Microsoft Technology Licensing, LLC

Cloudflare, Inc.

S2 Systems Corporation

Michael John Conrad

Killian Koenig

Trevor Sundberg

David Harnett

Darren Remington

Benjamin Buzbee

Kyle James Krum

Geoffrey John Hulten

Umaimah A Mendhro

Dijia Wu

Darren B Remington

Chun-Te Chu

Jinyu Li

Zhengyou Zhang

Zicheng Liu

Xu Miao

John L Miller

Fang Wen

Yichen Wei

Geoff Hulten

Qin Cai

Javier Hernandez Rivera

Jonathan L Shriver-Blake

Diana Anca Carutasu

Sarat C Manni

Aamir Jawaid

Tim Burrell

David DeBarr

A server receives from a client device that is executing a client application a request to initiate a remote application in the server. The server instantiates an instance of the remote application. The server intercepts draw commands associated with the remote application instance. The server provides the draw commands to the client to cause the client application to render portion(s) of output based on the draw commands. The server receives an input event from the client application. The server provides the client one or more draw commands based on the input event to cause the client application to render portion(s) of output based on those draw commands.

Application remoting across a network using draw commands

Methods, systems, and techniques for application isolation by remote-enabling applications are provided. Example embodiments provide an Adaptive Rendering Application Isolation System ('ARAIS'), which transparently enables applications to run in an isolated execution environment yet be rendered locally in a manner that facilitates preventing theft of sensitive information while allowing users to interact with any third-party application or website via the local environment without overburdening available bandwidth or computational resources by, in some cases, evaluating only select information responsive only to select events, as compared to whitelist/blacklist techniques, monitoring all information provided by the user, or other techniques. The ARAIS typically includes an orchestrator server that comprises one or more of a sensitive-information theft-prevention logic engine, information-theft prevention engines, or a rules engine. These components cooperate to deliver isolation-ready technology with sensitive-information theft prevention to client applications.

Theft prevention for sensitive information

A client device instantiates an isolator application. A request to instantiate a remote application in a server device is sent by the isolator application instance. The isolator application instance receives, from the remote application instance, draw commands and position information that correspond to the draw commands. The isolator application instance renders one or more portions of output based on the draw commands and the position information.

Remoting application across a network using draw commands with an isolator application

A server receives from a client device that is executing a web browser application a request to initiate a remote application in the server. The server instantiates an instance of the remote application. The server intercepts draw commands associated with the remote application instance. The server provides the draw commands to the client to cause the web browser application to render portion(s) of output based on the draw commands. The server receives an input event from the web browser application. The server provides the client one or more draw commands based on the input event to cause the web browser application to render portion(s) of output based on those draw commands.

Web browser remoting across a network using draw commands

This document describes techniques and apparatuses for determining an audience's state or interest using passive sensor data. The techniques receive sensor data that measures an audience during presentation of a media program. The techniques, based on this sensor data, then determine a state or interest of the audience members during the media program.

Determining audience state or interest using passive sensor data

Methods, systems, and techniques for application isolation by remote-enabling applications are provided. Example embodiments provide an Adaptive Rendering Application Isolation System ('ARAIS'), which transparently and dynamically enables applications to run in an isolated execution environment yet be rendered locally in a manner that minimizes the amount of data to be transferred and the latency caused by expensive computation and/or by overburdening available bandwidth by remoting rendering using draw commands over rendering using pixel pushing or other techniques. In one embodiment, the ARAIS includes an orchestrator server which comprises remoting level determination logic and rules engine, pre-computed graphics libraries, connection support logic, data repositories for objects such as a render cache, whitelists, blacklists, client privileges, and application information, and one or more secure containers running remote application instances. These components cooperate to deliver isolation-ready technology to client applications.

Application remoting using network vector rendering

Systems and methods for identifying a false representation of a human face are provided. In one example, a method for identifying a false representation of a human face includes receiving one or more data streams captured by one or more sensors sensing a candidate face. In a plurality of stages that each comprises a different analysis, one or more of the data streams are analyzed, and the stages comprise determining whether a plurality of candidate face depth points lies on a single flat plane or a curving plane. Based at least in part on determining that the plurality of candidate face depth points lies on the single flat plane, an indication of the false representation of the human face is outputted.

False face representation identification

Methods, systems, and techniques for application isolation by remote-enabling applications are provided. Example embodiments provide an Adaptive Rendering Application Isolation System ('ARAIS'), which transparently and dynamically enables applications to run in an isolated execution environment yet be rendered locally via a local isolator application having one or more cohesive application-isolation interfaces in a manner that facilitates providing the ARAIS indications of user actions that are otherwise lost and executing functions that are otherwise unavailable during fully secure isolation sessions absent one or more cohesive application-isolation interfaces. In one embodiment, the ARAIS includes an orchestrator server which comprises remoting level determination logic and rules engine, pre-computed graphics libraries, connection support logic, data repositories for objects such as a render cache, whitelists, blacklists, client privileges, and application information, and one or more secure containers running remote application instances. These components cooperate with the one or more cohesive application-isolation interfaces of the isolation application to provide isolation sessions with a user experience that is typically available only during non-isolation sessions.

Local isolator application with cohesive application-isolation interface

Examples are disclosed herein that relate to detecting spoofed human faces. One example provides a computing device comprising a processor configured to compute a first feature distance between registered image data of a human face in a first spectral region and test image data of the human face in the first spectral region, compute a second feature distance between the registered image data and test image data of the human face in a second spectral region, compute a test feature distance between the test image data in the first spectral region and the test image data in the second spectral region, determine, based on a predetermined relationship, whether the human face to which the test image data in the first and second spectral regions corresponds is a real human face or a spoofed human face, and modify a behavior of the computing device.

Spoofed face detection

Growing community of inventors

Redmond, WA, United States of America

Michael John Conrad