Microsoft Technology Licensing, LLC

Stuart Kwan

Kim Cameron

Melissa Wood Dunn

Arun K Nanda

Murli D Satagopan

Parul Manek

Roberto C Taboada

Ganesh Pandey

Colin Harrison Brace

Walter R Smith

Caleb Geoffrey Baker

Kameshwar Jayaraman

Charles Glenn Jeffries

Steven Mark Silverberg

Don Hacherl

Carlos Adrian Lopez Castro

William Bruce Barr, Iii

Christopher Adam Brooks

Daniel John Carroll, Jr

Kartik Tirunelveli Kanakasabesan

Zhifeng Wang

Shefali Gulati

Adam Edwards

Arturo Huato Lucatero

Abhijeet Kumar Sinha

Generally discussed herein are devices, systems, and methods for adaptive authorization using a local route as a named location. A method can include defining a local route and a corresponding local route endpoint, associating a compute resource as a destination of the local route endpoint, defining an adaptive authorization policy that limits access to the compute resource to be through the local route endpoint, and enforcing access to the compute resource based on the defined adaptive authorization policy.

Adaptive authorization with local route identifier

Access to data and resources in a multi-tenant computing system is managed by tagging the data and resources with attributes, as well as by tagging users with attributes. Tenant-specific access policies are configured. When an access request is received from a workload, a policy decision engine processes the attributes that are tagged to the requesting workload (e.g., user, application, etc.) as well as those tagged to the requested data or resource, given a relevant tenant-specific policy. An access decision is provided in response to the access request, and the access decision can be enforced by a tenant-specific enforcement system.

Controlling access to cloud resources in data using cloud-enabled data tagging and a dynamic access control policy engine

In accordance with various aspects, the present invention relates to methods and systems for sending an identity information document comprising selecting identity information from a self-identity information store for inclusion in the identity information document. The selected identity information is read from a self-identity information store. The identity information document is generated to include the selected identity information and one or more keys, and signed using a key associated with one of the keys included in the identity information document. The identity information document is then sent to a recipient. Receiving an identity information document comprises receiving a signed identity information document from an originator. A determination is made as to whether identity information in the identity information document is reliable. The identity information is saved in a recognized identity information store if the identity information is determined to be reliable. If the identity information is determined to be unreliable, an identity recognition number retrieved from the sender is compared to an identity recognition number generated by the recipient based on information in the received identity information document. If the identity recognition number is verified, the identity information is saved in the recognized identity information store.

Method and system for identity recognition

Growing community of inventors

Redmond, WA, United States of America

Stuart Kwan