Microsoft Technology Licensing, LLC

Michael D Smith

Eric J Hennings

Felix G T I Andrew

David Anthony Sobeski

Miller Thomas Abel

Brian J Smith

Steven P Anonsen

Seth Mitchell Demsey

Todd S Biggs

Michael A Angiulo

Campbell D Gunn

Geir Olsen

Christine McKee

Lee Charles Spiesman

Scott Corbin

W Michael Zintel

Michael Joseph Toutonghi

Max Glenn Morris

Bruce E Johnson

Oshoma Momoh

Lisa G Post

Brian A Lamacchia

John A Maffei

Access control for an application is described. An exemplary method includes receiving a first command of an application to invoke a function of a user interface, identifying a first authorization context based on a first user context and the function of the user interface invoked, retrieving a first access policy providing access criteria associated with the first authorization context, and applying the first access policy to the accessibility of the function. The method includes receiving a second command to invoke the function in a second instance of the application and identifying a second authorization context based on a second user context and the function of the user interface invoked. The second authorization context is different than the first authorization context. The method includes retrieving a second access policy providing second access criteria associated with the second authorization context and applying the second access policy to the accessibility of the function.

Application context based access control

Various embodiments can provide a virtual online robot (bot) or security agent. The agent or guardian can monitor on line conversations and can act to intervene in an event a conversation's content meets certain definable criteria that indicates that the content might be inappropriate or possibly harmful or risky. In at least some embodiments, the agent or guardian is configured to utilize natural language processing techniques to evaluate the context of a conversation across its span and/or conversations across individual users. Using natural language processing techniques, the agent or guardian can then present notifications or warnings to individual users (or others) when a particular conversation or portion thereof is deemed problematic.

On-line virtual robot (bot) security agent

A context based access control system that includes a set of one or more authorization contexts that are activated in response to selection of different functions or tasks or other functional boundary object of an application program. The authorization contexts are associated with one or more access policies that are invoked in response to activation of the one or more authorization contexts.

A dispute resolution system for requesting a service provider to provide services so that the service provider can demonstrate to a service intermediary that a service consumer requested services. A service consumer that wants to start requesting services of the service provider registers with the service intermediary an end code of a sequence of code generated using a one-way function. The service intermediary provides the end code to the service provider. The service consumer can then using codes of the sequence requests the service provider to provide services. When the service provider receives a request, it verifies that the code of the request can be used to derive the end code. If the verification is successful, then the service provider can provide the verified code to the service intermediary as non-repudiatable evidence of the services requested by the service consumer.

Method and system for a service provider to control exposure to non-payment by a service consumer

Various embodiments employ methods and techniques to enable users, and others, to manage or otherwise become more informed about applications or bots with which they interact. The methods and techniques, in at least some embodiments, can provide various types of indications, visual or otherwise, that pertain to various types of ratings that can be assigned to applications or bots and which can enable a user and others to assess the propriety, level and nature of their interaction with an application or bot.

Bot identification and control

Systems and methods for enabling users at a plurality of client computers to share a common browsing experience are provided. A server computer according to the invention includes an interface to a communications network for establishing a first link between the server and the host client computer and a second link between the server and the slave client computer. The server has a shared view engine for receiving from the host client computer, an identifier that identifies the slave client computer and a locator corresponding to content on the server. The shared view engine causes the server to deliver the content corresponding to the locator to both the host client computer and the slave client computer. Thus, the host client computer and the slave client computer are enabled to share browsing of the content received from the server. To enable the slave clients to share in the browsing experience, the host client can send information such as URL and cookie data to the slave clients. Using the information from the host client, the slave clients can request the same Web pages being viewed by the host client. Alternatively, the host client can request the content not only for itself, but for the slave clients as well.

Shared views for browsing content

A method of offloading compilation includes transmitting compilation information from a first subsystem to a second subsystem. The method also includes compiling computer program code into machine-executable code on the second subsystem based on the compilation information received from the first subsystem. The method further includes receiving the machine-executable code from the second subsystem into the first subsystem.

Method and system for accepting precompiled information

Method and system for resolving disputes between service providers and service consumers

The integrity of uniform resource locator (URL) references within web sites are maintained when changes occur in the locations where resources referenced by URLs are stored. A Referential Preservation Engine (RPE) maintains a database in which the location of web site documents and reference information are stored and updates various URL hyperlink references contained in the web pages on the site so that users can locate documents that have been moved to new storage locations. The RPE can also update links to external web sites by communicating with an RPE running on each external site. The RPE on the external site keeps track of the movement of linked documents on the sites and passes information pertaining to the new location of the linked documents to the local site, whereupon the links on the local web site pages are updated to reflect the new storage locations. The RPE also can track usage of a user's favorite sites and/or documents that are stored in an Internet browser and update the URL references for these favorites when the resources they are mapped to are moved (or renamed).

Method for preserving referential integrity within web sites

A dynamic filtering module receives a request to perform an operation on data in the database and a input. The dynamic filtering module provides as an output a modified request to a data access system. The modified request can include one or more restrictions added to the original request pertaining to which data will be accessed as a function of the input.

Dynamic filtering in a database system

The present invention is directed at a virtual machine environment operating on portable devices with limited resources. The virtual machine environment includes a method for compiling an intermediate language into native code wherein the native code is stored in a directly addressable and executable storage medium, such as flash memory. A portion of the native code is written to a cache resident in volatile memory during compiling. The cache is written to the directly addressable and executable storage medium. The cache may be sized in relation to a block size associated with the directly addressable and executable storage medium. A metadata map is maintained and associates a physical address at which the native code is stored in the storage medium with the method. The native code is persisted by storing the metadata map in the storage medium and associating the metadata map with the method.

System and method for persisting dynamically generated code in a directly addressable and executable storage medium

Contextual information concerning linked documents is promoted to display pages that contain hyperlinks to those documents. The contextual information can be immediately displayed, or it can be selectively displayed in response to a user selecting a text hyperlink anchor or a picture icon hyperlink anchor. Furthermore, the contextual information can include a variety of information about the linked document, including whether it has been modified within a predefined time period, such as the last 24 hours, a comment by the author concerning recent changes, and the size of the document. Preferably, the contextual information is automatically generated by a data promotion engine based on meta-data that is associated with the document and stored on a web site for the document. One of the types of contextual information stored in the meta-data is a manually defined category for a hyperlink in the display page.

Method for promoting contextual information to display pages containing hyperlinks

A method for ensuring the integrity of a receiving system in a distributed computing environment includes receiving information from a transmitting system. The method also includes testing whether the information is preverified information. If the information is not preverified, the method includes verifying the information or rejecting receipt of the information. If the information is preverified, the method includes testing if the information was received from a trusted transmitting system. If the information was received from a trusted transmitting system, the method includes accepting receipt of the information without reverifying. If the information was not received from a trusted transmitting system, the method includes verifying the information or rejecting receipt of the information.

Method and system for accepting preverified information

The present invention is directed at a virtual machine environment operating on portable devices with limited resources. The virtual machine environment includes a method for managing dynamically generated code and data together in order to shift memory usage to/from generated code or data as needed. Each application domain manages several code pools and several garbage collection pools that are allocated from a system memory heap. When additional memory is not available for allocation from the system memory heap, garbage collection is performed until sufficient memory becomes available. During garbage collection, unreachable data in each garbage collection pool is cleared. The garbage collection process may further compact the garbage collection pools in order to empty one or more of the garbage collection pools. Still further, code pools may be released back to the system memory heap if the generated code is not associated with a current application domain, is executed infrequently, or is not associated with an instruction on a stack. Thus, memory may flow from data to code or vice versa as needed and among application domains.

Growing community of inventors

Kirkland, WA, United States of America

Michael D Smith