Microsoft Technology Licensing, LLC

Pushkar Vijay Chitnis

Ramarathnam R Venkatesan

Sriram Kottarakurichi Rajamani

Baskar Sridharan

Mitica Manu

Raghunath Ramakrishnan

Victor V Boyko

Shastry M C Shankara

Bo Zhang

Lei Kou

Balasubramanyan Ashok

Simon Leet

Pranav Ramarao

Suresh Parthasarathy Iyengar

Gangadhara Swamy Shivaganga Nagaraju

Amar Nad Rudra Gowda

A computer implemented method includes receiving first firmware information at a hosting environment identifying that a user has selected user-controlled firmware for user virtual machines to be hosted on the hosting environment. A copy of the user-controlled firmware is obtained and a user virtual machine is deployed that includes the user-controlled firmware. The user-controlled firmware is locked against changes by the hosting environment absent receiving permission from the user.

User-controlled firmware for hosted virtual machines

A method and system for changing content of a window of an application program is provided. A contextual window system displays a window with content based on a current context of the window. The contextual window system receives from a user a context string for a new context for the window. When the context string includes a command, the contextual window system performs a function of the application program that implements the command to change from the current context of the window to the new context of the window. When the context string does not specify a command, the contextual window system submits the context string as a query for data of the application program to change from the current context of the window to the new context of the window. The contextual window system then modifies the content of the window to reflect the new context of the window.

Contextual windows for application programs

Operating upon encrypted data with a particular data scope. A base encryption key is established and associated with the particular data scope, and then stored in a base encryption key store. That base encryption key store might be managed by an application or service that stores base encryption keys for multiple data scopes. A proxy encryption key acts as a kind of proxy for the base encryption key. The proxy encryption key may be used for frequent operations on encrypted data within the particular data scope. Thus, the principles described herein act as a frequency amplifier that allows key-based operations upon the particular data scope to be performed at much higher frequencies than otherwise would be possible by operating directly using the base encryption key.

Data operations using a proxy encryption key

Instantiating an attestation facilitation component that allows a remote application to attest to a secure state of a secure memory application executing upon a secure platform of a computer system regardless of a type of either the secure platform or a health attestation service. Instantiation comprises identifying a property that includes at least one of the secure platform type and the health attestation service type. The instantiation is customized with the identified property. The attestation facilitation component verifies that a report generated by the secure platform represents that the secure memory application is operating in a secure state, and accesses a token generated by the health attestation service that represents that the secure platform is operating in a secure state. The attestation facilitation component generates a quote that allows the remote application to verify that the secure platform and the secure memory application are both operating in secure states.

Remote attestation model for secure memory applications

Growing community of inventors

Bellevue, WA, United States of America

Pushkar Vijay Chitnis