公开(公告)号：US20240080360A1

公开(公告)日：2024-03-07

申请号：US18368011

申请日：2023-09-13

申请人： MICROSOFT TECHNOLOGY LICENSING, LLC

发明人： Raghvendra MALOO ,  Vivek ROY ,  Mohammad Reza TAJVIDI

IPC分类号： H04L67/1014 ,  G06F9/50 ,  H04L67/51 ,  H04L67/63

CPC分类号： H04L67/1014 ,  G06F9/5027 ,  H04L67/51 ,  H04L67/63

摘要： The techniques disclosed herein prevent data spillage in multi-tenant services via request and response containerization with provenance checks. When a web request is received on behalf of a tenant, a request container is created and initialized with identifying information extracted from the request. Derived identifiers that can be verified as being associated with the tenant may be added to the request container. A response container for accumulating data obtained while processing the request is then created. The request and response containers are passed throughout the call path that processes the request. Identifying information passed to data access operations is obtained from the request container, while results of data access operations are stored in the response container. Before generating a web response using data from the response container, the response container is verified to contain data associated with the appropriate request.