The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 27, 2026

Filed:

Jun. 08, 2022
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Arash Vahidnia, Bellevue, WA (US);

Vasundhara Puttagunta, Hyderabad, IN;

Rajalakshmi Dani, Redmond, WA (US);

Anand Madhava Menon, Redmond, WA (US);

Neha Arora, Newcastle, WA (US);

Himani Arora, Hyderabad, IN;

Richa Sehgal, Bengaluru, IN;

Rufino Louie Mayor, Jr., Snohomish, WA (US);

Sanjoyan Mustafi, Redmond, WA (US);

Himanshu Jindal, Gurugram, IN;

Sumit Kumar Chauhan, Hyderabad, IN;

Caleb Geoffrey Baker, Seattle, WA (US);

Nikhil Reddy Boreddy, Bellevue, WA (US);

Shuvam Singha Roy, Kolkata, IN;

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/62 (2013.01); G06F 21/31 (2013.01); G06F 21/60 (2013.01); H04L 9/40 (2022.01);
U.S. Cl.
CPC ...
G06F 21/6245 (2013.01); G06F 21/31 (2013.01); G06F 21/604 (2013.01); H04L 63/102 (2013.01);
Abstract

Some embodiments control access by applications to resources in a computing environment. An embodiment notes a request from an application to access a resource, determines a compliance status of the application based on access control policy compliance criteria, ascertains an authorization status of the request based on an authorization credential of the request and an authorization requirement of the resource, and responds to the request based on the compliance status and also based on the authorization status, thereby providing fine-grained access control. Access may also be controlled based on a request's beneficiary. An access request response may allow access, deny access, or ask for additional authorization. A compliance classifier reduces risk by dynamically updating compliance status after compliance criteria changes or attribute changes. An identity service access control architecture uses a compliance attribute to improve efficiency. Applications may be access control grouped according to resource sensitivity labels.


Find Patent Forward Citations

Loading…