One step security system in a network storage system

• US 10,432,629 B2
• Filed: 03/24/2016
• Issued: 10/01/2019
• Est. Priority Date: 04/23/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Ryder, Scott
• Primary Examiner(s): Revak, Christopher A
• Application Number:
  US15/080,466
• Publication Number:
  US 20160212134A1
• Time in Patent Office: 1,286 Days
• Field of Search: None
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

This is directed to providing access to content stored on a local cloud. In particular, a device can direct a librarian service overseeing the operation of a local cloud to provide another device with access to content stored on the local cloud. The librarian service can generate credentials for the other device, and provide the credentials to the other device. Using the credentials, the other device can connect directly to the local cloud and access the content. In addition, the local cloud can validate the credentials of the other before providing access to the content. The credentials can include, for example, a key to install or load on the device. The librarian may not require, however, the user to create credentials or register with the librarian before being permitted to access the content on the local cloud.

Claims

1. A method for managing access to resources stored on a network storage system, the method comprising, at a master device:

managing a plurality of computing devices that form the network storage system, wherein the network storage system enables the plurality of computing devices to access at least one resource provided by at least one computing device of the plurality of computing devices;

receiving, from a first computing device of the plurality of computing devices, a selection of the at least one resource to be shared with a second computing device of the plurality of computing devices; and

in response to determining that the second computing device is unknown to the master device;

generating a set of access credentials associated with the at least one resource,

identifying, among the plurality of computing devices, a computing device that manages the at least one resource,

causing the computing device to bind the set of access credentials to the at least one resource,

causing the set of access credentials to be installed on the second computing device, and

providing lookup information for the at least one resource to the second computing device to enable the second computing device to access the at least one resource.

2. The method of claim 1, wherein the second computing device is unknown to the master device when the set of access credentials have not previously been installed on the second computing device.

3. The method of claim 1, wherein the selection of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

4. The method of claim 1, wherein the set of access credentials includes at least one of a key, a password, or a certificate.

5. The method of claim 1, wherein the set of access credentials dictates one or more types of privileges associated with accessing the at least one resource.

6. The method of claim 1, wherein the lookup information is provided in at least one of a Uniform Resource Locator (URL) link, an email, or a file attached to the email.

7. The method of claim 1, further comprising:

adding the second computing device to a list of trusted computing devices that are permitted to access the at least one resource stored on the network storage system.

8. The method of claim 1, wherein each computing device of the plurality of computing devices is associated with a different user.

9. A master device configured to manage access to resources stored on a network storage system, comprising:

a processor; and

a memory containing instructions that, when executed by the processor, cause the master device to perform steps that include;

managing a plurality of computing devices that form the network storage system, wherein the network storage system enables the plurality of computing devices to access at least one resource provided by at least one computing device of the plurality of computing devices;

receiving, from a first computing device of the plurality of computing devices, a selection of the at least one resource to be shared with a second computing device of the plurality of computing devices; and

in response to determining that the second computing device is unknown to the master device;

generating a set of access credentials associated with the at least one resource,

identifying, among the plurality of computing devices, a computing device that manages the at least one resource,

causing the computing device to bind the set of access credentials to the at least one resource,

causing the set of access credentials to be installed on the second computing device, and

providing lookup information for the at least one resource to the second computing device to enable the second computing device to access the at least one resource.

10. The master device of claim 9, wherein the second computing device is unknown to the master device when the set of access credentials have not previously been installed on the second computing device.

11. The master device of claim 9, wherein the selection of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

12. The master device of claim 9, wherein subsequent to providing lookup information for the at least one resource to the second computing device, the steps further include:

adding the second computing device to a list of trusted computing devices that are permitted to access to the at least one resource stored on the network storage system.

13. The master device of claim 9, wherein the lookup information for the at least one resource is provided in the set of access credentials.

14. The master device of claim 9, wherein each computing device of the plurality of computing devices is associated with a different user.

15. At least one non-transitory computer-readable medium containing instructions that, when executed by at least one processor of a master device, cause the master device to manage access to resources stored on a network storage system, by performing steps that include:

managing a plurality of computing devices that form the network storage system, wherein the network storage system enables the plurality of computing devices to access at least one resource provided by at least one computing device of the plurality of computing devices;

receiving, from a first computing device of the plurality of computing devices, a selection of the at least one resource to be shared with a second computing device of the plurality of computing devices; and

in response to determining that the second computing device is unknown to the master device;

generating a set of access credentials associated with the at least one resource,

identifying, among the plurality of computing devices, a computing device that manages the at least one resource,

causing the computing device to bind the set of access credentials to the at least one resource,

causing the set of access credentials to be installed on the second computing device, and

providing lookup information for the at least one resource to the second computing device to enable the second computing device to access the at least one resource.

16. The at least one non-transitory computer-readable medium of claim 15, wherein the selection of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

17. The at least one non-transitory computer-readable medium of claim 15, wherein the set of access credentials dictates types of privileges associated with accessing the at least one resource.

18. The at least one non-transitory computer-readable medium of claim 15, wherein the set of access credentials includes at least one of a key, a password, or a certificate.

19. The at least one non-transitory computer-readable medium of claim 15, wherein the lookup information is provided in at least one of a Uniform Resource Locator (URL) link, an email, or a file attached to the email.

20. The at least one non-transitory computer-readable medium of claim 15, wherein each computing device of the plurality of computing devices is associated with a different user.