Christopher D Mitchell

US Patent:

6950522, Sep 27, 2005

Filed:

Jun 15, 2000

Appl. No.:

09/594304

Inventors:

Christopher E. Mitchell - Redmond WA, US
Jeff C. Kunins - San Francisco CA, US
Max E. Metral - Boston MA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L009/00

US Classification:

380280, 380278, 713152, 713163, 713178, 713185, 713201, 370389

Abstract:

A version number is associated with an encrypted key executable to allow real time updating of keys for a system which facilitates users signing on to multiple websites on different domains using an encrypted ticket. Two keys may be used at each site during updating of keys, each having an associated one digit Hex version tag. When a key is to be updated with a new key, the existing or old key is provided an expiration time. A second key is provided from the system in a secure manner with a new version number and made the current key which provides decryption of the encrypted ticket. The system tracks both keys while they are concurrent. After the existing key expires, only the second, or updated key is used to provide login services for users. The system periodically flushes old keys.

US Patent:

7421731, Sep 2, 2008

Filed:

Feb 23, 2001

Appl. No.:

09/792359

Inventors:

Christopher E. Mitchell - Redmond WA, US
Ryan W. Battle - Tampa FL, US
Darren L. Anderson - Sammamish WA, US
Joshua G. Poley - Redmond WA, US
Greg A. Marks - Redmond WA, US
John Hal Howard - Redmond WA, US
Michael Wei-Quiang Guo - Bellevue WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 7/04

US Classification:

726 3, 726 2, 726 4, 726 8, 726 9

Abstract:

A user, by way of a computing device, requests and receives content from a first server at the computing device. An authentication response is also received from the first server at the computing device of the user. The authentication response includes an address of the second server and an executable script. The computing device of the user executes the executable script by issuing a request to the second server for state information corresponding to the user, receiving the state information from the second server; and determining, based on the state information, whether the user is authenticated to the second server. If the user is not authenticated to the second server, the computer device of the user displays a login module that is visually associated with the first server. Such login module collects login information for authenticating the user to the second server. If the user is authenticated in the second server, the computing device of the user issues a request to the second server for vouching information for authenticating the user to the first server.

US Patent:

7467298, Dec 16, 2008

Filed:

Apr 16, 2001

Appl. No.:

09/836584

Inventors:

Christopher E. Mitchell - Sammamish WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

713168, 713182, 713183, 713184, 711100, 711163, 711164, 715733, 715738, 705 72, 705 76, 726 5, 726 7, 726 19

Abstract:

Methods and arrangements are provided which associate a first user with a second user in a first device, and selectively provide information about the association of the first and second user to a second device as directed by the first user, without requiring the second user to be logged in to either the first or second device. The information about the association of the first and second user is provided to the second device via a validation code or validation protocol that essentially identifies the first user and the second user, when the first user is logged in to the second device. Here, for example, the validation code may identify the second user by an identifier and a name, and possibly provide modifications to a consent parameter associated with the second user. In certain implementations, at least a portion of the validation code may be encrypted when sent from the first device to the second device. By way of example, in certain instances, the first user may be a parent/guardian to the second user.

US Patent:

7539310, May 26, 2009

Filed:

May 24, 2005

Appl. No.:

11/136350

Inventors:

Christopher E. Mitchell - Sammamish WA, US
Jeff C. Kunins - Seattle WA, US
Max E. Metral - Boston MA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

380277, 713172, 713158, 726 9, 726 10, 380280

Abstract:

A version number is associated with an encrypted key executable to allow real time updating of keys for a system which facilitates users signing on to multiple websites on different domains using an encrypted ticket. Two keys may be used at each site during updating of keys, each having an associated one digit Hex version tag. When a key is to be updated with a new key, the existing or old key is provided an expiration time. A second key is provided from the system in a secure manner with a new version number and made the current key which provides decryption of the encrypted ticket. The system tracks both keys while they are concurrent. After the existing key expires, only the second, or updated key is used to provide login services for users. The system periodically flushes old keys.

US Patent:

7571466, Aug 4, 2009

Filed:

Feb 23, 2001

Appl. No.:

09/792170

Inventors:

Christopher E. Mitchell - Redmond WA, US
Sylvia K. Mollerstrom - Seattle WA, US
Jonathan P. Horton - Woodinville WA, US
Steven M. Cellini - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32
H04L 29/06
G06F 21/00
H04N 7/167
H04L 9/00

US Classification:

726 4, 726 5, 726 6, 713165, 713166, 713168, 713182, 380231, 380232, 705 51, 705 52, 705 59

Abstract:

A user profile having consent information regarding a network server for a second party is created. Such consent information is received from a first party and stored in the user profile of the second party. The second party may access the network server if the consent information stored in the user profile of the second party shows that the first party has provided consent. The second party may not access the network server if the consent information stored in the user profile of the second party shows that the first party has denied consent.

US Patent:

7660422, Feb 9, 2010

Filed:

May 24, 2005

Appl. No.:

11/136156

Inventors:

Christopher E. Mitchell - Sammamish WA, US
Jeff C. Kunins - Seattle WA, US
Max E. Metral - Boston MA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/08

US Classification:

380286, 380277, 380278, 726 6, 726 9

Abstract:

A version number is associated with an encrypted key executable to allow real time updating of keys for a system which facilitates users signing on to multiple websites on different domains using an encrypted ticket. Two keys may be used at each site during updating of keys, each having an associated one digit Hex version tag. When a key is to be updated with a new key, the existing or old key is provided an expiration time. A second key is provided from the system in a secure manner with a new version number and made the current key which provides decryption of the encrypted ticket. The system tracks both keys while they are concurrent. After the existing key expires, only the second, or updated key is used to provide login services for users. The system periodically flushes old keys.

US Patent:

20100250643, Sep 30, 2010

Filed:

Mar 26, 2009

Appl. No.:

12/411415

Inventors:

Tammy L. Savage - Seattle WA, US
James A. Holt - Issaquah WA, US
David L. Waldrop - Potomac MD, US
Christopher E. Mitchell - Snoqualmie WA, US
Miten Navnitrai Mehta - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/16

US Classification:

709202, 709206

Abstract:

Described is a technology in which a platform unifies various social network and alerting mechanisms to provide a relationship-based communication network. An affiliation service allows organizations and individuals to connect, grant permissions and share useful information about themselves in the form of relationship-based and other attributes. A publishing service routes that information to the correct recipients, including by matching desired attributes to attributes of clients recipients. A data exchange service facilitates reporting, routing, monitoring and responding to such information, as well as providing relevant external data feeds to clients. In this manner, users and organizations are able to more easily connect and work together to resolve societal problems via a single platform that facilitates user and organizational participation.

US Patent:

20110270795, Nov 3, 2011

Filed:

Apr 29, 2010

Appl. No.:

12/769979

Inventors:

Gregory Lincoln Smith - Seattle WA, US
Christopher Michael Mitchell - Seattle WA, US
Smiral Shah - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/44
G06F 15/173

US Classification:

706 52, 709224

Abstract:

Embodiments provide capacity estimates for components of a computing environment, but are not so limited. In an embodiment, a computer-implemented method includes using residual capacity estimates and smooth averages to provide point-in-time capacity estimates for resources of a computing environment. In one embodiment, a computing environment includes a capacity manager that can operate under processor control to provide capacity estimates for a collection of resources as part of a capacity monitoring and planning process. Other embodiments are included and available.