John David Hazen, 7029907 61St Ave S, Auburn, WA 98001

2013006, Mar 7, 2013

Sep 6, 2011

13/225945

Sermet Iskin - Bellevue WA, US
John A.M. Hazen - Kirkland WA, US
Liang Zhao - Bothell WA, US
Scott B. Graham - Seattle WA, US
John M. Sheelan - Cambridge MA, US

Microsoft Corporation - Redmond WA

G06F 21/00

726 18

Capability access management techniques for processes are described. In one or more implementations, a token is formed having one or more security identifiers that reference capabilities described in a manifest for the executable code responsive to an input received to initiate execution of executable code installed on the computing device. The one or more processes formed through execution of the executable code on the computing device are associated with the token, the token usable to manage access of the one or more processes to the capabilities of the computing device.

2013006, Mar 14, 2013

Sep 9, 2011

13/229367

Scott Graham - Seattle WA, US
Kavitha Radhakrishnan - Redmond WA, US
Sermet Iskin - Bellevue WA, US
Katrina M. Blanch - Seattle WA, US
Steven Ball - Redmond WA, US
John Hazen - Kirkland WA, US
Tyler Kien Beam - Redmond WA, US
Allen Kim - Seattle WA, US
Guillermo Enrique Rueda Quintero - Redmond WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 21/00

726 30

Methods, systems, and computer program products are provided for enabling selective file system access by applications. An application is installed in a computing device. An application manifest associated with the application is received. The application manifest indicates one or more file types that the application is allowed to access. The indicated file type(s) are registered in a location accessible by a broker service. The application is launched as an application process. The application process is isolated in an application container. The application container prevents direct access by the application process to file system data. An access request related to first data of the file system data is received at the broker service from the application process. Access by the application process to the first data is enabled when the broker service determines that a file type of the first data is included in the registered file type(s).

2019032, Oct 24, 2019

Apr 24, 2018

15/961830

- Redmond WA, US
Tobin TITUS - Kirkland WA, US
Daniel LIBBY - Kirkland WA, US
Brian MANTHOS - Bellevue WA, US
Colin PACITTI - Seattle WA, US
Pengxiang ZHAO - Bellevue WA, US
Matthew MILLER - Seattle WA, US
Jordan Thomas RABET - Seattle WA, US
John HAZEN - Kirkland WA, US

H04L 9/00

Techniques for mitigating timing attacks via dynamically triggered time dilation are provided. According to one set of embodiments, a computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets. The computer system can further determine that the count exceeds a threshold count for a predefined consecutive number of time buckets. Upon making this determination, the computer system can trigger time dilation with respect to the program, where the time dilation causes the program to observe a dilated view of time relative to real time.

2019032, Oct 24, 2019

Apr 24, 2018

15/961849

- Redmond WA, US
Tobin TITUS - Kirkland WA, US
Daniel LIBBY - Kirkland WA, US
Brian MANTHOS - Bellevue WA, US
Colin PACITTI - Seattle WA, US
Pengxiang ZHAO - Bellevue WA, US
Matthew MILLER - Seattle WA, US
Jordan Thomas RABET - Seattle WA, US
John HAZEN - Kirkland WA, US

H04L 9/00

Techniques for mitigating timing attacks via dynamically scaled time dilation are provided. According to one set of embodiments, a computer system can enable time dilation with respect to a program, where the time dilation causes the program to observe a dilated view of time relative to real time. Then, while the time dilation is enabled, the computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets and, based on counts tracked for a range of recent time buckets, scale up or scale down a degree of the time dilation.

2018006, Mar 8, 2018

Nov 13, 2017

15/810620

- Redmond WA, US
Chee Chen Tong - Kirkland WA, US
Sean Obafemi Lyndersay - Sammamish WA, US
Israel Hilerio - Kenmore WA, US
John Anderson Hazen - Kirkland WA, US

Microsoft Technology Licensing, LLC - Redmond WA

G06F 21/44
G06F 9/54

Techniques for extension interaction with applications are described. Generally, an extension represents functionality for extending, modifying, customizing, and/or supplementing native functionality of an application. Techniques discussed herein provide a common extension platform that enables an extension to interact with multiple different applications utilizing components of the platform. The common extension platform, for instance, exposes a set of common extension application programming interfaces (APIs) that provide a common interaction surface between extensions and applications.