Timothy Scott Larson

US Patent:

20210092234, Mar 25, 2021

Filed:

Sep 20, 2019

Appl. No.:

16/578041

Inventors:

- Redmond WA, US
Timothy Colin Larson - Seattle WA, US

Assignee:

Microsoft Technology Licensing, LLC - Redmond WA

International Classification:

H04M 15/00
H04M 3/22

Abstract:

According to examples, an apparatus may include a processor and a computer readable medium on which is stored machine readable instructions that may cause the processor to determine a call duration threshold assigned to an entity, in which a phone number may be associated with the entity. The processor may also track durations of one or more calls placed to the phone number, determine whether the tracked durations of the one or more calls placed to the phone number meet or exceed the call duration threshold, and based on a determination that the tracked durations meet or exceed the call duration threshold, throttle placement of an additional call to the phone number.

US Patent:

20200065484, Feb 27, 2020

Filed:

Aug 21, 2018

Appl. No.:

16/106437

Inventors:

- Redmond WA, US
Timothy Colin Larson - Seattle WA, US

International Classification:

G06F 21/55
G06F 21/60

Abstract:

Suspicious credential changes are automatically detected and mitigated. A comparison of data surrounding user-account credential changes with suspicious change patterns forms a basis for detecting suspicious credential changes. More particularly, if a credential change substantially matches a known suspicious change pattern, the credential change can be flagged as suspicious. After a credential change is determined to be suspicious, one or more mitigation activities can be triggered to allay adverse effects associated with a suspicious credential change.

US Patent:

20190166112, May 30, 2019

Filed:

Nov 24, 2017

Appl. No.:

15/822065

Inventors:

- Redmond WA, US
Timothy Colin LARSON - Seattle WA, US

International Classification:

H04L 29/06

Abstract:

A sign-in system can be protected against enumeration attacks while providing an improved sign-in experience for legitimate users by disclosing whether or not an account exists. An account within a specified domain can be identified by an account identifier such as a username. Before a threshold throttling value is reached, account existence/non-existence information can be provided in response to an access request. In response to reaching or exceeding a specified threshold throttling value, account existence/non-existence information can cease to be provided. Entering a valid account identifier/authenticating credential credentials pair provides access to the computer system regardless of whether or not the threshold was reached or exceeded or not reached.