Microsoft Technology Licensing, LLC

Oracle International Corporation

Roberto Anthony Franco

John Green Bedworth

Venkatraman V Kudallur

Shankar Ganesh

Roland Tokumi

Marc Adam Silbey

Tariq Sharif

Brian D Wentz

Edward J Praitis

Quji Guo

Anantha P Ganjam

Vishu Gupta

J Craig Hally

Christopher T Sager

Joseph E Benedek

Reid T Holmes

Roman Pamucci

Peter T Brundrett

Caleb Geoffrey Baker

Eric M Lawrence

John Deurbrouck

Danhua Zhu

Colin Leslie Dellow

Kurt James Schmucker

Joseph S Beda, Iii

Arun K Nanda

Girish Nagaraja

Mark A Alcazar

Anthony T Chor

Philip Newman

Jianrong Gu

Jeremiah S Epling

David Andrew Ross

Ghazanfar Ahmed

Richard Randall

Joseph T Farro

Bogdan M Tepordei

Chuang Wang

Linda W Averett

Zheng Guo

Daniel Sie

Vidya Nallathimmayyagari

Sean O Lyndersay

Manav Mishra

Aaron H Averbuch

Sundaram Ramani

Anatoliy Burukhin

Li-Hsin Huang

Cem Paya

Jingyang Xu

Darren Mitchell

Aaron Ross Goldfeder

Viresh Ramdatmisier

Stephen J Purpura

Govind Varshney

Wayne Wy Choi

Frank M Schwieterman

Julian Jiggins

Weisong Lin

Divya Jain

Venkatraman V Kundallur

Sundaram Ramini

Joseph J Gallagher

Ann Seltzer

Steve Dirickson

Venkatavaradhan Panchapagesan

Robert Stephan c/o Microsoft Corp Dirickson

Ann c/o Microsoft Corporation Seltzer

Robert Stephan Dirickson

The present embodiments relate to systems and methods for automatic sign in upon account signup. Particularly, the present embodiments can utilize a federated login approach for automatic sign in upon account signup for a cloud infrastructure. Specifically, the signup and sign in service (also known as SOUP) and an identity provider portal can be configured such that the nodes are aware of each other as Security Assertion Markup Language (SAML) partners. After new account registration, the signup service can redirect the user browser to a cloud infrastructure console to start with a federated login flow, where a sign in service can issue a SAML authentication request, and redirects it to signup service. Responsive to validating the browser using a SAML authentication process, the browser can be automatically signed into the new account and allowed access the account relating to the cloud infrastructure service.

Automatic sign-in upon account signup

Described is a technology by which a plug-in (e.g., an ActiveX&#xae; control) instantiated by a web browser calls functions of a credential service to use a set of credential data (e.g., a card file) for logging into a website. If the credential service determines that a previously used card file for the website exists, a representation of that card file is displayed in the browser, and the data of that card file is used to obtain a token for logging in the user. If not found, an icon is presented instead, by which the user can select a user interface that allows selection of another card file that meets that meet the website's requirements.

Browser plug-in for secure credential submission

A method is presented for obtaining contact information on a client computer. A request is received to display contact information for a person on an email application running on the client computer. A determination is made as to whether third party contact information is available for a user of the email application. Instructions are obtained from a server computer for obtaining the third party contact information from a third party computer associated with a social network. Instructions are obtained from the server computer for formatting the third party contact information on the client computer. Using the instructions from the server computer for obtaining the third party contact information, the third party contact information is obtained from the third party computer. Using the instructions from the server computer for formatting the third party contact information, the obtained third party contact information is formatted and displayed on the client computer.

Aggregate provider for social activity feeds and contact information

In one implementation, form field(s) of a form of a website or application are populated with data obtained using a digital identity, and the populated form field(s) are submitted to the website or application. A form field specification specifying information about the form fields of the form is obtained. A user selects or creates a digital identity. Data is obtained using the digital identity, and the data is used to provide values to the form. The data is submitted to the website or application. In another implementation, a username and password are automatically generated. The username and password that are generated meet parameters that may be specified by the website or application. The username and password are submitted to the website or application for a purpose such as registration or authentication, and stored away for future authentication.

Form filling with digital identities, and automatic password generation

A model restricts un-trusted data/objects from running on a user's machine without permission. The data is received by a protocol layer that reports a MIME type associated with the DATA, and caches the data and related cache file name (CFN). A MIME sniffer is arranged to identify a sniffed MIME type based on the cached data, the CFN, and the reported MIME type. Reconciliation logic evaluates the sniffed MIME type and the CFN to determine a reconciled MIME type, and to update the CFN. A class ID sniffer evaluates the updated CFN, the cached data, and the reconciled MIME type to determine an appropriate class ID. Security logic evaluates the updated CFN, the reported class ID, and other related system parameters to build a security matrix. Parameters from the security matrix are used to intercept data/objects before an un-trusted data/object can create a security breach on the machine.

MIME handling security enforcement

Embodiments are configured to improve the stability of a Web browser by identifying plug-in modules that cause failures. Data in memory at the time of a failure is analyzed, and a failure signature is generated. The failure signature is compared to a database of known failure signatures so that the source of the failure may be identified. If a plug-in module to a Web browser is identified as the source of a failure, options are presented to the user who may update the plug-in module with code that does not produce a failure or disable the plug-in module altogether.

System and method of preventing a web browser plug-in module from generating a failure

An integrated program lookup browser provides an integrated system with an online program lookup web service that assists the user in finding these unrecognized files, protocols and web page objects by allowing the user to perform a program lookup on a web service that can search one or more databases and return the URL to download the appropriate application or protocol or return the actual program or protocol.

Online service for program lookup

Described herein is a technique of protecting users against certain types of Internet attacks. The technique involves obtaining certificates from visited web sites and qualifying communications with those web sites based on the content of the certificates.

Validating the origin of web content

A method and system for locking down a local machine zone associated with a network browser is provided. Placing the local machine zone in a lockdown mode provides stricter security settings that are applied to active content attempting to publish within a local page open in the network browser. The stricter setting are provided in a new set of registry keys that correspond to the lockdown mode of the local machine zone. The original security settings remain unchanged so that other systems and applications functionality that depends on the original security settings remains unaffected for the local machine zone. A user may also selectively allow active content to render despite the local machine zone being locked down.

Security context lockdown

A method and system for validating access to a group of related elements are described. The elements within the group access a security context associated with a markup domain when a call is made to an element. An authorized call to an element is enabled such that the markup domain is navigated to a new web page. However, an unauthorized call is prevented so that the navigation to the new web page is not permitted. After the markup domain has been navigated, the security context associated with the markup domain is invalidated. A new security context is generated and associated with the markup domain. The elements associated with the web page navigated from are inaccessible after navigation of the markup domain to the new page. The association of the new security context with the markup domain prevents an unauthorized user from accessing any element that references the previous security context.

Validating access to a group of related elements

Growing community of inventors

Seattle, WA, United States of America

Roberto Anthony Franco