Microsoft Technology Licensing, LLC

Google Inc.

Nelly L Porter

Himanshu Soni

Peter Dawoud Shenouda Dawoud

Dustin Michael Ingalls

Anooshiravan Saboori

Oleg Ouliankine

Roy Williams

Vijay G Bharadwaj

Vladimir Stoyanov

Loren Curtis

Anoosh Saboori

Muhammad Umar Janjua

Haitao Li

Octavian Tony Ureche

David Benson Cross

Alexander Thomas Weinert

Brandon S Baker

Kyle James Krum

Benjamin Richard Vincent

Philip Joseph Hallin

Makarand V Patwardhan

Anthony Paul Penta

Xiaohong Su

Kelvin Sjek Yiu

Tarek Bahaa El-Din Mahmoud Kamel

Yuri Inglikov

Sergey Simakov

Uday R Savagaonkar

Ido Miles Ben-Shachar

Joy Chik

Bryston Mitsuo Nitta

Arthur Baker

Zardosht Kasheff

Yuriy Mikhailovich Inglikov

Vassil Dimitrov Bakalov

Amer A Hassan

Nadim Y Abdo

Rajneesh Mahajan

John E Parsons

Yogesh A Mehta

Gopinathan Kannan

Ersev Samim Erdogan

Kevin Scott London

Violet Anna Barhudarian

Karanbir Singh

Niraj Agarwala

Casey J Dvorak

Srinivasa Reddy Neerudu

Mahadeva K Alladi

Raymond Matthew Reskusich

Alberto Henriquez

Jeremy Dominic Viegas

Jeffrey Edwin Shipman

Ryan Segeberg

Robert-Wilhelm Schmieder

Gaurav Daga

Subhashini Raghunathan

Pui Loi Joy Chik

Uday Ramesh Savagsonkar

Ramasamy Pullappan

Naga Vankata Rajagopal Ramadugu

Ayesha M Mascarenhas

Maarten Van Horenbeeck

John D T Wood

Anooshiravan Saboor

Arthur H Baker

Vassil D Bakalov

Jeremy D Viegas

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for instantiating and managing systems that utilize hierarchal enclaves in a cloud environment.

System of enclaves

A multi-factor user authentication framework using asymmetric key includes a host device, a user agent, a gesture system, and an authentication system. The multiple factors include a user credential as well as a user gesture that indicates that the user is present. The user interacts with the user agent via the host device in order to obtain access to something for which user authentication is needed. The authentication system maintains the user credentials, which are provided to authenticate the user in response to the authentication system determining that the user is present (which can be determined in different manners, such as using a personal identification number (PIN), biometric information regarding the user, geographic location of the gesture system, etc.). The user agent, gesture system, and authentication system can be implemented on the same device (e.g., the host device), or alternatively implemented across one or more different devices.

Multi-factor user authentication framework using asymmetric key

Techniques described herein leverage a trusted entity within a domain to enable devices to establish trust with one another so they can securely discover each other and connect to one another. In various examples discussed herein, a device is configured to provide trust information to, and/or receive trust information from, the trusted entity. The trust information may include, for example, a public key of an encryption key pair, a certificate signed by the trusted entity proving authenticity, and/or a hash function and a hash seed used to compute a series of results that form a hash chain. The device may use the trust information to discover another device and to connect to the other device securely and automatically (e.g., with no user involvement or limited user involvement). Moreover, the device may use the trust information to dynamically change a MAC address being used to communicate with the other device.

Establishing trust between two devices

Presence based content access control techniques are described in which presence of users is used as a basis for enforcing content restrictions. In an implementation, applications are registered to receive feedback regarding users' presence in relation to a presentation of content via a computing device. The presence of users is recognized independently of authentication of the users to access user accounts. For example, an imaging sensor such as camera may be employed for recognition of multiple users engaged with the computing device. In addition or alternatively, presence devices associated with users such as badges, key fobs, or access cards may be detected to ascertain the presence of users. Feedback indicative of the one or more users that are recognized may then be supplied to the registered applications. The feedback enables the applications to control the presentation of content by enforcing content restrictions and/or taking other presence based actions.

Presence-based content control

The claimed subject matter provides systems and/or methods that facilitate interpreting Multipurpose Internet Mail Extensions (MIME) data. An interface can obtain MIME data. For instance, a stream of MIME data can be obtained, MIME data can be loaded from a static file, etc. Moreover, any disparate type of RFC 822 data can additionally or alternatively be received by the interface. Also, a MIME reader can analyze the MIME data (and/or normalized RFC 822 data) to interpret encoded structural information and generate at least one primitive based on the encoded structural information. Further, a hierarchical model can be built utilizing the at least one primitive.

Document object model API for MIME

In one embodiment, a user login device may create a user identifier templatefor identifying a user by implicitly capturing one or more biometric identifier readings. A user login device may capture an enrollment biometric identifier reading of a user during an operational user action. The user login device may apply the enrollment biometric identifier reading in creating a user identifier template

Informed implicit enrollment and identification

In many information security scenarios, a certificate issued by a certificate authority may be presented to a client in order to assert a trust level of a certificated item, such as a message or a web page. However, due to a decentralized structure and incomplete coordination among certificate authorities, the presence and exploitation of security vulnerabilities to issue untrustworthy certificates may be difficult to determine, particularly for an individual client. Presented herein are techniques for advising clients of the reputations of respective certificate authorities by evaluating the certificates issued by such certificate authorities, such as the number and types of domains certified by the certificate; the number and pattern of certificates issued for the domain; and the certification techniques used to issue the certificates. Such evaluation enables a determination of a certificate authority trust level that may be distributed to the clients in a certificate authority trust set.

Advising clients about certificate authority trust

Growing community of inventors

Redmond, WA, United States of America

Nelly L Porter