David B Cross

US Patent:

7181016, Feb 20, 2007

Filed:

Jan 27, 2003

Appl. No.:

10/351683

Inventors:

David B. Cross - Redmond WA, US
Jianrong Gu - Bellevue WA, US
Josh D. Benaloh - Redmond WA, US
Thomas C. Jones - Sammamish WA, US
Paul J. Leach - Seattle WA, US
Glenn D. Pittaway - Woodinville WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

380281, 380277

Abstract:

One aspect relates to a process and associated device that provides a private key of an asymmetric key pair in a key device. A symmetric master key is derived from the private key of the asymmetric key pair. The symmetric master key is stored in a computer memory location. The symmetric master key is used to encrypt or decrypt a file encryption key. The file encryption key can encrypt or decrypt files. In another aspect, the user can still access the files even if a user deactivates the key device by encrypting or decrypting the file encryption key directly from the symmetric master key.

US Patent:

7280956, Oct 9, 2007

Filed:

Oct 24, 2003

Appl. No.:

10/692843

Inventors:

David B. Cross - Redmond WA, US
Jainrong Gu - Bellevue WA, US
Duncan Bryce - Redmond WA, US
Shishir Pardikar - Redmond WA, US
Pradeep Jnana Madhavarapu - Bellevue WA, US
Scott A. Field - Redmond WA, US
Kelvin S. Yiu - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/24

US Classification:

703171, 713168, 713182

Abstract:

An encrypted file system (EFS) and an underlying file transfer protocol to permit a client to encrypt, decrypt, and transfer file(s) resident on a server are disclosed. A user at a client computer can open, read, and write to encrypted files, including header information associated with encrypted files, and can add users to or remove users from an encrypted file.

US Patent:

7376968, May 20, 2008

Filed:

Nov 20, 2003

Appl. No.:

10/718153

Inventors:

Andrew J. Ritz - Sammamish WA, US
David B. Cross - Redmond WA, US
Duncan Bryce - Redmond WA, US
Jianrong Gu - Bellevue WA, US
Scott A. Field - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 1/00
G06F 17/30
G06F 9/00

US Classification:

726 17, 713 2, 713330

Abstract:

A system and method for facilitating BIOS integrated encryption is provided. An interface is defined between the operating system and the BIOS. The operating system employs this interface to provide BIOS code information to facilitate decryption of data that is encrypted on the system. In the pre-operating system boot phase, the BIOS employs the decryption information provided from this interface in order to decrypt the data. The decrypted information can be employed to facilitate secure rebooting of a computer system from hibernate mode and/or secure access to device(s).

US Patent:

7382883, Jun 3, 2008

Filed:

Dec 14, 2006

Appl. No.:

11/611051

Inventors:

David B. Cross - Redmond WA, US
Jianrong Gu - Bellevue WA, US
Josh D. Benaloh - Redmond WA, US
Thomas C. Jones - Sammamish WA, US
Paul J. Leach - Seattle WA, US
Glenn D. Pittaway - Woodinville WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

380281, 380284, 380277, 713165, 713172, 705 71, 726 26

Abstract:

One aspect relates to a process and associated device that provides a private key of an asymmetric key pair in a key device. A symmetric master key is derived from the private key of the asymmetric key pair. The symmetric master key is stored in a computer memory location. The symmetric master key is used to encrypt or decrypt a file encryption key. The file encryption key can encrypt or decrypt files. In another aspect, the user can still access the files even if a user deactivates the key device by encrypting or decrypting the file encryption key directly from the symmetric master key.

US Patent:

7383586, Jun 3, 2008

Filed:

Jan 17, 2003

Appl. No.:

10/346429

Inventors:

David B. Cross - Redmond WA, US
Paul J. Leach - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/32

US Classification:

726 30, 706 51

Abstract:

File system interaction with digital rights management (DRM) is facilitated by enabling one or more file system components to be DRM-aware. These one or more file system components may be part of a computer operating system. An exemplary system implementation includes: one or more processors; and one or more media in operative communication therewith, the media storing one or more file system components that are configured to provide content having DRM controls to a requesting program in either a raw form or a decrypted form in dependence on whether the DRM controls comprise simple DRM content controls or complex DRM content controls. In another exemplary system implementation, the one or more file system components are configured to provide files with simple DRM content controls to requesting applications in a decrypted form and to provide files with complex DRM content controls to requesting applications in an unaltered form.

US Patent:

7694121, Apr 6, 2010

Filed:

Jun 30, 2004

Appl. No.:

10/882134

Inventors:

Bryan Mark Willman - Kirkland WA, US
Paul England - Bellevue WA, US
Kenneth D. Ray - Seattle WA, US
Jamie Hunter - Bothell WA, US
Lonnie Dean McMichael - Redmond WA, US
Derek Norman LaSalle - Redmond WA, US
Pierre Jacomet - Sammamish WA, US
Mark Eliot Paley - Sammamish WA, US
Thekkthalackal Varugis Kurien - Sammamish WA, US
David B. Cross - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/00

US Classification:

713 2, 713161, 713165, 713172

Abstract:

A mechanism for protected operating system boot that prevents rogue components from being loaded with the operating system, and thus prevents divulgence of the system key under inappropriate circumstances. After a portion of the machine startup procedure has occurred, the operating system loader is run, the loader is validated, and a correct machine state is either verified to exist and/or created. Once the loader has been verified to be a legitimate loader, and the machine state under which it is running is verified to be correct, the loader's future behavior is known to protect against the loading of rogue components that could cause divulgence of the system key. With the loader's behavior being known to be safe for the system key, the validator may unseal the system key and provides it to the loader.

US Patent:

7703128, Apr 20, 2010

Filed:

Feb 13, 2003

Appl. No.:

10/365878

Inventors:

David B. Cross - Redmond WA, US
Philip J. Hallin - Redmond WA, US
Matthew W. Thomlinson - Seattle WA, US
Thomas C. Jones - Sammamish WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 7/04

US Classification:

726 6, 726 2, 726 3, 726 4, 726 5, 726 7, 726 8, 726 9, 726 10, 713168, 713172

Abstract:

One aspect relates to a process and associated device for managing digital ID lifecycles for application programs, and abstracting application programs for multiple types of credentials through a common Digital Identity Management System (DIMS) and Application Programming Interface (API) layer.

US Patent:

7797311, Sep 14, 2010

Filed:

Mar 19, 2007

Appl. No.:

11/688062

Inventors:

Thekkthalackal Varugis Kurien - Sammamish WA, US
Steven E. Jackson - Issaquah WA, US
Scott A. Field - Redmond WA, US
David B. Cross - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 7/00
G06F 17/30

US Classification:

707722, 707758, 707781

Abstract:

Mechanisms for organizing scenario solution-related information based upon a user's locality are provided. Locality refers to a collection of metadata created based upon scenario solutions executed by a user and/or enablers acquired by a user during scenario solution execution. Such metadata may be stored in association with a scenario solution execution workspace and/or in association with a user-specific information store. Once such information is acquired, a user may desire to share the information, or a portion thereof, with one or more other users, for instance, the members of a user group. However, often times, the user would prefer that the information not be made available to the general public. Thus, mechanisms for controlling access to user-specific information are also provided.