Microsoft Technology Licensing, LLC

Paul Howard Rich

Liqiang Zhu

Siddhartha Mathur

Vikas Ahuja

Rajalakshmi Dani

Anand Madhava Menon

Naveen Madan

Ayla Kol

Kameshwar Jayaraman

Yoganand Rajasekaran

Girish Nagaraja

Jaclynn Hiranaka

Nikhil Aggarwal

Tenant approval for operator access to tenant data is provided. In order to grant service personnel operators access to a tenant's data for performing a requested action, a lockbox determines a security group role to which an operator needs to be elevated to perform a requested action, computes a set of internal administrators and tenant administrators authorized to grant a temporary role elevation, and sends an access control request to the administrators. Upon receiving approval of the access control request from an internal administrator and a tenant administrator, the lockbox elevates the operator to the security group role, granting the operator a set of permissions needed in order to allow the operator to perform the requested action. Accordingly, tenants are enabled to control access to their data and scrutinize access requests per their company procedures and compliance needs.

Tenant lockbox

Systems, methods, and software technology for managing keys used to encrypt data at-rest and decrypt the data when serving requests for the data. In an implementation, a data service receives a request for data that has been encrypted at rest using a data key, wherein the data key has been encrypted using a policy key, and wherein the policy key has been encrypted using a root key. When the root key is unavailable, the data service requests a key service to decrypt the policy key using an alternative root key. When the data service receives the policy key in an unencrypted state from the key service, it decrypts the data key using the policy key and decrypts the data using the data key.

Enhanced key availability for data services

Growing community of inventors

Seattle, WA, United States of America

Paul Howard Rich