Microsoft Technology Licensing, LLC

Prabu Raju

Yordan Ivanov Rouskov

David Steeves

Krishna C Vitaldevara

Eric Fleischman

Ramesh Manne

Luke Abrams

Winfred Wong

Hersh Dangayach

Niyantha Shekar

Meenakshi Ramaswamy

Payoj Baral

Himanshu Soni

Peter David Waxman

Cristian Stefan Salvan

Christopher Edward Fenner

Kam Kouladjie

Gabriel Fortunato Stocco

Giridhar Viswanathan

Christopher Leonard Walstad

Ryan D Parsell

Fengfen Liu

Levi P Broderick

Gridhar Viswanathan

Reed Molbak

Klaudia Leja

Manu Manianchira

In one embodiment, a user authentication server may use geo-location tracking to determine whether to present an enhanced identity challenge. A communication interfacemay receive a user login attempt by a user and a current location of the user login attempt. A data storagemay store a user location profile of the user. A processormay execute a comparison of the current location to the user location profile. The communication interfacemay present the user with an enhanced identity challenge before allowing user access based on the comparison.

Protection from unfamiliar login locations

The present invention provides for streamlined issuance of certificates and other tokens that are contingent on key attestation of keys from a trusted platform module within a computing platform. Various methods are described for wrapping the requested token in a secret, such as an AES key, that is encrypted to a TPM based key in a key challenge. If the requesting platform fails the key challenge, the encrypted certificate or token cannot be decrypted. If requesting platform passes the challenge, the encrypted certificate or token can be decrypted using the AES key recovered from the key challenge.

Key-attestation-contingent certificate issuance

A facility for enrolling a software implementer in a code signing. In one example facility, the facility receives information identifying the implementer, and credentials authenticating the implementer. The facility generates secret state for the implementer. Based on at least one or both of (1) at least a portion of the received credentials and (2) at least a portion of the generated secret state, the facility generates for the implementer a key pair comprising a private key and a public key, and persistently stores the secret state.

Code signing service

Techniques for capability and behavior signatures are described. In one or more embodiments, various data describing the capabilities and behaviors of a client is collected. The collected data is analyzed to generate a signature that is indicative of whether the client is operated by a human or a non-human. Selective access to resources is provided to the client based at least in part on the signature that is generated.

Capability and behavior signatures

Various embodiments described above are directed to identifying abuse-hosting services at their source, rather than using such intermediaries as URLs and associated domains. In one or more embodiments, threats can be blocked by using the Internet protocol (IP) address of an identified attacker that is hosting content associated with abuse.

Host IP reputation

Growing community of inventors

Issaquah, WA, United States of America

Prabu Raju