/Patent Tracker
MicrosoftGranted patentSecurity & privacyInterest 4/10

Microsoft patents system to let trusted network traffic skip security checks

Patent drawing
Patent drawing from the official filing.

Microsoft has been granted a patent for a system that tracks the 'maturity' of network connections to decide how strictly to monitor them. The system classifies internal or verified external communications as 'mature,' allowing them to bypass heavy traffic filters used to block attacks, while new or unverified connections remain subject to strict rate limits and analysis.

Why it mattersThis approach could help network operators reduce unnecessary delays for legitimate users by only applying heavy security scrutiny to new or suspicious connections.

In the filing’s own words

Aspects of the present disclosure disclose provide systems and methods for performing session maturity modeling and tracking to aid in the identification of network traffic that should and/or should not be subjected to DOS mitigation mechanisms. More specifically, based on a maturity status of identification information associated with a communication, a communication may bypass high traffic mitigation mechanisms such as packet rate and connection rate limitations.

What exactly they claim (claim 1)

1. A system for tracking a maturity classification of a communication comprising: at least one processor; and at least one memory including instructions which when executed by the at least one processor, causes the at least one processor to: determine a first communication between a first communication device and a second communication device to be an internal communication or an external communication; based on the first communication being an internal communication, classify the first communication between a first communication device and a second communication device as a mature communication classification in one or more tables, wherein mature communication are intended, valid, or otherwise wanted communications; based on the first communication being an external communication, classify the first communication between a first communication device and a second communication as a non-mature communication classification; based at least partially on the first communication being non-mature, subject subsequent communications between the first communication device and the second communication device to at least one of a traffic rate mitigation technique or traffic analysis technique; classify a second external communication between the first communication device and the second communication device as a mature communication classification; and bypass the at least one of the traffic rate mitigation technique or the traffic analysis technique for communications between the first communication device and second communication device received after the mature communication classification and based on the mature communication classification.

Facts

Company
Microsoft (Microsoft Technology Licensing, LLC)
Official title
Session maturity model with trusted sources
Patent number
US12771712B2
Application number
17539866
Filed
Dec 1, 2021
Granted
Oct 20, 2026
Inventors
1
Claims
20

Classified under

H04L 63/1458 Electricity & electronicsH04L 47/19 Electricity & electronicsH04L 47/2441 Electricity & electronicsH04L 63/1416 Electricity & electronicsH04L 63/1425 Electricity & electronics

More from Microsoft in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.