Source: http://www.google.com/patents/US8185737?dq=6,108,703
Timestamp: 2015-07-28 01:32:44
Document Index: 470511563

Matched Legal Cases: ['Application No. 200680019185', 'Application No. 200680031682', 'Application No. 200680031682', 'Application No. 2008', 'Application No. 12', 'Application No. 12', 'Application No. 10']

Patent US8185737 - Communication across domains - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsCommunication across domains is described. In at least one implementation, a determination is made that an amount of data to be communicated via an Iframe exceeds a threshold amount. The data is divided into a plurality of portions that do not exceed the threshold amount. A plurality of messages is formed...http://www.google.com/patents/US8185737?utm_source=gb-gplus-sharePatent US8185737 - Communication across domainsAdvanced Patent SearchPublication numberUS8185737 B2Publication typeGrantApplication numberUS 11/805,088Publication dateMay 22, 2012Filing dateMay 22, 2007Priority dateJun 23, 2006Also published asUS8335929, US8489878, US20070300064, US20120173756, US20120173868Publication number11805088, 805088, US 8185737 B2, US 8185737B2, US-B2-8185737, US8185737 B2, US8185737B2InventorsScott Isaacs, George Moore, Danny Thorpe, Vasileios ZissimopoulosOriginal AssigneeMicrosoft CorporationExport CitationBiBTeX, EndNote, RefManPatent Citations (103), Non-Patent Citations (183), Referenced by (1), Classifications (19), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetCommunication across domains
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4227253Dec 5, 1977Oct 7, 1980International Business Machines CorporationCryptographic communication security for multiple domain networksUS4984272Nov 30, 1988Jan 8, 1991At&T Bell LaboratoriesSecure file handling in a computer operating systemUS5210874Apr 8, 1992May 11, 1993Digital Equipment CorporationCross-domain call system in a capability based digital data processing systemUS5339422Mar 7, 1991Aug 16, 1994Digital Equipment CorporationSystem and method for jacketing cross-domain calls in a multi-code execution and debugging system within a multi-architecture environmentUS5377188Sep 15, 1993Dec 27, 1994Kabushiki Kaisha ToshibaCommunication system capable of detecting missed messagesUS5428529Jun 29, 1990Jun 27, 1995International Business Machines CorporationStructured document tags invoking specialized functionsUS5623604Nov 18, 1992Apr 22, 1997Canon Information Systems, Inc.Method and apparatus for remotely altering programmable firmware stored in an interactive network board coupled to a network peripheralUS5659539Jul 14, 1995Aug 19, 1997Oracle CorporationMethod and apparatus for frame accurate access of digital audio-visual informationUS5666519Sep 30, 1996Sep 9, 1997Digital Equipment CorporationMethod and apparatus for detecting and executing cross-domain calls in a computer systemUS5675762Jan 6, 1995Oct 7, 1997International Business Machines CorporationSystem for locking down part of portion of memory and updating page directory with entry corresponding to part of portion of the memory locked downUS5729710Jun 22, 1994Mar 17, 1998International Business Machines CorporationMethod and apparatus for management of mapped and unmapped regions of memory in a microkernel data processing systemUS5758093Mar 29, 1996May 26, 1998International Business Machine Corp.Method and system for a multimedia application development sequence editor using time event specifiersUS5760767Oct 26, 1995Jun 2, 1998Sony CorporationMethod and apparatus for displaying in and out points during video editingUS5771383Feb 13, 1997Jun 23, 1998International Business Machines Corp.Shared memory support method and apparatus for a microkernel data processing systemUS5799090Sep 25, 1995Aug 25, 1998Angert; Joseph C.pad encryption method and softwareUS5812394Jul 21, 1995Sep 22, 1998Control Systems InternationalObject-oriented computer program, system, and method for developing control schemes for facilitiesUS5852435Apr 12, 1996Dec 22, 1998Avid Technology, Inc.Digital multimedia editing and data management systemUS5892904Dec 6, 1996Apr 6, 1999Microsoft CorporationCode certification for network transmissionUS5931900Aug 25, 1997Aug 3, 1999I2 Technologies, Inc.System and process for inter-domain interaction across an inter-domain connectivity planeUS5941947Aug 18, 1995Aug 24, 1999Microsoft CorporationSystem and method for controlling access to data entities in a computer networkUS5949882Dec 13, 1996Sep 7, 1999Compaq Computer CorporationMethod and apparatus for allowing access to secured computer resources by utilzing a password and an external encryption algorithmUS5974549Mar 27, 1997Oct 26, 1999Soliton Ltd.Security monitorUS5983348Sep 10, 1997Nov 9, 1999Trend Micro IncorporatedComputer network malicious code scannerUS5987523Jun 4, 1997Nov 16, 1999International Business Machines CorporationApplet redirection for controlled access to non-orginating hostsUS5987611May 6, 1997Nov 16, 1999Zone Labs, Inc.System and methodology for managing internet access on a per application basis for client computers connected to the internetUS5995945Aug 25, 1997Nov 30, 1999I2 Technologies, Inc.System and process for inter-domain planning analysis and optimization using model agents as partial replicas of remote domainsUS6006228Dec 11, 1996Dec 21, 1999Ncr CorporationAssigning security levels to particular documents on a document by document basis in a databaseUS6029245Mar 25, 1997Feb 22, 2000International Business Machines CorporationDynamic assignment of security parameters to web pagesUS6041309Dec 23, 1998Mar 21, 2000Oneclip.Com, IncorporatedMethod of and system for distributing and redeeming electronic couponsUS6076109Jan 30, 1997Jun 13, 2000Lextron, Systems, Inc.Simplified-file hyper text protocolUS6092194Nov 6, 1997Jul 18, 2000Finjan Software, Ltd.System and method for protecting a computer and a network from hostile downloadablesUS6154844Dec 22, 1997Nov 28, 2000Finjan Software, Ltd.System and method for attaching a downloadable security profile to a downloadableUS6158007Sep 17, 1997Dec 5, 2000Jahanshah MorehSecurity system for event based middlewareUS6161139Feb 12, 1999Dec 12, 2000Encommerce, Inc.Administrative roles that govern access to administrative functionsUS6211877Jul 20, 1998Apr 3, 2001Hewlett-Packard CoMethod for communicating between programming language controlled frames and CGI/HTML controlled frames within the same browser windowUS6253326May 29, 1998Jun 26, 2001Palm, Inc.Method and system for secure communicationsUS6266681Apr 8, 1997Jul 24, 2001Network Commerce Inc.Method and system for inserting code to conditionally incorporate a user interface component in an HTML documentUS6272641Nov 9, 1999Aug 7, 2001Trend Micro, Inc.Computer network malicious code scanner method and apparatusUS6275937Nov 26, 1997Aug 14, 2001International Business Machines CorporationCollaborative server processing of content and meta-information with application to virus checking in a server networkUS6275938Aug 28, 1997Aug 14, 2001Microsoft CorporationSecurity enhancement for untrusted executable codeUS6279111Jun 12, 1998Aug 21, 2001Microsoft CorporationSecurity model using restricted tokensUS6311269Jun 15, 1998Oct 30, 2001Lockheed Martin CorporationTrusted services broker for web page fine-grained security labelingUS6317868Oct 7, 1998Nov 13, 2001University Of WashingtonProcess for transparently enforcing protection domains and access control as well as auditing operations in software componentsUS6321334Jul 15, 1998Nov 20, 2001Microsoft CorporationAdministering permissions associated with a security zone in a computer system security modelUS6332147Nov 3, 1995Dec 18, 2001Xerox CorporationComputer controlled display system using a graphical replay device to control playback of temporal data representing collaborative activitiesUS6339423Mar 23, 2000Jan 15, 2002Entrust, Inc.Multi-domain access controlUS6343362Jan 21, 1999Jan 29, 2002Networks Associates, Inc.System and method providing custom attack simulation language for testing networksUS6345361Jul 15, 1998Feb 5, 2002Microsoft CorporationDirectional set operations for permission based security in a computer systemUS6351816Oct 10, 1997Feb 26, 2002Sun Microsystems, Inc.System and method for securing a program's execution in a network environmentUS6366912Apr 6, 1998Apr 2, 2002Microsoft CorporationNetwork security zonesUS6385301Nov 10, 1998May 7, 2002Bell Atlantic Services Network, Inc.Data preparation for traffic track usage measurementUS6430561Oct 29, 1999Aug 6, 2002International Business Machines CorporationSecurity policy for protection of files on a storage deviceUS6457130Mar 3, 1998Sep 24, 2002Network Appliance, Inc.File access control in a multi-protocol file serverUS6460079Mar 4, 1999Oct 1, 2002Nielsen Media Research, Inc.Method and system for the discovery of cookies and other client informationUS6473800Jul 15, 1998Oct 29, 2002Microsoft CorporationDeclarative permission requests in a computer systemUS6490626Nov 17, 1998Dec 3, 2002Hewlett Packard CompanyBrowser systemUS6516308May 10, 2000Feb 4, 2003At&T Corp.Method and apparatus for extracting data from data sources on a networkUS6519647Jul 23, 1999Feb 11, 2003Microsoft CorporationMethods and apparatus for synchronizing access control in a web serverUS6526513Aug 3, 1999Feb 25, 2003International Business Machines CorporationArchitecture for dynamic permissions in javaUS6546546Nov 24, 1999Apr 8, 2003International Business Machines CorporationIntegrating operating systems and run-time systemsUS6553393Apr 26, 1999Apr 22, 2003International Business Machines CoporationMethod for prefetching external resources to embedded objects in a markup language data streamUS6553410May 4, 1998Apr 22, 2003Inpro Licensing SarlTailoring data and transmission protocol for efficient interactive data transactions over wide-area networksUS6584186Jan 12, 2000Jun 24, 2003Lucent Technologies Inc.Protecting communications network integrityUS6591265Apr 3, 2000Jul 8, 2003International Business Machines CorporationDynamic behavior-based access control system and methodUS6594664Jan 4, 2000Jul 15, 2003International Business Machines CorporationSystem and method for online/offline uninterrupted updating of rooms in collaboration spaceUS6598046Sep 29, 1998Jul 22, 2003Qwest Communications International Inc.System and method for retrieving documents responsive to a given user's role and scenarioUS6601233Jul 30, 1999Jul 29, 2003Accenture LlpBusiness components frameworkUS6609198Aug 5, 1999Aug 19, 2003Sun Microsystems, Inc.Log-on service providing credential level change without loss of session continuityUS6629081Dec 22, 1999Sep 30, 2003Accenture LlpAccount settlement and financing in an e-commerce environmentUS6629246Apr 28, 1999Sep 30, 2003Sun Microsystems, Inc.Single sign-on for a network system that includes multiple separately-controlled restricted access resourcesUS6636889Jan 4, 2000Oct 21, 2003International Business Machines CorporationSystem and method for client replication of collaboration spaceUS6636972Oct 12, 2001Oct 21, 2003Networks Associates Technology, Inc.System and method for building an executable script for performing a network security auditUS6662341May 20, 1999Dec 9, 2003Microsoft CorporationMethod and apparatus for writing a windows application in HTMLUS6671802Apr 13, 2000Dec 30, 2003Hewlett-Packard Development Company, L.P.Performance optimization of computer system by dynamically and immediately updating a configuration setting based on detected change in preferred useUS6691153Jan 14, 2000Feb 10, 2004Zaplet, Inc.Method and system for process interaction among a groupUS6691230Oct 15, 1998Feb 10, 2004International Business Machines CorporationMethod and system for extending Java applets sand box with public client storageUS6701376Jun 19, 1998Mar 2, 2004International Business Machines CorporationWeb server enabling browser access to HTML and Non-HTML documentsUS6711675Feb 11, 2000Mar 23, 2004Intel CorporationProtected boot flowUS6724406Nov 10, 1999Apr 20, 2004International Business Machines CorporationMethod of controlling web applications from redirecting a client to another web addressUS6728762Jan 4, 2000Apr 27, 2004International Business Machines CorporationSystem and method for browser definition of workflow documentsUS6748425Jan 4, 2000Jun 8, 2004International Business Machines CorporationSystem and method for browser creation and maintenance of formsUS6754702Oct 2, 1998Jun 22, 2004Nortel Networks, Ltd.Custom administrator views of management objectsUS6772167Sep 7, 2000Aug 3, 2004International Business Machines CorporationSystem and method for providing a role table GUI via company groupUS6772345Feb 8, 2002Aug 3, 2004Networks Associates Technology, Inc.Protocol-level malware scannerUS6772393Jan 4, 2000Aug 3, 2004International Business Machines CorporationSystem and method for room decoration and inheritanceUS6779120Jan 7, 2000Aug 17, 2004Securify, Inc.Declarative language for specifying a security policyUS6785790May 29, 2002Aug 31, 2004Advanced Micro Devices, Inc.Method and apparatus for storing and retrieving security attributesUS6789170Aug 4, 2001Sep 7, 2004Oracle International CorporationSystem and method for customizing cached dataUS6789204Apr 2, 2001Sep 7, 2004Sun Microsystems, Inc.Resource sharing on the internet via the HTTPUS6792113Dec 20, 1999Sep 14, 2004Microsoft CorporationAdaptable security mechanism for preventing unauthorized access of digital dataUS6799208May 2, 2000Sep 28, 2004Microsoft CorporationResource manager architectureUS6801224Sep 14, 2000Oct 5, 2004International Business Machines CorporationMethod, system, and program for generating a graphical user interface window for an application programUS6820261Jul 14, 1999Nov 16, 2004Sun Microsystems, Inc.Inheritable thread-local storageUS6823433Nov 13, 2001Nov 23, 2004Advanced Micro Devices, Inc.Memory management system and method for providing physical address based memory access securityUS6826716Sep 26, 2001Nov 30, 2004International Business Machines CorporationTest programs for enterprise web applicationsUS6850252Oct 5, 2000Feb 1, 2005Steven M. HoffbergIntelligent electronic appliance system and methodUS6854039Dec 5, 2001Feb 8, 2005Advanced Micro Devices, Inc.Memory management system and method providing increased memory access securityUS6862488Jul 5, 2002Mar 1, 2005Validation Commerce, LlcAutomated validation processing and workflow managementUS6871321Mar 20, 2001Mar 22, 2005Toshihiro WakayamaSystem for managing networked information contentsUS20010016907 *Jan 2, 2001Aug 23, 2001Lg Electronics, Inc.Security protocol structure in application layerUS20030135504 *Jan 14, 2002Jul 17, 2003Ferhan ElvanogluSecurity settings for markup language elementsUS20040210536 *Dec 17, 2003Oct 21, 2004Tino GudeljCross-domain transactions through simulated pop-upsUS20070027779 *Jun 23, 2006Feb 1, 2007Microsoft CorporationAdd License Anonymously To Product Locker For Multi-Merchant Purchasing Environment* Cited by examinerNon-Patent CitationsReference1"About URL Security Zones", Available at http://msdn.microsoft.com/en-us/library/ms537183%28VS.85%29.aspx, .(Jan. 23, 2008), 10 pages.2"Ad Blocking Resources", Retrieved from > on Aug. 17, 2005, (Jul. 17, 2005), 20 pages.3"Advisory Action", U.S. Appl. No. 11/426,785, Informed in an email dated Oct. 6, 2010 that this case is related., (May 26, 2010), 3 pages.4"Appeal Decision", U.S. Appl. No. 12/118,333, (Jun. 8, 2011), 2 pages.5"Bindings and Profiles for the OASIS Security Assertion Markup Language (SAML)", Version 1.1, Retrieved from http://www.oasis-open.org/committees/download.php/3405/oasis-sstc-saml-bindings-1.1.pdf., (Sep. 2, 2003), 31 pages.6"Block JavaScript, VBScript, and/or Embedded Objects", MalekTips, last accessed on Oct. 20, 2008, available at http://malektips.com/zonealarm-pro-0008.html, (Oct. 20, 2008), 1 page.7"BPAI Decision", U.S. Appl. No. 10/606,089, (Aug. 25, 2010), 8 pages.8"CERT Advisory CA-2000-02 Malicious HTML Tags Embedded in Client Web Requests", Carnegie Mellon University, http://www.cert.org/advisories/CA-2000-.02.html., (Feb. 2, 2000), 8 pages.9"CERT.org, Understanding Malicious Content Mitigation for Web Developers", Available at http://www.cert.org/tech-tips/malicious-code-mitigation.html#9. Last accessed on Nov. 22, 2010., (Feb. 2000), 9 pages.10"Chinese Office Action", CN200680025529.2, a counterpart of U.S. Appl. No. 11/183,329, (Jul. 26, 2011), 11 Pages.11"Content Restrictions", Version 0.9.2-Mar. 20, 2007 http://www.gerv.net/security/content-restrictions/, 3 pages.12"Enough is Enough!", Retrieved from > on Aug. 17, 2005., (Apr. 14, 2002), 3 pages.13"EP Office Action", European Patent application 06786875.2, a counterpart foreign application of U.S. Appl. No. 11/183,329, (Oct. 17, 2011), 5 pages.14"Examiners Answer to an Appeal", U.S. Appl. No. 10/606,089, (Apr. 8, 2008), 18 pages.15"Final Office Action", Office Action for U.S. Appl. No. 11/183,329, (Oct. 24, 2011), 18 Pages.16"Final Office Action", U.S. Appl. No. 10/047,302, (Mar. 28, 2007), 19 pages.17"Final Office Action", U.S. Appl. No. 10/606,089, (Jul. 15, 2011), 17 pages.18"Final Office Action", U.S. Appl. No. 10/606,089, (Jul. 24, 2006), 12 pages.19"Final Office Action", U.S. Appl. No. 10/606,089, (May 29, 2007), 12 pages.20"Final Office Action", U.S. Appl. No. 11/145,530, (Dec. 8, 2008), 25 pages.21"Final OFfice Action", U.S. Appl. No. 11/145,530, (Jan. 6, 2010), 28 pages.22"Final Office Action", U.S. Appl. No. 11/145,530, (Oct. 27, 2010), 49 pages.23"Final Office Action", U.S. Appl. No. 11/217,748, (Aug. 4, 2010), 13 pages.24"Final Office Action", U.S. Appl. No. 11/217,748, (Jun. 8, 2009), 11 pages.25"Final Office Action", U.S. Appl. No. 11/217,748, (Oct. 11, 2011), 14 Pages.26"Final Office Action", U.S. Appl. No. 11/262,316, (Apr. 17, 2009), 14 pages.27"Final Office Action", U.S. Appl. No. 11/262,316, (Feb. 3, 2010), 13 pages.28"Final Office Action", U.S. Appl. No. 11/426,174, (Mar. 17, 2011), 28 pages.29"Final Office Action", U.S. Appl. No. 11/426,174, (May 27, 2010), 25 pages.30"Final Office Action", U.S. Appl. No. 11/426,174, (Nov. 24, 2008), 28 pages.31"Final Office Action", U.S. Appl. No. 11/426,785, (Feb. 3, 2011), 13 pages.32"Final Office Action", U.S. Appl. No. 11/426,785, Informed in an email dated Oct. 6, 2010 this case is related.,(Feb. 8, 2010), 8 pages.33"Final Office Action", U.S. Appl. No. 12/016,654, (Oct. 28, 2011), 21 Pages.34"Final Office Action", U.S. Appl. No. 12/118,333, (Jan. 14, 2011), 17 pages.35"Final Office Action", U.S. Appl. No. 12/146,461, (Sep. 16, 2011), 14 Pages.36"Final Office Action", U.S. Appl. No. 12/147,620, (Jul. 25, 2011), 15 pages.37"Final Office Action", U.S. Appl. No. 12/188,333, (Mar. 15, 2010), 11 pages.38"Final Office Action", U.S. Appl. No. 12/188,333, (May 21, 2009), 10 pages.39"Foreign Office Action", Chinese Application No. 200680019185.4, (Aug. 4, 2010), 13 pages.40"Foreign Office Action", Chinese Application No. 200680031682.6, (Jun. 19, 2009), 12 pages.41"Foreign Office Action", Chinese Application No. 200680031682.6, (Sep. 13, 2010), 16 pages.42"From Coffee to Celebrity Sightings: How Mashups are Changing Online Mapping", Spunlodic 2007, www.spunlodic.com, (2007), 6 pages.43"Intense Internet Security Pro 2005", Retrieved from > on Aug. 17, 2005, (Jan. 9, 2005), 1 page.44"International Search Report", Application No. PCT/US2008/062763, (May 6, 2008), 12 pages.45"International Search Report", Application No. PCT/US2009/045765, (May 30, 2009), 9 pages.46"Internet-based Content Security Protection in the Net", Internet Citation, 2004, retrieved from Dec. 20, 2005, (2004), 19 pages.47"JP Office Action", JP Application No. 2008-521517, a counterpart foreign application of U.S. Appl. No. 11/183,329, (Sep. 9, 2011), 5 Pages.48"Non Final Office Action", U.S. Appl. No. 1/217,748, (Jan. 2, 2009), 8 pages.49"Non Final Office Action", U.S. Appl. No. 10/047,302, (Apr. 11, 2005), 23 pages.50"Non Final Office Action", U.S. Appl. No. 10/047,302, (Aug. 4, 2006), 15 pages.51"Non Final Office Action", U.S. Appl. No. 10/606,089, (Feb. 15, 2006), 11 pages.52"Non Final Office Action", U.S. Appl. No. 10/606,089, (Jan. 4, 2007), 15 pages.53"Non Final Office Action", U.S. Appl. No. 11/145,530, (Jul. 17, 2009), 24 pages.54"Non Final Office Action", U.S. Appl. No. 11/145,530, (Jun. 19, 2008), 16 pages.55"Non Final Office Action", U.S. Appl. No. 11/183,329, (May 19, 2011), 15 pages.56"Non Final Office Action", U.S. Appl. No. 11/217,748, (Feb. 14, 2011), 13 pages.57"Non Final Office Action", U.S. Appl. No. 11/217,748, (Nov. 24, 2009), 13 pages.58"Non Final Office Action", U.S. Appl. No. 11/262,316, (Aug. 18, 2008), 16 pages.59"Non Final Office Action", U.S. Appl. No. 11/426,174, (Mar. 18, 2008), 19 pages.60"Non Final Office Action", U.S. Appl. No. 11/426,174, (May 12, 2009), 28 pages.61"Non Final Office Action", U.S. Appl. No. 11/426,174, (Nov. 30, 2009), 28 pages.62"Non Final Office Action", U.S. Appl. No. 11/426,174, (Sep. 16, 2010), 26 pages.63"Non Final Office Action", U.S. Appl. No. 11/426,785, (Jun. 27, 2011), 21 pages.64"Non Final Office Action", U.S. Appl. No. 11/426,785, Informed in an email dated Oct. 6, 2010 that this case is related.,(Jul. 21, 2010), 13 pages.65"Non Final Office Action", U.S. Appl. No. 11/426,785, Informed in an email dated Oct. 6, 3020 that this case is related.,(Jul. 8, 2009), 10 pages.66"Non Final Office Action", U.S. Appl. No. 12/016,654, (May 12, 2011), 18 pages.67"Non Final Office Action", U.S. Appl. No. 12/118,333, (Dec. 12, 2008), 14 pages.68"Non Final Office Action", U.S. Appl. No. 12/118,333, (Jul. 21, 2010), 9 pages.69"Non Final Office Action", U.S. Appl. No. 12/146,460, (Jun. 6, 2011), 14 pages.70"Non Final Office Action", U.S. Appl. No. 12/146,461, (Dec. 28, 2010), 12 pages.71"Non Final Office Action", U.S. Appl. No. 12/147,620, (Feb. 7, 2011), 14 pages.72"Non Final Office Action", U.S. Appl. No. 12/147,963, (Jun. 15, 2011), 10 pages.73"Non Final Office Action", U.S. Appl. No. 12/188,333, (Sep. 25, 2009), 9 pages.74"Non-Final Office Action", U.S. Appl. No. 10/606,089, (Feb. 17, 2011), 20 pages.75"Non-Final Office Action", U.S. Appl. No. 11/145,530, (Mar. 9, 2011), 45 pages.76"Non-Final Office Action", U.S. Appl. No. 12/118,321, (Oct. 17, 2011), 7 Pages.77"Notice of Allowance", U.S. Appl. No. 11/145,530, (Aug. 8, 2011), 11 pages.78"Performing Code Assist on Java Code", JDT Plug-in Developer Guide. Programmer's Guide. JDT Core., retrieved from <http://help.eclipse.org/helios/topic/org.eclipse.jdt.doc.isv/gude/jdt-api-codeassist.htm> on Apr. 27, 2011, 3 pages.79"Provisional Application", U.S. Appl. No. 61/020,597, (Jan. 11, 2008), 61 pages.80"Provisional Application", U.S. Appl. No. 61/058,213, (Jun. 3, 2008), 36 pages.81"Provisional Application", U.S. Appl. No. 61/058,214, (Jun. 3, 2008), 35 pages.82"SpywareBlaster 3.4", Retrieved from > on Aug. 17, 2005, (2002), 1 page.83"SpywareGuard 2.2", Retrieved from > on Aug. 17, 2005, (2002), 2 pages.84"Supplemental Notice of Allowance", U.S. Appl. No. 11/145,530, (Oct. 26, 2011), 2 pages.85"U.S. Appl. No. 61/020,597", (Jan. 11, 2008), 61 pages.86"Veritas OpForce", retrieved from on Jan. 3, 2008, 3 pages.87"Access Management and Single Sign-On for Web and J2EE Environments", Available at http://www.entegrity.com/products/aa/aa.shtml, (Feb. 6, 2005), 1 pages.88"Ad Blocking Resources", Retrieved from <<https://netfiles.uiuc.edu/ehowes/www/resource.htm>> on Aug. 17, 2005, (Jul. 17, 2005), 20 pages.89"Block JavaScript, VBScript, and/or Embedded Objects", MalekTips, last accessed on Oct. 20, 2008, available at http://malektips.com/zonealarm—pro—0008.html, (Oct. 20, 2008), 1 page.90"CERT.org, Understanding Malicious Content Mitigation for Web Developers", Available at http://www.cert.org/tech—tips/malicious—code—mitigation.html#9. Last accessed on Nov. 22, 2010., (Feb. 2000), 9 pages.91"Content Restrictions", Version 0.9.2—Mar. 20, 2007 http://www.gerv.net/security/content-restrictions/, 3 pages.92"Enough is Enough!", Retrieved from <<https://netiles.uiuc.edu/ehowes/www/resource6>> on Aug. 17, 2005., (Apr. 14, 2002), 3 pages.93"Enterprise Start Pages and Mashup Applications Online", Available at http://datamashups.com retrieved on Jan. 28, 2008, (2006), 2 pages.94"eTrust Access Control", Available at http://www3.ca.com/solutions/Product/aspx?ID=154, (Jun. 8, 2001), 2 pages.95"Final Office Action", Application No. 12/146,460, (Jan. 4, 2012), 13 Pages.96"Final Office Action", Application No. 12/147,963, (Jan. 23, 2012), 12 Pages.97"Final Office Action", U.S. Appl. No. 10/606,089, (Dec. 23, 2010), 11 pages.98"IBM Tivoli Federated Identity Manager", Available at http://www01.ibm.com/software/tivoli/products/federated-identity-mgr/, (Nov. 9, 2005), 5 pages.99"Intense Internet Security Pro 2005", Retrieved from <<http://www.intenseintegrations.com/catalog/iis.php>> on Aug. 17, 2005, (Jan. 9, 2005), 1 page.100"Internet-based Content Security Protection in the Net", Internet Citation, 2004, retrieved from <http://www.streamshield.com/resources/whitepapers.php> Dec. 20, 2005, (2004), 19 pages.101"Non-Final Office Action", Application No. 10/606,089, (Mar. 1, 2012), 17 pages.102"Non-Final Office Action", U.S. Appl. No. 10/606,089, (Oct. 6, 2010), 15 pages.103"Non-Final Office Action", U.S. Appl. No. 11/145,530, (May 26, 2010), 37 pages.104"Non-Final Office Action", U.S. Appl. No. 11/262,316, (Aug. 19, 2009), 12 pages.105"Non-Final Office Action", U.S. Appl. No. 11/762,900, (Nov. 29, 2010), 13 pages.106"Notice of Allowance", U.S. Appl. No. 10/047,302, (Sep. 20, 2007), 3 pages.107"Notice of Allowance", U.S. Appl. No. 11/262,316, (Jun. 28, 2010), 9 pages.108"Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority in International Application No. PCT/US2008/087265", Application No. PCT/US2008/087265, (Jun. 25, 2009), 6 pages.109"Oasis Security Services Use Cases and Requirements", Retrieved from http://www.oasis-open.org/committees/security/docs/draft-sstc-saml-reqs-01.pdf, Cited in NFOA for U.S. Appl. No. 10/047,302, filed May 30, 2001, 29 pages.110"PCT Search Report and Written Opinion", Application No. PCT/US06/18752, (Aug. 31, 2007), 7 pages.111"Performing Code Assist on Java Code", JDT Plug-in Developer Guide. Programmer's Guide. JDT Core., retrieved from <http://help.eclipse.org/helios/topic/org.eclipse.jdt.doc.isv/gude/jdt—api—codeassist.htm> on Apr. 27, 2011, 3 pages.112"Restriction Requirement", U.S. Appl. No. 10/047,302, (Mar. 20, 2006), 4 pages.113"SpywareBlaster 3.4", Retrieved from <<http://www.javacoolsoftware.com/spywareblaster.html>> on Aug. 17, 2005, (2002), 1 page.114"SpywareGuard 2.2", Retrieved from <<http://www.javacoolsoftward.com/spywareguard.html>> on Aug. 17, 2005, (2002), 2 pages.115"Sun Java System Access Manager", Available at http://www.sun.com/software/products/access—mgr/index.xml, (Feb. 2, 2006), 3 pages.116"U.S. Appl. No. 61/058,213", (Jun. 3, 2008), 33 pages.117"U.S. Appl. No. 61/058,214", (Jun. 3, 2008), 32 pages.118"Veritas OpForce", retrieved from <http://www.symantec.qassociates.co.uk/server-provisioning-veritas-opforce.htm> on Jan. 3, 2008, 3 pages.119"Virtual Sandbox 2.0", Retrieved from: <http://www.fortresgrand.com/products/vsb/vsb.htm> on Jan. 25, 2008, 3 pages.120"Wayback Machine, Security Attribute", Retrieved from <<http://web.archive.orglweb/2001—04170820—17lhttp://msdn.microsoft.comlworkshop/author/dhtmllreference/properties/security—.asp>> on Apr. 5, 2005, (Apr. 17, 2001), 3 Pages.121Alsop, Phil "Symantec: Breaking through the Dissimilar Hardware Restore Challenge", Storage Networking Solutions (SNS) Europe, retrieved from on Jan. 3, 2008, (Sep. 19, 2006), 4 pages.122Alsop, Phil "Symantec: Breaking through the Dissimilar Hardware Restore Challenge", Storage Networking Solutions (SNS) Europe, retrieved from <http://www.snseurope.com/snslink/news/printer-friendly.php?newsid=4635> on Jan. 3, 2008, (Sep. 19, 2006), 4 pages.123Anupam, Vinod et al., "Secure Web Scripting", IEEE Internet Computing, vol. 2 , Issue 6, ISSN:1089-7801, No access to the Image File Wrapper.,(Nov. 1998), 15 pages.124Barth, Adam et al., "Securing Frame Communication in Browsers", (2008),14 pages.125Bershad, Brian N., et al., "Lighweight Remote Procedure Call", ACM Transactions on Computer Systemsvol. 8, No. 1, (Feb. 1990),pp. 37-55.126Bertino, Elisa et al., "On Specifying Security Policies for Web Documents with an XML-based Language", Symposium on Access Control Models and Technologies—SACMAT, Retrieved from http://isrl.cs.buu.edu/pubs/X-secIntro.pdf (2001), 9 pages.127Chang, Po-Hao "An Adaptive Distributed Object Framework for the Web", Available at http://cls.cs.uiuc.edu/docs/ecoop-phd04/main.pdf, Jun. 14-15, 2004, 10 pages.128Chen, Shuo "Light-Weight Transparent Defence Against Browser Cross-Frame Attacks Using Script Accenting", Technical Report—MSR-TR-2007-29, Mar. 14, 2007 http://ftp.research.microsoft.com/pub/tr/TR-2007-29.pdf. Last accessed Oct. 5, 2007, 16 pages.129Chen, Shuo et al., "A Systematic Approach to Uncover Security Flaws in GUI Logic", IEEE Symposium on Security and Privacy, May 2007, (May 2007), 15 pages.130Chess, et al., "JavaScript Hijacking", Fortify Software, (Mar. 12, 2007), 10 pages.131Couvreur, Juien "Curiosity is Bliss: Web API Authentication for Mashups", Available at http://blog.monstuff.com/ archives/000296.html, (Jun. 25, 2006), 5 pages.132De Keukelaera, Frederik et al., "SMash: Secure Component Model for Cross-Domain Mashups on Unmodified Browsers", Proceeding of the 17th International Conference on World Wide Web, Apr. 21-25, 2008, ACM Press, New York, NT, USA (Apr. 21, 2008), 13 pages.133Dhamija, et al., "The Battle against Phishing: Dynamic Security Skins", Date: 2005, pp. 77-88, ACM Press, Pittsburgh,USA.134Edwards, Mark J., "The Guide to Internet Explorer Security Zones", Retrieved from http://www.windowsitpro.com/article/internet/the-guide-to-internet-explorer-security-zones.aspx on Dec. 7, 2010, Jan. 2000, 3 pages.135Epstein, Kevin "Scalent Systems-Next Generation Data Center Virtualization", retrieved from on Jan. 3, 2008, (Apr. 24, 2007), 1 page.136Epstein, Kevin "Scalent Systems—Next Generation Data Center Virtualization", retrieved from <http://scalent.findtechblogs.com/?q=afcom> on Jan. 3, 2008, (Apr. 24, 2007), 1 page.137Erlingsson, Ulfar et al., "End-to-End Web Application Security", Available at http://www.usenix.org/events/hotos07/tech/ fulLpapers/erlingsson/erlingsson—html/, (Apr. 2007), 6 pages.138Evans, David E., "Policy-Directed Code Safety", Available at http://www.cs.virginia.edu/-evans/phd-thesis/thesis.ps.gz, (Feb. 2000), 137 pages.139Fettig, Abe "How to Make XMLHttpRequest Calls to Another Server in Your Domain" http://ajaxian.com/archives/how-to-make-xmlhttprequest-calls-to-another-server-in-your-domain. Last accessed Oct. 28, 2010, (Nov. 29, 2005), 2 pages.140Gong, Li et al., "Going Beyond Sandbox: An Overview of the New Security Architecture in the Java Development Kit 1.2", Proceedings of the USENIX Symposium on Intervet Technologies and Systems, Monterey, CA, (Dec. 1997), 10 pages.141Hallam-Baker, Phillip "X-TASS: XML Trust Assertion Service Specification", VeriSign, Version 0.9, Retrieved from http://www.oasis-open.org/committees/security/docs/draft-xtass-v09.pdf, (Jan. 5, 2001), 26 pages.142Howell, Jon et al., "MashupOS: Operating System Abstractions for Client Mashups", Proceedings 11th USENIX workshop on Hot Topics in Operating Systems, (2007), 7 pages.143Ieblog, "Using Frames More Securely", Available at http://blogs.msdn.com/ie/archive/2008/01/18/using-frames-more-securely.aspx, (Jan. 18, 2008), 19 pages.144Jackson, Collin et al., "Subspace: Secure Cross-Domain Communication for Web Mashups", WWW 2007, May 8-12, 2007, Banff, Alberta, Canada ACM 978-1-59593-654-07/07/0005 http://www.collinjackson.com/research/papers/fp801-jackson.pdf, (May 8, 2007), 10 pages.145Jajodia, Sushil et al., "A Unified Framework for Enforcing Multiple Access Control Policies", In Proceedings of the 1997 ACM SIGMOD International Conference on Management of Data (Tucson, AZ, USA)., (1997), 13 pages.146Jim, Trevor et al., "Defeating Script Injection Attacks with Browser-Enforced Embedded Policies", In Proceedings of WWW 2007, (May 2007), pp. 601-610.147Johansson, Jesper et al., "Dealing with Contextual Vulnerabilities in Code Distinguishing between Solutions and Pseudosolutions", Computers and security, vol. 22, (2003), pp. 152-159.148Jose, et al., "Integrated Context Management for Multi-domain Pervasive Environments",https://repositorium.sdum.uminho.pt/bitstream/1822/2878/1/2005-MCMP-vade-context-final.pdf.149Jose, et al., "Integrated Context Management for Multi-domain Pervasive Environments",https://repositorium.sdum.uminho.pt/bitstream/1822/2878/1/2005-MCMP-vade-context—final.pdf.150Kals, et al., "SecuBat: A Web Vulnerability Scanner", Date: May 23-26, 2006, Edinburgh, Scotland.151Karger, David R., et al., "Haystack: A User Interface for Creating, Browsing, and Organizing Arbitrary Semistructured Information", CHI 2004 Demonstration, Apr. 24-29, 2004 Vienna, Austria, ACM 1-58113-703-6/04/0004,(Apr. 24, 2004), pp. 777-778.152Martin, Jr., David M., et al., "Blocking Java Applets at the Firewall", Proceedings of the Newtork and Distributed System Security Symposium, San Diego, CA, Feb. 10-22, 1997, IEEE Computer Soc., (Feb. 10, 1997), 11 pages.153McLaren, Chris et al., "Oasis SSTC SAML Protocols Schema Discussion", Retrieved from http://www.oasis-open.org/committees/security/docs/draft-sstc-protocol-discussion-01.pdf, Cited in NFOA for U.S. Appl. No. 10/047,302,(Jul. 28, 2001), 14 pages.154Miller, Mark S., et al., "Caja: Safe Active Content in Sanitized JavaScript", Draft Tech Report. Available at google-caja.googlecode.com/files/caja-spec/2008-01-15.pdf, (Nov. 5, 2007), 26 pages.155Muffincharizard, "Having Download Problems (About Mobile Code)", Available at http://forums.zonelabs.com/showthread.php?t=39390, (Sep. 16, 2003), 2 pages.156Murphy, Jim et al., "Securing the Enterprise from Malware Threats", Available at http://www.surfcontrol.com/uploadedfiles/general/white—papers/Malware—Whitepaper.pdf, (2004), 14 pages.157Ollmann, "HTML Code Injection and Cross-Site Scripting", http://www.techincalinfo.net/papers/CSS.html, accessed Jan. 18, 2006,(Jan. 2003), 20 pages.158Raggett, Dave "HTML 4.01", W3C retrieved from on May 30, 2011, (Dec. 24, 1999), 14 pages.159Raggett, Dave "HTML 4.01", W3C retrieved from <http://www.w3.org/TR/html401/present/frames.html> on May 30, 2011, (Dec. 24, 1999), 14 pages.160Reis, Charles et al., "Architectural Principles for Safe Web Programs", Department of Computer Science and Engineering, University of Washington (2007), 7 pages.161Reis, Charles et al., "Browsershield: Vulnerability-Driven Filtering of Dynamic HTML", vol. 1, Issue 3, ACM Press New York, NY, USA, (Sep. 2007), 14 pages.162Sandboxie, "Overview", Retrieved from > on Aug. 17, 2005., (2004), 3 pages.163Sandboxie, "Overview", Retrieved from <<http://www.sandboxie.com/>> on Aug. 17, 2005., (2004), 3 pages.164Scott, David "Specifying and Enforcing Application-Level Web Security Policies", IEEE Transactions on Knowledge and Data Engineering, vol. 15, No. 4, (Jul. 2003), pp. 771-783.165Scott, David et al., "Developing Secure Web Applications", IEEE Internet Computing, vol. 6, No. 6, (Nov. 2002), pp. 38-45.166Scott, David et al., "Abstracting Application-Level Web Security", In Proceedings of WWW 2002, (May 2002), 13 pages.167Scott, et al., "Design Considerations for Cross Pages Post Backs in ASP.NET 2.0", http://odetocode.com/Articles/421.aspx, (Jul. 24, 2005), 9 pages.168Selkirk, A. "Using XML Security Mechanisms", BT Technology Journal, vol. 19, No. 3, DOI: 10.1023/A:1011930030096, (Jul. 2001), pp. 35-43.169Selkirk, A. "XML and Security", BT Technology Journal, vol. 19, No. 23-34, DOI: 10.1023/A:1011977913258, (Jul. 2001), pp. 23-34.170Sirer, Emin G., et al., "An Access Control Language for Web Services", In Proceedings of the 11th International Conference on World Wide Web (Honolulu, HI, USA, May 7-11, 2002). WWW '02. ACM Press, New York, NY, 396-407. DOI=http://doi.acm.org/1, (May 7, 2002), 9 pages.171Sliwa, Carol "Microsoft Bolsters Internet Explorer Security", Network World Fusion, Retrieved from www.nwfusion.com/archive/1997/97-06-09micr-a.html on Nov. 22, 2010., (Jun. 9, 1997), 2 pages.172Snell, Ned "SAMS Teach Yourself the Internet in 24 Hours", Third Edition, ISBN: 0-672-31589-0, Available at http://my.safaribooksonline.com/web-applications-and-services/0672315890, (Jun. 17, 1999), 528 pages.173Thorpe, Danny "Secure Cross-Domain in the Browser", Available http://msdn.microsoft.com/en-us/library/bb735305(printer).aspx, (2008), 6 pages.174U.S. Appl. No. 11/426,174, filed Jun. 23, 2006, Scott Isaacs, et al.175Vuong, Nathan N., et al., "Managing Security Policies in a Distributed Environment Using eXtensible Markup Language (XML)", ACM Symposium on Applied Computing—SAC, Retrieved from http://users.cis.fiu.edu/˜smithg/papers/sac01.pdf, (2001), 7 pages.176Wahbe, Robert et al., "Efficient Software-Based Fault Isolation", 1993 ACM SIGOPS, Dec. 5-8, 1993, 14 pages.177Wang, Helen J., et al. "Protection and Communication Abstractions for Web Browsers in MashupOS", SOSP07, ACM, Oct. 14-17, 2007, 15 pages.178Wang, Helen J., et al., "Shield: Vulnerability-Driven Network Filters for Preventing Known Vulnerability Exploits", SIGCOMM '04, Aug. 30-Sep. 3, 2004, Portland, OR, Available at http://dalivery.acm.org/10.1145/1—020000/1—015489/p193-wang.pdf?key1=1015489&key2=8156443411—&coll=GUIDE&dl=GUIDE&CFID=72316072&CFTOKEN=46175408, (Aug. 30, 2004), pp. 193-204.179Wang, Helen J., et al., "The Multi-Principal OS Construction of the Gazelle Web Browser", Microsoft Research, White Paper, (Feb. 2009), 16 pages.180Wheeler, David "Secure Programming for Linux and Unix Howto", version 2.966,(2002), pp. 1-143.181Yoshihama, Sachiko et al., "Security Model for the Client-Side Web Application Environments", IBM Tokyo Research Laboratory, (May 24, 2007), 2 pages.182Zhang, Yan et al., "An Agent-Based Framework for Cross-Domain Cooperation of Enterprise", Computer Supported Cooperative Work in Design, 2004. http://ieeexplore.ieee.org/xpl/abs—free.jsp?arNumber=1349034, printed on Apr. 13, 2006 (May 26, 2004), 1 page.183Zviran, Moshe et al., "Towards Generating a Data Integrity Standard", Data and Knowledge Engineering, vol. 32, Issue 3, (Mar. 2000), pp. 291-313.Referenced byCiting PatentFiling datePublication dateApplicantTitleUS20100180330 *Jan 9, 2009Jul 15, 2010Microsoft CorporationSecuring Communications for Web Mashups* Cited by examinerClassifications U.S. Classification713/168, 713/169, 726/3, 726/6, 713/170, 726/27, 726/5, 726/4, 726/7, 726/30, 726/29, 726/28, 713/171, 713/172International ClassificationG06F7/04, H04L9/00, H04L9/32Cooperative ClassificationG06F17/30899European ClassificationG06F17/30W9Legal EventsDateCodeEventDescriptionMar 16, 2012ASAssignmentOwner name: MICROSOFT CORPORATION, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:ISAACS, SCOTT;MOORE, GEORGE;THORPE, DANNY;SIGNING DATES FROM 20070328 TO 20120308;REEL/FRAME:027877/0215Owner name: MICROSOFT CORPORATION, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ZISSIMOPOULOS, VASILEIOS;REEL/FRAME:027877/0283Effective date: 20040228Dec 9, 2014ASAssignmentOwner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTONFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034542/0001Effective date: 20141014RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services