Microsoft Technology Licensing, LLC

Oracle International Corporation

Amazon Technologies, Inc.

Thomas W Kuehnel

Amer A Hassan

Christian F Huitema

Deyun Wu

Hui Shen

Yi Lu

Jiandong Ruan

Shai Guday

Taroon Mandhana

Alok Manchanda

Abhishek Abhishek

David T Jones

Piyush Goyal

Triptpal Singh Lamba

Saumaya Sharma

Vishesh Parikh

Mukesh Karki

David Neil MacDonald

Yusuf Atas

Shannon J Chan

Darya Mazandarany

Andrew Thomas Baron

Donald M Gray

James Christopher Gray

Francis Duong

Anand Valavi

D Gabriel Frost

Adam Sapek

Saurabh Mahajan

Brent Edward Ford

Sundar P Subramani

Vinod K Swamy

Eden Grail Adogla

Alireza Dabagh

Srinivas Raghu Gatta

Noel W Anderson

Vishal Soni

Sidharth Nabar

Rao Salapaka

Pan Chun Wen

Ranveer Chandra

Sean O Lyndersay

John David Bruner

Dale Alan Sather

Humayun Mukhtar Khan

James M Lyon

John Mark Miller

Gursharan Singh Sidhu

Jin Guo

Gregory James Scott

Vladimir Holostov

Anish Desai

Ruchir Astavans

Guillaume Simonnet

Mansoor Jafry

King Shaw

Hiep V Khuu

Omar Abdul Baki

Adam R Dyba

Mark Lino Nielson

Tript Singh Lamba

Naile Daoud

Joseph Neil Garfinkel

Vikas Singh

Jonathan Hathaway

Paramvir Bahl

Pradeep Bahl

Samuel Scott Gigliotti

Ralph A Lipe

Mitesh K Desai

Mohammad Shabbir Alam

Christopher R Rice

Hugh A Teegan

Calvin Choe

Kosar Akram Jaff

John W Archer

Nicholas A Banks

Scott Michael Bragg

Brian Ashley Garber

Savas Guven

John M Gehlsen

Roland J Ayala

Tan Shen Cliff Chung

Douglas Edward Stamper

Mark Lino Nielsen

Nick Banks

Javier Flores Assad

Pavneet Singh

A method may include generating a first cloud network associated with a first security level and including data associated with a service. The method may include generating a second cloud network associated with the first security level and deploying the service and the data associated with the service to the second cloud network and generating a first ingress channel to permit data to be transmitted to the second cloud network. Restricted data associated with a tenant may be deployed to the second cloud network. The method may include generating a third cloud network associated with the first security level and including the service and the data associated with the service and generating a second ingress channel to permit data to be transmitted to the third cloud network. A data sync may be implemented between the second and third cloud networks to deploy the restricted data to the third cloud network.

Merging a new region into classified realms

The present embodiments relate to providing near real-time communications from a public network to a private network. A first computing device in a public network can obtain data packets to be provided to the private network from an application executing on the first computing device. A trust module executed by the first computing device can authenticate the user, application, and the data packets to be provided to the private network and add metadata relating to the sending user, recipient user, etc. The data packets can be forwarded to the private network via a cross-domain system (CDS). The metadata and the digital signature on the data packets can be verified by a trust module executing on a second computing device in the private network. The second computing device can receive the data packets and store the data packets for subsequent actions to be performed in the private network.

Semi-interactive one-way transfer of data to an isolated network

In some aspects, a network interface card (NIC) may receive, at a first node of a network interface card associated with a disconnected network, a message intended for the disconnected network and sent using a first communication protocol. The network interface card may send the message from the first node to a second node of the network interface card using a second communication protocol, the second communication protocol being configured for unidirectional communication. The network interface card may receive the message at the second node. The network interface card may send, from the second node, the message to a destination node of the disconnected network using a third communication protocol. Numerous other aspects are described.

Cloud based cross domain system—virtual data diode

In some aspects, a computing device of the disconnected network may generate an application programming interface (API) configured to present a set of filter types. A selection of one or more filters types from the set of filter types may be received via an API. A sequential order for the selected filter types may be received via an API. A data pipeline with the selection of filters in the sequential order may be generated. A message received at a one-way transfer device may be analyzed by passing the message through the selected filters in the sequential order. A log of events occurring in the data pipeline may be received via a logging network. The log of events may be presented via the application programing interface. The data pipeline may be terminated upon receiving a termination command via the application programming interface.

Cloud based cross domain system—CDS with disaggregated parts

A system in which a device may automatically provision another device with credentials, at the behest of a cloud-based service, based in part on the physical proximity of the device to be provisioned. The provisioning device and the device to be provisioned may use a radio access technology (RAT) with a limited radio range. Account information associated with the device to be provisioned is known to the cloud-based service, which authenticates the device to be provisioned via the device with credentials.

Cloud-based provisioning using peer devices

A computing environment containing a mesh network that is adapted to provide a reliable transport mechanism over which services may be delivered. Nodes of the mesh can automatically select routable addresses without conflicts, which allows nodes of the mesh to be accessed, even as the mesh changes through the addition or deletion of nodes. Also, nodes communicate with a protocol that supports service advertisements. These advertisements can identify mesh nodes that supply services, such as file or print servers, for which devices that have not yet connected to the network may be searching. Advertisements can also identify services to be used by nodes in the network, allowing, for example, a node to select a gateway providing a reliable connection to an external network. The mesh network can be used as a transport for communication using protocols, such as TCP/IP, that generally exhibit poor performance when using unreliable transports.

Gateway advertisement in a wireless mesh

Discovery of services between devices is provided prior to establishing a connection between devices, including wireless-enabled devices or devices that are communicatively coupled to wireless access points or other wireless communication devices. Discovering services prior to establishing a connection may facilitate finding a desired service. The services that may be discovered may be, for example, print services, camera services, PDA services or any other suitable services. Services may be discovered using 802.11, Bluetooth, UWB or any other suitable wireless technology. A graphical user interface is provided that enables a user to select a desired service.

Notification framework for wireless networks

Various technologies described herein pertain to configuring an access point in a local network for operation in a community Wi-Fi network. The community Wi-Fi network includes access points in differing local networks that share respective network bandwidth capacities with member computing devices of the community Wi-Fi network. A request to join the access point to the community Wi-Fi network is transmitted from the access point to a community aggregation system. Responsive to the request, the community aggregation system transmits a firmware update to the access point. The access point installs the firmware update in memory of the access point. Moreover, responsive to installation of the firmware update, the access point can share network bandwidth capacity with the member computing devices of the community Wi-Fi network. Further, the community aggregation system supports transparent handoffs between access points in to the community Wi-Fi network.

Community Wi-Fi network joined access point configuration

Embodiments provision captive portals on network access points (NAPs). In response to a request from a NAP owner, a cloud service associates a NAP with the NAP owner and provides a control channel for configuring the NAP. The NAP owner inputs configuration settings describing the captive portal. The cloud service processes the configuration settings to generate configuration data. The cloud service transmits the configuration data to the NAP. The NAP applies the configuration data to configure the NAP. Some embodiments configure Wi-Fi hotspots with captive portals for gated access to the Internet.

Configuring captive portals with a cloud service

Examples of the disclosure describe automatically associating devices of a user with a network service subscription of the user. The user has a subscription to services offered by an entity. Connection statistics for the devices to networks are generated and compared to criteria to determine whether any of the devices should be associated with the subscription of the user. After association, the devices are able to access networks and/or services associated with the subscription.

Identifying and targeting devices based on network service subscriptions

Embodiments apply a set of sequenced instructions to connect to a network through a captive portal. A computing device detects a network access point and obtains the instruction set corresponding to the network access point. The instruction set is derived by a cloud service from crowdsourced data describing interactions between mobile computing devices and the network access point. Applying the instruction set includes performing actions such as navigating web pages to accept terms and conditions, provide user or device information, and more.

Applying sequenced instructions to connect through captive portals

The normal roles of wireless stations and wireless access points in initiating the establishment of wireless connections may be reversed without the need for changes in the network interfaces for either the station or access point device. This capability may be used to allow wireless devices acting as access points, but on which service clients operate, to initiate the establishment of a connection with a station, on which a wireless service provider operates. Discovery of services between wireless devices can be provided prior to establishing a connection between the devices. A service client device providing access point functionality may broadcast an invitation for service advertisements and then receive service advertisements from relevant service providers acting as wireless stations. An information element may be included as part of periodically broadcast administrative messages to wirelessly convey an invitation for service advertisements. In response to a service advertisement, the access point may send to the wireless station an invitation to connect, prompting the wireless station to begin to establish a connection according to a wireless communication protocol.

Base station initiated proximity service discovery and connection establishment

Services advertisement in a wireless mesh

Growing community of inventors

Seattle, WA, United States of America

Thomas W Kuehnel