Microsoft Technology Licensing, LLC

Other

Workman Nydegger

Micosoft Corporation

Roy Williams

Nelly L Porter

Oleg Ouliankine

Karim Batthish

Loren Curtis

Joshua T Goodman

Robert L Rounthwaite

Robert George Atkinson

Jorge Pereira

James M Lyon

Khaja Ehteshamuddin Ahmed

Malcolm Hollis Davis

Harry Simon Katz

Yuri Inglikov

Malcolm Erik Pearson

Peter David Waxman

Cynthia Dwork

Andrew V Goldberg

John Gerard Speare

Yuriy Mikhailovich Inglikov

Mehmet Iyigun

Yevgeniy Bak

Mihai Costea

Jeffrey B Kay

Kenneth Dean Johnson

Vladimir Holostov

Trevor William Freeman

Eric Dean Tribble

Pedro Miguel Sequeira De Justo Teixeira

Konstantin E Ryvkin

Justin Alexander Hou

Russell Charles Hadley

YongKang Zhu

Yu Lin Sie

Christopher William Thilgen

Russell Bivens Keldorph

Joseph Norman Bialek

Jean Wu

Phillip J Hallin

Gabriel Thomas Kodjo Dos Reis

Xiang Fan

Pranav Kant

Dynamically overriding a function based on a capability set. A computer system reads a portion of an executable image file. The portion includes a first memory address corresponding to a first callee function implementation. The first memory address was inserted into the portion by a compiler toolchain. Based on extensible metadata included in the executable image file, and based on a capability set that is specific to the computer system, the computer system determines a second memory address corresponding to a second callee function implementation. Before execution of the portion, the computer system modifies the portion to replace the first memory address with the second memory address.

Dynamically overriding a function based on a capability set

Methods, systems, and computer program products are provided that enable secure remote modification of device credentials using device-generated credentials. A plurality of credentials policies is stored by the user device. The credentials policies are merged to generate a merged credentials policy. An instruction is received by the user device from a trusted service to initiate a device credentials change. A new device credentials is generated on the user device based at least on the merged credentials policy.

Secure remote modification of device credentials using device-generated credentials

The claimed subject matter provides systems and/or methods that facilitate interpreting Multipurpose Internet Mail Extensions (MIME) data. An interface can obtain MIME data. For instance, a stream of MIME data can be obtained, MIME data can be loaded from a static file, etc. Moreover, any disparate type of RFC 822 data can additionally or alternatively be received by the interface. Also, a MIME reader can analyze the MIME data (and/or normalized RFC 822 data) to interpret encoded structural information and generate at least one primitive based on the encoded structural information. Further, a hierarchical model can be built utilizing the at least one primitive.

Document object model API for MIME

Embodiments disclosed herein are directed to a system and method for facilitating the interpretation of Multipurpose Internet Mail Extensions (MIME) data. Specifically, embodiments disclosed herein are directed to receiving MIME data and identifying structural information encoded within the MIME data. A MIME reader is then used to analyze the MIME data to interpret the encoded structural information and generate at least one primitive based on the encoded structural information. A MIME writer may be used to generate corresponding MIME data from the at least one primitive based on the encoded structural information. Embodiments also provide that corrupted MIME data interpreted by the MIME reader may be identified and corrected.

A MIME or XML formatted message is stored and a map is processed in place of a message. The map is a compact representation of the message. The map is indicative of the content and structure of the message. The map comprises tags that map to and are indicative of portions of the message. When a portion of the message is to be accessed, the associated tag in the map is processed to determine the location of the associated portion of the message, and the associated portion of the message is accessed at the location. To allow accurate decryption of signed messages, the format of the message is preserved.

Formatted message processing utilizing a message map

The claimed subject matter provides systems and/or methods that facilitate interpreting Multipurpose Internet Mail Extensions (MIME) data to view and/or edit MIME content. An interface can obtain MIME data. For instance, this MIME data can be obtained from a stream of MIME data, from loading a static file including the MIME data, etc. Moreover, any disparate type of RFC 822 data can additionally or alternatively be received by the interface. In an embodiment, a MIME reader analyzes the MIME data (and/or normalized RFC 822 data) to interpret encoded structural information and generates at least one primitive based on the encoded structural information. A MIME writer which complements the MIME reader then generates MIME data from the at least one primitive. Further, a hierarchical model can be built utilizing the at least one primitive.

An electronic mail message (EMM) addressed to a distribution list of an enterprise is received at a server of the enterprise from a sending address outside of the enterprise. If the distribution list has no external addresses, then the EMM is blocked from being delivered to the distribution list. In an embodiment, if the distribution list has an external address and the sending address is identified in a safe sender list corresponding to the distribution list, then the EMM is delivered to the distribution list. In an embodiment, if the distribution list has an external address, the sending address is not in a safe sender list corresponding to the distribution list, and the content of the message is approved, then the EMM is delivered to the distribution list.

Access limited EMM distribution lists

A transmitting gateway may utilize a retrieved domain-specific key to secure an outbound message, and a receiving gateway may utilize another retrieved domain-specific key to authenticate and validate the secured message.

Key distribution for secure messaging

The present invention provides for generating inputs that can be provided to a message classification module to facilitate more reliable classification of electronic messages, such as, for example, as unwanted and/or unsolicited. In one embodiment, a sending messaging server provides an appropriate response to address verification data thereby indicating a reduced likelihood of the sending messaging server using a forged network address. In another embodiment, it is determined if a messaging server is authorized to send electronic messages for a domain. In yet another embodiment, electronic message transmission policies adhered to by a domain are identified. In yet a further embodiment, a sending computer system expends computational resources to solve a computational puzzle and includes an answer document in an electronic message. A receiving computer system receives the electronic message and verifies the answer document.

Reducing unwanted and unsolicited electronic messages by exchanging electronic message transmission policies and solving and verifying solutions to computational puzzles

Concurrent recipient resolution and certificate acquisition. If a client-entered input data may be resolved without further client input, the server resolves the input data into a recipient entry that has an associated routing address. The server then transmits a response to the client that includes the associated full display name, routing address and certificate. If the server determines that the recipient entry cannot be resolved without further input from the client, the server identifies a number of possible recipient entries, and for each possible recipient generates a token, which is then communicated to the client. The server receives a subsequent request from the client identifying a selected one of the possible associated recipients using the associated token. The server then acquires a certificate associated with the selected recipient using the token, and then sends the certificate to the client.

Concurrent recipient resolution and certificate acquisition

Reducing unwanted and unsolicited electronic messages by preventing connection hijacking and domain spoofing

The principles of the present invention provide for delegating certificate validation. A client computer system sends a certificate validation request to a server computer system over a trusted link. The certificate validation request includes at least enough certificate information for a certificate authority to identify a digital certificate that binds a sending entity to a private key. The server computer system checks a validation path to determine if the digital certificate is valid and at least one certificate revocation list to determine if the certificate has been compromised. The server computer system sends a certificate status indication to the client computer system over the trusted link. Accordingly, the resources of the server computer system, instead of the client computer system, are utilized to validate a digital certificate. Further, digital certificate validation can be delegated to a server computer system that attempts to pre-validate a digital certificate.

Delegating certificate validation

Encrypted email message structures can contain recipient information that can reveal, to any recipient, all of the other recipients of an email message. Because some recipients, such as recipients to whom the message was 'blind carbon-copied', should remain hidden from the other recipients, individual encrypted messages can be created. One encrypted message can be created for all of the recipients who are intended to be revealed, such as the recipients listed in the TO and CC fields of an email header. A second encrypted message can be created for all of the recipients of the message who are intended to be hidden, such as the recipient listed in the BCC field of an email header. Alternatively, multiple encrypted messages can be created individually for each recipient in the BCC field, if the BCC recipients are to be hidden even from other BCC recipients.

Encryption to BCC recipients with S/MIME

Growing community of inventors

Woodinville, WA, United States of America

Roy Williams