Microsoft Technology Licensing, LLC

Willard Bruce Jones

Yu Meng Li

Richard Wesley Holley

Ryan Wilhelm

Tjeerd Hoek

Justin Michael Maguire

Richard M Banks

Sarat Chandra Subramaniam

Titus Constantin Miron

Simon Skaria

Kent Rogers Lowry

Naresh Kannan

Kavita K Kamani

Sameer Yadav

Matthew R Wallace

Renee W Lo

Alexandru Munteanu

Luis A Angel-Mex

Howard Wesley Cherry

John A Tholen

Terrence T Huang

Yu Li

Technologies are provided for prevention of organizational data leakage across platforms based on device status. A device management service may include status information for a client device and/or a connection in a token provided to the client device and update the status in response to changes. An applicable data protection policy may be determined based on the detected status and optionally based on data being accessed. An instruction may be transmitted to a client application executed on the client device based on the applicable data protection policy thereby enforcing the data protection policy at the server. The instruction may cause a script executed at the client application to disable one or more user interface controls associated with functionality such as downloading, synchronizing, printing, etc. of the organizational data to prevent leakage of organizational data.

Prevention of organizational data leakage across platforms based on device status

Data loss prevention (DLP) systems may be implemented in conjunction with collaborative services that may be integrated with or work in coordination with productivity services. Administrators may be enabled to configure DLP policies in the collaborative service to mitigate their organization's information disclosure risks, along with the detection and remediation of sensitive information. Access blocking may be one feature of the DLP system, where provision of access blocking may include determining if a detected action associated with content processed by the collaborative service matches access blocking criteria defined by DLP policy rules. In response to the determination that the action matches at least one access blocking criterion defined by the DLP policy rules, a block access tag associated with the content may be activated, previously defined permissions associated with the content may be ignored or altered, and access to the content may be restricted to a number of predefined users.

Access blocking for data loss prevention in collaborative environments

Data loss prevention (DLP) systems may be implemented with collaborative services that may be integrated with or work in coordination with productivity services. Administrators may be enabled to configure DLP policies in the collaborative service to mitigate their organization's information disclosure risks, along with the detection and remediation of sensitive information. Access blocking may be a feature of the DLP system, where provision of access blocking may include determining if a detected action associated with content processed by the collaborative service matches access blocking criteria defined by DIP policy rules. In response to the determination that the action matches at least one access blocking criterion defined by the DLP policy rules, a block access tag associated with the content may be activated, previously defined permissions associated with the content may be ignored or altered, and access to the content may be restricted to a number of predefined users.

Tools and techniques for indexing and querying data stores using concatenated terms are provided. These tools may receive input queries that include at least two query terms. The query terms are correlated respectively with fields contained within records within a data store, with these fields being populated with respective field values. The query terms are arranged according to an indexing priority according to which the fields are ranked within an indexing table, which is associated with the data store. The tools then concatenate the query terms as arranged according to the indexing priority. In turn, the tools search the index table for any entries that are responsive to the concatenated query terms.

Indexing and querying data stores using concatenated terms

Hierarchical data may be provided. First, first data may be received corresponding to a first item. The first item may correspond, for example, to a web site. Next, a first cache may be created corresponding to an ancestry of the first item. In creating the first cache, information may be included configured to define a hierarchy of the first item. The first item may correspond to a child web site and the information in the cache may correspond to a plurality of parent web sites higher in the hierarchy and being related to the child web site. The first cache may include the plurality of parent web sites in a parent-relative fashion. Then, the received first data corresponding to the first item may be stored in a database. In addition, the first cache may be stored in the database as a property of the stored first item.

Retrieving hierarchical data

A method for using an indicator, known as &ldquo;See Through View,&rdquo; that allows a user to select a region on the display device and still see the visual attributes of the contents as they will appear when the region is deselected. When the user selects a region on the display device, the invention &ldquo;shades&rdquo; the background of the selected region. The contents within the selected region are left unchanged. Shading is accomplished by combining each original background base color with a selection shading color to produce a corresponding blended color, or colors. If the corresponding blended color is similar to the background base color, the blended color is either lightened or darkened, as needed to produce an adjusted blended color. Each blended color, or the adjusted blended color (as required) replaces the corresponding base background color within the selected region. The effect is that the selected region and background items appear &ldquo;shaded.&rdquo; This allows the user to see the visual attributes of the contents of the selected region, as they would actually appear.

Method for indicating a selected region on a computer display while allowing the user to see the formatting of the background and content items within the selected region

Growing community of inventors

Redmond, WA, United States of America

Willard Bruce Jones