Microsoft Technology Licensing, LLC

Nakul Garg

Kannan Dhanasekaran

Dheepak Ramaswamy

Mingquan Xue

Yu Meng Li

Krishna Kumar Parthasarathy

Liming Chen

Martin Gagne

Yonghua Yang

Jinhao Li

Rui Chen

Sanjay H Ramaswamy

Neelamadhaba Mahapatro

Charles Glenn Jeffries

Ricardo Soares Stern

Gagandeep S Kohli

Michael Wilde

Colin Harrison Brace

Tariq Sharif

Ning Xu

Le-Wu Tung

Rameshkumar Perumal

Samuel Johnson Shelton

Michael Dobrzynski

Wei-Qiang Guo

Amit Khanna

Daran Cai

Bin Hu

Marshal Ray Hagen

Kai Liang

Chong Chan Lyu

Tho Van Nguyen

Liming Hong

Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Systems and methods for implementing content aware file management labeling

An abstraction layer communicates with a plurality of applications executing on a multi-application platform. The abstraction exposes a standard interface for the plurality of applications to communicate content status information. An indication is received that a new content item will be generated. A record is generated that is immutably associated with the new content item. The record is updated with information received from the application associated with the content item, the information pertaining to a changed status of the content item. In response to a command to delete the content item, it is determined whether to confirm deletion of the content item based on one or more data retention policies. The record is updated to indicate a reason for granting or denying the deletion and a source of the delete command.

Integrated disposition for file retention management

A query scoping service enables administrators to scope a directory attribute bound query to an organizational boundary within an organizational structure. The directory attribute bound query may be scoped to a subset of users that have specific value(s) for specific user attributes. The directory attribute bound query includes a search string. Data that is analyzed with respect to the search string is limited to data that is stored in association with users that have specific value(s) for specific user attributes. In this way, data files that are stored in association with users that do not have the specific values for the specific directory attributes will be omitted from query results. The directory attribute bound query may be tied to data retention rules. Since the scope of the directory attribute bound query is defined based on the organizational structure, the query scope remains accurate notwithstanding changes occurring in the organizational structure.

Binding query scope to directory attributes

A unified document retention management system exposes a retention policy management portal to enable a user to selectively prescribe a unified retention policy to multiple productivity platforms to deploy the unified retention policy across the user selected productivity platforms. Data retention rules of the unified retention policy may define actions to be performed with respect to files that satisfy certain predefined conditions. An exemplary data retention rule prescribes a retention age threshold to files that have been tagged with a particular label. Files may be manually labeled by users and/or may be automatically labeled by the system in accordance with one or more smart label rules. The retention age threshold may be enforced for such tagged files by preventing the files from being deleted and/or modified prior to them reaching the retention age threshold. Then the files may automatically be purged from system storage upon reaching the retention age threshold.

Unified document retention management system

Aspects of the present disclosure relate to systems and methods for creating compliance boundaries. In one example, compliance boundaries may be implemented via a compliance tool. Data associated with a tenant may be segregated using a plurality of layers defining one or more compliance boundaries. In response to an action initiated by a compliance administrator using the compliance tool for accessing the data, it may be determined which data is within the one or more compliance boundaries associated with the compliance administrator. Access to the data determined to be within the one or more compliance boundaries associated with the compliance administrator may be authorized.

Compliance boundaries for multi-tenant cloud environment

Techniques for labeling data files that enable a file management label to persist on a data file. Variations disclosed herein enable a file management label to be embedded within a data file so that the file management label propagates with the data file when the data file is copied and/or moved between systems and/or workloads. In some embodiments, an application may be configured to write the file management label directly into a stream of the data file. For example, an application client that is run locally on a client device may open the data file by accessing its corresponding stream. While the data file is open within the application client such that a user may edit content of the data file, the application client may be caused to associate the file management label with the data file. Ultimately, the application client may write this association directly into the stream.

Systems and methods for enabling a file management label to persist on a data file

Computer systems, devices, and associated methods of content pattern based automatic document classification are disclosed herein. In one embodiment, a method includes receiving a document and a sequence of words corresponding to a document class having a class label from a network storage. The method also includes determining a longest common subsequence of words between the words in the document and the sequence of words and calculating a similarity percentage between the document and the sequence of words based on the determined longest common subsequence. When the calculated similarity percentage is above a threshold, the class label corresponding to the document class is automatically applied to the received document in the network storage.

Content pattern based automatic document classification

Techniques for isolating a portion of an online computing service referred to as a deployment unit and configured with a complete build of the online computing service may include routing production traffic away from the deployment unit, applying one or more changes to the complete build, and after applying one or more changes to the complete build, using the deployment unit for testing these changes using end-to-end tests. In one embodiment, the deployment unit may be dedicated to a specific group of tenants that require at least some isolation from other tenants.

Isolating a portion of an online computing service for testing

Techniques to isolating a portion of an online computing service are described. The following description may refer to the isolated portion as a deployment unit configured with a complete build of the online computing service. In one embodiment, after applying one or more changes to the complete build, the deployment unit may be used for testing these changes using end-to-end tests. In another embodiment, the deployment unit may be dedicated to a specific group of tenants that require at least some isolation from other tenants. Other embodiments are described and claimed.

Techniques to isolating a portion of an online computing service

A certificate management system provides automated management of certificate lifecycles and certificate distribution. Rather than depend upon an administrator to manually distribute and manage certificates, the system self-generates certificates, distributes the certificates to appropriate servers or other parties, and transitions from old certificates to new certificates in a well-defined manner that avoids breaking functionality. After generating one or more certificates, the system securely shares certificates in a way that parties that use them can find the new certificates without an administrator manually distributing the certificates. When it is time to update certificates, the system generates new certificates and shares the new certificates in a similar way. During a transition period, the system provides a protocol by which both old and new certificates can be used to perform authenticated access to resources, so that the transition from an old to a new certificate does not break services.

Automated certificate management

Growing community of inventors

Sammamish, WA, United States of America

Nakul Garg