Colin Harrison Brace

US Patent:

6457053, Sep 24, 2002

Filed:

Sep 21, 1998

Appl. No.:

09/157772

Inventors:

Murli D. Satagopan - Bellevue WA
Dave D. Straube - Redmond WA
Colin H. Brace - Seattle WA
Chris L. Mayhall - Issaquah WA
Donald J. Hacherl - North Bend WA

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 1516

US Classification:

709226, 709209, 709223, 709229, 709244, 707200

Abstract:

A system for multi-master unique identifier allocation comprises a server for allocating pools of identifiers to requesting servers and at least one server for requesting pools of identifiers and allocating individual identifiers as necessary. A single master server allocates âpoolsâ of unique identifiers to network servers upon request. The network servers in turn allocate unique identifiers from their pool as necessary when the server generates new system objects. When a network servers pool of unique identifiers is nearly depleted, the network server requests an additional pool of identifiers from the master server.

US Patent:

7085833, Aug 1, 2006

Filed:

Jan 17, 2001

Appl. No.:

09/764956

Inventors:

Murli D. Satagopan - Redmond WA, US
Colin H. Brace - Seattle WA, US
Mark R. Brown - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/173

US Classification:

709225, 717122, 717126

Abstract:

A network system server, at a first network site, maintains network access information that identifies users authorized to access a network and a network controller, at a second network site, caches the network access information for individual users that request access to the network from the second network site. The network controller tracks the individual users that request access to the network from the second network site and updates the cached network access information for the individual users that request access to the network from the second network site within a defined time interval.

US Patent:

7631082, Dec 8, 2009

Filed:

Jun 10, 2005

Appl. No.:

11/149650

Inventors:

Colin Harrison Brace - Seattle WA, US
Nathan Daniel Muggli - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/173

US Classification:

709226, 709225, 709203, 709217

Abstract:

A domain controller hierarchy in accordance with implementations of the present invention involves one or more local domain controllers, such as one or more read-only local domain controllers in communication with one or more writable hub domain controllers. The local domain controllers includes a resource manager, such as a Security Account Manager (“SAM”), that manages resources and/or other accounts information received from the writable hub domain controller. When a local user attempts to change the resource at the local domain controller, however, the resource manager chains the request, along with any appropriate identifiers for the request, to the writable hub domain controller, where the request is processed. If appropriate, the hub domain controller sends a response that the resource has been updated as requested and also sends a copy of the updated resource to be cached at the local domain controller.

US Patent:

7822988, Oct 26, 2010

Filed:

Oct 23, 2003

Appl. No.:

10/693172

Inventors:

Kim Cameron - Bellevue WA, US
Arun Nanda - Sammamish WA, US
Don Hacherl - North Bend WA, US
Murli Satagopan - Sammamish WA, US
Stuart Kwan - Redmond WA, US
Colin Brace - Seattle WA, US
Walter Smith - Seattle WA, US
Melissa Dunn - Woodinville WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32

US Classification:

713180, 713175, 713177

Abstract:

In accordance with various aspects, the present invention relates to methods and systems for sending an identity information document comprising selecting identity information from a self-identity information store for inclusion in the identity information document. The selected identity information is read from a self-identity information store. The identity information document is generated to include the selected identity information and one or more keys, and signed using a key associated with one of the keys included in the identity information document. The identity information document is then sent to a recipient. Receiving an identity information document comprises receiving a signed identity information document from an originator. A determination is made as to whether identity information in the identity information document is reliable. The identity information is saved in a recognized identity information store if the identity information is determined to be reliable.

US Patent:

7865600, Jan 4, 2011

Filed:

Dec 2, 2009

Appl. No.:

12/629708

Inventors:

Colin Harrison Brace - Seattle WA, US
Nathan Daniel Muggli - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/173

US Classification:

709226, 709225, 709223, 709203

Abstract:

A domain controller hierarchy in accordance with implementations of the present invention involves one or more local domain controllers, such as one or more read-only local domain controllers in communication with one or more writable hub domain controllers. The local domain controllers include a resource manager, such as a Security Account Manager (“SAM”), that manages resources and/or other accounts information received from the writable hub domain controller. When a local user attempts to change the resource at the local domain controller, however, the resource manager chains the request, along with any appropriate identifiers for the request, to the writable hub domain controller, where the request is processed. If appropriate, the hub domain controller sends a response that the resource has been updated as requested and also sends a copy of the updated resource to be cached at the local domain controller.

US Patent:

7921304, Apr 5, 2011

Filed:

Dec 6, 2005

Appl. No.:

11/294977

Inventors:

Colin H. Brace - Seattle WA, US
Nathan D. Muggli - Kirkland WA, US
William B. Lees - Redmond WA, US
William J. Whalen - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 21/24

US Classification:

713193, 380277, 380284

Abstract:

Accessing a data set with secret and non-secret data. A method includes accessing a data set image. The data set image comprises secret data. The data set image is derived from an authorized data set associated with a master key that authorizes access to the secret data. The master key is not provided with the data set image. The method further comprises restoring the data set image to a computing system to create a degraded data set. Data in the degraded data set other than the secret data is accessed without restoring the master key.

US Patent:

8087072, Dec 27, 2011

Filed:

Sep 17, 2007

Appl. No.:

11/856617

Inventors:

Vijay K. Gajjala - Sammamish WA, US
Colin H. Brace - Seattle WA, US
Derek T. Del Conte - Sammamish WA, US
Kim Cameron - Redmond WA, US
Arun K. Nanda - Sammamish WA, US
Hervey O. Wilson - Bellevue WA, US
Stuart L. S. Kwan - Redmond WA, US
Rashmi Raj - Eden Prairie MN, US
Vijayavani Nori - Bellevue WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 21/20
H04L 9/32

US Classification:

726 6, 726 8, 713185, 713168

Abstract:

A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. A system is provided using a common identity data store for both DIR issuance and identity token issuance, decreasing synchronization issues. Various methods are provided for creating new DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.

US Patent:

8095970, Jan 10, 2012

Filed:

Sep 14, 2007

Appl. No.:

11/855385

Inventors:

Khushru M. Irani - Redmond WA, US
Greg Johnson - East Wenatchee WA, US
Colin Brace - Seattle WA, US
Gokay K. Hurmali - Redmond WA, US
Qi Cao - Bellevue WA, US
William James Whalen - Seattle WA, US
Umit Akkus - Bellevue WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 7/04
G06F 17/30
G06F 21/00

US Classification:

726 6, 726 1, 726 18, 726 21, 713183

Abstract:

Dynamically associating an attribute and an associated value to an object includes dynamically associating attribute-value sets to an object, but is not so limited. An exemplary system includes a directory component that can be configured to dynamically assign different values, for a set attributes, to an object. An exemplary directory application can be configured to select an attribute-value set for an object based in part on a group membership determination, and a precedence parameter associated with an attribute-value, set, or other grouping. Other embodiments are available.