Satagopan

Kim Cameron

William Birkin Lees

George G Robertson

Bhalchandra Pandit

Donald J Hacherl

Laszlo Lovasz

Nicholas J A Harvey

Van H Vu

Katalin Vesztergombi

Eric P Traut

Richard Bruce Ward

Raymond W McCollum

Max L Benson

Matthias Adam Leibmann

Daniel Richard Higgins

Jose Bernabeu-Auban

Colin Harrison Brace

Suyash Sinha

Alexander M Sutton

James H Booth

Adam D Stritzel

Radu Rares Palanca

Tahsin Erdogan

Adriaan W Canter

Darryl E Havens

David W Fye

Mannan Mohammed

Steven F Wright

Saivendra Kayal

Ron Tielke

Nathan Dolly

Dave Detlef Staube

Jorg T Pfenning

Embodiments described herein are directed to providing scalability to software applications. A computer system partitions a portion of data stored in a directory services system into multiple different data partitions. Each data partition includes a primary writable copy and at least one secondary read-only copy of the data. The computer system receives a client request for a portion of the data that is stored in the directory services system and accesses various stored partition mappings to determine which of the different data partitions includes the requested data. The computer system also accesses a dynamic copy locator to determine which of the read-only copies of the indicated partition to access and provide the accessed primary writeable copy of the indicated partition and the determined read-only copy to the client in a virtualized manner so that the client is not aware of the data partitions.

Cloud scale directory services

Automatic allocation of data replicas

Multiple software component identifiers are maintained in a catalog of an operating system running on a device. Each of these software component identifiers corresponds to one of multiple software components installed on the device. The catalog is accessed in response to a request regarding one of the multiple software components, and the request is responded to based at least in part on information included in the catalog. Additionally, two or more versions of a software component that are installed on the computing device can be identified. Which one of the two or more versions of the software component is an active version of the software component to be run is determined. In response to requests for information regarding the software component, information regarding the active version of the software component is returned.

Catalog-based software component management

Embodiments are directed to synchronizing scopes between a source database and a target database without the target database specifying each scope that is to be synchronized and to determining scope changes based on service subscriptions. In one scenario, a source database receives from a target database a synchronization scopes policy corresponding to scope criteria provided by the target database. The synchronization scopes policy includes both the scope criteria and a version identifier that together identify a point-in-time snapshot of the set of scopes meeting the scope criteria as of the latest synchronization. The source database resolves the set of scopes last synchronized from the source database to the target database based on the synchronization scopes policy's scope criteria and version identifier. The source database synchronizes to the target database the changes to data in the resolved set of scopes.

Scalable policy-based database synchronization of scopes

An authorization framework located external to an application may be invoked to determine user authorization for a requested application component. Small amounts of supplemental authentication code are added to application code to invoke provider modules within the authentication framework. The provider modules perform authorization functions outside of the application and return authorization results to the application. The functions include determining a user role, determining the permissions associated with the user role, comparing the role permissions to the security defined on the requested application component by a rule, and returning an authorization state to the authentication framework. The supplemental authentication code may invoke one or more providers through provider interfaces that translate requests to a particular provider. Using the provider based authorization framework, authorization for an application component is achieved externally without hard-coding authorization code within the application itself.

Modular enterprise authorization solution

A therapeutic device for thermally assisted urinary function is presented. The therapeutic pad () is composed of an upper thermal element () and a lower thermal element () having a portal (), both elements substantially cup-shaped to cover and contact the groin. The therapeutic pad () is composed of a material sufficiently capable of storing energy from either an external or internal source. The therapeutic pad () communicates stored energy as heat to tissues comprising the groin and regions adjacent thereto. The portal () allows for the unimpeded flow of urine from the urinary tract into a receptacle. A variety of alternate embodiments are provided, including lift tabs (), an extension element () for heating the perineum, a portal sleeve () for heating the penis, a slit () which bisects the therapeutic pad () and portal sleeve (), a pair of rings () to open and close the slit (), an interior cover () about the therapeutic pad () for applying moist heat, and support elements () along the therapeutic pad ().

Therapeutic device for thermally assisted urinary function

A new method and framework for re-partitioning directory servers supporting user services in a site that receives access requests from users. According to the present invention, a management server transfers groups of directory objects from original directory servers to newly added directory servers without service interruption to users of the site. The directory objects are stored in categorical groups such that the directory objects in each group share an attribute. According to the present invention, certain groups in the original directory servers are identified for migration to the newly added servers based on a load-balancing scheme. In one embodiment, the identified groups are marked for migration to limit access to the directory objects therein. After successfully being migration, the groups are unmarked and access is resumed. In another embodiment, the management server includes a table storing location information that is updated to indicate successful transfer of the identified group of directory objects from the original server to the newly added server.

Re-partitioning directories

The described systems and methods dynamically generate a data polyarchy from information received from a data store (e.g., a directory or database). The data polyarchy represents multiple hierarchies of inter-object relationships based on values of attributes of the objects. These multiple hierarchies are generated and represented in a manner that is independent of object naming and predetermined static hierarchical data structures.

Dynamically generating multiple hierarchies of inter-object relationships based on object attribute values

A network computer maintains a directory of objects having multi-valued attributes. The attributes are comprised of individual linked values having conflict-resolution data that indicates a change to an object at an attribute-value level. A second network computer stores a replica of the directory in which a replica of the objects is maintained. The computers replicate the objects in the directories and update the individual linked values of the attributes. Replication conflicts are identified and resolved with the conflict-resolution data at the attribute-value level of the objects.

Multi-level replication and conflict resolution

Exemplary methods and systems provide a relational directory of organizational information. Organizational data objects and their associated attributes are maintained in a relational directory. An organizational hierarchy is converted to a relational directory using projection, joining, and import attribute flow rules. Attributes in a relational directory may be exported out of the relational directory to a hierarchical directory.

Relational directory

A method for designating communication paths in a computer network is provided, in which communication paths are designated for the transmission of data throughout a network. The network may have both recipient computers, which are the intended recipients of the data, and intermediary computers, which are not the intended recipients, but merely relay the data. Each intermediary computer is grouped with the 'closest' recipient computer (i.e. the recipient computer with whom it is 'least expensive' to communicate). Communication paths between the resulting groups are then identified. A representation of the network is then created. The representation replaces the intermediary computers with the inter-group communication paths, so that the inter-group communication paths appear to pass directly through the locations occupied by the intermediary computers. The created representation is then further processed so that the &#x201c;least expensive&#x201d; communication paths may be designated.

Method for designating communication paths in a network

Systems and methods are presented to dynamically generate multiple hierarchies of inter-object relationships based on object attribute values. In one aspect, a data structure includes a first virtual object data field to represent a first object of multiple objects in a data store. A second virtual object data field represents a second object of the multiple objects. Attributes of the first object intersect with attributes of the second object to form multiple hierarchies of inter-object relationships.

Linked value replication

An improved system and method for network management is presented which facilitates better administration with a more intuitive reflection of the organizational structure with integrated security concerns by introducing novel strategies for grouping users of a network. In particular, a new group, the Universal Group, is introduced to facilitate nested groups with members in more than one Domain. Members of a universal group may be allowed access to resources across Domain boundaries, where Domains reflect a security boundary in the Network. In addition, the nesting of groups, e.g., within Universal Groups, is enabled, subject to some restrictions, in order to reduce the overhead associated with discovering the groups to which a user belongs. Furthermore, allowing a group to include members without security clearance, but restricting the groups listed on an access token corresponding to a user to groups to which the user has security clearence/authorizarion allows flexible management of groups having similar memberships but different security attributes.

Group types for administration of networks

Growing community of inventors

Seattle, WA, United States of America

Mark Robbin Brown