Brian T Kress

US Patent:

8332369, Dec 11, 2012

Filed:

Dec 15, 2009

Appl. No.:

12/638235

Inventors:

Ayla Kol - Sammamish WA, US
Dmitri Gavrilov - Redmond WA, US
Bradford Clark - Duval WA, US
Brian T. Kress - Redmond WA, US
James C. Kleewein - Kirkland WA, US
Gregory I. Thiel - Black Diamond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/30

US Classification:

707694, 707695

Abstract:

A data resiliency layer provides manageable data resiliency policy options for email related applications. Through one or more APIs such applications are enabled to query whether a data resiliency policy is satisfied for a given mailbox or database at a given point in time. Email related applications may consume this information to modify their behavior such as to wait, repeat, or fail the actions at hand to the point where data committal is guaranteed to a degree specified by the data resiliency policy.

US Patent:

20070215683, Sep 20, 2007

Filed:

Mar 6, 2006

Appl. No.:

11/276582

Inventors:

Neil K. Koorland - Issaquah WA, US
Geeman Yip - Kirkland WA, US
Herman J. Man - Issaquah WA, US
Brian T. Kress - Redmond WA, US
John H. Zybura - Seattle WA, US
Jing Wu - Sammamish WA, US
Matthias Leibmann - Woodinville WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00

US Classification:

235375

Abstract:

A method and system for managing and applying entitlements is described herein. An identity integration server centrally manages data associated with entitlements for a plurality of identities. The integration server may select one of a plurality of workflows. One or more of a plurality of entitlements to be used in the workflow are selected, and a set of identities for which the workflow is applicable is selected. A determination is made as to whether the workflow should be run on the identities. If so, then the workflow is initiated. The one or more entitlements are then added to a granted entitlements list. Then, a separate process may be initiated to apply the one or more entitlements to the one or more identities.

US Patent:

20090319781, Dec 24, 2009

Filed:

Jun 23, 2008

Appl. No.:

12/143856

Inventors:

Frank Byrum - Seattle WA, US
Mayank Mehta - Redmond WA, US
Chandresh Jain - Sammamish WA, US
Ladislau Conceicao - Redmond WA, US
Brian Kress - Woodinville WA, US
Greg Gourevitch - Redmond WA, US
Michael Nelte - Redmond WA, US
Chris Barnes - Redmond WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

H04L 9/00

US Classification:

713156

Abstract:

An email security system is described that allows users within different organizations to securely send email to one another. The email security system provides a federation server on the Internet or other unsecured network accessible by each of the organizations. Each organization provides identity information to the federation server. When a sender in one organization sends a message to a recipient in another organization, the federation server provides the sender's email server with a secure token for encrypting the message to provide secure delivery over the unsecured network.

US Patent:

20110145565, Jun 16, 2011

Filed:

Dec 14, 2009

Appl. No.:

12/637043

Inventors:

Ayla Kol - Sammamish WA, US
Dmitri Gavrilov - Redmond WA, US
Bradford Clark - Duval WA, US
Brian T. Kress - Redmond WA, US
James C. Kleewein - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00
G06F 15/16
H04L 9/32

US Classification:

713155, 709206, 713170

Abstract:

A data replication mechanism is proposed that relies on existing federation infrastructure enabling distributed authentication instead of storing and using explicit credentials for a remote forest. The data replication mechanism requests a federation token with data replication capabilities targeted to the remote forest and passes this token to the remote forest in lieu of explicit credentials.

US Patent:

20110167039, Jul 7, 2011

Filed:

Jan 5, 2010

Appl. No.:

12/652286

Inventors:

Ayla Kol - Sammamish WA, US
Dmitri Gavrilov - Redmond WA, US
Bradford Clark - Duval WA, US
Brian T. Kress - Redmond WA, US
James C. Kleewein - Kirkland WA, US
Gaurav Navlakha - Bellevue WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/30

US Classification:

707633, 707E17005

Abstract:

Distributed mailbox data replication agents are employed to adjust load on mail system resources by enabling the agents to receive a throttling policy, resource capacity, and current usage information. Each agent preparing to access the resource (e.g. provide replicated data) may then throttle itself ensuring optimum resource usage. The agents may receive the information by querying the resource, which monitors accessing agents and their types, or from a shared space instead of directly from the resource.

US Patent:

20110185136, Jul 28, 2011

Filed:

Jan 22, 2010

Appl. No.:

12/692321

Inventors:

DMITRI GAVRILOV - REDMOND WA, US
BRADFORD R. CLARK - DUVALL WA, US
JAMES C. KLEEWEIN - KIRKLAND WA, US
AYLA KOL - SAMMAMISH WA, US
BRIAN T. KRESS - WOODINVILLE WA, US
NARESH SUNDARAM - REDMOND WA, US

Assignee:

MICROSOFT CORPORATION - REDMOND WA

International Classification:

G06F 12/16
G06F 12/00

US Classification:

711162, 711E12001, 711E12103

Abstract:

Incremental change synchronization for moving large data sets may be provided. Source data to be moved may be identified and a snapshot of the data may be created. The data may be moved to a new datastore and a second snapshot may be created. The snapshots may be compared to identify any data elements that have been modified and the modified elements may be copied to the new datastore.

US Patent:

20110185247, Jul 28, 2011

Filed:

Jan 22, 2010

Appl. No.:

12/692305

Inventors:

DMITRI GAVRILOV - REDMOND WA, US
BRADFORD R. CLARK - DUVALL WA, US
JAMES C. KLEEWEIN - KIRKLAND WA, US
AYLA KOL - SAMMAMISH WA, US
BRIAN T. KRESS - WOODINVILLE WA, US

Assignee:

MICROSOFT CORPORATION - REDMOND WA

International Classification:

G06F 15/16
H03M 13/05
H04L 1/18
G06F 11/10
G06F 11/14

US Classification:

714748, 709232, 714807, 709236, 714E11032, 714E11113

Abstract:

Optimizations for data transmission may be provided. A portion of a data block may be read into a batch by a read thread on a first server. The batch may be passed to a transmission thread. The transmission thread may then transmit the first batch to a second server while the read thread asynchronously reads a second portion of the data block into another batch.

US Patent:

20130191894, Jul 25, 2013

Filed:

Jan 19, 2012

Appl. No.:

13/354324

Inventors:

Vadim Eydelman - Bellevue WA, US
Brian Kress - Woodinville WA, US
Matthias Leibmann - Woodinville WA, US
Moustafa Noureddine - Redmond WA, US
Lei Yu - Redmond WA, US
Haibo Luo - Kirkland WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

G06F 21/22

US Classification:

726 6, 726 3, 726 5, 726 8

Abstract:

Online and on-premise applications identify trusted authentication providers. The applications are configured with a list of trusted issuers of authentication credentials. When an application receives a request requiring authentication, the application returns a 401 response that includes the trusted issuer list. The requesting application compares the trusted issuer list from the 401 response to its own list of authentication providers. If there is a match between the two lists, then the requesting application creates a self-issued token for the authentication provider. The authentication provider uses the self-issued token to generate an authentication token for the requesting application. The requesting application may also directly create a token for a target partner application, without an authentication provider, if there is a direct trust between the two applications.