US 2018/0322307 A1Published application

Cross Container User Model

AssigneeMicrosoft Technology Licensing, LLC

InventorsGiridhar VISWANATHAN, Gerardo DIAZ CUELLAR, Hari R. PULAPAKA, Ivan Dimitrov PASHOV, Navin Narayan PAI, Benjamin M. SCHULTZ

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A second operating system accessing resources from an external service. A method includes sending an anonymized request, for an anonymized user corresponding to an authorized user, for resources, through a broker. A request for proof indicating that the anonymized user is authorized to obtain the resources is received from the broker. As a result, a request is send to a first operating system for the proof that the anonymized user is authorized to obtain the resources. Proof is received from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources. The proof is provided to the broker. As a result, the resources are obtained by the second operating system from the service.

Claims20

Dependent claims

In an environment comprising a host system with a first operating system and a second operating system, where the first operating system and the second operating system are separated by a security boundary, comprising an at least partially anonymized, containerized operating system configured to anonymize an authorized user at the first operating system by hiding information for the authorized user from the second operating system, a computer system comprising:

one or more processors;
and
one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to cause a second operating system to access resources from an external service, including instructions that are executable to configure the computer system to perform at least the following:
send an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker;
receive from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources;
as a result, send a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources;
receive the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources;
provide the proof to the broker;
and
as a result obtain the resources from the service.

7 more elements

sending an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker;
receiving from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources;
as a result, sending a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources;
receiving the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources;
providing the proof to the broker;
and
as a result obtaining the resources from the service.

4 more elements

A system comprising:

a host system, wherein the host system comprises:
a first operating system;
a second operating system, wherein the containerized operating system comprises an at least partially anonymized, containerized operating system configured to anonymize an authorized user at the first operating system by hiding information for the authorized user from the second operating system;
a security boundary separating the first operating system and the second operating;
wherein the second operating system is configured to:
send an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker;
receive from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources;
as a result, send a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources;
receive the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources;
provide the proof to the broker;
and
as a result obtain the resources from the service.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/640,164Filed 30 Jun 2017
Priority: 4 May 2017
Published: 8 Nov 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 21/6254
Protecting personal data, e.g. for financial or medical purposes: by anonymising data, e.g. decorrelating personal data from the owner's…
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/74
To assure secure computing or processing of information: operating in dual or compartmented mode, i.e. at least one secure mode

Family

Application62/501,630Us provisional application · filed 4 May 2017
US 10,438,019 B2Related patent
US 2018/0322307 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key