Grigori M Somin

7397922, Jul 8, 2008

Jun 27, 2003

10/608768

Alexandru Gavrilescu - Redmond WA, US
Graham A. Wheeler - Redmond WA, US
Grigori M. Somin - Seattle WA, US
John L. Miller - Woodinville WA, US
Rohit Gupta - Redmond WA, US

Microsoft Corporation - Redmond WA

H04K 1/00

380255, 380285

A system and method for providing security to a graph of interconnected nodes includes a grouping multiplexing layer configured to monitor calls to the system, a graphing dynamic link layer configured to transmit and receive data to and from the graph, and a group security manager coupled to the grouping multiplexing layer and coupled to the graphing dynamic link layer; the group security manager is configured to perform security-related acts via interacting with a group database to propagate security-related information to members of a group within the graph. The group security manager is configured to provide role-based authorization on publication of one or more records and provide membership control for admission to a graph of interconnected nodes. The group security manager provides membership control by providing credentials to potential members of the graph to enable a connection and by providing a governed system for renewal and revocation of members.

7613812, Nov 3, 2009

Dec 4, 2002

10/309864

Todd R. Manion - Redmond WA, US
Robert D. Donner - Sammamish WA, US
Grigori M. Somin - Renton WA, US

Microsoft Corporation - Redmond WA

G06F 15/16

709227, 709228, 709229

Peer-to-peer (P2P) application programming interfaces (APIs) that allow an application to create, import, export, manage, enumerate, and delete P2P identities are presented. Further, the management of group identity information is provided. APIs abstract away from low level credential and cryptographic functions required to create and manage P2P identities. This management includes retrieval and setting of a friendly name, generation of a cryptographic public/private key pair, retrieval of security information in the form of an XML fragment, and creation of a new name based on an existing identity. Since the P2P environment also allows for the existence of multiple separate groups of peers within the P2P cloud, a preferred embodiment of the present invention also allows for the enumeration of all groups associated with a given identity, for each identity existing for the user.

7949996, May 24, 2011

Oct 23, 2003

10/692199

Todd R. Manion - Redmond WA, US
Grigori M. Somin - Seattle WA, US
Robert D. Donner - Sammamish WA, US

Microsoft Corporation - Redmond WA

G06F 9/44

717114, 717104, 717120, 709229

A set of managed application programming interfaces (APIs) are presented to allow management of a user's name and identity within a peer to peer networking environment. These managed APIs enable a user to successfully create and manage their peer names and identities within this environment. The creation of peer names for the purpose of resolving to a third party is also provided through the managed APIs of the invention. Importing and exporting of peer identities is also provided, as is the ability to delete a peer identity.

8010681, Aug 30, 2011

Sep 15, 2009

12/559841

Todd R. Manion - Seattle WA, US
Robert D. Donner - Bellevue WA, US
Grigori M. Somin - Mountain View CA, US

Microsoft Corporation - Redmond WA

G06F 15/16

709227, 709228, 709229

Peer-to-peer (P2P) application programming interfaces (APIs) that allow an application to create, import, export, manage, enumerate, and delete P2P identities are presented. Further, the management of group identity information is provided. APIs abstract away from low level credential and cryptographic functions required to create and manage P2P identities. This management includes retrieval and setting of a friendly name, generation of a cryptographic public/private key pair, retrieval of security information in the form of an XML fragment, and creation of a new name based on an existing identity. Since the P2P environment also allows for the existence of multiple separate groups of peers within the P2P cloud, a preferred embodiment of the present invention also allows for the enumeration of all groups associated with a given identity, for each identity existing for the user.

20050044411, Feb 24, 2005

Aug 20, 2003

10/645319

Grigori Somin - Seattle WA, US
David Mowers - Issaquah WA, US
Alexandru Gavrilescu - Redmond WA, US

Microsoft Corporation - Redmond WA

H04L009/00

713201000

Disclosed are peer-to-peer computer program products, methods, and systems in which a remote peer on a peer-to-peer network is granted or denied access to a resource based on the credentials presented by the remote peer. In accordance with the disclosed subject matter, an access token that includes one or more security identification values which represent respectively one or more access rights in an access control system is generated. An execution thread that is associated with the access token thus generated attempts to access the resource on behalf of the remote peer. In some embodiments, the access control system includes a generic user account, and the access token that is generated for the remote peer includes the security identification value associated with the generic user account in the access control system.

20050177715, Aug 11, 2005

Feb 9, 2004

10/775916

Grigori Somin - Seattle WA, US
Rohit Gupta - Redmond WA, US

Microsoft Corporation - Redmond WA

H04L009/00

713156000

Disclosed is a system for organizing and storing information about multiple peer identities. New certificates are introduced that enable a user to efficiently create, modify, and delete identities and groups. New storage structures enable the user to list and search through existing identities, groups, and their related certificates. An identity certificate contains information about a peer identity. A group root certificate is created by a user when he decides to create a new group. When the group creator user wishes to invite another entity to join the group, it creates another type of certificate called a group membership certificate. The group membership certificate is logically “chained” to the group root certificate. The invitee checks the validity of these certificates by checking that the chaining has been properly done. The invitee may then be allowed to invite other entities to join the group by sending out its own group membership certificates.

20110271094, Nov 3, 2011

Jul 11, 2011

13/180406

Todd R. Manion - Seattle WA, US
Robert D. Donner - Bellevue WA, US
Grigori M. Somin - Mountain View CA, US

Microsoft Corporation - Redmond WA

G06F 15/16
H04L 9/00

713150, 709228

Peer-to-peer (P2P) application programming interfaces (APIs) that allow an application to create, import, export, manage, enumerate, and delete P2P identities are presented. Further, the management of group identity information is provided. APIs abstract away from low level credential and cryptographic functions required to create and manage P2P identities. This management includes retrieval and setting of a friendly name, generation of a cryptographic public/private key pair, retrieval of security information in the form of an XML fragment, and creation of a new name based on an existing identity.

20140289749, Sep 25, 2014

Jun 4, 2014

14/296294

- Redmond WA, US
Robert D. Donner - Bellevue WA, US
Grigori M. Somin - Mountain View CA, US

G06F 9/54

719328

Peer-to-peer (P2P) application programming interfaces (APIs) that allow an application to create, import, export, manage, enumerate, and delete P2P identities are presented. Further, the management of group identity information is provided. APIs abstract away from low level credential and cryptographic functions required to create and manage P2P identities. This management includes retrieval and setting of a friendly name, generation of a cryptographic public/private key pair, retrieval of security information in the form of an XML fragment, and creation of a new name based on an existing identity.