Microsoft Technology Licensing, LLC

Xiaoqin Zhu

Parul Manek

Ganesh Pandey

Shankaranand Arunachalam

Dmitri Gavrilov

Anshul Dube

Andrew Burke Ryan

Gokay Hurmali

Jason Craig Nelson

Paul Baecke

Robert Allen Lowe

A service computing system receives an API call in which an authorization token, that contains an identifier in the content of the authorization token, is included in a header of the API call. The identifier is also included as a parameter passed in with the API call. The service computing system parses the API call to obtain the authorization token, and the identifier included in the authorization token. It also obtains the identifier passed in as a parameter of the API call. The service computing system compares the identifier obtained from the authorization token to the identifier passed in as a parameter of the API call to determine whether they match. If they do not match, the API call is processed as an unauthorized API call. A security system in the service computing system authorizes the API call based on the comparison.

Client-server security enhancement using information accessed from access tokens

In a multi-tenant computing system, a cross-tenant user search system receives a user search input from a user using a client of a first tenant. The cross-tenant user search system accesses a policy that identifies one or more related tenants that are related to the first tenant. The policy also identifies directory records of users in the related tenant that can be searched by users of the first tenant. The cross-tenant user search system executes a search against a directory for the first tenant and executes a separate search against the directory records in the related tenants, identified in the policy. The search results from searching the directory for the first tenant and the related search results from searching the directory records in the tenant are aggregated into an aggregated set of search results which are then returned to the client.

Cross-tenant people search in a multi-tenant computing system

Growing community of inventors

Redmond, WA, United States of America

Xiaoqin Zhu