Christian A Roy, 53Hadlyme, CT

8370914, Feb 5, 2013

Dec 15, 2010

12/968823

Javier Dalzell - Issaquah WA, US
Christian Roy - Redmond WA, US
William David Taylor - Redmond WA, US
Venkatesh Veeraraghavan - Seattle WA, US

Microsoft Corporation - Redmond WA

G06F 21/00

726 9, 726 5

A server system sends a first credential request to a passive requestor at a client device. After sending the first credential request, the server system receives a credential for a user of the client device. If the credential is valid, the server system can provide the passive requestor with access to a resource provided by the server system. After providing the passive requestor with access to the resource, the server system provides an active requestor at the client device with access to the resource without sending a second credential request to the active requestor. Consequently, it may not be necessary for a user of the client device to provide credentials twice in order for the passive requestor and the active requestor to access the resource.

2009032, Dec 24, 2009

Jun 24, 2008

12/144880

Venkatesh Veeraraghavan - Seattle WA, US
Javier Dalzell - Issaquah WA, US
Benoit Schmitlin - Seattle WA, US
Ambrose T. Treacy - Woodinville WA, US
Bryant Fong - Kirkland WA, US
Christian Roy - Kirkland WA, US

Microsoft Corporation - Redmond WA

G06F 21/20

726 4

An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

2012011, May 10, 2012

Dec 15, 2010

12/969007

Javier Dalzell - Issaquah WA, US
Bryant Fong - Seattle WA, US
Sarat Chandra Subramaniam - Bellevue WA, US
Christian Roy - Redmond WA, US
Sadia Sharmin - Seattle WA, US
Benoit Schmitlin - Paris, FR
Venkatesh Veeraraghavan - Seattle WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 17/30
G06F 17/00

726 1, 726 9, 726 3

A server system receives and installs multiple claim provider plug-ins. Each of the claim provider plug-ins implements the same software interface. However, each of the claim provider plug-ins can provide claims that assert different things. Claims provided by the claim provider plug-ins can be used to control access of users to a resource.

2013033, Dec 12, 2013

Aug 28, 2012

13/596898

Sarat Chandra Subramaniam - Bellevue WA, US
Christian Roy - Redmond WA, US
Venkatesh Veeraraghavan - Seattle WA, US
Nicholas Carl Sturm - Redmond WA, US
Titus Constantin Miron - Seattle WA, US
Matthew Taylor Cohen - Kirkland WA, US

Microsoft Corporation - Redmond WA

G06F 15/173

709225

A method for sign-on and sign-out for a computer system includes: receiving a first sign-on request for the computer system; obtaining, from the first sign-on request, a first user identifier, the first user identifier corresponding to a first user for the computer system; obtaining, from the first sign-on request, a first uniform resource locator (URL); determining whether the first URL includes a first root name for the computer system; when a determination is made that the first URL includes the first root name for the computer system: issuing a first cookie; associating the first cookie with the first user; obtaining a first sub-domain name from the first URL; issuing a second cookie, the second cookie being different from the first cookie; associating the second cookie with the first sub-domain name; and when the first cookie and the second cookie are issued, signing-on the first user to the computer system.

2015018, Jun 25, 2015

Feb 17, 2015

14/624137

- Redmond WA, US
Javier Dalzell - Issaquah WA, US
Benoit Schmitlin - Seattle WA, US
Ambrose T. Treacy - Woodinville WA, US
Bryant Fong - Kirkland WA, US
Christian Roy - Kirkland WA, US

Microsoft Technology Licensing, LLC - Redmond WA

H04L 29/06

An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.