Microsoft Technology Licensing, LLC

Samir Vasantbhai Shah

Jia Le He

Rui Chen

Lin Huang

Andrew Ryan Pickering

Ravi Kiran R Poluri

Olena Lanxin Huang

A system for location-aware authentication is configured to receive an authentication request associated with an identifier of a user for accessing an application and retrieves user information associated with the identifier and the application. The system then determines that the user information includes a geofence and information associated with a device of the user. Based on the geofence and the device information, the system sends a geolocation data request to the device, causing the device to gather and send the device's current geolocation data to the computing system. A data structure is generated to store data related to the device's current geolocation and sent to the application, which in turn causes the application to grant or deny the authentication request.

Location-aware authentication

User authentication techniques that use a companion device associated with a mobile computing device are described. The companion device receives a user authentication request from a user authentication service via the mobile computing device, displays information related to the user authentication request, receives an approval of the user authentication request, and transmits the approval of the user authentication request to the service via the mobile computing device. In one embodiment, after transmitting the approval, the companion device receives a token from the mobile computing device that includes a value obtained from the service, signs the token with a private key of a securely-stored signing key pair and provides the signed token to the service via the mobile computing device. In another embodiment, after the companion device transmits the approval to the mobile computing device, the mobile computing device provides a personal identification code from secure storage to the service.

User authentication using a companion device

A datacenter infrastructure comprising a plurality of datacenters is configured to provide services to users. Data (e.g., application data) provided to respective datacenters from a user is synchronized between different datacenters comprised within 'a cloud' according to a multilevel synchronization scheme. Respective levels of the multilevel synchronization operate to transfer different priority (user) data between the plurality of datacenters, wherein respective priorities are determined based upon the importance of the data in providing a service. For example, data used to perform a service is synchronized by a synchronization component facilitating a higher level of synchronization between datacenters, while data not routinely used to perform a service is synchronized by a lower priority synchronization component. Synchronization between datacenters allows a network address routing system to provide substantially uninterrupted routing of a user to an available or otherwise appropriate datacenter within the datacenter infrastructure, thereby providing increased service reliability and performance.

Growing community of inventors

Bellevue, WA, United States of America

Samir Vasantbhai Shah