Microsoft Technology Licensing, LLC

Oracle International Corporation

Amazon Technologies, Inc.

Microsoft Corporation

Thomas W Kuehnel

Amer A Hassan

Christian F Huitema

Deyun Wu

Hui Shen

Yi Lu

Jiandong Ruan

Shai Guday

Taroon Mandhana

Alok Manchanda

Abhishek Abhishek

David T Jones

Triptpal Singh Lamba

Piyush Goyal

Saumaya Sharma

Vishesh Parikh

Mukesh Karki

David Neil MacDonald

Yusuf Atas

Eden Grail Adogla

Shannon J Chan

Darya Mazandarany

Andrew Thomas Baron

Donald M Gray

James Christopher Gray

Francis Duong

Anand Valavi

D Gabriel Frost

Adam Sapek

Saurabh Mahajan

Brent Edward Ford

Sundar P Subramani

Vinod K Swamy

Alireza Dabagh

Srinivas Raghu Gatta

Vishal Soni

Sidharth Nabar

Rao Salapaka

Pan Chun Wen

Ranveer Chandra

Sean O Lyndersay

John David Bruner

Dale Alan Sather

James M Lyon

Humayun Mukhtar Khan

John Mark Miller

Gursharan Singh Sidhu

Jin Guo

Gregory James Scott

Vladimir Holostov

Ruchir Astavans

Anish Desai

Guillaume Simonnet

Mansoor Jafry

King Shaw

Hiep V Khuu

Mark Lino Nielson

Omar Abdul Baki

Adam R Dyba

Tript Singh Lamba

Naile Daoud

Jonathan Hathaway

Vikas Singh

Joseph Neil Garfinkel

Paramvir Bahl

Pradeep Bahl

Samuel Scott Gigliotti

Ralph A Lipe

Mitesh K Desai

William G Parry

Mohammad Shabbir Alam

Christopher R Rice

Hugh A Teegan

Calvin Choe

Kosar Akram Jaff

John W Archer

Nicholas A Banks

Scott Michael Bragg

Savas Guven

Brian Ashley Garber

John M Gehlsen

Roland J Ayala

Douglas Edward Stamper

Tan Shen Cliff Chung

James N Gray

Pavneet Singh

Javier Flores Assad

Nick Banks

Mark Lino Nielsen

Francis c/o Microsoft Coporation Duong

Guillaume Simonner

Yi c/o Microsoft Corporation International Patents Lu

Yi Microsoft Corporation Lu

David Jones

David Neil Macdonald

Guillaume Simmonet

Vishesh M Parikh

Techniques for facilitating connectivity to vPLCs created in a CSP-provided infrastructure in a region. Within the CSP-provided infrastructure in a region, when the destination of a packet is determined to be an endpoint associated with a particular vPLC, the packet is tagged with information related to the particular vPLC. The vPLC-related information for the particular vPLC can include, for example, a vPLC identifier identifying the particular vPLC, an identifier identifying a customer associated with the endpoint, a virtual cloud network identifier identifying a virtual cloud network (VCN) belonging to the particular vPLC and where the endpoint is part of the VCN, and other vPLC-related information. The packet is then routed or communicated within the CSP-provided infrastructure in a region along with the tagged vPLC-related information. The vPLC-related information is used as part of the connectivity and for routing of packets within the CSP-provided infrastructure in a region.

Connectivity for virtual private label clouds

Novel techniques are disclosed for providing vPLC-specific metadata service including customized vPLC-specific metadata. In certain embodiments, each vPLC may generate a customized metadata using its corresponding vPLC-specific customization instructions. In some embodiments, a vPLC-specific metadata service may be performed using pre-generated customized vPLC-specific metadata, on-the-fly customized metadata, pre-generated CSP-format metadata, or combinations thereof.

Metadata customization for virtual private label clouds

A method may include generating a first cloud network associated with a first security level and including data associated with a service. The method may include generating a second cloud network associated with the first security level and deploying the service and the data associated with the service to the second cloud network and generating a first ingress channel to permit data to be transmitted to the second cloud network. Restricted data associated with a tenant may be deployed to the second cloud network. The method may include generating a third cloud network associated with the first security level and including the service and the data associated with the service and generating a second ingress channel to permit data to be transmitted to the third cloud network. A data sync may be implemented between the second and third cloud networks to deploy the restricted data to the third cloud network.

Merging a new region into classified realms

The present embodiments relate to providing near real-time communications from a public network to a private network. A first computing device in a public network can obtain data packets to be provided to the private network from an application executing on the first computing device. A trust module executed by the first computing device can authenticate the user, application, and the data packets to be provided to the private network and add metadata relating to the sending user, recipient user, etc. The data packets can be forwarded to the private network via a cross-domain system (CDS). The metadata and the digital signature on the data packets can be verified by a trust module executing on a second computing device in the private network. The second computing device can receive the data packets and store the data packets for subsequent actions to be performed in the private network.

Semi-interactive one-way transfer of data to an isolated network

In some aspects, a network interface card (NIC) may receive, at a first node of a network interface card associated with a disconnected network, a message intended for the disconnected network and sent using a first communication protocol. The network interface card may send the message from the first node to a second node of the network interface card using a second communication protocol, the second communication protocol being configured for unidirectional communication. The network interface card may receive the message at the second node. The network interface card may send, from the second node, the message to a destination node of the disconnected network using a third communication protocol. Numerous other aspects are described.

Cloud based cross domain system—virtual data diode

In some aspects, a computing device of the virtual cloud network may select one or more filters from a plurality of filters for a data pipeline, the plurality of filters comprising at least one of: a malware filter; a content filter; a signature filter; a content analyzer; a machine learning filter; or an artificial intelligence filter. A sequential order for the one or more selected filters in the data pipeline can be determined. A message may be received in the data pipeline from a network interface card (NIC), the network interface card being configured as a one-way transfer device. The message in the data pipeline may be filtered by passing the message through the one or more selected filters in the determined sequential order. The computing device of the virtual cloud network may provide logs of events occurring in the data pipeline via a logging network.

Cloud based cross domain system—CDSaaS

In some aspects, a computing device of the disconnected network may generate an application programming interface (API) configured to present a set of filter types. A selection of one or more filters types from the set of filter types may be received via an API. A sequential order for the selected filter types may be received via an API. A data pipeline with the selection of filters in the sequential order may be generated. A message received at a one-way transfer device may be analyzed by passing the message through the selected filters in the sequential order. A log of events occurring in the data pipeline may be received via a logging network. The log of events may be presented via the application programing interface. The data pipeline may be terminated upon receiving a termination command via the application programming interface.

Cloud based cross domain system—CDS with disaggregated parts

A system in which a device may automatically provision another device with credentials, at the behest of a cloud-based service, based in part on the physical proximity of the device to be provisioned. The provisioning device and the device to be provisioned may use a radio access technology (RAT) with a limited radio range. Account information associated with the device to be provisioned is known to the cloud-based service, which authenticates the device to be provisioned via the device with credentials.

Cloud-based provisioning using peer devices

A computing environment containing a mesh network that is adapted to provide a reliable transport mechanism over which services may be delivered. Nodes of the mesh can automatically select routable addresses without conflicts, which allows nodes of the mesh to be accessed, even as the mesh changes through the addition or deletion of nodes. Also, nodes communicate with a protocol that supports service advertisements. These advertisements can identify mesh nodes that supply services, such as file or print servers, for which devices that have not yet connected to the network may be searching. Advertisements can also identify services to be used by nodes in the network, allowing, for example, a node to select a gateway providing a reliable connection to an external network. The mesh network can be used as a transport for communication using protocols, such as TCP/IP, that generally exhibit poor performance when using unreliable transports.

Gateway advertisement in a wireless mesh

Discovery of services between devices is provided prior to establishing a connection between devices, including wireless-enabled devices or devices that are communicatively coupled to wireless access points or other wireless communication devices. Discovering services prior to establishing a connection may facilitate finding a desired service. The services that may be discovered may be, for example, print services, camera services, PDA services or any other suitable services. Services may be discovered using 802.11, Bluetooth, UWB or any other suitable wireless technology. A graphical user interface is provided that enables a user to select a desired service.

Notification framework for wireless networks

Various technologies described herein pertain to configuring an access point in a local network for operation in a community Wi-Fi network. The community Wi-Fi network includes access points in differing local networks that share respective network bandwidth capacities with member computing devices of the community Wi-Fi network. A request to join the access point to the community Wi-Fi network is transmitted from the access point to a community aggregation system. Responsive to the request, the community aggregation system transmits a firmware update to the access point. The access point installs the firmware update in memory of the access point. Moreover, responsive to installation of the firmware update, the access point can share network bandwidth capacity with the member computing devices of the community Wi-Fi network. Further, the community aggregation system supports transparent handoffs between access points in to the community Wi-Fi network.

Community Wi-Fi network joined access point configuration

Embodiments provision captive portals on network access points (NAPs). In response to a request from a NAP owner, a cloud service associates a NAP with the NAP owner and provides a control channel for configuring the NAP. The NAP owner inputs configuration settings describing the captive portal. The cloud service processes the configuration settings to generate configuration data. The cloud service transmits the configuration data to the NAP. The NAP applies the configuration data to configure the NAP. Some embodiments configure Wi-Fi hotspots with captive portals for gated access to the Internet.

Configuring captive portals with a cloud service

Examples of the disclosure describe automatically associating devices of a user with a network service subscription of the user. The user has a subscription to services offered by an entity. Connection statistics for the devices to networks are generated and compared to criteria to determine whether any of the devices should be associated with the subscription of the user. After association, the devices are able to access networks and/or services associated with the subscription.

Identifying and targeting devices based on network service subscriptions

Growing community of inventors

Seattle, WA, United States of America

Thomas W Kuehnel