Microsoft Technology Licensing, LLC

Stuart L S Kwan

Arun K Nanda

Kim Cameron

John Peter Shewchuk

Colin Harrison Brace

Vijay Gajjala

Andy Harjanto

Vijayavani Nori

Rashmi Raj

Derek T Del Conte

Hervey O Wilson

Colin Watson

Krishna Ganugapati

Eyal Schwartz

Margaret K Johnson

Steven G Judd

Levon A Esibov

Charles R Reeves

Khushru M Irani

James M Gilroy

Chuck Y Chan

Bill Barnes

Khushru Irani

A system and method for provisioning digital identity representations ('DIRs') uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. Various methods are provided for creating new DIRs, requesting DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.

Provisioning of digital identity representations

A system and method for provisioning digital identity representations ('DIRs') uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. A system is provided using a common identity data store for both DIR issuance and identity token issuance, decreasing synchronization issues. Various methods are provided for creating new DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.

Exemplary embodiments disclosed herein may include a method and system for integrating multiple identities and identity providers, including, receiving the security policy of a service provider, determining the attributes requested by the service provider, obtaining authenticated attributes requested by the service provider, registering with a provisioning service based at least in part upon the authenticated attributes, and accessing services of the service provider based at least in part upon the registration from the provisioning service.

Method and system for integrating multiple identities, identity mechanisms and identity providers in a single user paradigm

Exemplary embodiments disclosed herein may include a method and system for creating an attendance marker and establishing consistent recognition of an ongoing digital relationship, including receiving an identity key about a server, creating an attendance marker, associating the attendance marker with the server. Other embodiments relate to systems and methods for recognizing a server, website, and/or other system for a client, such as a computer system for a user. Such authentication involves receiving an identity key about a web server or other system, creating an attendance marker, associating the attendance marker with the server, requesting an attendance marker associated with a server, and recognizing the server based at least in part on the attendance marker.

Method and system for consistent recognition of ongoing digital relationships

Exemplary embodiments disclosed herein may include a method and system for providing information to a user and safely disclosing identity information over the Internet comprising receiving information from a server, analyzing the information, presenting the analyzed information to a user for validation in a finite number of configurations controlled by a client, and validating of the information by the user.

Method and system for safely disclosing identity over the internet

A method and system for aging and scavenging resource records in a DNS database is provided. DNS resource records that are stored in a DNS database are assigned the timestamps indicating the last time the records were updated. Clients (owners of the resource records) periodically refresh timestamps of the DNS resource records that they registered using standard dynamic DNS update protocol. The DNS server then periodically searches its database for the stale records and deletes them. DNS database zone parameters and DNS server parameters are configured to define when a timestamp for a resource record may be updated, when a resource record may be scavenged (deleted) and which server may perform scavenging of a zone. A non-refresh interval follows the timestamp, a refresh interval follows the non-refresh interval and a scavengable period follows the refresh interval. During the non-refresh interval, an authorized DNS server may neither refresh nor scavenge the associated resource record. During the refresh interval, an authorized DNS server may refresh, but not scavenge the associated resource record. During the scavengable period, the resource record may be scavenged, if the timestamp is not renewed in the meantime. The build up of stale resource records, or records that have outlived their utility, is thus prevented improving system performance and conserving system memory and resources.

Aging and scavenging of DNS resource records

The present invention provides a directory service system for accessing a plurality of directory services in a uniform manner. Each directory service manages information relating to objects of that directory service. The type of information that a directory service manages for an object is defined by the object class of the object. An object class defines the properties (i.e., information) that a directory service manages for objects of that object class. Each property has a property name and property type. A directory service has a property value for each property defined by the object class of each object. The directory service system comprises a schema browsing component, a name resolving component, a binding component, and an extending component. The schema browsing component controls the retrieving of the property name and property type of each property of each object class of each directory service. A client of the directory service system uses the schema browsing component to retrieve property names and property types of the object classes. The name resolving component controls the receiving of a unique identifier of an object within a directory service and the locating of the object within the directory service. The binding component controls the binding to an in-memory object representing a located object within a directory service. The extending component controls the defining of new object classes and new properties for each directory service. A client of the directory service system uses the extending component to define new object classes and new properties.

Method and system for uniformly accessing multiple directory services

Growing community of inventors

Redmond, WA, United States of America

Stuart L S Kwan