Changing user identities without closing applications

• US 20050108239A1
• Filed: 11/29/2004
• Published: 05/19/2005
• Est. Priority Date: 01/26/1999
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Mitchell, Darren, Evans, Christopher A., Sager, Christopher T.
• Granted Patent: US 7,231,640 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

An operating system registry contains multiple “identities.” One of these identities is designated the current identity. An application executing on a multitasking computer system uses information stored in the current identity to configure the application, for example to provide a user-specific user interface. When an application opens, it registers with an identity manager using objects known as “connection points.” To switch identities, a user supplies the name of an identity to switch to. The identity manager then uses the registered connection points to query each of the applications for permission to switch identities. If all the registered connection points grant permission to switch identities, then the identity manager switches the current identity by changing information in the registry. The identity manager then notifies all applications, via their registered connection points, that a change to the registry has been made so that the applications can take appropriate action.

Claims

1-18. -18. (canceled)

19. A computer-readable medium having computer-executable instructions for performing steps comprising:

a. running a first application and a second application on a computer system using a current identity of a user of the computer system, the current identity defining a plurality of work-environment settings, the current identity being used by both the first application and the second application, the current identity being a first identity, the first and second applications running substantially simultaneously on a multitasking computer system;

b. receiving a request to change the current identity;

c. obtaining permission from the first application and the second application to change the current identity; and

d. changing the current identity so that the first application uses a second identity rather than the first identity without closing the first application, and so that the second application uses the second identity rather than the first identity without closing the second application.

20. The computer-readable medium of claim 19, wherein the first application has a user interface, the user interface of the first application being configured in a first way when the first application uses the first identity in (a), the user interface of the first application being configured in a second way when the first application uses the second identity in (d).

21. The computer-readable medium of claim 19, wherein the computer system includes a computer, the computer having an operating system, the first and second identities being stored in a registry maintained by the operating system.

22. The computer-readable medium of claim 21, wherein a profile is stored in the registry, wherein the first application and the second application run in (a) using the profile, and wherein the current identity is changed in (d) without changing the profile, the first and second applications using the same profile throughout (a), (b), (c) and (d).

23. The computer-readable medium of claim 19, wherein the running of the first application in (a) involves communication across a dial-up connection when the first application is using the first identity, wherein the dial-up connection is not lost when the current identity is changed in (d), the first application communicating across the dial-up connection in (d) while using the second identity.

24. The computer-readable medium of claim 19, wherein (c) further comprises:

i. obtaining permission from the first application via a first connection point; and

ii. obtaining permission from the second application via a second connection point.

25. The computer-readable medium of claim 19, having further computer-executable instructions for performing the steps of:

e. creating a first connection point for communication with the first application;

f. opening a first window corresponding to the first connection point;

g. creating a second connection point for communication with the second application;

h. opening a second window corresponding to the second connection point;

i. sending to the first window a first message requesting permission to change identities, the permission obtained in (c) from the first application being received via the first window; and

j. sending to the second window a second message requesting permission to change identities, the permission obtained in (c) from the second application being received via the second window.