The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 29, 2025
Filed:
Oct. 12, 2022
Microsoft Technology Licensing, Llc, Redmond, WA (US);
Jeromy Scott Statia, Arlington, WA (US);
Jeffrey Ryan Bacon, Bellevue, WA (US);
Darrin Earl Curtis, Everett, WA (US);
Aaron Richard Davis, Bellevue, WA (US);
Douglas Anthony Rasler, Sammamish, WA (US);
Elizabeth Anne Phippen, Bothell, WA (US);
Satish Devan, Redmond, WA (US);
Bum Su Jung, Redmond, WA (US);
Daniel James Dawson, Peirson, FL (US);
George Kenneth Ringer, Mercer Island, WA (US);
Microsoft Technology Licensing, LLC, Redmond, WA (US);
Abstract
Confining lateral traversal within a network. An authorization request identifies a credential, a protected first resource, and an identifier of a protected second resource for which authorization is requested. A lateral traversal policy associated with the second resource is identified, which constrains access to the second resource to only resources that belong to a subset of resources including the second resource. When it is determined that the credential is configured for access to the second resource, and when it is determined that the first resource belongs to the subset of resources including the second resource, an authorization token is issued, which authorizes the credential to access the second resource via the first resource. Alternatively, when it is determined that the credential is granted access to the second resource, and when it is determined that the first resource is outside of the particular subset of resources, the authorization request is denied.