David C Goebel

US Patent:

6477544, Nov 5, 2002

Filed:

Jul 16, 1999

Appl. No.:

09/354624

Inventors:

William J. Bolosky - Issaquah WA
John R. Douceur - Bellevue WA
Scott M. Cutshall - Carnation WA
Richard F. Rashid - Redmond WA
Nathan P. Myhrvold - Bellevue WA
David A. Goebel - Seattle WA

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 1730

US Classification:

707200, 1 3, 1 10, 1100, 1205

Abstract:

A method and system for storing the data of files having duplicate content, by maintaining a single instance of the data, and providing logically separate links to the single instance. Files of duplicate content have their data stored in a common store file by a single instance store (SIS) facility, which also converts the original file or files to links to that common store file and creates additional links thereto as needed. The SIS facility may reside above a file system as a filter driver. File system requests directed to the link file (e. g. , open, write, read, close and delete) reach the SIS filter, which then transparently handles each request as if the link file was a normal file. To preserve logical separation, writes to a SIS link file are to the link file, and the written portion recorded as dirty. The SIS filter intercepts SIS read requests, and reads clean portions from the common store file and any dirty portions from the link file. When the link file is closed, the common store file also may be closed, and, if the link file has been written, the non-dirtied portions of the link file are filled in with clean data from the common store file, and the link file reconverted to a normal file.

US Patent:

7478237, Jan 13, 2009

Filed:

Nov 8, 2004

Appl. No.:

10/984207

Inventors:

Mihai Costea - Redmond WA, US
David Allen Goebel - Seattle WA, US
Adrian M Marinescu - Sammamish WA, US
Anil Francis Thomas - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00
H04L 9/32
G06F 11/30

US Classification:

713164, 713165, 713166, 713167, 726 26, 726 27, 726 28, 726 29, 726 30

Abstract:

In accordance with this invention, a system, method, and computer-readable medium that aggregates the knowledge base of a plurality of antivirus software applications are provided. User mode applications, such as antivirus software applications, gain access to file system operations through a common information model, which obviates the need for antivirus software vendors to create kernel mode filters. When file system operations are available to antivirus software applications, the present invention may cause each antivirus software application installed on a computing device to perform a scan to determine if the data is malware.

US Patent:

7672982, Mar 2, 2010

Filed:

Jan 18, 2007

Appl. No.:

11/624507

Inventors:

David Allen Goebel - Vashon WA, US

Assignee:

Raxco Software, Inc. - Gaithersburg MD

International Classification:

G06F 12/00
G06F 17/30

US Classification:

707205, 707 3, 707202, 707204, 711170

Abstract:

A method of defragmenting a Windows NT file system volume includes the step of selecting a file record which is stored in a master file table associated with the Windows NT file system volume, in which one or more non-resident attributes are associated with the file record, and data associated with one or more non-resident attributes is stored outside the file record in one or more data extents. The method also includes the step of querying the one or more data extents without opening the one or more non-resident attributes. For example, the one or more data extents may be queried using a FSCTL_GET_NTFS_FILE_RECORD command. Moreover, the method includes the step of determining whether to defragment the one or more non-resident attributes based on information obtained from querying the one or more data extents. For example, the information may include a location of the one or more non-resident attributes.

US Patent:

7765400, Jul 27, 2010

Filed:

Nov 8, 2004

Appl. No.:

10/984615

Inventors:

Mihai Costea - Redmond WA, US
David Allen Goebel - Seattle WA, US
Adrian M Marinescu - Sammamish WA, US
Anil Francis Thomas - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/06
G06F 11/30
G06F 7/00
G06F 12/00
G08B 23/00

US Classification:

713165, 713188, 726 22, 707 1, 707200

Abstract:

In accordance with this invention, a system, method, and computer-readable medium that aggregates the knowledge base of a plurality of antivirus software applications are provided. User mode applications, such as antivirus software applications, gain access to file system operations through a common information model, which obviates the need for antivirus software vendors to create kernel mode filters. When file system operations are available to antivirus software applications, the present invention may cause each antivirus software application installed on a computing device to perform a scan to determine if the data is malware.

US Patent:

7765410, Jul 27, 2010

Filed:

Nov 8, 2004

Appl. No.:

10/984611

Inventors:

Mihai Costea - Redmond WA, US
David Allen Goebel - Seattle WA, US
Adrian M Marinescu - Sammamish WA, US
Anil Francis Thomas - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 12/14
G06F 7/04
H04L 29/06
G08B 23/00

US Classification:

713188, 713164, 713165, 713166, 713167, 726 24, 726 26, 726 27, 726 28, 726 29, 726 30

Abstract:

In accordance with this invention, a system, method, and computer-readable medium that aggregates the knowledge base of a plurality of antivirus software applications are provided. User mode applications, such as antivirus software applications, gain access to file system operations through a common information model, which obviates the need for antivirus software vendors to create kernel mode filters. When file system operations are available to antivirus software applications, the present invention may cause each antivirus software application installed on a computing device to perform a scan to determine if the data is malware.

US Patent:

7861296, Dec 28, 2010

Filed:

Jun 16, 2005

Appl. No.:

11/154267

Inventors:

Mihai Costea - Redmond WA, US
Adrian Bivol - Redmond WA, US
Adrian M. Marinescu - Sammamish WA, US
Anil Francis Thomas - Redmond WA, US
Cenk Ergan - Bellevue WA, US
David Goebel - Seattle WA, US
George C. Chicioreanu - Redmond WA, US
Marius Gheorghe Gheorghescu - Redmond WA, US
Michael R. Fortin - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 11/00

US Classification:

726 22, 726 24

Abstract:

The present invention is directed toward a system, method, and a computer-readable medium for efficiently loading data into memory in order to scan the data for malware. The logic provided in the present invention improves the experience of a user when operating a computer protected with antivirus software. One aspect of the present invention is a method that identifies a pattern in which data in a file is loaded into memory from a computer-readable medium. Then the method identifies a pattern in which data in the file may be loaded into memory in a way that minimizes the time required to read data in the file. When a subsequent scan of the file is scheduled to occur, the method causes data in the file to be loaded in memory using the pattern that minimizes the time required to read data in the file.

US Patent:

8239648, Aug 7, 2012

Filed:

Apr 13, 2009

Appl. No.:

12/422327

Inventors:

David A. Goebel - Vashon WA, US
James M. Lyon - Redmond WA, US
Bulat Shelepov - Bellevue WA, US
Robert S. Kleinschmidt - Redmond WA, US
Mark Vayman - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 13/00

US Classification:

711166, 711170, 711162

Abstract:

A thin provisioned storage system may have a file system manager that presents a logical storage system to a user and a storage management system that manages physical storage devices. When a block of data is freed at the logical layer, the file system manager may identify the freed block and send a command to the physical layer. The physical layer may identify the corresponding physical block or blocks and free those blocks on the physical layer. The storage management system may use a table to manage the location of blocks of data across multiple physical storage devices.

US Patent:

8364732, Jan 29, 2013

Filed:

Jan 13, 2011

Appl. No.:

13/006088

Inventors:

Ravisankar V. Pudipeddi - Bellevue WA, US
Vishal V. Ghotge - Seattle WA, US
Sarosh C. Havewala - Kirkland WA, US
Revinder S. Thind - Kirkland WA, US
Mark J. Zbikowski - Bellevue WA, US
David A. Goebel - Vashon WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00

US Classification:

707966, 707791, 707793, 707795, 707954, 707960

Abstract:

An extensible file system format for portable storage media is provided. The extensible file system format includes the specification of primary and secondary directory entry types that may be custom defined. The primary and secondary directory entry types can be further classified as critical and benign directory entries. The directory entry types can define whether a cluster chain corresponding to a file can be contiguously allocated.