Parag Raj Sharma, 5412736 SE 25Th St, Bellevue, WA 98005

2009025, Oct 15, 2009

Apr 9, 2008

12/099789

Parag Sharma - Issaquah WA, US
Thomas Fahrig - Redwood WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 1/12

713400

Timers are managed in a multiprocessing environment. Some timers are local to a given logical processor; such a local timer is inserted on and will be canceled only from that logical processor. Other timers are global to a logical processor. A global timer which was inserted on a given logical processor may be canceled from that logical processor or from another logical processor. Global timers are serviced in response to expiration of an associated local timer.

2011022, Sep 15, 2011

Mar 10, 2010

12/720684

Parag Sharma - Issaquah WA, US
Ripal Babubhai Nathuji - Bothell WA, US
Mehmet Iyigun - Kirkland WA, US
Yevgeniy M. Bak - Redmond WA, US

G06F 12/10
G06F 12/08
G06F 9/455

711 6, 711206, 718 1, 711E12001, 711E12059, 711E12017

A system described herein includes a receiver component that receives an indication that at least one page in virtual memory is free and the at least one page in virtual memory is classified as short-lived memory, wherein the virtual memory is accessible to at least one virtual machine executing on a computing device. The system also includes a cache updater component that dynamically updates a cache to include the at least one page, wherein the cache is accessible to the at least one virtual machine.

2012004, Feb 23, 2012

Aug 17, 2010

12/857562

Ripal Babubhai Nathuji - Bothell WA, US
Parag Sharma - Issaquah WA, US

Microsoft Corporation - Redmond WA

G06F 12/00
G06F 12/02

711 6, 711170, 711E12001

A system is described herein that includes a predictor component that predicts accesses to portions of asymmetric memory pools in a computing system by a virtual machine, wherein the asymmetric memory pools comprise a first memory and a second memory, and wherein performance characteristics of the first memory are non-identical to performance of the second memory. The system also includes a memory management system that allocates portions of the first memory to the virtual machine based at least in part upon the accesses to the asymmetric memory pools predicted by the predictor component.

2012032, Dec 20, 2012

Jun 16, 2011

13/161520

Abhinav Srivastava - Atlanta GA, US
Himanshu Raj - Issaquah WA, US
Paul England - Bellvue WA, US
Parag Sharma - Issaquah WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 21/24

713189

A hypervisor provides a snapshot protocol that generates a verifiable snapshot of a target machine. The verifiable snapshot includes a snapshot and a signed quote. In one implementation, a challenger requests a snapshot of the target machine. In response to the snapshot request, the hypervisor initiates Copy-on-Write (CoW) protection for the target machine. The hypervisor snapshots and hashes each of the memory pages and the virtual central processing unit (CPU) of the target machine. The hypervisor generates a composite hash by merging all individual memory page hashes and the CPU state hash. The hypervisor requests a quote including integrity indicators of all trusted components and the composite hash. The quote uses a cryptographic signature from a trusted platform module, which ensures that any compromise of the integrity of the snapshot is detectable. The snapshot and signed quote are returned to the challenger for verification.

2021038, Dec 16, 2021

Apr 27, 2021

17/241963

- Redmond WA, US
Abhishek Ellore SREENATH - Bangalore, IN
Neha AGGARWAL - Seattle WA, US
Naveen PRABHAT - Redmond WA, US
Nisheeth SRIVASTAVA - Sammamish WA, US
Xinyan ZAN - Sammamish WA, US
Ashish BHARGAVA - Sammamish WA, US
Parag SHARMA - Issaquah WA, US
Rishabh TEWARI - Sammamish WA, US

G06F 9/455
H04W 4/50
H04L 12/66
H04L 29/06

A virtual network interface controller (NIC) associated with a virtual machine in a cloud computing network is configured to support one or more network containers that encapsulate networking configuration data and policies that are applicable to a specific discrete computing workload to thereby enable the virtual machine to simultaneously belong to multiple virtual networks using the single NIC. The network containers supported by the NIC can be associated with a single tenant to enable additional flexibility such quickly switching between virtual networks and support pre-provisioning of additional computing resources with associated networking policies for rapid deployment. The network containers can also be respectively associated with different tenants so that the single NIC can support multi-tenant services on the same virtual machine.

2021030, Sep 30, 2021

Jun 10, 2021

17/344857

- Redmond WA, US
Aanand RAMACHANDRAN - Redmond WA, US
Jayesh KUMARAN - Redmond WA, US
David Michael BRUMLEY - Bellevue WA, US
Rishabh TEWARI - Sammamish WA, US
Nisheeth SRIVASTAVA - Sammamish WA, US
Sushant SHARMA - Sammamish WA, US
Deepak BANSAL - Bellevue WA, US
Abhishek Ellore SREENATH - Bangalore, IN
Parag SHARMA - Issaquah WA, US
Abhishek SHUKLA - Redmond WA, US
Avijit GUPTA - Redmond WA, US

H04L 29/06
G06F 9/46
G06F 9/455

The disclosed system implements techniques to secure communications for injecting a workload (e.g., a container) into a virtual network hosted by a cloud-based platform. Based on a delegation instruction received from a tenant, a virtual network of the tenant can connect to and execute a workload via a virtual machine that is part of a virtual network that belongs to a resource provider. To secure calls and authorize access to the tenant's virtual network, authentication information provided with a call from the virtual network of the resource provider may need to match authorization information made available via a publication service of the cloud-based platform. Additionally or alternatively, an identifier of a NIC used to make a call may need to correspond to a registered name of the resource provider for the call to be authorized. These checks provide increased security by preventing unauthorized calls to the tenant's virtual network.

2021001, Jan 21, 2021

Oct 25, 2019

16/664552

- Redmond WA, US
Abhishek SHUKLA - Redmond WA, US
Parag SHARMA - Issaquah WA, US
Xinyan ZAN - Sammamish WA, US
Kaihua XU - Redmond WA, US

G06F 9/455
H04L 12/46
H04L 12/741
H04L 29/12

A hybrid state for a virtual machine (VM) in a cloud computing system enables a VM to communicate with other VMs that belong to a virtual network (VNET VMs) while maintaining connectivity with other VMs that do not belong to the virtual network (non-VNET VMs). A non-VNET VM can be transitioned to a hybrid VM that operates in a hybrid state. The hybrid VM can be assigned a private virtual IP address (VNET address) for communication with other VNET VMs. The hybrid VM can continue to use a physical IP address to communicate with other non-VNET VMs. In this way, the hybrid VM is able to maintain connectivity with other non-VNET VMs during and after migration to the VNET. A network stack can be configured to process data packets that are destined for non-VNET VMs differently from data packets that are destined for VNET VMs.

2021002, Jan 21, 2021

Jul 15, 2019

16/511732

- Redmond WA, US
Parag SHARMA - Issaquah WA, US
Ashish BHARGAVA - Sammamish WA, US
Ryan BECKETT - Seattle WA, US

H04L 12/24
H04L 12/46
G06F 9/455
G06F 9/451
H04L 29/06

Examples described herein generally relate to determining a current network state of the set of virtual networks, detecting, based at least in part on obtaining at least a portion of a high-level virtual network policy, an indicated change to the current network state, compiling, based on detecting the indicated change, at least a portion of the high-level virtual network policy to generate a set of low-level intermediate representation instructions to implement the indicated change to the high-level virtual network policy, and applying the set of low-level intermediate representation instructions in a network configuration for managing the set of virtual networks.