Ajay Singh Kang

US Patent:

20130266138, Oct 10, 2013

Filed:

Jun 18, 2012

Appl. No.:

13/526325

Inventors:

Siddharth Mantri - Seattle WA, US
David E.W. Mercer - Bothell WA, US
Ajay S. Kang - Redmond WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

H04L 9/00

US Classification:

380 44

Abstract:

Systems and methods for managing a content encryption key and a seed to generate the content encryption key are provided. In one example, a method may include receiving a request for a content encryption key at a content encryption key service. The request includes a requesting entity fingerprint that corresponds to a requesting entity and a seed identifier that corresponds to a seed. The seed identifier is mapped to the seed and the requesting entity fingerprint mapped to a corresponding seed permission. If the seed permission entitles the requesting entity to receive the content encryption key, the key is derived using the seed and provided to the requesting entity.

US Patent:

20140245373, Aug 28, 2014

Filed:

Feb 27, 2013

Appl. No.:

13/779413

Inventors:

- Redmond WA, US
Vijay Gajjala - Sammamish WA, US
Timothy Gill - Kenmore WA, US
James T. Jacoby - Sammamish WA, US
Stephane Plante - Kirkland WA, US
Craig A. Gick - Woodinville WA, US
Richard K. Costleigh - Seattle WA, US
Luke Jared Lenhart - Woodinville WA, US
Ajay S. Kang - Redmond WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

H04L 29/06

US Classification:

726 1

Abstract:

Embodiments are disclosed for managing and providing access to a collection of digital resources. One embodiment provides a method comprising receiving a request to access a resource for a principal and determining one or more principal groups to which the principal belongs. The method further comprises obtaining resource set membership information indicating a resource set to which the resource belongs, and obtaining resource set access policy information for the resource set to which the resource belongs. The method yet further comprises determining whether the principal is allowed to access the resource based on the principal group membership information and the resource set access policy information, and, if the principal is allowed to access the resource, then permitting access to the resource by the principal.