Microsoft Technology Licensing, LLC

Sachin C Sheth

Arun Ayyagari

Shirish Koti

Timothy Mark Moore

Yun Lin

Pradeep Bahl

Anton W Krantz

Vadim Eydelman

Narasimha Rao S S Nagampalli

Sankaran Narayanan

Namendra Kumar

Amey Parandekar

Maxim A Ivanov

Emanuel Paleologu

Krishna Ganugapati

Florin Teodorescu

Vinit Deshpande

Eric Erwin Youngblut

Mihai S Peicu

Abhishek Abhishek

Rajesh Ramanathan

Mohammad Shabbir Alam

Bhupinder Singh Sethi

Sriram K Parameswar

Pradipta Kumar Basu

Adrian Potra

Ankit Tandon

Timothy J Rang

Stephen Hoyt Houchen

Alexandre Marciano Gimenez

Nelamangala Krishnaswamy Srinivas

Yu An

Ajit Kalele

Call control messages and audio signals between a telephone device and a computer network telephone client on a computing device can be intercepted. For control messages from the computer network telephone client, the control messages can be translated from a first control protocol to a second control protocol and forwarded to the telephone device. For control messages from the telephone device, the control messages can be translated from the second control protocol to the first control protocol and forwarded to the computer network telephone client. For audio signals from the computer network telephone client, the audio signals can be translated from a first audio protocol to a second audio protocol and forwarded to the telephone device. For audio signals from the telephone device, the audio signals can be translated from the second audio protocol to the first audio protocol and forwarded to the computer network telephone client.

Translation between telephone device and network client

Architecture for a communications system enabling a user to provision a telephone at a new location without network administrative pre-configuring. An input component (e.g., keypad) receives a numeric extension and PIN. The extension is a telephone extension of the user and the PIN can be administratively assigned. A location component provides location information of an enterprise communications server to the telephone based on the extension. The telephone uses the location information to send messages to the enterprise communications server. A registration component registers the telephone with the enterprise communications server based on the numeric extension. A telephony address is returned to the telephone. An authentication component authenticates the telephone based on the PIN. Upon authentication, the extension is assigned to the telephone, and telephone communications can be sent and received from that location.

User-based authentication for realtime communications

In one embodiment, a user paired controller communication device may pair with a user paired server communication device. The user paired controller communication device may direct the user paired server communication device to execute a first mode communication session of a multimodal conversation, such as a voice session. The user paired controller communication may execute a second mode communication session of the multimodal conversation, such as an instant messaging session.

Remote call control and conferencing using paired devices

A method and system for tracking context information of a service provider and interceptors of service provider requests is provided. An interceptor modifies a portion of service provider context information to reference interceptor context information associated with a client. When the client requests a service of the service provider, the client provides the modified service provider context information along with the request. The interceptor uses the reference of the modified portion of the service provider context information to retrieve its context information. The interceptor then restores the modified portion of the service provider context information to the original unmodified portion, which the interceptor retained as part of its context information. The interceptor then forwards the request along with the original service provider context information to the service provider.

Modifying service provider context information to facilitate locating interceptor context information

A method and system for controlling access to files in a remote file system is provided. In one embodiment, a firewall system at a client computer system intercepts requests originating from the client computer system and sent to the remote file system for accessing remote files, that is, files stored on a server computer system. Upon intercepting a remote file access request (e.g., to open a remote file), the firewall system determines whether the file access request should be allowed based on access control criteria.

Method and system for securing a remote file system

A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.

Method and system for distributing security policies

A method and system for intercepting communications between a transport client and a transport provider is provided. An interceptor system registers to intercept calls made by the transport client to functions of the transport provider. The interceptor system also replaces callbacks of the transport client so that calls from the transport provider intended for the transport client can be intercepted. When the interceptor system intercepts the call, it provides an indication of the call to a processing component. The processing component may analyze the call and determine whether the call should be allowed or denied. The interceptor system then proceeds to process the call in accordance with the indication of the processing component.

Method and system for intercepting, analyzing, and modifying interactions between a transport client and a transport provider

A system and method for enabling a zero configuration nomadic wireless and wired computing environment presenting a just works experience is presented. The system examines predefined user preference or profile settings to determine to which of a competing number of wireless networks available it should connect, and what type of authentication should be used for such connection. Nomadic wireless computing between infrastructure wireless networks and ad hoc wireless networks may be accomplished without further user intervention required in an auto mode. Also, both infrastructure only and ad hoc only modes are available through the system of the invention. Further, the user may set a preference for infrastructure or ad hoc modes in the auto mode. With an infrastructure mode preference set, the system will automatically detect and transfer connectivity to a newly available infrastructure wireless network if the user was previously operating off-line or in ad hoc mode.

System and method for achieving zero-configuration wireless and wired computing and computing device incorporating same

A supplicant on a first computing system authenticating the first computing system to an authenticator on a second computing system in a manner that is independent of the underlying data link and physical layer protocols. The first computing system establishes a data link layer connection with the second computing system using specific data link and physical layer protocols. The supplicant on the first computing system and the authenticator on the second computing system then receive an indication that the data link layer connection has been established. The supplicant determines that authentication is to occur with the authenticator, and vice versa. The supplicant (and the authenticator) then instructs that authentication is to occur in a manner that is independent of the underlying data link and physical layer protocols used to establish the connection.

Supplicant and authenticator intercommunication mechanism independent of underlying data link and physical layer protocols

A method for setting up and managing secure data/audio/video links with secure key exchanges, authentication and authorization is described. An embodiment of the invention enables establishment of a secure link with limited privileges using the machine identifier of a trusted machine. This is particularly useful if the user of the machine does not have a user identifying information suitable for authentication. Furthermore, the presentation of a default user identifying information by a user advantageously initiates intervention by a system administrator instead of a blanket denial. This decentralized procedure allows new users access to the network without having to physically access a centralized facility to present their credentials. Another embodiment of the invention enables a remote user to connect to a secure network with limited privileges.

Security link management in dynamic networks

System and method for achieving zero-configuration wireless computing and computing device incorporating same

Growing community of inventors

Seattle, WA, United States of America

Sachin C Sheth