US 12,462,015 B2
Virtual environment type validation for policy enforcement
Tushar Suresh Sugandhi, Redmond, WA (US); Amber Tianqi Guo, Seattle, WA (US); Balaji Balasubramanyan, Redmond, WA (US); Abhijat Singh, Sammamish, WA (US); Ahmed Saruhan Karademir, Seattle, WA (US); Benjamin M. Schultz, Bellevue, WA (US); Hari R. Pulapaka, Redmond, WA (US); Gupta Shubham, Sammamish, WA (US); Chase Thomas, Kirkland, WA (US); and Carlos Ernesto Peza Ramirez, Redmond, WA (US)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Mar. 13, 2024, as Appl. No. 18/603,700.
Application 18/603,700 is a continuation of application No. 17/662,869, filed on May 11, 2022, granted, now 11,966,461.
Application 17/662,869 is a continuation of application No. 16/672,429, filed on Nov. 1, 2019, granted, now 11,354,402, issued on Jun. 7, 2022.
Prior Publication US 2024/0220602 A1, Jul. 4, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/51 (2013.01); G06F 9/455 (2018.01); G06F 21/57 (2013.01); H04L 9/32 (2006.01)
CPC G06F 21/51 (2013.01) [G06F 9/45558 (2013.01); G06F 21/57 (2013.01); H04L 9/3236 (2013.01); H04L 9/3263 (2013.01); G06F 2009/4557 (2013.01); H04L 2209/127 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising
a processing unit; and
memory comprising computer executable instructions that, when executed, perform operations comprising:
receiving, at a first environment, application policy data associated with an application, wherein the application policy data is received from a second environment via a secure communication channel between the first environment and the second environment, the secure communication channel being created using asymmetric security keys;
determining whether the application is permitted to execute in the first environment by performing environment type validation for the first environment; and
in response to determining, based on the environment type validation, that the application is permitted to execute in the first environment, enabling execution of the application in the first environment.