Microsoft Technology Licensing, LLC

Ram P Sunkara

Gopal Parupudi

Shoou-Jiun Wang

Prabhu Padhi

Jayaram N M Nanduri

John Leo Ellis

Rajagopalan Badri Narayanan

Tak Chung Lung

Jayaram Nm Nanduri

Jagannatha Raju Dantuluri

Sean A Cannella

Various device attributes associated with a current event may be obtained. Similarity metrics may be determined that indicate a degree of similarity between the device attributes that are associated with the current event and stored device attributes that are associated with previous events and previously created fuzzy device identifiers. A fuzzy device identifier may be assigned to the current event based at least in part on a comparison of the similarity metrics with a threshold. If none of the similarity metrics compare favorably with the threshold, then a new fuzzy device identifier may be created for the current event. However, if at least one of the similarity metrics compares favorably with the threshold, then the previously created fuzzy device identifier whose stored device attributes are most similar to the device attributes that are associated with the current event may be assigned to the current event.

Facilitating device fingerprinting through assignment of fuzzy device identifiers

A method of certificate provisioning is provided for entities that are not associated with a domain. In some implementations, certificate provisioning methods allow non-domain-joined entities to request and receive certificates through an automated process with a certificate provisioning portal. Through the automated process, the identity of the client may be verified using security identity information. The security identity information may include a pre-shared secret or a previously issued certificate from a trusted Certificate Authority.

Automated certificate provisioning for non-domain-joined entities

Techniques for registering certificates after the issuance of the certificates are provided. A service provider securely registers a client's identity and its certificate without depending on or using an existing basis of trust, such as that provided by domain-joined clients or a security directory (e.g., MICROSOFT's ACTIVE DIRECTORY). The service provider provides services, such as, by way of example and not a limitation, email services, web application services, application services, etc., based on identifiers (e.g., service IDs) issued to registered clients. The service provider subsequently uses the issued identifier to authenticate a client requesting a service or services, and to authorize the client to receive the requested service or services.

Certificate registration after issuance for secure communication

Growing community of inventors

Redmond, WA, United States of America

Ram P Sunkara