Microsoft Technology Licensing, LLC

Other

Yuval Gross

Brandon T Hunt

Alexander Burba

Tatjana Fournier

Adam Christopher Czeisler

Carmen Zlateff

Keith Arthur Fournier, Ii

Keith Fournier

Achieving certificate pinning security in reduced trust networks. A client receives a second certificate from a server over a first secured communications channel. The first secured communications channel is established based at least upon a first digital certificate associated with the first secured communications channel being certified by a pinned certificate. The client sends a request towards the server via a second communications channel with an untrusted computer system, and the request is received by the server. The server generates a response comprising a timestamp, a URI portion, and a signature that is generated using the second certificate. The server sends the response via the second communications channel. The client receives the response, and uses the second certificate to verify that the response is authentic and that the timestamp and URI portion are valid. The client then processes the payload.

Achieving certificate pinning security in reduced trust networks

Achieving certificate pinning security in reduced trust networks. A client establishes a first communications channel with a server only upon verifying that a first certificate offered by the server is certified by a pinned certificate. The client receives a second certificate from the server over the first communications channel. The server and the client establish second communications channels with an untrusted computer system. The client sends a request towards the server via the second communications channels, and the request is received by the server. The server generates a response comprising a payload, a timestamp, a URI portion, and a signature that is generated using the second certificate, and sends the response via the second communications channels. The client receives the response and uses the second certificate to verify that the response is authentic and that the timestamp and URI portion are valid. The client then processes the payload.

Context-sensitive content may be created that may be recognized by a particular program but ignored by other programs. For example, in an e-mail message or other type of message, content could be created that advises the user to download a particular client for an enhanced content-viewing experience, along with a link pointing to a site where the client may be downloaded. This content and link could be surrounded by tags that would not be recognized by most clients, but that would be recognized by the client that provides the enhanced experience. Thus, most clients would render the advice and link, but the client that provides the enhanced experience could be configured to omit the link when it recognizes the surrounding tags, since a recipient who is viewing the e-mail with that client already has access to the enhanced experience.

Program-sensitive link in content

Various technologies for automatically downloading one or more high resolution image files from online storage. In one implementation, an e-mail client desktop application (stored at a sender's computer) may receive a request from the sender to send an e-mail with one or more high resolution image files added to the e-mail. Although the high resolution image files may be uploaded to a server, the files may be added as lower resolution image files with hidden Uniform Resource Locator (URL) addresses that may indicate the location on the server of the corresponding high resolution image files. Prior to sending the e-mail, the e-mail client desktop application may concatenate each high resolution image file's URL address with an extension or tag such as '?download' so that the address may later be easily identified.

Growing community of inventors

Redmond, WA, United States of America

Yuval Gross