Krishnanand K Shenoy

US Patent:

20060123234, Jun 8, 2006

Filed:

Jun 30, 2005

Appl. No.:

11/173004

Inventors:

Donald Schmidt - Redmond WA, US
Ryan Johnson - Bothell WA, US
Kahren Tevosyan - Kirkland WA, US
Jeffrey Spelman - Woodinville WA, US
Krishnanand Shenoy - Bothell WA, US
Harini Raghavan - Bellevue WA, US
David Mowers - Issaquah WA, US
Matthew Hur - Scotts Valley CA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

713168000

Abstract:

A system for authenticating computer users comprising a single active directory disposed in an intranet, a web server disposed in a DMZ associated with the intranet, and a web client coupled to the web server through an internet connection that is capable of signing on to the web server.

US Patent:

20060123472, Jun 8, 2006

Filed:

Jun 30, 2005

Appl. No.:

11/173008

Inventors:

Donald Schmidt - Redmond WA, US
Ryan Johnson - Bothell WA, US
Kahren Tevosyan - Kirkland WA, US
Jeffrey Spelman - Woodinville WA, US
Krishnanand Shenoy - Bothell WA, US
Harini Raghavan - Bellevue WA, US
David Mowers - Issaquah WA, US
Matthew Hur - Scotts Valley CA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/30

US Classification:

726008000

Abstract:

A system for authenticating computer users comprising, a single active directory disposed in a federated partner, a web server disposed in a DMZ associated with the intranet; and a client disposed in the federated partner coupled to the web server through an internet connection that is capable of signing on to the web server.

US Patent:

20120060210, Mar 8, 2012

Filed:

Sep 3, 2010

Appl. No.:

12/875778

Inventors:

Caleb Geoffrey Baker - Seattle WA, US
Seng Lin Shee - Redmond WA, US
Jan Lyk Choo - Seattle WA, US
Marcelo Albuquerque Fernandes Mas - Kirkland WA, US
Krishnanand K. Shenoy - Bothell WA, US
Samuel R. Devasahayam - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/06

US Classification:

726 9, 726 3, 726 5

Abstract:

Authenticating internet application sessions. A method includes downloading client side code that when executed implements one or more client side modules including at least one module with message interception functionality. The method includes executing the client side code to implement the one or more client side modules. A request is sent to an internet application server. In response to the request, a message is received from the internet application server indicating that the request is not authorized. The message from the internet application server indicating that the request is not authorized is intercepted at the one or more client side modules. The one or more client side modules, as a result of the message indicating that the request is not authorized, send a request for authentication in a required format for authentication. Authentication is performed without losing user state associated with the request to the internet application server.

US Patent:

20120084244, Apr 5, 2012

Filed:

Sep 30, 2010

Appl. No.:

12/895647

Inventors:

Caleb G. Baker - Seattle WA, US
Seng Lin Shee - Redmond WA, US
Jan Lyk Choo - Seattle WA, US
Marcelo A. Mas - Kirkland WA, US
Krishnanand K. Shenoy - Bothell WA, US
Samuel R. Devasahayam - Kirkland WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

G06N 5/02

US Classification:

706 47

Abstract:

A pipeline that includes at least an initialization stage, a processing stage, and a publication stage. The initialization stage acquires a set of globally sourced claims that can be used by any issuance statement. The processing stage manipulates a set of one or more user task specific claims that are derived from the set of one or more globally source claims. The set of one or more user task specific claims are manipulated by generating a set of one or more temporary claims. The processing stage generates the set of one or more temporary claims by applying issuance statements to the set of one or more user task specific claims. A publication stage then issues the set of one or more temporary claim in an issuance format.