Karim M Batthish

US Patent:

7284121, Oct 16, 2007

Filed:

Jun 13, 2003

Appl. No.:

10/462117

Inventors:

Roy Williams - Redmond WA, US
Jorge Pereira - Seattle WA, US
Karim Michel Batthish - Seattle WA, US
Phillip J. Hallin - Port Townsend WA, US
Yu Lin Sie - Bellevue WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/16

US Classification:

713156, 380277, 380283, 709206, 4554141

Abstract:

A certificate-based encryption mechanism in which a source client does not access the entire certificate corresponding to a destination client when encrypting an electronic message to be sent to the destination client. Instead, the source client only requests a portion of the certificate from a certificate server. That portion includes encryption information, but may lack some or even all of the self-verification information in the certificate. The certificate server preferably performs any validation of the certificate prior to sending the encryption information to the source client. The certificate need not be separately validated by the source client, especially if the certificate server is trusted by the source client.

US Patent:

7293171, Nov 6, 2007

Filed:

Jan 21, 2004

Appl. No.:

10/762094

Inventors:

Karim Batthish - Seattle WA, US
Malcolm Davis - Kirkland WA, US
Roy Williams - Woodinville WA, US
Jean Wu - Kirkland WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

713152, 709206

Abstract:

Encrypted email message structures can contain recipient information that can reveal, to any recipient, all of the other recipients of an email message. Because some recipients, such as recipients to whom the message was “blind carbon-copied”, should remain hidden from the other recipients, individual encrypted messages can be created. One encrypted message can be created for all of the recipients who are intended to be revealed, such as the recipients listed in the TO and CC fields of an email header. A second encrypted message can be created for all of the recipients of the message who are intended to be hidden, such as the recipient listed in the BCC field of an email header. Alternatively, multiple encrypted messages can be created individually for each recipient in the BCC field, if the BCC recipients are to be hidden even from other BCC recipients.

US Patent:

7360096, Apr 15, 2008

Filed:

Jun 12, 2003

Appl. No.:

10/459863

Inventors:

Shawn Derek Bracewell - Duvall WA, US
Richard B. Ward - Redmond WA, US
Karim Michel Batthish - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

713183, 726 5, 726 10

Abstract:

The present invention provides for securely processing client credentials used for Web-based access to resources. A login page with an interface for entering user credentials is presented at a client and entered user credentials are sent to the server. In response to receiving user credentials, the server generates a unique session identifier for the client. The server also derives a digital signature for the user credentials based on a current key in a rotating key store and the unique session identifier. The server then encrypts the digital signature and the user credentials based on an encryption key derived from the current key and the unique session identifier. When encrypted credentials are received back at the client, keys from the rotating key store are used to attempt to validate the credentials. If user credentials can not be validated, a user is again presented with the login page.

US Patent:

7395428, Jul 1, 2008

Filed:

Jul 1, 2003

Appl. No.:

10/611277

Inventors:

Roy Williams - Redmond WA, US
Karim Michel Batthish - Seattle WA, US
Jorge Pereira - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00

US Classification:

713170

Abstract:

The principles of the present invention provide for delegating certificate validation. A client computer system sends a certificate validation request to a server computer system over a trusted link. The certificate validation request includes at least enough certificate information for a certificate authority to identify a digital certificate that binds a sending entity to a private key. The server computer system checks a validation path to determine if the digital certificate is valid and at least one certificate revocation list to determine if the certificate has been compromised. The server computer system sends a certificate status indication to the client computer system over the trusted link. Accordingly, the resources of the server computer system, instead of the client computer system, are utilized to validate a digital certificate. Further, digital certificate validation can be delegated to a server computer system that attempts to pre-validate a digital certificate.

US Patent:

7490127, Feb 10, 2009

Filed:

Jun 13, 2003

Appl. No.:

10/460965

Inventors:

Jorge Pereira - Seattle WA, US
Karim Michel Batthish - Seattle WA, US
Roy Williams - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/13

US Classification:

709206, 709201, 709202, 709203, 709245, 380258, 713181

Abstract:

Concurrent recipient resolution and certificate acquisition. If a client-entered input data may be resolved without further client input, the server resolves the input data into a recipient entry that has an associated routing address. The server then transmits a response to the client that includes the associated full display name, routing address and certificate. If the server determines that the recipient entry cannot be resolved without further input from the client, the server identifies a number of possible recipient entries, and for each possible recipient generates a token, which is then communicated to the client. The server receives a subsequent request from the client identifying a selected one of the possible associated recipients using the associated token. The server then acquires a certificate associated with the selected recipient using the token, and then sends the certificate to the client.

US Patent:

7793260, Sep 7, 2010

Filed:

Apr 25, 2005

Appl. No.:

11/113653

Inventors:

Brendan C. Fields - Woodinville WA, US
Karim M. Batthish - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/44

US Classification:

717121, 715744

Abstract:

Maintaining a plurality of application component catalogs describing user experiences associated with particular application programs. The invention includes an extensible schema for the application component catalogs and a method for matching user experiences within the application component catalogs to particular user requests. The invention provides an extensible and scalable infrastructure for customizing a user interface experience.

US Patent:

8301662, Oct 30, 2012

Filed:

Mar 31, 2009

Appl. No.:

12/414686

Inventors:

Lauren B. Lavoie - Seattle WA, US
Karim M. Batthish - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/30

US Classification:

707796, 709206, 715752

Abstract:

Architecture that provides an abstraction of a mailbox store that allows clients to connect to multiple “alternate” mailboxes associated with a single user, exposing the same mechanism used to connect to a user's main mailbox. Beneath this abstraction, support for alternate mailboxes is implemented as a folder hierarchy contained within the user's own mailbox or another physical mailbox. The architecture uses a sub-mailbox folder hierarchy to virtualize a separate physical mailbox. On top of this basic infrastructure, other features can be built such as server-hosted e-mail archives and mailboxes mirrored from other e-mail and PIM data systems. In support thereof, a mechanism is provided for an abstraction layer to expose all or a subset of the alternate mailbox features, and to advertise which alternate mailbox features are supported per alternate mailbox.

US Patent:

8412784, Apr 2, 2013

Filed:

Mar 3, 2009

Appl. No.:

12/396472

Inventors:

Dana B. Birkby - Woodinville WA, US
Alexey Galata - Redmond WA, US
Naresh Sundaram - Redmond WA, US
Karim M. Batthish - Seattle WA, US
Vinayak Morada - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 15/16
G06F 17/00
H04M 1/66
H04K 1/00
H04L 9/08

US Classification:

709206, 455410, 455411, 380276, 380286, 726 1

Abstract:

Architecture that introduces storage of an extra (skeleton) property of a document as well as default document properties on a server. In a specific messaging implementation, a MIME skeleton property is stamped on an arriving MIME messages. An incoming MIME message is shredded and all content that is currently saved to MAPI properties continues to be saved. The remaining message content that is not saved to the MAPI properties is stored in the skeleton property. The skeleton property includes all body part headers and any body part content that was not saved as a property on the item by the server. On retrieval of this message by a MIME client, the MIME message is regenerated in full fidelity by using the default set of properties in combination with the skeleton (or extra) property and the stored body content.