Microsoft Technology Licensing, LLC

Saurabh Mahajan

Taroon Mandhana

Thomas W Kuehnel

Alok Manchanda

Alireza Dabagh

Jiandong Ruan

Hui Shen

Andrew Thomas Baron

Anirban Banerjee

Prashant Malik

Shawn Jiang

Amer A Hassan

Abhishek Abhishek

Yi Lu

Mitesh K Desai

Lihua Yuan

David A Roberts

Thekkthalackal Varugis Kurien

Yue Chen

Kevin T Damour

Hong Liu

Vladimir A Shubin

Amir Zohrenejad

Chris Gual

Karthik Ranganathan

A wireless device that utilizes a single network interface to simultaneously connect to an infrastructure network and a mesh network. The device has a driver layer with a media access control module for each network type. A multiplexing module and transceiver module within the driver can direct received information associated with one of the networks to an appropriate media access control and then to an appropriate network adapter. For transmitted data, the multiplexing module can receive data from the application layer through an appropriate network adapter and route it to an appropriate media access control module for processing. The processed data can be interleaved by the transceiver for transmission.

Low cost mesh network capability

A computing device configurable as a wireless network access point that can be controlled from multiple applications. The computing device provides an interface through which applications may input commands to change the state of the access point. The interface responds to these commands and other events, such as association or disassociation of a wireless client, in a manner that does not disrupt the applications or devices using the access point. To determine an appropriate response to any event, the interface may maintain state information, including a count of the number of applications and/or wireless devices that have taken action indicating an operating state of the wireless access point.

Wireless access point supporting control by multiple applications

A protocol for operation of wireless devices enables a wireless device to remotely and securely invoke a service on a target wireless device without requiring the user of the target wireless device to take any action and without requiring the target wireless device to use power unnecessarily. Mutual authentication is executed while the target wireless device remains in a low power discoverable mode. The discoverable mode includes discovery windows separated by inactive windows when the radio of the target wireless device is powered down.

Remote wireless service invocation with efficient power use on target wireless device

An EAP-based authentication framework is provided that decouples credential acquisition from EAP methods that use credentials for authentication. An application may request from an EAP method parameters of credentials required by the EAP method. In response, the EAP method provides credential parameters, which may then be used by the application to acquire credentials consistent with the parameters from the user or other entity. The framework enables an application to request credentials in a context specific way. In addition, the application may simultaneously obtain credentials used in multiple authentication operations through a single user interface, or retain credentials for later use without further prompting a user such that a Single Sign-on user experience may be implemented. Additionally, the application can obtain credentials from a device so that the device may gain network access without requiring a user logon.

Generic framework for EAP

A computer system that can configure itself to establish a network connection. Configuration is performed by identifying a connection profile with information from a combination of sources. Information may be obtained from user input, network traffic monitoring and a discovery process involving attempts to establish a connection with different profiles. The computer system may perform the configuration process under the control of software that performs an automated configuration process is adapted to receive extensions for operation on computers with hardware components that have non-standardized configuration options. Extensions for networks operating according to non-standardized security protocol extensions are also possible.

Extensible network discovery

Today, data networks are ever increasing in size and complexity. For example, a datacenter may comprise hundreds of thousands of service endpoints configured to perform work. To reduce network wide degradation, a load balancer may send work requests to healthy service endpoints, as opposed to unhealthy and/or inoperative service endpoints. Accordingly, among other things, one or more systems and/or techniques for monitoring service endpoints, which may be scalable for large scale networks, are provided. In particular, a consistent hash function may be performed to generate a monitoring scheme comprising assignments of service endpoints to monitoring groups. In this way, multiple monitoring components may monitor a subset of endpoints to ascertain health status. Additionally, the monitoring components may communicate between one another so that a monitoring component may know heath statuses of service endpoints both assigned and not assigned to the monitoring component.

Monitoring service endpoints

A method and apparatus for managing simultaneous virtual connections with multiple wireless networks. A plurality of ports in a hardware driver may be each associated with a corresponding wireless network and maintain a unique MAC state relative to other ports. Each port may have a corresponding virtual NIC that communicates directly with the radio hardware via a hardware virtualization layer that multiplexes communication between the virtual NICs and the radio hardware. Simultaneous virtual connections may be made with one or more infrastructure networks or adhoc networks, and/or the computer may function as an access point for one or more of the networks.

Maintaining multiple, simultaneous wireless network connections using a single radio

A framework is provided that decouples credential acquisition from authentication processes using those credentials in a way that facilitates dynamic update of credential information. An authentication component may receive credential information for authentication of a user or a device for access to a resource. During interactions with an external authenticator, the authentication component may identify that updated credential information is required and issue a request to the application including credential parameters defining the updated credential information. An application component receiving the request may acquire updated credential information from a user or another entity. In addition, the authentication method may issue notifications to the application. The framework enables the application to update credentials in a context specific way.

Dynamic update of authentication information

Growing community of inventors

Redmond, WA, United States of America

Saurabh Mahajan