Microsoft Technology Licensing, LLC

Robert M Hyman

Paul J Leach

Daniel Ron Simon

Mark H Lucovsky

Richard Bruce Ward

Shaun Douglas Pierce

George M Moore

Jonathan D Pincus

Arthur Zwiegincew

Michael Burner

Alexander Thomas Weinert

Munir Mahmood

Danpo Zhang

Vivek Gundotra

Sachin Kukreja

Barry I Kelman

Elaine Lan Chen

Authorizing a requesting entity to have a service perform a particular action in a manner that is at least partially independent of the underlying target data structure. An authorization station maintains a number of role templates that each define basic access permissions with respect to a number of command methods. The authorization station also maintains a number of role definitions that each define access permissions for specific requesting entities by using one or more of the role templates. When the authorization station receives a request from the requesting entity, the authorization station then identifies the appropriate role definition. Using this role definition, the authorization station determines access permissions for the requesting entity with respect to the requested action.

Authorizing a requesting entity to operate upon data structures

Directly operating on data structures in a generic manner regardless of the type of data structure being operated upon and without requiring dedicated executable code for manipulating data structures of the particular data type. A common set of commands (e.g., insert, delete, replace, update, query) are recognized that may be used to operate on data structures of a number of different data types. A navigation module accesses a request to execute one of the common command methods on at least an identified portion of an identified data structure. Then, the navigation module accesses a navigation assistance module to access a set of rules associated with the particular data type, the set of rules allowing the navigation module to find the portion of the data structure that is to be operated on. If appropriate, the command operation is then executed on the identified portion of the data structure.

Accessing heterogeneous data in a standardized manner

Methods and systems for resolving naming contests when a user seeks to register an account associated with a login identifier that is already in use by another user. An authentication server notifies the user of a contested registration when the requested login identifier, such as an e-mail address, matches one of the identifiers stored in an authentication database. The server then solicits confirmation from the user that the login identifier belongs to the requesting user rather than the earlier user. By forcing the earlier user to select a different login identifier, the server renders the existing user account inactive but retains a unique account identifier and associated account information for the inactive user account.

Contested account registration

A messaging data structure for accessing data in an identity-centric manner. An identity may be a user, a group of users, or an organization. Instead of data being maintained on an application-by-application basis, the data associated with a particular identity is stored by one or more data services accessible by many applications. The data is stored in accordance with a schema that is recognized by a number of different applications and the data service. The messaging data structure includes fields that identify the target data object to be operated upon using an identity field, a schema field, and an instance identifier field. In addition, the desired operation is specified. Thus, the target data object is operated on in an identity-centric manner.

Messaging infrastructure for identity-centric data access

Growing community of inventors

Sammamish, WA, United States of America

Robert M Hyman