Virtual media from a directory service

• US 20030131246A1
• Filed: 01/04/2002
• Published: 07/10/2003
• Est. Priority Date: 01/04/2002
• Status: Active Grant

• Current Assignee: HTC Corporation
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Neufeld, E. David, Reeves, Drue A., Davenport, Christopher
• Granted Patent: US 7,076,796 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/4416 Network booting; Remote initial program loading [RIPL]
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Virtual media images of actual physical media resources, such as O/S boot files and software installation disks, are provided in a remote directory structure. The remote directory structure stores the virtual media images along with access rights of multiple authorized users, such that control is provided over the retrieval of the virtual media images and use of data/programs within the images. The virtual media images may be stored in blocks, or multiple sub-blocks/children, corresponding the actual media resources. Moreover, the remote directory server may simply store virtual media pointers, or location identifiers, which point to another storage location (i.e., a remote computer) having the actual data content of the virtual media image. Accordingly, the directory server processes a user request for a desired portion of the virtual media images by evaluating whether the user is one of the plurality of authorized users and whether the access rights of the user encompass the desired portion. If the user is authenticated and the desired portion is within the user'"'"'s access rights, then the user may obtain the desired portion of the virtual media images.

Claims

1. A method for selectively providing data between networked devices, comprising the acts of:

storing virtual media resources, a plurality of authorized users, and access rights to the virtual media resources for each of the plurality of authorized users in a remote directory server;

receiving an access request for a desired resource of the virtual media resources at the remote directory server via a network; and

responding to the access request based on the access rights of the authorized users by the remote directory server via the network.

2. The method of claim 1, wherein the act of storing comprises the act of forming a hierarchical structure of the access rights for the plurality of authorized users.

3. The method of claim 2, wherein the act of forming the hierarchical structure comprises the act of creating an organizational tree comprising at least one relationship branch having a plurality of nodes at a plurality of levels ranked with respect to one another, wherein each node represents at least one of the virtual media resources.

4. The method of claim 1, wherein the act of storing the virtual media resources comprises the act of obtaining a data image of a software resource in a data storage format of a standard data storage media.

5. The method of claim 1, comprising the act of generating the virtual media resources from content of a standard removable computer disk.

6. The method of claim 1, wherein the desired resource comprises at least one virtual media image of operating system installation files.

7. The method of claim 1, wherein the desired resource comprises at least one virtual media image of application program installation files.

8. The method of claim 1, wherein the desired resource comprises at least one virtual media image of application data files for use by a desired software application.

9. The method of claim 1, wherein the desired resource comprises data indicative of a data storage location of virtual media representing the desired resource.

10. The method of claim 1, wherein the act of responding to the access request comprises the act of protecting the virtual media resources against unauthorized access by a requesting user.

11. The method of claim 10, wherein the act of protecting the virtual media resources comprises the act of providing the desired resource to the requesting user only if the requesting user is authenticated as one of the plurality of authorized users and only if the authenticated requesting user has access rights to the desired resource.

12. The method of claim 10, wherein the act of protecting the virtual media resources comprises the acts of:

receiving identification information of a requesting user; and

authenticating the requesting user if the identification information indicates the requesting user as one of the plurality of authorized users.

13. The method of claim 12, wherein the act of protecting the virtual media resources further comprises the act of:

evaluating the access request for the desired resource against the access rights of the requesting user after user authentication.

14. A method for selectively providing data between networked devices, comprising the acts of:

forming a hierarchical user access tree comprising at least one relationship branch having a plurality of nodes at a plurality of levels ranked with respect to one another;

associating a plurality of virtual media resources to the plurality of nodes;

storing access rights of authorized users at each of the plurality of nodes;

processing an access request for a desired resource of the plurality of virtual media resources by verifying that a requesting user is one of the plurality of authorized users and verifying that the desired resource is within the access rights of the verified requesting user.

15. The method of claim 14, wherein the act of associating the plurality of virtual media resources comprises the act of storing virtual media images representing data contents of physical media for a data storage device.

16. The method of claim 15, further comprising the act of transmitting the virtual media image corresponding to the desired resource to the verified requesting user having access rights encompassing the desired resource.

17. A system, comprising:

a plurality of devices disposed in a network;

a database of resources disposed on one of the plurality of devices, wherein the resources comprise a plurality of virtual media resources, a plurality of authorized users, and access rights of the authorized users to authorized portions of the plurality of virtual media resources;

an access protection module disposed on one of the plurality of devices and configured for restricting access of the plurality of virtual media resources to authorized users having appropriate access rights; and

a request processing module disposed on one of the plurality of devices and configured for processing a resource request by a user for a desired portion of the plurality of virtual media resources according to the access protection module.

18. The system of claim 17, wherein the database, the access protection module, and the request processing module are disposed on a directory server.

19. The system of claim 17, wherein the database is organized as a hierarchical tree structure comprising at least one relationship branch having a plurality of nodes at a plurality of levels ranked with respect to one another, wherein each node represents one portion of the plurality of virtual media resources.

20. The system of claim 17, wherein the plurality of virtual media resources comprise data images of physical media for standard data storage devices.

21. The system of claim 20, wherein at least one of the data images represents physical media for loading an operating system.

22. The system of claim 20, wherein at least one of the data images represents physical media for loading an application program.