Microsoft Technology Licensing, LLC

Phillip I Beish

Shaun P Eagan

Nidhi Verma

Brian G O'Connor

Benjamin E Canning

Le Chang

Darius Snapkauskas

Roberta Cannerozzi

Pritvinath Obla

Alexei Levenkov

Harpreet Miglani

Sundar Paranthaman

Dylan Thomas Nunley

Nandakishor Basavanthappa

Todd R Aton

Brian Gregory O'connor

The techniques disclosed herein enable improved security as well as more scalable and reliable job execution by utilizing granular security boundaries and certificate-based authentication for all communication within cloud-based platforms. To manage a cloud-based platform, a system receives a plurality of jobs and associated certificates at a first security boundary that are to be executed at various resource units within a second security boundary. The system then authenticates each certificate before transmitting each job to its respective resource unit for execution. In addition, the system is further configured to monitor active certificates for compromise and accordingly isolate various security boundaries in the event of a security breach. By isolating portions of the cloud-based platform within security boundaries, the system can mitigate the impact of security breaches. Furthermore, certificate-based authentication addresses performance constraints to enable more efficient and scalable job execution.

Resource unit isolation for increased safety and security in cloud services

Orchestration of infrastructure service blocks (ISBs) within a hosted service may be automated. A datacenter deploying the hosted service may include one or more zones, each zone including at least a network and a server farm comprising one or more servers performing various roles within an infrastructure of the hosted service. A first orchestrator may receive a network and server manifest from the datacenter to be configured within an automation framework of the first orchestrator to create an ISB and/or update another ISB for each zone of the datacenter. The created ISB and/or updated other ISB may be deployed to a second orchestrator that may image the servers within each zone of the datacenter with the created ISB and/or updated other ISB. The hosted service may then be deployed at the datacenter such that the servers within each zone of the datacenter include the created ISB and/or updated other ISB.

Automated orchestration of infrastructure service blocks in hosted services

Computer-implemented methods and computer-readable storage media are disclosed relating to displaying server errors on the client computing system that caused the failed request. A client listener application configured to execute on a client computing system. The client listener application is further configured to exchange data over a network with a server system, and provide metadata to the server system identifying the client computing system in association with a client request for execution of code on the server system. The client listener program is configured to receive an assert message indicating an error resulting from the execution of the code on the server and signal receipt of the assert message over a user interface. The client listener program is further configured to provide an opportunity for a user to respond to the assert message via the user interface by choosing to ignore the assert message or to analyze the error.

Displaying server errors on the client machine that caused the failed request

Events that repeatedly occur during a detection period are intercepted and suppressed before being written to a log. When the same error has been detected a predetermined number of times within the detection period, the event logging for the event is suppressed for a suppression period. At the end of the suppression period an entry is made in the log summarizing the events during the suppression period. Additionally, diagnostic information relating to an application is collected and then stored within a high speed memory. Upon the occurrence of a triggering event, the diagnostic information from the high speed memory is stored within a data store for later use.

Suppressing repeated events and storing diagnostic information

An event monitoring and logging system, including apparatuses and methods, for instrumenting an on-line application program, or service, for generating and communicating events upon the occurrence of certain conditions during the execution thereof, for monitoring generated events in real and near-real time in accordance with configurable rules, for generating and communicating selected alerts to appropriate personnel upon the exceeding of configurable thresholds, for logging generated events and related information in data files and databases for subsequent analysis, and for producing reports related to such instrumentation and generated events.

On-line service/application monitoring and reporting system

Growing community of inventors

Duvall, WA, United States of America

Phillip I Beish