Microsoft Technology Licensing, LLC

Mashuri R Libman

Anatoly Victor Koretsky

Jack Kabat

Krishna Kumar Parthasarathy

Hao Zhang

Lucy Chao

Lynn Ayres

Benjamin Travis Stull

Andrey Shur

Neelamadhaba Mahapatro

Sowmy Srinivasan

Vikram Kakumani

Yongjun Xie

David Alexander Blyth

Sridharan Ramanathan

Joseph Schulman

Liphi Gao

Yu Meng Li

William Birkin Lees

William S Jack

Vidyaraman Sankaranarayanan

Gregory C Johnson

Raja Charu Vikram Kakumani

Jinghua Chen

Serguei Martchenko

Srivalli Chavali

Mark Alan Mullins

Leif Christian Brenne

Richard Wesley Holley

Devesh Srivastava

Lucy L Chao

Disclosed are embodiments to manage modifications to a document such that the document conforms to requirements of a label. In some aspects, input assigning a label to a document is received. The label indicates requirements for the document. For example, the label marks the document as confidential, and requires the document to be encrypted when leaving a secure environment. The label may include additional requirements, such as particular watermarking or other content modifications to the document based on the confidential label. A device may be capable of modifying the document such that it satisfies only a subset of the label's requirements. The device then generates a message indicating a gap between the label's requirements and the state of the document, and sends the message to a network service. The network service is configured to augment the document as specified by the additional requirements indicated in the message.

Use of client compute for document processing

Systems and/or methods for deploying and implementing data loss prevention (DLP) policy definition that may encapsulate the requirements, control objectives and directives, and/or the definitions of sensitive data types as stipulated directly or indirectly by the regulatory policy are disclosed. In one embodiment, DLP policies may be identified by an organization to run on top of a set of electronic file systems (e.g., email systems, file systems, web servers and the like). Organizations and their administrators may implement a set of DLP policy instance which are derived from DLP policy templates. DLP policy templates may comprise both structure and meaning&#x2014;and may acquire a given DLP policy by the replacement of parameterized expressions with desired parameter values. In another embodiment, the state of the DLP policy instance may change according to the lifecycle of the policy instance deployment.

Data detection and protection policies for electronic file systems

User input mechanisms are displayed for defining a compliance policy update. A unified compliance policy update is generated according to a unified schema that is consistent across different workloads. The unified compliance policy update is sent to a workload where it is deployed.

Unified generation of policy updates

A policy tip or end user notification is provided for data loss prevention in collaborative environments. A document interactivity application detects an action or trigger by an end user that affects a document. The document is processed, through a classification engine and a unified policy engine, with policies based on the action to detect a matched policy. A policy tip associated with the matched policy is identified and displayed on the display device in association with the document.

Providing policy tips for data loss prevention in collaborative environments

A set of compliance policy updates are received. The compliance policy updates are sent to workloads for application. A status of the application of the compliance policies to the workloads is received from the workloads and output.

Communicating status regarding application of compliance policy updates

System and methods for the implementation and/or enforcement of an email policy for an organization's email system are presented. A Data Loss Prevention (DLP) policy may be implemented on top of the email system. In one embodiment, the DLP policy may comprise modules and/or processing that tests emails for such sensitive data within emails. If an email comprises such sensitive data, then the DLP policy directives may specify processing to be applied as part of each stage of mail processing, from authoring to mail processing on the server and delivery. A single policy may be authored and managed that will apply the policy directives uniformly across all aspects of the message lifecycle. Each of the message policy enforcement systems may evaluate the single policy definition and apply the policy directives in a manner consistent with the contextual evaluation of the policy.

Uniform policy for security and information protection

Data detection and protection policies for e-mail

Communicating with a distributed service in the network computing environment. A method for communicating with a distributed service includes referencing a configuration registry to determine resources and permissions in a potential distributed service entry. A potential distributed service entry identifies a distributed service corresponding to the potential distributed service entry that is authorized to exist by virtue of an entry in the configuration registry for the potential distributed service entry specifying that the distributed service may exist, whether or not the distributed service corresponding to the potential distributed service entry exists. The method further includes using the resource information, attempting to contact the distributed service corresponding to the potential distributed service entry. Permissions of the distributed service corresponding to the potential distributed service entry are verified to match permissions of the potential distributed service entry.

Decomposing installation of distributed services

Growing community of inventors

Woodinville, WA, United States of America

Mashuri R Libman