Microsoft Technology Licensing, LLC

Saji Varkey

Rahul Kapoor

Satish Ramchandra Thatte

Rolando Jimenez Salgado

Javier Dalzell

Ricard Roma I Dalfó

Yi Mao

Anuj Bansal

Kaushik Raj

Claim based identities are transformed to a set of credentials and securely stored in a secure data store using a number of encryption schemes. The credentials are then used to authenticate applications requiring specific credential types. For each call to the secure store system, a client application may provide a claims token issued by a trusted source, which is used to search for corresponding credentials in the secure data store if the credentials have been created previously for the user.

Transforming claim based identities to credential based identities

A single virtual image of client information centrally located at an always-on network location for maintaining equivalency among multiple user devices. The image can be accessed by the user devices when coming online to upload and receive changes in the client information. A mid-tier system can be employed as the always-on central location with which the user client machines can communicate to maintain the same set of client information. Services in support thereof include an ownership service for dynamic selection of a designated client machine to take ownership for performing the actions on one client machine and arbitration of duplicate requests, a notification service for allowing data sources to publish cache update instructions to a central place, a roaming service for allowing clients machines to share state with each other, and an encryption service for secure storage and communications of client information.

Single virtual client for multiple client access and equivalency

Growing community of inventors

Redmond, WA, United States of America

Saji Varkey