Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Tejas Patel

Samuel Scott Gigliotti

Gregory Kostal

Vladimir Yarmolenko

Yuhui Zhong

Alexander Say Go

Pankaj Mohan Kamat

Eric Meissner

Chinmay Milind Dani

Benjamin Markwardt

Frank Byrum

Mayank Mehta

Edward Thomas Banti

Krassimir Emilov Karamfilov

Chandresh Kumar Jain

Victor Boctor

Scott C Cottrille

Hao Zhang

Amit Fulay

Christopher Barnes

Michael Nelte

James R Knibb

Ayse Yesim Koman

Sunitha Samuel

This disclosure is directed to generating one or more presence-event notifications at one or more user devices associated with a user, and transmitting those presence-event notifications to one or more presence server(s). At the presence server(s) a stream of presence-event notifications may be filtered according to any number of predefined criteria, and then the presence-event notifications that have filtered through may be applied to presence plug-ins to generate presence information associated with user(s) for whom presence-event notifications were received. The presence-event notifications may be provided as a stream of presence information to one or more consumers of presence information and/or stored in a presence datastore. A consumer of presence information, such as a service provider, may request presence information associated with one or more users. In response, the service provider may be provided with the requested presence information based on whether that service provider has permissions to receive the requested presence information.

Contextual presence

The present invention extends to methods, systems, and computer program products for deriving express rights in protected content. Embodiments of the invention provide mechanisms to convert implicit rights to express rights for entities, including applications, inside and outside of an organizational (e.g., enterprise) boundary. The conversion can occur dynamically, based on the information protection policies defined by a policy administrator, granting entities express access to perform tasks on protected content.

Deriving express rights in protected content

Business to business secure mail may be provided. Consistent with embodiments of the invention, a protected message may be received. The recipient may request a token from a trust broker, submit the token to an authorization server associated with the sender, receive a user license from the authorization server; and decrypt the protected message using the user license. The protected message may restrict actions that may be taken by the recipient, such as forwarding to other users.

Business to business secure mail

The present invention extends to methods, systems, and computer program products for separating authorization identity from policy enforcement identity. Embodiments of the invention extend the consumption phase for protected information. Two identities, an authorization identity and a policy enforcement identity, are used for acquiring, issuing and enforcing usage license instead of one identity certificate. The authorization identity is used to evaluate against usage policy. The authorization identity is similar to identification information in an identity certificate. The policy enforcement identity is used to ensure the confidentiality of granted permissions and content key. The policy enforcement identity enforces a usage license on an authorization principal's (e.g., recipient's) machine. The policy enforcement identity's enforcement of a usage license is similar use of a cryptographic key in an identity certificate.

Separating authorization identity from policy enforcement identity

Growing community of inventors

Seattle, WA, United States of America

Tejas Patel