Microsoft Technology Licensing, LLC

Robert Sadao Unoki

Travis Muhlestein

Paul Stephen Hellyar

Kenneth Michael Bayer

Kye Hyun Kim

David Charles Wrighton

Victor Tan

Jean-Emile Elien

Daniel Collins Balma

Wes Wahlin

Rocco Crea, Iii

Michael Brendan Frei

Anthony Vincent Discolo

Paul Lawrence Bleisch

Andres Vega-Garcia

Michael T Klucher

Chad Wesley Wahlin

Russell Alexander

Daniel Ryan Mitchell

Kurt Mar

Roger Arthur Roach

Daniel Kyle Taylor

Joerg Raymound Brown

Justin Layne Nordin

Malia Rebecca Guerrero

Travis J Muhlestein

Rocco Iii Crea

Various methods and systems for securing communications with enhanced media platforms, are provided. In particular, an enhanced media platform is authenticated using a trusted location. The authenticated enhanced media platform establishes a bidirectional trust with an enhanced remote location, the enhanced media platform being stored in the enhanced remote location. Upon authentication and establishing the bidirectional trust, the enhanced media platform may securely communicate media content in a media content distribution service infrastructure while supporting custom functionality. The method for securing communications with enhanced media platforms includes communicating authentication credentials to an internal security component at the trusted location. The method further includes receiving validation credentials from the internal security component. The method also includes authenticating the enhanced remote location based on at least a portion of the validation credentials received. The method further includes establishing the bidirectional trust relationship with the enhanced remote location using the validation credentials.

Securing communications with enhanced media platforms

Cooperative interaction of a message processor and an intermediation processor. The message processor processes messages received from a network and to be sent over a network. The intermediation processor intermediates between the message processor and the network using a shared memory that includes a memory portion that is within the address space of the message processor. The message processor writes messages into the memory portion over a physical channel and reads message from the memory portion over the physical channel. The intermediation processor provides messages received from a network into the memory portion so that the received messages can be read by the message processor over the physical channel. The intermediation processor dispatches messages written to the memory portion by the message processor over the network.

Network communication using intermediation processor

A system that contains multiple game servers that have a non-user specific unused state, and a user-specific game state. When the game server is providing a game service on the other hand, the game server first obtains the user data for the user and game that is to be initiated. Accordingly, the game servers may be thought of as a bank of game servers, any one of which being potentially utilizable for incoming game requests. Once the game session is completed, the user data for the gamer may be deleted, and the game server goes back into the pool of available generic game servers. The user data is downloaded from a user data store, and may be quite limited to perhaps just that portion of the user data that relates to the game to be played.

Game progression using retrieved partial user data

A security program code generator is configured to automatically generate program code used to perform one or more validation checks of components operating in user mode. In one implementation, for example, the program code generator receives one or more files that include declarative values and parameters regarding one or more function calls made by any user mode component. The program code generator then takes the file of declarative call descriptions and automatically generates a user mode stub and a kernel mode stub for each function call of interest to be handled by a kernel mode component. The file(s) that include the user mode stub and the kernel mode stub can then be compiled and linked into the operating system components.

Generating security validation code automatically

Disclosed is a code verification service that detects malformed data in an automated process and rejects submission and distribution if any malicious code is found. Once the submission is verified it may be packaged in container. The container may then be deployed to a mobile device, and the public key may be used to verify that the container authentic. The device can load trusted managed libraries needed to execute the application and a manager can ensure that only trusted libraries access native resources of the device.

Verification of un-trusted code for consumption on an insecure device

Sensitive data structures, such as type data structures, can be used by untrusted application programs without necessarily exposing the sensitive data structures directly. For example, untrusted components, such as application programs that may or may not be type safe, can be allowed to operate in a lower-privilege mode. In addition, the application programs can be associated with an address space with limited permissions (e.g., read-only) to a shared memory heap. Requests by the untrusted components for sensitive data structures can then be handled by trusted components operating in a higher-privilege mode, which may have broader permissions to the shared memory heap. If the requests by the untrusted components are deemed to be valid, the results of the requests can be shared with the lower-privilege mode components through the shared memory heap.

Restricting type access to high-trust components

Growing community of inventors

Redmond, WA, United States of America

Robert Sadao Unoki