Barbara Lynn Fox

US Patent:

6560581, May 6, 2003

Filed:

Jun 8, 1998

Appl. No.:

09/093436

Inventors:

Barbara L. Fox - Seattle WA
Lester L. Waters - Bellevue WA
Jeffrey F. Spelman - Duvall WA
Robert B. Seidensticker - Woodinville WA
Matthew W. Thomlinson - Bellevue WA

Assignee:

Visa International Service Association - Foster City CA

International Classification:

G06F 1760

US Classification:

705 51, 705 1, 705 26, 705 6 H, 705 71, 705 75, 705 78, 380 45

Abstract:

An electronic commerce system facilitates secure electronic commerce transactions among multiple participants. Each electronic commerce transaction involves at least one commerce document defining the transaction and at least one commerce instrument defining a payment for the transaction. The electronic commerce system has a credential binding server at a trusted credential authority, multiple computing units at associated participants, and a communication system interconnecting the credential binding server and the multiple computing units. The electronic commerce system operates in two phases: a registration phase and a transaction phase. During the registration phase, each of the computing units generate and send a registration packet over the communication system to the credential binding server. Unique credentials are produced by the credential binding server based upon the registration packets sent back to the computing units. During the transaction phase, an originating computing unit initially requests, receives, and verifies the credentials of expected recipient computing units to ensure communication between authenticate participants.

US Patent:

6810479, Oct 26, 2004

Filed:

Jan 26, 2000

Appl. No.:

09/492882

Inventors:

Doug Barlow - Redmond WA
Blair Dillaway - Redmond WA
Barbara Fox - Seattle WA
Terry Lipscomb - Bellevue WA
Terrence Spies - Kirkland WA

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04K 100

US Classification:

713185, 713193, 705 66

Abstract:

A computerized system offers a uniform platform for conducting electronic transactions in multiple different environments. The system includes a portable, multi-purpose, integrated circuit (IC) card and complimentary computer software which enables access and management of resources maintained on the IC card. The software runs on a users personal computer, empowering the user to initialize the IC card, configure the card with the resources that the user wants to maintain on the card, and to manage those resources. The software enables the user to generate private/public key pairs and establish or change passcodes for access to the card resources. The IC card itself provides the electronic vehicle for securely transporting the users private keys and certificates without exposing them in plaintext form. The IC card is designed with enough processing capabilities to perform rudimentary cryptographic functions so that the private keys may be employed for signing or encryption without ever being released from the card.

US Patent:

6842863, Jan 11, 2005

Filed:

Nov 23, 1999

Appl. No.:

09/448854

Inventors:

Barbara L. Fox - Seattle WA, US
Brian A. LaMacchia - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 900

US Classification:

713201, 713156, 713157, 713158, 713175

Abstract:

A system for using a certificate authority to first provide a customer with a digital certificate, and then having a relying party that receives that digital certificate access a status authority (the certificate authority or its designated agent) to receive a reissued certificate on that certificate. The reissued certificate has a much shorter validity period, which ensures that the information is timely. Moreover, the certificate may serve as a receipt, including an accumulated record of the signatures (digital certificates) and policy applied throughout the financial transaction. As a result, each transfer of the transaction forms a digitally-signed chain of evidence recording each step of the transaction and policy applied thereto, whereby risk may be assumed and charged for appropriately and in accordance with the risk purchaser's policy.

US Patent:

6965999, Nov 15, 2005

Filed:

May 1, 1998

Appl. No.:

09/071594

Inventors:

Barbara L. Fox - Seattle WA, US
Brian A. LaMacchia - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F015/63

US Classification:

713200

Abstract:

Intelligent Trust Management provides a centralized security facility that gives system components a flexible mechanism for implementing security policies. System components such as applications create a request describing an action that needs to be checked against an appropriate security policy. The request is given to a trust system that determines which policy object applies to the request, and may pass request arguments to the policy. The policy objects include executable code that uses any arguments along with dynamically obtained variable information to make a decision. The decision is returned to the system component, which then operates accordingly. Policy objects may maintain state and interface with the user independent of the system component in order to obtain information to make their decisions. Policy objects may call other policy objects and/or mathematically combine the results of other policy objects to make a decision.

US Patent:

7003480, Feb 21, 2006

Filed:

Feb 27, 1998

Appl. No.:

09/032407

Inventors:

Barbara L. Fox - Seattle WA, US
Brian A. LaMacchia - Seattle WA, US
Brian C. Beckman - Newcastle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/60

US Classification:

705 26, 705 76

Abstract:

A method for facilitating two-party electronic commerce transactions between trading partners on an unsecure network, such as the Internet. In one example, a client makes application for registration by a financial institution in which the client has one or more accounts. The client submits satisfactory proof of identity and a public key portion for a digital signature to the financial institution. The financial institution may provide the client a one time secret by a secure route, such as conventional mail, which can then be used by the client to show proof of its identity. The financial institution authenticates the one time secret and combines it with the client's public key in a GUMP Relationship Certificate (GRC), which it issues to the client over the network. Once issued, the GRC can be used by the client to authenticate its right to access its account(s) or other products or services at the financial institution and when conducting other electronic transactions over the network. The client digitally signs any such transaction to authenticate its right to conduct the transaction.

US Patent:

7366918, Apr 29, 2008

Filed:

May 14, 2004

Appl. No.:

10/845690

Inventors:

Doug Barlow - Redmond WA, US
Blair Dillaway - Redmond WA, US
Barbara Fox - Seattle WA, US
Terry Lipscomb - Bellevue WA, US
Terrence Spies - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 11/30
G06F 12/14
H04L 9/32
H04L 9/00
H04N 7/16
G06F 15/16
G06F 17/30

US Classification:

713193, 713172, 713185, 705 65, 726 9, 726 20, 902 26, 725 6, 257679, 37921105

Abstract:

The systems and methods provide for configuring and managing resources on a multi-purpose IC card. In one aspect, a user interface (UI) for an application is presented on a display device. A user is enabled via at least one graphical dialog screen of the UI to configure a communicatively coupled IC card. Management of one or more resources on the IC card is facilitated via at least one graphical dialog screen of the UI.

US Patent:

7506158, Mar 17, 2009

Filed:

Jan 10, 2005

Appl. No.:

11/032833

Inventors:

Barbara L. Fox - Seattle WA, US
Brian A. LaMacchia - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32

US Classification:

713156, 713175

Abstract:

A system for using a certificate authority to first provide a customer with a digital certificate, and then having a relying party that receives that digital certificate access a status authority (the certificate authority or its designated agent) to receive a reissued certificate on that certificate. The reissued certificate has a much shorter validity period, which ensures that the information is timely. Moreover, the certificate may serve as a receipt, including an accumulated record of the signatures (digital certificates) and policy applied throughout the financial transaction. As a result, each transfer of the transaction forms a digitally-signed chain of evidence recording each step of the transaction and policy applied thereto, whereby risk may be assumed and charged for appropriately and in accordance with the risk purchaser's policy.

US Patent:

7596692, Sep 29, 2009

Filed:

Jun 5, 2002

Appl. No.:

10/163223

Inventors:

Barbara Lynch Fox - Seattle WA, US
David G. Conroy - El Granada CA, US
Brian A. LaMacchia - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/00
H04L 29/12
H04L 29/06

US Classification:

713155, 713159, 713156, 713151, 713150, 726 2, 726 3, 726 4, 726 5, 726 10, 709229, 709231, 709235, 709218, 709219, 380231, 380284, 380285

Abstract:

Method, system, and computer program products for identifying potentially fraudulent receivers of digital content. A receiver authenticates to an auditing service with data that should be unique to the receiver. The auditing service detects when multiple receivers attempt to authenticate with the same data, suggesting that a receiver has been cloned or duplicated. The audit service also detects when a receiver authenticates improperly, suggesting an unsuccessful and unauthorized attempt to duplicate an authorized receiver. Individual receivers may be networked together. To help protect a receiver's authentication data from tampering, at least a portion of the data may be digitally signed with a private key. The audit service may then verify the digital signature with a corresponding public key. Varying the order in which data is signed or where the data is stored from one receiver or group of receivers to another may provide an additional level of security.