Microsoft Technology Licensing, LLC

Neil Laurence Coles

Scott Randall Shell

Upender Sandadi

Matthew G Lyons

Yadhu Nandh Gopalan

Andrew Michael Rogers

Yuhang Zhu

Christopher Ross Jordan

Angelo Renato Vals

Miller Thomas Abel

John Mark Miller

Loren Kohnfelder

Bor-Ming Hsieh

Andrew D Rogers

Hung Minh Dang

Sharath Viswanathan

Keith C Bentley

Jon Vincent

Brian Hudson

Avinashreddy Bathula

Jimmy Alexander

Zoheb Vacheri

An inter-process messaging security management may be provided. A message comprising an operation to be performed may be sent from a process operating in a process chamber to a second process operating in another chamber. Before the message is allowed to be delivered, the validity of the operation contained in the message may be verified and a security policy may be examined to determine whether the message is permitted to be sent from the first process to the second process. If the security policy permits the second process to execute the operation requested by the first process, the message may be delivered to the second process. If the operation is not permitted, the message may not be delivered and an error message may be returned to the first process.

Inter-process message security

A method and system extends the functionality of the Open Mobile Alliance (OMA) Device Management (DM) standard to manage vendor specific configuration parameters and settings. An OMA DM structure is provided as an extension to the tree structure of the OMA DM standard. The OMA DM extension allows selected vendor specific parameters and settings to be managed under the OMA DM protocol.

System and method for an OMA DM extension to manage mobile device configuration settings

Embodiments provide a security infrastructure that may be configured to run on top of an existing operating system to control what resources can be accessed by an applications and what APIs an application can call. Security decisions are made by taking into account both the current thread's identity and the current thread's call chain context to enable minimal privilege by default. The current thread context is captured and a copy of it is created to be used to perform security checks asynchronously. Every thread in the system has an associated identity. To obtain access to a particular resource, all the callers on the current thread are analyzed to make sure that each caller and thread has access to that resource. Only when each caller and thread has access to that resource is the caller given access to that resource.

Granting least privilege access for computing processes

This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.

Centralized enforcement of name-based computer system security rules

Translators are provided that enable automated and remote device configurations in an efficient and abstract manner. In one aspect, a device configuration system is provided. A configuration component stores one or more remote configuration trees for various devices. A translator component maps the remote configuration trees to at least one device configuration tree associated with the respective devices to enable device configuration in an automated manner.

On-the-fly device configuration and management

Growing community of inventors

Redmond, WA, United States of America

Neil Laurence Coles