Donald C Schmidt

7185359, Feb 27, 2007

Dec 21, 2001

10/029426

Donald E. Schmidt - Redmond WA, US
Clifford P. Van Dyke - Bellevue WA, US
Paul J. Leach - Seattle WA, US
Praerit Garg - Kirkland WA, US
Murli D. Satagopan - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 7/04
G06F 17/30
H04L 9/32

726 2, 726 1, 726 8, 713170

An enterprise network architecture has a trust link established between two autonomous network systems that enables transitive resource access between network domains of the two network systems. The trust link is defined by data structures maintained by each of the respective network systems. The first network system maintains namespaces that correspond to the second network system and a domain controller in the first network system, or a first network system administrator, indicates whether to trust individual namespaces. An account managed by a domain in the second network system can request authentication via a domain controller in the first network system. The first network system determines from the trust link to communicate the authentication request to the second network system. The first network system also determines from the trust link where to communicate authorization requests when administrators manage group memberships and access control lists.

7401235, Jul 15, 2008

May 10, 2002

10/144059

David R. Mowers - Issaquah WA, US
Roy Leban - Redmond WA, US
Donald E. Schmidt - Redmond WA, US
Ram Viswanathan - Bellevue WA, US
John E. Brezak - Woodinville WA, US
Richard B. Ward - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 7/04
G06F 17/30
G06F 15/173
G06K 9/00
H04L 9/32

713200, 726 2, 726 10, 709220, 709203

Methods and systems are provided to allow users that are authenticated by a trusted external service to gain controlled levels of access to selected local computing resources without requiring the user to also have conventional access control capabilities for the resources.

7568218, Jul 28, 2009

Oct 31, 2002

10/285175

Praerit Garg - Kirkland WA, US
Cliff Van Dyke - Bellevue WA, US
Karthik Jaganathan - Kirkland WA, US
Mark Pustilnik - Newcastle WA, US
Donald E. Schmidt - Redmond WA, US

Microsoft Corporation - Redmond WA

H04L 9/32

726 4, 726 2, 726 3, 726 6, 726 26, 726 27, 713182, 713183, 713185

A selective cross-realm authenticator associates an identifier with a request from an entity authenticated in one realm to access a resource associated with a second realm. The identifier indicates that the entity was authenticated in a realm other than the realm associated with the requested resource. A domain controller associated with the resource performs an access check to verify that the authenticated user is authorized to authenticate to the requested resource. Permissions associated with the resource can be used to specify levels of access to be granted to entities authenticated by a domain controller associated with another realm.

7603555, Oct 13, 2009

Jun 30, 2005

11/173004

Donald E. Schmidt - Redmond WA, US
Ryan D. Johnson - Bothell WA, US
Kahren Tevosyan - Kirkland WA, US
Jeffrey F. Spelman - Woodinville WA, US
Krishnanand Shenoy - Bothell WA, US
Harini Raghavan - Bellevue WA, US
David R. Mowers - Issaquah WA, US
Matthew Hur - Newcastle WA, US

Microsoft Corporation - Redmond WA

H04L 9/00

713168, 713150, 713151

A system for authenticating computer users comprising a single active directory disposed in an intranet, a web server disposed in a DMZ associated with the intranet, and a web client coupled to the web server through an internet connection that is capable of signing on to the web server.

7617522, Nov 10, 2009

Apr 24, 2006

11/379998

Donald E. Schmidt - Redmond WA, US
Clifford P. Van Dyke - Bellevue WA, US
Paul J. Leach - Seattle WA, US
Praerit Garg - Kirkland WA, US
Murli D. Satagopan - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 17/00
H04K 1/00

726 2, 726 1, 726 8, 713170

An enterprise network architecture has a trust link established between two autonomous network systems that enables transitive resource access between network domains of the two network systems. The trust link is defined by data structures maintained by each of the respective network systems. The first network system maintains namespaces that correspond to the second network system and a domain controller in the first network system, or a first network system administrator, indicates whether to trust individual namespaces. An account managed by a domain in the second network system can request authentication via a domain controller in the first network system. The first network system determines from the trust link to communicate the authentication request to the second network system. The first network system also determines from the trust link where to communicate authorization requests when administrators manage group memberships and access control lists.

7624237, Nov 24, 2009

May 3, 2006

11/416572

Dan F. Greiner - San Jose CA, US
Donald W. Schmidt - Stone Ridge NY, US

International Business Machines Corporation - Armonk NY

G06F 13/00

711150, 711152

A compare, swap and store facility is provided that does not require external serialization. A compare and swap operation is performed using an interlocked update operation. If the comparison indicates equality, a store operation is performed. The compare, swap and store operations are performed as a single unit of operation.

7698381, Apr 13, 2010

Jun 20, 2001

09/886146

John E. Brezak - Woodinville WA, US
Richard B. Ward - Redmond WA, US
Donald E. Schmidt - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 15/16

709219, 709203, 709217, 709218

Methods and systems are provided for controlling the scope of delegation of authentication credentials within a network environment. A server is configured to provide a trusted third-party with a ticket authenticating the server, information about a target service that a server seeks to access on behalf of the client, and a service ticket associated with the client. This service ticket may be provided by the client or may be a previously granted service ticket granted to the server for itself in the name of the client. The trusted third-party grants a new service ticket to access the target service to the server, in the client's name, if such delegation is permitted according to delegation constraints associated with the client.

7702917, Apr 20, 2010

Nov 19, 2004

10/993745

Kahren Tevosyan - Kirkland WA, US
Matthew Hur - Newcastle WA, US
Ryan D Johnson - Bothell WA, US
Donald E Schmidt - Redmond WA, US
Jeffrey F Spelman - Woodinville WA, US

Microsoft Corporation - Redmond WA

G06F 21/00

713185

The described systems, methods, and data structures are directed at data transfer using Hyper-Text Transfer Protocol (HTTP) query strings. A block of data is partitioned into sections. Each section is encoded in a query string of a HTTP message. Each HTTP message is sent to a server by redirecting through a client. Multiple redirected messages are sent until the entire block of data is transferred to the server. The data block may be stored as a cookie on the client so that the data block does not have to persist on any server. Data transfer using HTTP query strings may be implemented to transfer a security token from a security token service (STS) server to an application server.