Tomasz Janczuk

US Patent:

7636939, Dec 22, 2009

Filed:

Dec 10, 2004

Appl. No.:

11/009926

Inventors:

Christopher G. Kaler - Sammamish WA, US
Douglas A. Walter - Issaquah WA, US
Giovanni M. Della-Libera - Seattle WA, US
Melissa W. Dunn - Woodinville WA, US
Richard L. Hasha - Seattle WA, US
Tomasz Janczuk - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 7/04
G06F 17/00
H04L 29/06
H04L 9/32
H04K 1/00

US Classification:

726 7, 726 14, 713161, 713162, 713168, 713170, 713171, 713178, 380255

Abstract:

A data structure with endpoint address and security information. The data structure includes an address field that includes one or more endpoint addresses for an entity. The data structure further includes a security field that includes one or more keys for facilitating secure communications with the entity. The data structure may also be such that the contents of the address field and the security field are serialized in the data structure. The data structure may be extensible such that new address fields and security fields may be added.

US Patent:

7640573, Dec 29, 2009

Filed:

Feb 16, 2004

Appl. No.:

10/780274

Inventors:

Giovanni M. Della-Libera - Seattle WA, US
Vijay K. Gajjala - Sammamish WA, US
Tomasz Janczuk - Sammamish WA, US
John R. Lambert - Bellevue WA, US
Elliot Waingold - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00
G06F 17/30
G06F 7/04
G06F 21/00
H04L 29/06
H04L 9/32
H04N 7/16

US Classification:

726 1, 726 2, 726 26, 713182

Abstract:

A system for processing multiple types of security schemes includes a server having a claims engine that extracts claim(s) from security token(s) and maps extracted claims to other claims. The term claim as used in this context is a statement about a token's subject. The claims engine can extract claim(s) from one or more different types of security tokens corresponding to the multiple security schemes. These extracted claim(s) can then be selectively mapped to other claims using mapping information that is accessible to the server. The security decision can then be based on the extracted and/or derived claim(s) rather than tokens. This system can thereby support multiple security schemes and simplify the security process for the user.

US Patent:

7716728, May 11, 2010

Filed:

Feb 16, 2004

Appl. No.:

10/779922

Inventors:

Giovanni M. Della-Libera - Seattle WA, US
Vijay K. Gajjala - Sammamish WA, US
Tomasz Janczuk - Sammamish WA, US
John R. Lambert - Bellevue WA, US

Assignee:

Microsoft Corproation - Redmond WA

International Classification:

G06F 12/14
G06F 15/16
H04L 29/06

US Classification:

726 13, 726 1, 726 21, 713154, 713167, 707 9

Abstract:

A security system with a mechanism to identify types of information that need to be secured and another mechanism to specify how the types are to be secured. The system includes a sender having an application and a receiver having a security module and one or more datastores to store information related to types of information that need to be secured (e. g. “scopes”), how information is to be secured (e. g. , “profiles”), and a mapping (e. g. , “bindings”) between the scopes and profiles. Scopes can be implemented by application developers. Profiles can be implemented by application deployers and/or administrators. The security module determines which scope is appropriate for the message, and then determines the profile that is mapped to the scope. The security module can then make an access control decision using the profile.

US Patent:

7873831, Jan 18, 2011

Filed:

Feb 26, 2004

Appl. No.:

10/788108

Inventors:

Vijay K. Gajjala - Sammamish WA, US
Giovanni M. Della-Libera - Seattle WA, US
Tomasz Janczuk - Sammamish WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32

US Classification:

713170, 713171, 713181

Abstract:

A signature system with a mechanism to identify element(s) of a signed document includes a sender having a signature module with a digest generator. The digest generator generates digests for identifying selected elements of the document. The resulting “identifying” digests are then used in generating a signature in which the sender signs the digests rather than the original elements. The receiver can then process the signature and use these digests to distinguish between elements, as needed.

US Patent:

7921216, Apr 5, 2011

Filed:

Feb 1, 2005

Appl. No.:

11/048346

Inventors:

Craig A. Critchley - Fall City WA, US
David A. Wortendyke - Seattle WA, US
Elliot L. Waingold - Seattle WA, US
Eric K. Zinda - Seattle WA, US
Erik B. Christensen - Seattle WA, US
Giovanni M. Della-Libera - Seattle WA, US
Kenneth D. Wolf - Seattle WA, US
Michael S. Vernal - Seattle WA, US
Shy Cohen - Bellevue WA, US
Stefan H. Pharies - Seattle WA, US
Stephen J. Millet - Edmonds WA, US
Stephen T. Swartz - Seattle WA, US
Tomasz Janczuk - Redmond WA, US
Uday S. Hegde - Bellevue WA, US
Yaniv Pessach - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/16

US Classification:

709228, 709227, 715735, 717109

Abstract:

The present invention provides for an automated, user friendly way of constructing and using a binding object. A developer is presented with and selects binding elements that will ultimately be used to create a runtime communication channel for transporting a message between a client and service endpoint. After receiving the user input, metadata, a channel factory and listener factory are created. The metadata describes binding elements and provides an abstract representation of a protocol stack that implements communication aspects at runtime. The channel factory is configured to use the collection of metadata at runtime to generate the runtime communication channel. Further, the listener factory is configured to accept the runtime communication channel for de-multiplexing the communication aspects in order to process the message at a service endpoint. The present invention also provides for groupings of binding elements and standardized binding objects organized based on industry need.

US Patent:

8514749, Aug 20, 2013

Filed:

Mar 10, 2010

Appl. No.:

12/721356

Inventors:

Jonathan M. Cole - Woodinville WA, US
Tomasz Janczuk - Redmond WA, US
Nicholas A. Allen - Redmond WA, US
Yavor Georgiev - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04B 1/56
H04L 5/14

US Classification:

370276, 370275, 370449, 370278, 370230, 37039531, 709202, 709203, 709219, 709229

Abstract:

The present invention extends to methods, systems, and computer program products for routing requests for duplex applications. Embodiments of the invention provide a multi-machine scalability mechanism for duplex messages patterns based on a polling mechanism. Client requests and polls can be distributed to service instances running within a cluster of machines by a session-unaware load balancer. Messages to and from a given client can be accessed by any service instance in the cluster service instance, which allows capacity scale-out and seamless failover between service instances. A coordinated inbound message store is used to affinitize application requests to a particular service instance. A coordinated outbound message store is used to route application responses from the machine running the application to the machine where a polling request arrived. Further, the lifetime of the service instance is decoupled from the inbound or outbound message stores, allowing the client-server conversation to potentially span many instances of the service.

US Patent:

20060150200, Jul 6, 2006

Filed:

Dec 3, 2004

Appl. No.:

11/003307

Inventors:

Shy Cohen - Bellevue WA, US
Geary Eppley - Carnation WA, US
Douglas Purdy - Bellevue WA, US
James Johnson - Bellevue WA, US
Stephen Millet - Edmonds WA, US
Stephen Swartz - Seattle WA, US
Vijay Gajjala - Sammamish WA, US
Aaron Stern - Bellevue WA, US
Alexander DeJarnatt - Seattle WA, US
Alfred Lee - Seattle WA, US
Anastasios Kasiolas - San Mateo CA, US
Chaitanya Upadhyay - Kirkland WA, US
Christopher Kaler - Sammamish WA, US
Craig Critchley - Fall City WA, US
David Levin - Redmond WA, US
David Driver - Seattle WA, US
David Wortendyke - Seattle WA, US
Douglas Walter - Issaquah WA, US
Elliot Waingold - Seattle WA, US
Erik Christensen - Seattle WA, US
Erin Honeycutt - Redmond WA, US
Eugene Shvets - Seattle WA, US
Evgeny Osovetsky - Bellevue WA, US
Giovanni Della-Libera - Seattle WA, US
John Doty - Seattle WA, US
Jonathan Wheeler - Bothell WA, US
Kapil Gupta - Redmond WA, US
Kenneth Wolf - Seattle WA, US
Krishnan Srinivasan - Kirkland WA, US
Lance Olson - Sammamish WA, US
Matthew Tavis - Seattle WA, US
Mauro Ottaviani - Mercer Island WA, US
Max Feingold - Bellevue WA, US
Michael Coulson - Clyde Hill WA, US
Michael Marucheck - Bellevue WA, US
Michael Vernal - Seattle WA, US
Michael Dice - Redmond WA, US
Mohammad Makarechian - Seattle WA, US
Natasha Jethanandani - Seattle WA, US
Richard Dievendorff - Bellevue WA, US
Richard Hill - Kirkland WA, US
Ryan Sturgell - Seattle WA, US
Saurab Nog - Sammamish WA, US
Scott Seely - Bellevue WA, US
Serge Sverdlov - Bellevue WA, US
Siddhartha Puri - Sammamish WA, US
Sowmyanarayanan Srinivasan - Redmond WA, US
Stefan Batres - Sammamish WA, US
Stefan Pharies - Seattle WA, US
Tirunelveli Vishwanath - Redmond WA, US
Tomasz Janczuk - Redmond WA, US
Uday Hegde - Bellevue WA, US
Umesh Madan - Bellevue WA, US
Vipul Modi - Redmond WA, US
Yaniv Pessach - Redmond WA, US
Yasser Shohoud - Sammamish WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/46

US Classification:

719328000

Abstract:

A web services namespace pertains to an infrastructure for enabling creation of a wide variety of applications. The infrastructure provides a foundation for building message-based applications of various scale and complexity. The infrastructure or framework provides APIs for basic messaging, secure messaging, reliable messaging and transacted messaging. In some embodiments, the associated APIs are factored into a hierarchy of namespaces in a manner that balances utility, usability, extensibility and versionability.

US Patent:

20110078212, Mar 31, 2011

Filed:

Dec 6, 2010

Appl. No.:

12/961115

Inventors:

Vijay K. Gajjala - Sammamish WA, US
Giovanni M. Della-Libera - Seattle WA, US
Tomasz Janczuk - Sammamish WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

G06F 17/30

US Classification:

707803, 707E17005, 707E17044

Abstract:

A signature system with a mechanism to identify element(s) of a signed document includes a sender having a signature module with a digest generator. The digest generator generates digests for identifying selected elements of the document. The resulting “identifying” digests are then used in generating a signature in which the sender signs the digests rather than the original elements. The receiver can then process the signature and use these digests to distinguish between elements, as needed.