Microsoft Technology Licensing, LLC

Other

Robert D Young

Summer L Schneider

Ralf Groene

Hua Wang

Timothy Carlyle Shaw

David R Perek

Kabir Siddiqui

Paul Henry Dietz

Karsten Aagaard

Thomas Charles Oliver

Eric Joseph Wahl

Jim Tom Belesiu

Edward Charles Giaimo, Iii

James Charles Marshall

Thomas Walter Getzinger

Doron J Holan

Panos Costa Panay

Christopher Harry Stoumbos

James Alec Ishihara

Sabrina Boler

Chirag Deepakkumar Shah

M Nashaat Soliman

Alain L Michaud

Todd David Pleake

Nathan C Sherman

Aleksandar Uzelac

Matthew David Mickelson

Sharon Drasnin

David Michael Lane

Joel Lawrence Pelley

Rob Huala

Christopher Andrew Whitman

Garret Buban

David A Roberts

Vincent L Ball

David Carter Vandervoort

Gene Robert Obie

Daniel M Sangster

Ronald Aigner

Paul E Newson

Moshe Randall Lutz

Darryl I Jensen

Scott Mail

Noel Richard Cross

Daniel Young

Scott Robert Honji

Camilo Leon

Harold F Mantooth

Hiroo Umeno

Kevin John Smith

Stephen Clifford Cooper

Anand Ganesh

Dennis J Mathias

James H Wise

Scott A Fudally

Amar Vattakandy

Chun Beng Goh

Michael A Schwager

Andrew N Cady

Eric Boller Fleegal

Mark J Seilstad

Xianfeng Tian

Karen L Baker

Jose R Sousa

Chris Whitman

Ravi Kiran Chivukula

Astha Keshan

Wallace Paul Montgomery

John G A Weiss

Stephan Alexander Cummings

David Neff

Tejas Mistry

Matthew G Pedersen

Robert E Gruhl

Jeremiah J Cox

Hakon Strande

Richard Shailer Turner, Jr

Van Winston Oler

Brandon Records

Eric Kotz

Vivian Dsouza

Marc Descamp

Brien Roell

Benjamin O Zotto

Murali Ravirala

Vassili I Nikolaev

David V Skyberg

Dennis Ming-Shu Lee

Mark Vulfson

Dennis Meinhardt

Neel R S Malik

Jonathan Bret Barkelew

Frank R Harris

Richard Peter Spooner

Scott Mitchel Mail

Edward C Iii Giaimo

Robyn Rebecca Reed Mclaughlin

Rajesh Manohar Dighde

Edward C Giaimo Iii

An accessory device receives authentication information from a host computing device connected thereto and determines whether the authentication information is valid. If the authentication information is valid, the accessory device applies a first access policy that specifies whether the accessory device can provide the host computing device with access to none, some, or all of various computing resources of the accessory device. If the authentication information is not valid, the accessory device applies a second access policy that is different than the first access policy. The accessory device can also be provisioned with access policies by a host computing device if the host computing device successfully authenticates with the accessory device. In either case, authenticating the host computing device may include verifying a digital signature of a certificate provided by the host computing device using a public key of a certificate authority that has been provisioned to the accessory device.

Secure access to accessory device resources

In an embodiment described herein, a method for a mechanism to turn a post processing feature in the Device Media Foundation Transform is described. The method comprises managing, at a device integration service executing on a computing device, a current setting of a feature and updating the current setting as stored in a registry in response to a changed setting of the feature and asserting a setting changed event. The method also includes applying the updated current setting to captured media samples via the Device Media Foundation Transform in response to the asserted setting changed event.

Mechanism to turn on/off post-processing features in the device media foundation transform

A device includes a reset resistant store and a trusted key service. The reset resistant store maintains data across various different device reset or data invalidation operations. The trusted key service maintains, for each of one or more operating systems that run on the device from a boot configuration, an encrypted key associated with the boot configuration. The device also has a master key that is specific to the device. Each of the keys associated with a boot configuration is encrypted using the master key. When booting the device, the boot configuration being run on the device is identified, and the key associated with that boot configuration is obtained (e.g., from the reset resistant store or the encrypted key vault). The master key is used to decrypt the obtained key, and the obtained key is used to decrypt secrets associated with the operating system run from the boot configuration.

Maintaining operating system secrets across resets

A firmware update system is described that collectively handles secure firmware updates for hardware resources in a defined and consistent manner. The firmware update system may be configured to manage at least some firmware updates in a pre-boot environment (e.g., before an operating system is loaded). By doing so, the firmware update system exercises control over the updates and reduce entry points exposed to attackers. In one approach, update states are defined for hardware resources that are managed by the firmware update system. In a pre-boot environment, the update states for the managed hardware resources are set to enable firmware updates. The firmware update system may then detect and apply firmware updates available for the managed hardware resources. Update states may be set to disable before loading the operating so that firmware updates for managed resources are disabled outside of the secure pre-boot environment.

Secure firmware updates

Device enumeration support techniques are described for busses that do not natively support enumeration. In one or more embodiments, an intermediate controller of a computing device is configured to interconnect and manage various hardware devices associated with the computing device. The intermediate controller may detect connection and disconnection of hardware devices in association with one or more communication busses employed by the computing device. In response to such detection, the intermediate controller may send appropriate notifications to an operating system to alert the operating system when hardware devices come and go. This enables the operating system to enumerate and denumerate hardware devices within a device configuration and power management system implemented by the operating system that facilitates interaction with the hardware devices through corresponding representations.

Device enumeration support method for computing devices that does not natively support device enumeration

Accessory device authentication techniques are described. In one or more embodiments, connection of an accessory device to a host computing device is detected. Responsive to the detection, an authentication sequence may occur to verify an identity and/or capabilities of the accessory device. Upon successful authentication of the accessory device, the host device may authorize the accessory device for power exchange interactions with the host device. The host device may then draw supplemental power from a power source associated with the authorized accessory device, such as a battery or power adapter. The host device may also enable the accessory device to obtain and use power supplied by the host device in some scenarios. Power exchange between a host device and an authorized accessory may be managed in accordance with capabilities of the accessory device that are identified during authentication.

Accessory device authentication

A system, device, and method for virtually connecting a media device to a computing device are disclosed. One embodiment comprises a method to operate a virtual media device in a computing device, wherein the virtual media device that is controlled by a remote media device. In this manner, a computing device may stream media data to and from the remote media device.

Virtual media device

Various embodiments related to a host computing device for rendering and sending image data to a peripheral device for display at the peripheral device. For example, one embodiment comprises a host computing device, the host computing device comprising a data storage subsystem and a logic subsystem. The host computing device further comprises instructions stored in the data storage subsystem and executable by the logic subsystem to output to the peripheral device a frame of image data representing a difference between a currently rendered image and an (N&#x2212;1)-th previously rendered image, N being an integer and having a value of 3 or more.

Updating image in buffer via difference data

Data simulation using host data storage chain

A computing system includes one or more input-device user-interface runtime applications to dynamically display images on a dynamic input device. The one or more input-device user-interface runtime applications are executed in a currently active desktop. The computing system further includes a dominant application configured to execute in the currently active desktop. The dominant application is configured to specify an input-device user-interface runtime application corresponding to a current context of the dominant application. The specified input-device user-interface runtime application is configured to dynamically display virtual controls on the dynamic input device. The specified input-device user-interface runtime application is also configured to report activation of the virtual controls to the dominant application.

Contextual control of dynamic input device

Methods and systems for controlling access of application programs to an adaptive input device are described herein. One exemplary computing system includes an application programming interface executable on a computing device for controlling said access to an adaptive input device having a plurality of display regions. The application programming interface is configured to receive a display request from one of the application programs to display formatted output on the composite display and is further configured to apply at least a display sharing policy based on application-specific policy settings received from the application program for defining an application-specific area including at least one of the display regions. Further, the application programming interface is configured to generate formatted output based on the application-specific policy settings, and to send the formatted output to the application-specific area for display. The application-specific policy settings include a shared display mode and an exclusive display mode.

Controlling access of application programs to an adaptive input device

Apparatus and system for configuring a wireless bridge for a computing device such as a game console. The wireless bridge must include a key (not known to the public) employed in producing a digest. The digest is passed to the game console to authenticate that the wireless bridge is compatible and can thus be configured by the game console. Once the wireless bridge proves its compatibility, a configuration procedure included in an operating system on the game console configures the wireless bridge to connect to a wireless network so that the game console can communicate through the wireless bridge with a gaming site that is accessed over the Internet. The configuration is done without using a web browser program or a configuration program that is specific to a particular model and manufacturer of the wireless bridge.

Bridging a gaming console with a wireless network

Growing community of inventors

Kirkland, WA, United States of America

Robert D Young