David A Nicholson

US Patent:

8510564, Aug 13, 2013

Filed:

Aug 6, 2010

Appl. No.:

12/852209

Inventors:

David J. Nicholson - Seattle WA, US
David Lewis Fisher - Bellevue WA, US
Michael D. Ritche - Seattle WA, US
Chun-Hung Lin - Redmond WA, US
Christopher B. Dove - Seattle WA, US
Kavitha Radhakrishnan - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32

US Classification:

713176, 726 7, 714E11024, 714E11023, 714 48, 714 2

Abstract:

Embodiments are directed to establishing the integrity of a portion of data on at least one level of a plurality of network stack levels and automatically continuing an established federation relationship between at least two federation computer systems. In an embodiment, a first federation computer system receives a digital signature corresponding to a computer system signed by a digital signature which includes the computer system's identity and other federation relationship information configured to establish a trusted federation relationship between a first federation computer system and a second federation computer system. The first federation computer system attempts to validate the received digital signature at a first level of a network stack and determines that the validation at the first network stack layer was unsuccessful. The first federation computer system then validates the received digital signature at a second, different level of the network stack.

US Patent:

20120079088, Mar 29, 2012

Filed:

Sep 27, 2010

Appl. No.:

12/891696

Inventors:

David J. Nicholson - Seattle WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

G06F 15/173

US Classification:

709223

Abstract:

Verification that a customer has ownership over a particular domain name. A computing system receives a request to provide a network service to a customer for action upon a particular domain name. In response, the computing system provides information to the customer over a network, and instructs the customer to edit a domain name record for the particular domain name using the provided information. For instance, the customer might be provided with a Globally-Unique IDentifier (GUID), and instruct the customer to insert the GUID into a particular record associated with the domain name in the DNS system. Upon verifying that the domain name record has indeed been edited using the provided information, the customer is confirmed as being an owner of the domain name.

US Patent:

20140075529, Mar 13, 2014

Filed:

Nov 15, 2013

Appl. No.:

14/081135

Inventors:

David J. Nicholson - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/06

US Classification:

726 7

Abstract:

The authentication of identities within a realm in which some identities are authenticated using direct authentication, and some identities are authenticated using federated authentication. Requests for service from valid identities in the realm that are to be authenticated by direct authentication are responded to with a direct authentication interface. Requests for service from valid identities in the realm that are to be authenticated by federated authentication are responded to with a federated authentication interface. Requests for service from invalid identities are responded to pseudo-randomly with either the direct authentication interface or the federated authentication interface.