Microsoft Technology Licensing, LLC

Sunil Pai

Karandeep Singh Anand

Vinay Badami

Brian Thomas Berkowitz

Catharine Van Ingen

Vijay Sen

Abid Ali

Sushil Baid

Nikhil Vijay Chandhok

Suresh P Duddi

Robert M Fries

Giedrius Zizys

Seetharaman Harikrishnan

Klaus U Schutz

Philip Joseph Hallin

Uday Sooryakant Hegde

John J Lambert

Brian Michael Wahlert

Yezdi Z Lashkari

Amit Singla

Pavan Gopal Bandla

David E Gonzalez

Ramin L Halviatti

Purushottam M Kulkarni

Venkatasubrahmanyam Raman

LiLei Cui

Charumathy Srinivasan

Christopher Michael Jeffords

Arasu Shankher Jeyaprakash

Noah Bergman

Kaymie Sato-Hayashi-Kagawa Shiozawa

Amritaputra Bhattacharya

Ahmed Awad-idris

Ravi Kumar Lingamallu

Jessica Michelle Satnick

James Matthew Atkins

Ayala Miller

Srikanth Bolisetty

Access to secured items in a computing system is requested instead of being persistent. Access requests may be granted on a just-in-time basis. Anomalous access requests are detected using machine learning models based on historic patterns. Models utilizing conditional probability or collaborative filtering also facilitate the creation of human-understandable explanations of threat assessments. Individual machine learning models are based on historic data of users, peers, cohorts, services, or resources. Models may be weighted, and then aggregated in a subsystem to produce an access request risk score. Scoring principles and conditions utilized in the scoring subsystem may include probabilities, distribution entropies, and data item counts. A feedback loop allows incremental refinement of the subsystem. Anomalous requests that would be automatically approved under a policy may instead face human review, and low threat requests that would have been delayed by human review may instead be approved automatically.

Anomaly-based mitigation of access request risk

Techniques are described for providing and accessing network services via a peer-to-peer wireless network connection which is established between a first computing device and a second computing device. The first computing device has an additional network connection that allows it to access network services via external networks (e.g., the internet). The second computing device is only connected to the peer-to-peer wireless network connection and has no Internet access. A primary data channel is established between the first and second computing devices over the peer-to-peer wireless network connection (e.g., for streaming audio and/or video content). A secondary data channel is negotiated between the first computing device and the second computing device. The secondary data channel is used by the second computing device to access the network services via the first computing device which performs relay and/or proxy operations for the second computing device.

Miracast source providing network service access for a miracast sink

A method for creating an archive protection plan for archiving a backup of data is provided. An indication of an archive data protection kind and an archive data protection duration are received. In response to receiving the archive data protection kind and the archive data protection duration, an archive scheme is determined and an archive protection plan representative of the archive scheme is generated.

Method, system, and apparatus for creating an archive routine for protecting data in a data protection system

A method for creating a group plan for protecting an object located at a production location is provided. A selection of an object for which a group plan is to be created is received along with protection intents for the selected object. The protection intents are translated into a group plan for protecting the selected object.

Method, system, and apparatus for translating logical information representative of physical data in a data protection system

A method for verifying data copies generated by a data protection system is provided. In accordance with the method, intents for selecting a data copy to be verified are determined. The intents may specify a time period after which data is to be verified and an interval for which the verification is to be repeated. Additionally, utilizing the intents, a data copy matching those intents is identified and verified. A data copy may be verified by comparing a checksum of the data copy with a known checksum value. If the data copy fails to be verified, a copy of the data copy is generated.

Method and system for verifying data in a data protection system

A backup system in accordance with an implementation of the present invention includes one or more light-weight (i.e., stateless) storage nodes that are positioned close enough to one or more assigned production servers to enable as rapid and efficient a data recovery as possible. The one or more light-weight storage nodes are driven by, and implement backup policies in accordance with, control settings determined by and received from a centralized backup server. Changes to the control settings are simply produced at the centralized backup server and propagated to each storage node in the system. In addition to efficient backup times, general backup administration can be greatly simplified at least in part since a large number of production serves can be serviced through a small or large number of light-weight storage nodes, which in turn can be managed by a single centralized backup server.

Managing backup solutions with light-weight storage nodes

Systems and methods are described for distributing and updating trusted certification authorities to computer systems and users. When a digital certificate is encountered during a secured electronic transaction, the root authority of the certificate is determined. It is then determined whether the root authority is a trusted authority by attempting to locate the root authority in a trusted root list. If the root authority is not included in the trusted root list, a remote site is accessed and an updated version of the trusted root list is downloaded. The new trusted root list is checked for the presence of the encountered certificate and, if found, the transaction is allowed to proceed. In one implementation, the entire trusted root list is not downloaded. Instead, if an appropriate digital certificate is located, then the certificate is downloaded and added to the trusted root list of the computer system. The transaction may then proceed.

Systems and methods for distributing trusted certification authorities

Growing community of inventors

Portland, OR, United States of America

Sunil Pai