Eric Chunfai Ho

7908249, Mar 15, 2011

Apr 13, 2005

11/105873

Anurag Gupta - Sunnyvale CA, US
Steve S. Lin - San Jose CA, US
Eric Ho - Cupertino CA, US

Yahoo! Inc. - Sunnyvale CA

G06F 7/00
G06F 17/00

707655, 707609, 707662, 707665

A framework for identifying and resolving inconsistencies between multiple data sources is provided. Identification data that indicates rules for identifying inconsistencies between multiple data sources is stored. Rule data that indicates rules for resolving inconsistencies between the multiple data sources is also stored. The rules contained in the identification data are evaluated by an inconsistency identifier. Based on the evaluation, the inconsistency identifier generates output data that identifies the inconsistencies between the multiple data sources. The output data may be stored in a persistent store. Reports and user interfaces may be generated that present the generated output data. An inconsistency resolver processes the output data and the rule data to resolve one or more of the inconsistencies that are identified in the output data in a manner indicated by the rules represented in the rule data.

8613068, Dec 17, 2013

Aug 4, 2011

13/197815

Eric Wai Ho Lau - Mountain View CA, US
Peter Wu - Cupertino CA, US
Jeremy Hay - Santa Clara CA, US

Microsoft Corporation - Redmond WA

H04L 29/06

726 8, 726 3, 726 6

Various embodiments utilize redirection techniques to refresh an authenticated session for a web-based executable operated across multiple domains. In at least some embodiments, the redirection techniques utilize a hidden inline frame (“i-frame”) to refresh an authenticated session. In some embodiments, polling is utilized to detect the end of a redirection sequence and a refreshed authenticated session while in other embodiments, an authenticated session is assumed to be refreshed after the expiration of a predetermined period of time.

20120131326, May 24, 2012

Nov 18, 2010

12/948770

Eric Wai Ho Lau - Mountain View CA, US
Zhaowei Charlie Jiang - Palo Alto CA, US
Derrick Isaacson - Mountain View CA, US
Ralph E. Lemke - Sunnyvale CA, US
Peter Wu - Cupertino CA, US

Microsoft Corporation - Redmond CA

G06F 21/00
H04L 9/32

713150, 726 4

The claimed subject matter provides a method for securing a partner-enabled web service. The method includes receiving a request to access the partner-enabled web service. The request is received from a browser client for a partner application. The browser client is associated with a user. Additionally, the method includes determining that the user is authorized to access the partner application. The method further includes generating a token that associates the user with the partner application. Also, the method includes sending the token to the browser client.

20130185810, Jul 18, 2013

Jan 13, 2012

13/350379

Sean Andrew Suchter - Los Altos Hills CA, US
Eric Wai Ho Lau - Mountain View CA, US
Yuri Romanenko - Redwood City CA, US
Adam Sapek - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 21/24

726 29

Among other things, one or more techniques and/or systems are provided for controlling the serialization of data into a serialized structure and/or the deserialization of data from the serialized structure. That is, a first client may request serialization of data comprising one or more entities. Entities that the first client has permission to serialize may be serialized for inclusion within a serialized structure, which may be encrypted. A set of deserialization permissions specifying which entities may be accessed by which clients may be defined for the serialized structure. In this way, one or more entities within the serialized structure may be deserialized for a second client based upon evaluating the second client against the set of deserialization permissions to determine which entities the second client has permission to access. The serialized structure may otherwise remain encrypted to provide sustained protection of serialized data comprised therein.

20130185811, Jul 18, 2013

Jan 13, 2012

13/350426

Sean Andrew Suchter - Los Altos Hills CA, US
Ho John Lee - Palo Alto CA, US
Charles Carson - Cupertino CA, US
Scott Banachowski - Mountain View CA, US
Yuri Romanenko - Redwood City CA, US
Eric Wai Ho Lau - Mountain View CA, US

Microsoft Corporation - Redmond WA

G06F 21/20
G06F 21/24

726 29

Among other things, one or more techniques and/or systems are provided for sustained data protection. In particular, a data protector may define a set of access levels associated with content within data using a set of access policies (e.g., a partial access level to inventory data for an inventory server, a full access level to inventory data and billing data for a shopping website server, etc.). The data protector may secure (e.g., encrypt) the data to create protected data, so that clients may be unable to access content of the protected data without obtaining access through the data protector. In this way, the data protector may selectively provide clients with access to content within the protected data according to respective access levels for the different clients (e.g., access to inventory data, but not billing data, may be provided to the inventory server by the data protector).

20170083721, Mar 23, 2017

Dec 1, 2016

15/366598

- Redmond WA, US
Ho John Lee - Palo Alto CA, US
Charles Converse Carson - Cupertino CA, US
Scott Alexander Banachowski - Mountain View CA, US
Yuri Romanenko - Redwood City CA, US
Eric Wai Ho Lau - Mountain View CA, US

G06F 21/62
G06F 21/10

Among other things, one or more techniques and/or systems are provided for sustained data protection. In particular, a data protector may define a set of access levels associated with content within data using a set of access policies (e.g., a partial access level to inventory data for an inventory server, a full access level to inventory data and billing data for a shopping website server, etc.). The data protector may secure (e.g., encrypt) the data to create protected data, so that clients may be unable to access content of the protected data without obtaining access through the data protector. In this way, the data protector may selectively provide clients with access to content within the protected data according to respective access levels for the different clients (e.g., access to inventory data, but not billing data, may be provided to the inventory server by the data protector).