Microsoft Technology Licensing, LLC

Wilfred G Russell

Patrick James Helland

Rodney Thomas Limprecht

Mohsen M Al-Ghosein

Yi-Min Wang

Daniel Ron Simon

Qixiang Sun

Jan Stephen Gray

Venkata N Padmanabhan

Lili Qiu

Greg Hope

A system and method is provided for handling network communications between a client and a target server on the Internet to protect the privacy and anonymity of the client. For a session between the client and the target server, a routing control server sets up a routing chain using a plurality of Web servers randomly selected from a pool of participating Web servers as routers for routing messages between the client and the target server. To prevent traffic analysis, an 'onion encryption' scheme is applied to the messages as they are forwarded along the routing chain. A payment service cooperating with the routing control server allows a user to pay for the privacy protection service without revealing her real identity.

System and method for protecting privacy and anonymity of parties of network communications

A system and method is provided for evaluating the effectiveness of data encryption for hiding the identity of the source of Web traffic. A signature is constructed from encrypted Web traffic for a Web page sent by a target Web site, and the signature is compared with archived traffic signatures obtained by accessing various Web pages of interest in advance. If the signature of the detected encrypted Web traffic matches a stored traffic signature beyond a pre-set statistical threshold, a positive match is found, and the source of the traffic is identified. Countermeasures for reducing the reliability of source identification based on traffic signature matching are provided.

System and method for evaluating and enhancing source anonymity for encrypted web traffic

A run-time executive of an object management system for managing execution of software components in an object execution environment uses a component context object to store intrinsic context properties related to an associated component. The run-time executive maintains an implicit association of the component context object with the application component. For example, the context properties can include a client id, an activity id, and a transaction reference. The component context object also provides an interface accessible to the associated component, with member functions for use in transaction processing, in creating additional other application components inheriting component's context properties, and in access control based on abstract user classes (roles).

Software component execution management using context objects for tracking externally-defined intrinsic properties of executing software components within an execution environment

A component-based framework includes system services and component integration interfaces that provide a run-time environment which automatically processes work of component-based server applications in transactions according to transactional rules or behaviors declaratively specified to apply to the respective components. A transaction attribute is declaratively specified for a server application component that represents whether the component requires execution in a transaction. When a client requests creation of a server application component without having first initiated a transaction and the component's transaction attribute indicates a transaction is required, the framework automatically initiates a transaction in which to run the server application component. The framework also completes the automatically initiated transaction upon receiving an indication from the server application component that its transactional work is complete.

Transaction processing of distributed objects with declarative transactional attributes

A run-time environment implemented as system services and component integration interfaces provides scalable and robust component-based server applications by deactivating server application components between uses by a client program on separate items of work while allowing the client program to retain references to server application components when deactivated. When a server application component is deactivated, a data state of the component and any resources held by the component are released. The run-time environment activates a component on receiving a call by the client to the component while the component is deactivated, whereupon the component is instantiated with an initial data state. The client can interact with the component as if one instance of the component were in continuous existence from the time the client requests creation of the component until the client finally releases the component reference, whereas in actuality the client accesses a sequence or stream of instances using the component reference through multiple iterations of the activation and deactivation cycle.

Just-in-time activation and as-soon-as-possible deactivation or server application components

A component-based framework includes system services and component integration interfaces that provide a run-time environment which automatically provides transactions to encompass work of component-based server applications according to the transactional expectations of individual server application components. A transaction attribute is associated with each server application component that represents whether the component requires execution in a transaction. When a client requests creation of a server application component without having first initiated a transaction and the component's transaction attribute indicates a transaction is required, the framework automatically initiates a transaction in which to run the server application component. The framework also completes the automatically initiated transaction upon receiving an indication from the server application component that its transactional work is complete.

Growing community of inventors

Bellevue, WA, United States of America

Wilfred G Russell