Microsoft Technology Licensing, LLC

Yoav Yassour

Boaz Chen

Mark Fishel Novak

Shahar Prish

Yair Tor

Daniel Alon

Amos Ortal

Adi Regev

Yury Berezansky

Ran Didi

Itay Demri

Ella Lesser

Khalid Awwad

Amir Netz

Haroon Ahmed

Khaja Ehteshamuddin Ahmed

Chairy Chiu Ying Cheung

Eugene (John) Neystadt

Robert M Bruckner

Daniel Rose

Eugene John Neystadt

Andriy Garbuzov

Boaz Feldbaum

Yifat Sagiv

Lior Menachem Schachter

Alexey Efron

Haim Goldshtein

Dmitry Datsenko

Vit Karas

Moshe Golan

Avihai Dgany

Elan Levy

Oded Bar Levy

Raanan Zvi

Dor Goldbaum

Various aspects of triggering and controlling workflows are disclosed, where a workflow processes data across a plurality of services by performing a predefined operation using predefined parameters when triggered by a predefined input. Specifically, the various aspects include providing access control for workflows triggered using button sharing, encoding workflows and scanning encoded workflows to trigger workflows, using security badges and access control systems used at workplaces to trigger workflows, and enabling workflows to extract information from mobile devices and using the information for subsequent processing.

Triggering and controlling workflows across applications and services used in cloud computing systems

Technology described herein determines whether a device is Internet facing. An Internet facing device is a device where traffic coming from the Internet is routable to the device. The technology described herein may comprise two components that work together to identify Internet-facing devices. The first component is a monitoring agent installed on organizational devices. The second component is an Internet-facing management service, which may be cloud based. The monitoring agent communicates connection-event notices to the Internet-facing management service. The source IP address in the connection-event notice is compared to a list of organizational IP addresses. If the source IP address is not on the list, then the computing device associated with the notice is added to a list of Internet-facing devices because the connection originated from the Internet. Software listed in the connection-event notice may be added to a list of internet-facing software instances.

Internet-facing device identification

Providing predictive data predicting data values for a historical dataset. The method facilitates improving the accuracy of the predictive data by identifying for a user, and allowing the user to select ancillary datasets that can be evaluated, using a predictive evaluation, together with a historical dataset to improve the accuracy of the predictive data. A user interface is provided to a user. The user interface identifies one or more ancillary datasets. The ancillary datasets are identified to the user based on the ancillary datasets meeting a threshold condition to a historical dataset. The ancillary datasets are selectable by the user in the user interface. User input is received at the user interface selecting one or more of the ancillary datasets. A predictive dataset is displayed to the user. The predictive dataset is determined by predictive evaluation of the historical dataset and the one or more selected ancillary datasets.

Real time interactive prediction

Various technologies pertaining to modifying visualizations are described herein. A client computing device requests a visualization from a server computing device, and the server computing device constructs the visualization responsive to receipt of the request. The server computing device further identifies anticipated transformations for the visualization, and transmits the visualization and the transformations to the client computing device. The client computing device displays the visualization, and responsive to receipt of a request to modify the visualization, executes a transformation provided by the server computing device to update the visualization.

Pre-fetch cache for visualization modification

A system for assessing a computer device's state may collect state data about the device, then assess the state with respect to the policy for granting one or more claims. Each claim may be defined by a set of requirements that, if fulfilled, may be used to permit or deny access to a resource, such as an application, network, data, or other resource. A collection engine may reside on the device or other location and may collect requested data, and some collection engines may be extensible with a plugin architecture for expansion. A server may receive information from the device to evaluate claims. Depending on the use scenario, the claim results may be incorporated into communications and passed to an evaluator that may produce an access token which is used to permit or deny access based on the claim results.

Granular assessment of device state

Embodiments of the invention make the issuance of trustworthy device claims available to client devices as a service, so that a client device to which device claims are issued may use the device claims in relation to an attempt to access a network application. The service may conduct an assessment of the device's characteristics and/or state, characterize the results of this assessment in device claims, and issue the device claims to the device. The service may be accessible to a client device from outside administrative boundaries of an entity that makes a network application accessible, and thus may be useful to entities making network applications accessible in business-to-consumer (B2C) and business-to-business (B2B) topologies, such as over the publicly accessible Internet.

Trustworthy device claims as a service

Embodiments of the invention enable a client device to procure trustworthy device claims describing one or more attributes of the client device, have those device claims included in a data structure having a format suitable for processing by an application, and use the data structure which includes the device claims in connection with a request to access the application. The application may use the device claims to drive any of numerous types of application functionality, such as security-related and/or other functionality.

Trustworthy device claims for enterprise applications

Growing community of inventors

Zikhron Yaakov, Israel

Yoav Yassour