Hao ZhangKenmore, WA

8417949, Apr 9, 2013

Jan 19, 2006

11/335487

Hao Zhang - Sammamish WA, US
Samuel J. Neely - Sammamish WA, US
Trevor Freeman - Sammamish WA, US

Microsoft Corporation - Redmond WA

H04L 9/00

713169, 713168, 713192, 713193, 380282

A protocol for total email and collaborative software (e. g. , Exchange-brand server) session security. By way of example, securing the traffic between two servers within the same organization or cross organizations is critical to maintaining privacy of electronic data and communications. For example, securing communications between two Exchange-brand servers is particularly useful for individuals and organizations that routinely send and receive confidential information via electronic mail. It is important for the receiving side (server) to authorize the sending side (client) to send the information; the sending side should authorize the receiving side to receive information to prevent unauthorized information disclosure. The novel system and/or protocol disclosed herein can provide a mutually authenticated, authorized, and encrypted channel between two servers both within the same organization and across disparate organizations.

8447976, May 21, 2013

Jun 1, 2009

12/476049

Chandresh K. Jain - Sammamish WA, US
Mayank Mehta - Redmond WA, US
Frank D. Byrum - Seattle WA, US
Edward Banti - Seattle WA, US
Ayse Yesim Koman - Seattle WA, US
James R. Knibb - Kirland WA, US
Michael A. Nelte - Redmond WA, US
Christopher Barnes - Redmond WA, US
Hao Zhang - Sammamish WA, US
Victor Boctor - Redmond WA, US
Tejas D. Patel - Seattle WA, US
Yuhui Zhong - Sammamish WA, US
Gregory Kostal - Kirkland WA, US
Vladimir Yarmolenko - Duvall WA, US
Pankaj M. Kamat - Kirkland WA, US
Amit K. Fulay - Kirkland WA, US
Krassimir E. Karamfilov - Bellevue WA, US

Microsoft Corporation - Redmond WA

H04L 9/32

713168, 726 9

Business to business secure mail may be provided. Consistent with embodiments of the invention, a protected message may be received. The recipient may request a token from a trust broker, submit the token to an authorization server associated with the sender, receive a user license from the authorization server; and decrypt the protected message using the user license. The protected message may restrict actions that may be taken by the recipient, such as forwarding to other users.

8549295, Oct 1, 2013

May 31, 2006

11/421341

Hao Zhang - Sammamish WA, US
Jeffrey B. Kay - Bellevue WA, US
Malcolm E. Pearson - Kirkland WA, US
Eric D. Tribble - Bellevue WA, US

Microsoft Corporation - Redmond WA

H04L 29/00

713169

Establishing secure, mutually authenticated communication between a trusted network and a perimeter network. Servers on the perimeter network may be securely and automatically configured to communicate with the trusted network. Servers not functioning properly may be stopped from communicating with the other servers. Credential information relating to a perimeter server may be automatically, and regularly, updated without intervention.

8640201, Jan 28, 2014

Dec 11, 2006

11/608861

Jeffrey B. Kay - Bellevue WA, US
Trevor W. Freeman - Samammish WA, US
Malcolm Erik Pearson - Kirkland WA, US
Eric D. Tribble - Bellevue WA, US
Hao Zhang - Sammamish WA, US

Microsoft Corporation - Redmond WA

G06F 21/00

726 4, 726 16, 726 25, 713168, 713173, 709206, 709225, 709226

In a distributed electronic messaging system authorized information comprising metadata concerning a message is passed along from one mail server to another mail server. A receiving computer determines if the sending computer has the necessary authorizations to pass along the metadata. If so, the authorized information is passed along with the message body, enabling repetitious actions to be eliminated. If the sending computer is not authorized to pass along the metadata, the metadata is stripped off the message, changed or annotated.

2010031, Dec 9, 2010

Jun 4, 2009

12/478608

Hao Zhang - Sammamish WA, US
Danny Tin-Van Chow - Seattle WA, US
Ayse Yesim Koman - Seattle WA, US
Frank D. Byrum - Seattle WA, US
Mayank Mehta - Redmond WA, US
Chandresh K. Jain - Sammamish WA, US
Victor Boctor - Redmond VA, US
Charlie R. Chung - Tacoma WA, US
Tejas D. Patel - Seattle WA, US
Yuhui Zhong - Sammamish WA, US
Amit K. Fulay - Kirkland WA, US
Gregory Kostal - Kirkland WA, US
Pankaj M. Kamat - Kirkland WA, US
Vladimir Yarmolenko - Duvall WA, US
Krassimir E. Karamfilov - Bellevue WA, US

Microsoft Corporation - Redmond WA

H04L 9/32
H04L 9/00

713168, 726 4, 713150

Transport pipeline decryption may be provided. Consistent with embodiments of the invention, a protected message may be received and decrypted. The decrypted message may be provided to pipeline agents, such as anti-virus, anti-spam, journaling, and/or policy enforcement agents. The message may then be re-encrypted and delivered.

2021031, Oct 7, 2021

Jun 17, 2021

17/350820

- Redmond WA, US
George E. Roussos - Seattle WA, US
Hao Zhang - Sammamish WA, US
Christopher S. Dickens - Issaquah WA, US
Salil Kapoor - Woodinville WA, US
Vinh Trinh - Redmond WA, US

H04L 29/06
H04L 12/58

An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable access to the encrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in another mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

2020009, Mar 26, 2020

Aug 6, 2019

16/533512

- Redmond WA, US
George E. ROUSSOS - Seattle WA, US
Hao ZHANG - Sammamish WA, US
Christopher S. DICKENS - Issaquah WA, US
Salil KAPOOR - Woodinville WA, US
Vinh TRINH - Redmond WA, US

H04L 29/06
H04L 12/58

An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable decrypted access to the decrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in an organizational mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with decrypted access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

2019017, Jun 6, 2019

Dec 1, 2017

15/829841

- Menlo Park CA, US
Alexander Pivovarov - Kirkland WA, US
Anand Sumatilal Bhalgat - Mountain View CA, US
Janis Libeks - Seattle WA, US
Hao Zhang - Fremont CA, US
Yevgeniya Solyanik - Seattle WA, US

G06Q 30/02

An online system determines an estimated conversion rate for sponsored content items placed on content publishers and on the online system. The estimated conversion rate can be determined by a machine learning model trained using data describing content campaigns, content publishers, and online system users. This data is collected by the online system from content publishers and/or content campaigns that report conversion rates to the online system. By determining a ratio of estimated conversion rates with third party content on the content publisher against those on the online system, the online system can determine a publisher quality score for that content publisher. The online system uses the publisher quality score to normalize third party value contributions toward placing sponsored content on content publishers and the online system. Thus, disparities in the intrinsic value across publishers are diminished as third party value contributions are normalized based on the publisher conversion rates.