Microsoft Technology Licensing, LLC

Svyatoslav Trukhanov

Radhika Kashyap

William Bruce Barr, Iii

Pavel Michailov

Marc Andrew Walker

A CRL can be divided into a number of segments. The number of segments into which the CRL is divided can be determined by using a predefined number of serial numbers per segment. The segment in which a particular certificate is included can be determined by application of a consistent hashing algorithm to the serial number of the certificate to determine in which segment the serial number will be found if revoked, thereby increasing the efficiency of determining the revocation status of the certificate. Metadata common to each CRL can be cached on each server and on the remote cache. The segments themselves can be cached in the remote cache. Storing the segments only in the remote cache decreases resource consumption (e.g., amount of memory used in the local cache). Storing the segments in the remote cache enables optimization for locality.

Efficient certificate revocation list validation in multi-tenant cloud services

A system includes a processor and memory to execute an application. The application receives feedback from a target regarding ability of a plurality of resources of the target to service requests from one or more clients. The feedback includes a metric indicative of a load of each of the resources. The application calculates weights for the resources based on the feedback. A weight for a resource is based on a product of a first term that determines a maximum difference in probabilities of selection between two resources and a second term including an exponent that is a difference between a current load of the resource and a current minimum load across the resources determined based on the feedback. The application selects, for servicing a request from one of the clients, one of the resources in round robin manner based on the weights to evenly utilize the plurality of resources.

Growing community of inventors

Redmond, WA, United States of America

Svyatoslav Trukhanov