Microsoft Technology Licensing, LLC

Sunitha Samuel

Scott C Cottrille

Frank Byrum

Mayank Mehta

Edward Thomas Banti

Gregory Kostal

Vladimir Yarmolenko

Chandresh Kumar Jain

Yuhui Zhong

Tejas Patel

Pankaj Mohan Kamat

The present invention extends to methods, systems, and computer program products for separating authorization identity from policy enforcement identity. Embodiments of the invention extend the consumption phase for protected information. Two identities, an authorization identity and a policy enforcement identity, are used for acquiring, issuing and enforcing usage license instead of one identity certificate. The authorization identity is used to evaluate against usage policy. The authorization identity is similar to identification information in an identity certificate. The policy enforcement identity is used to ensure the confidentiality of granted permissions and content key. The policy enforcement identity enforces a usage license on an authorization principal's (e.g., recipient's) machine. The policy enforcement identity's enforcement of a usage license is similar use of a cryptographic key in an identity certificate.

Separating authorization identity from policy enforcement identity

Growing community of inventors

Kirkland, WA, United States of America

Sunitha Samuel