Mashuri R Libman

20070124308, May 31, 2007

Nov 30, 2005

11/290961

Gregory Johnson - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
William Lees - Redmond WA, US
William Jack - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 17/30

707010000

Communicating with a distributed service in the network computing environment. A method for communicating with a distributed service includes referencing a configuration registry to determine resources and permissions in a potential distributed service entry. A potential distributed service entry identifies a distributed service corresponding to the potential distributed service entry that is authorized to exist by virtue of an entry in the configuration registry for the potential distributed service entry specifying that the distributed service may exist, whether or not the distributed service corresponding to the potential distributed service entry exists. The method further includes using the resource information, attempting to contact the distributed service corresponding to the potential distributed service entry. Permissions of the distributed service corresponding to the potential distributed service entry are verified to match permissions of the potential distributed service entry.

20140020044, Jan 16, 2014

Jul 10, 2012

13/545854

Lynn Ayres - Redmond WA, US
Jack Kabat - Sammamish WA, US
Vikram Kakumani - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
Benjamin Stull - Seattle WA, US
Anatoly Koretsky - San Antonio TX, US
Vidyaraman Sankaranarayanan - Redmond WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 21/20
G06F 15/16

726 1

System and methods for the implementation and/or enforcement of an email policy for an organization's email system are presented. A Data Loss Prevention (DLP) policy may be implemented on top of the email system. In one embodiment, the DLP policy may comprise modules and/or processing that tests emails for such sensitive data within emails. If an email comprises such sensitive data, then the DLP policy directives may specify processing to be applied as part of each stage of mail processing, from authoring to mail processing on the server and delivery. A single policy may be authored and managed that will apply the policy directives uniformly across all aspects of the message lifecycle. Each of the message policy enforcement systems may evaluate the single policy definition and apply the policy directives in a manner consistent with the contextual evaluation of the policy.

20140020045, Jan 16, 2014

Jul 10, 2012

13/545864

Lynn Ayres - Redmond WA, US
Jack Kabat - Sammamish WA, US
Vikram Kakumani - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
Benjamin Stull - Seattle WA, US
Anatoly Koretsky - San Antonio TX, US
Andrey Shur - Redmond WA, US
Joseph Schulman - Bellevue WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 21/60

726 1

Systems and/or methods for deploying and implementing data loss prevention (DLP) policy definition that may encapsulate the requirements, control objectives and directives, and/or the definitions of sensitive data types as stipulated directly or indirectly by the regulatory policy are disclosed. In one embodiment, DLP policies may be identified by an organization to run on top of a set of electronic file systems (e.g., email systems, file systems, web servers and the like). Organizations and their administrators may implement a set of DLP policy instance which are derived from DLP policy templates. DLP policy templates may comprise both structure and meaning—and may acquire a given DLP policy by the replacement of parameterized expressions with desired parameter values. In another embodiment, the state of the DLP policy instance may change according to the lifecycle of the policy instance deployment.

20200382677, Dec 3, 2020

Nov 26, 2019

16/696961

- Redmond WA, US
Devesh Srivastava - Redmond WA, US
Mashuri R. Libman - Woodinville WA, US
Anatoly Koretsky - San Antonio TX, US

H04N 1/32
H04N 1/00
H04N 1/44

Disclosed are embodiments to manage modifications to a document such that the document conforms to requirements of a label. In some aspects, input assigning a label to a document is received. The label indicates requirements for the document. For example, the label marks the document as confidential, and requires the document to be encrypted when leaving a secure environment. The label may include additional requirements, such as particular watermarking or other content modifications to the document based on the confidential label. A device may be capable of modifying the document such that it satisfies only a subset of the label's requirements. The device then generates a message indicating a gap between the label's requirements and the state of the document, and sends the message to a network service. The network service is configured to augment the document as specified by the additional requirements indicated in the message.

20190354691, Nov 21, 2019

Jun 19, 2019

16/445446

- Redmond WA, US
Jack KABAT - Sammamish WA, US
Raja Charu Vikram KAKUMANI - Bellevue WA, US
Mashuri LIBMAN - Woodinville WA, US
Benjamin STULL - Seattle WA, US
Anatoly KORETSKY - San Antonio TX, US
Andrey SHUR - Redmond WA, US
Joseph SCHULMAN - Bellevue WA, US

G06F 21/60
H04L 12/58

Systems and/or methods for deploying and implementing data loss prevention (DLP) policy definition that may encapsulate the requirements, control objectives and directives, and/or the definitions of sensitive data types as stipulated directly or indirectly by the regulatory policy are disclosed. In one embodiment, DLP policies may be identified by an organization to run on top of a set of electronic file systems (e.g., email systems, file systems, web servers and the like). Organizations and their administrators may implement a set of DLP policy instance which are derived from DLP policy templates. DLP policy templates may comprise both structure and meaning—and may acquire a given DLP policy by the replacement of parameterized expressions with desired parameter values. In another embodiment, the state of the DLP policy instance may change according to the lifecycle of the policy instance deployment.

20160330248, Nov 10, 2016

Jul 20, 2016

15/215032

- Redmond WA, US
Krishna Kumar Parthasarathy - Redmond WA, US
Lucy Chao - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
Anatoly Koretsky - San Antonio TX, US
Yongjun Xie - Sammamish WA, US
David Alexander Blyth - Seattle WA, US

H04L 29/06
G06Q 10/10
G06Q 10/06

A set of compliance policy updates are received. The compliance policy updates are sent to workloads for application. A status of the application of the compliance policies to the workloads is received from the workloads and output.

20160277449, Sep 22, 2016

May 26, 2016

15/165711

- Redmond WA, US
Anatoly Koretsky - San Antonio TX, US
Lucy Chao - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
Neelamadhaba Mahapatro - Bellevue WA, US
Krishna Kumar Parthasarathy - Redmond WA, US
Sowmy Srinivasan - Redmond WA, US
Sridharan Ramanathan - Kirkland WA, US
Jack Kabat - Sammamish WA, US

H04L 29/06
G06F 3/0484
G06F 17/27

User input mechanisms are displayed for defining a compliance policy update. A unified compliance policy update is generated according to a unified schema that is consistent across different workloads. The unified compliance policy update is sent to a workload where it is deployed.

20160203321, Jul 14, 2016

Mar 9, 2016

15/064871

- Redmond WA, US
Jack Kabat - Sammamish WA, US
Vikram Kakumani - Bellevue WA, US
Mashuri Libman - Woodinville WA, US
Benjamin Stull - Seattle WA, US
Anatoly Koretsky - San Antonio TX, US
Andrey Shur - Redmond WA, US
Joseph Schulman - Bellevue WA, US

G06F 21/60
H04L 12/58

Systems and/or methods for deploying and implementing data loss prevention (DLP) policy definition that may encapsulate the requirements, control objectives and directives, and/or the definitions of sensitive data types as stipulated directly or indirectly by the regulatory policy are disclosed. In one embodiment, DLP policies may be identified by an organization to run on top of a set of electronic file systems (e.g., email systems, file systems, web servers and the like). Organizations and their administrators may implement a set of DLP policy instance which are derived from DLP policy templates. DLP policy templates may comprise both structure and meaning—and may acquire a given DLP policy by the replacement of parameterized expressions with desired parameter values. In another embodiment, the state of the DLP policy instance may change according to the lifecycle of the policy instance deployment.