Microsoft Technology Licensing, LLC

Robert Standefer, Iii

Christopher Lee Mullins

Jonathan Edgar Fay

John Anthony Taylor

Joshua Allen Cowhig

Henrik Frystyk Nielsen

Miguel Castro

Miguel Oom Temudo De Castro

Examples of the present disclosure describe systems and methods of delegating authorization to access isolated collections of data. In aspects, a request to access an isolated collection of resource identifiers and relationships may be received by an application. The resource identifiers may correspond to resources in one or more remote data repositories. Upon receiving the request, the application may interrogate a remote data repository to determine whether the requestor is currently authorized to access the one or more resources corresponding to the resource identifiers in the isolated collection. If the requestor is determined to be authorized, the application may use an authorization indication provided by the remote data repository to provide the requestor with access to the isolated collection. If the requestor is determined to be unauthorized, the application may prohibit access to the isolated collection.

Delegated authorization for isolated collections

Aspects of the present disclosure relate to systems and methods for providing strong resource identification. When a resource is created, saved, or re-based, a cryptographic key pair may be generated and associated with the resource. A public key of the cryptographic key pair may be used as a unique identifier. Information about the resource, such as the name of the resource and its actual location may be stored in an index based upon the resource's public key. Sharing the resource with other devices may comprise sending the resource's key, as opposed to information about the resource's actual location, to one or more recipient device.

Strong resource identity in a cloud hosted system

Examples of the present disclosure describe systems and methods relating to context rules in a graph or isolated collection. In an example, information in an isolated collection may be associated with one or more contexts. The information may be represented within the isolated collection based on one or more rules, and one or more of the rules may be associated with one or more contexts to which the information relates, thereby indicating a context association. A context association may indicate a positive, negative, or other relationship between one or more rules and one or more contexts. Based on the context association, information within the isolated collection may be adapted to generate different views of the isolated collection for different contexts. As such, relevant, useful, or actionable information may be included or emphasized, while information that is not as relevant, useful, or actionable may be omitted or deemphasized.

Context rules for a graph

The present disclosure relates to systems and methods of overlaying a plurality of isolated collections to generate an overlaid isolated collection. In an example, a first and second isolated collection having at least one common resource may be overlaid. A first and second inference ruleset may be extracted from the first and second isolated collection, respectively. Based on the first and second inference ruleset, one or more suggestions may be generated relating to conflicting inference rules. A suggestion may comprise selecting a subset of the conflicting inference rules (e.g., none, some, or all of the rules) for inclusion in the overlay isolated collection. Another suggestion may comprise generating a new inference rule based on the conflicting inference rules. An indication relating to the suggestions may be received. The indication may be used to generate a third isolated collection and a third inference ruleset.

Contextual analysis of isolated collections based on differential ontologies

Examples of the present disclosure describe systems and methods of managing user tasks using isolated collections of data. In aspects, input may be received by a task management application/service. The task management application/service may analyze the input to determine isolated collection of resources identifying tasks associated with one or more user accounts. The task management application/service may aggregate and analyze the tasks to determine associations between the tasks, to classify tasks and/or to prioritize tasks. The task management application/service may use the analyzed data to provide notifications, prompt user action and/or provide query results. In aspects, the task management application/service may also provide an interface comprising a single master view of tasks aggregated from disparate data stores and/or user accounts associated with a user.

Master view of tasks

A facility for annotating a visual representation of a document is described. The facility presents on a display device visual representations of two or more portions of a document. The facility further present on the display on the display, in connection with each of one or more of the presented document portion visual representations, an annotation conveying a result of aggregating information describing two or more search transactions in whose results the represented document portion is included.

Document searching visualized within a document

A facility for managing an electronic document is described. The facility receives from a user input selecting a portion of the document, as well as input designating the selected document portion as being subject to approval-gated sharing. The facility persistently stores an indication that the selected document portion is subject to approval-gated sharing.

Sharing content between electronic documents

Examples of the present disclosure describe systems and methods for partially encrypting conversations using different cryptographic keys. Messages communicated during a conversation session may be encrypted using a cryptographic key. Other conversation participants may then decrypt the messages using the cryptographic key. During the conversation, an event may occur that causes a new cryptographic key to be generated. The conversation participants may then use the new cryptographic key when communicating. As such, previously-encrypted messages may be inaccessible to new members that do not have the old cryptographic key, while newly-encrypted messages may be inaccessible to former members that do not have the new cryptographic key. An isolated collection may store the messages and related cryptographic keys. Relationships may exist within the isolated collection, such that messages may be related to one another and messages may also be related to the cryptographic keys used to encrypt them.

Partially encrypted conversations via keys on member change

Aspects of the present disclosure relate to systems and methods for providing strong resource identification. When a resource is created, saved, or re-based, a cryptographic key pair with the resource. A public key of the cryptographic key pair may be used as a unique identifier. Information about the resource, such as the name of the resource and its actual location may be stored in an index based upon the resource's public key. Sharing the resource with other devices may comprise sending the resource's key, as opposed to information about the resource's actual location, to one or more recipient device.

A review workflow graph (e.g., graph database) is provided that is a graphical representation of a review workflow assigned to a document and/or an individual document section. In particular, contents of the document may be stored as nodes in the review workflow graph. As the reviewers perform the review workflow, results associated with one or more review processes may be recorded and stored in the review workflow graph with relationships to the content nodes. In aspects, the graph of nodes may be materialized into a view of the document and/or a review timeline. For instance, portions of the document that have been completed may be materialized, but content that is not yet complete (e.g., reached a milestone) may not be materialized. Additionally, the review timeline may be a visual or other representation of the temporal progress of the review workflow, including intermediate milestones as well as an ultimate completion deadline.

Collaborative review workflow graph

A facility for managing information about document-related activities is described. In some cases, the facility uses particular kinds of structures to represent, in a document graph, document-related activities performed by particular users. In some cases, the facility uses these structures to enable one user to subscribe to the document-related activities performed by another user. In some cases, the facility uses these structures to aggregate document-related activities performed by users in a group of users, such as by aggregating topics that are addressed by documents that are the subject of these document-related activities. In some cases, the facility uses particular kinds of structures to represent, in a document graph, tasks that certain users either can help with or need help with. In some cases, the facility uses these structures to match users that can help with a task with users that need help with a task.

Managing information about document-related activities

A facility for reporting on a corpus of documents is described. The facility receives a user-specified search query. In response to the receiving, among documents in the corpus, the facility identifies a proper subset that have each (1) been modified in a manner relevant to the search query (2) at a recent time. For each of at least a portion of the identified documents, the facility causes to be presented information describing the document.

Identifying among recent revisions to documents those that are relevant to a search query

A facility for providing configurable access to a document's history is described. The facility receives input specifying one or more revisions to a document. The facility causes to be stored a representation of at least a portion of the revisions. When the facility receives a request to materialize the document for a particular entity, the facility materializes the document in a manner that includes any of the represented revisions only if the entity is among an authorized class of entities.

Configurable access to a document's revision history

Systems and methods that provide for shared processing of rulesets against one or more isolated collections representing resources and relationships between those resources. Asserted resources may be added to an isolated collection and a ruleset may be accessed or received. The ruleset may be executed against the corresponding isolated collection to generated inferred data, such as inferred relationships between the asserted resources in the isolated collection. Transmitting the isolated collection to a client may depend on the type of client and on the network connection to the client. The isolated collection may be transmitted with just the asserted data and the ruleset, but not the inferred data. The client is able to locally process the rules against the asserted data to locally generate inferred data to create a locally generated enriched isolated collection. The locally generated enriched isolated collection may then be queried locally.

Growing community of inventors

Duvall, WA, United States of America

Robert Standefer, Iii