ONE STEP SECURITY SYSTEM IN A NETWORK STORAGE SYSTEM

• US 20110265157A1
• Filed: 04/23/2010
• Published: 10/27/2011
• Est. Priority Date: 04/23/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Ryder, Scott
• Granted Patent: US 9,432,373 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

This is directed to providing access to content stored on a local cloud. In particular, a device can direct a librarian service overseeing the operation of a local cloud to provide another device with access to content stored on the local cloud. The librarian service can generate credentials for the other device, and provide the credentials to the other device. Using the credentials, the other device can connect directly to the local cloud and access the content. In addition, the local cloud can validate the credentials of the other before providing access to the content. The credentials can include, for example, a key to install or load on the device. The librarian may not require, however, the user to create credentials or register with the librarian before being permitted to access the content on the local cloud.

Claims

1. A method for authorizing a second user to access content stored on a local cloud, comprising:

receiving a request from a first user to provide a second user with access to content stored on a local cloud;

identifying credentials associated with the second user;

authorizing the identified credentials to access the content; and

providing addressing information for the local cloud to the second user.

2. The method of claim 1, further comprising:

identifying the first user providing the request; and

determining whether the first user is authorized to grant access to the content.

3. The method of claim 1, wherein:

the request comprises identifying information for the second user.

4. The method of claim 3, wherein the identifying information comprises at least one of:

an email address; and

a telephone number.

5. The method of claim 1, further comprising:

determining that the second user is a new user; and

generating new credentials for the second user.

6. The method of claim 1, further comprising:

determining that the second user is known; and

retrieving previously generated credentials associated with the second user.

7. The method of claim 1, wherein authorizing further comprises:

adding the credentials to an access control list associated with the content.

8. The method of claim 1, wherein providing accessing information further comprises:

providing a network address for at least one node of the local cloud.

9. The method of claim 8, wherein:

the at least one node operates a service indicating how to access the content.

10. A librarian service for controlling access to content in local clouds, comprising a processor operative to:

identify a plurality of devices owned by at least a first user to form nodes of a local cloud;

receive a request from a device of the first user to allow a second user access to the local cloud;

identify credentials associated with the second user; and

associate the identified credentials with the defined local cloud.

11. The electronic device of claim 10, wherein the processor is further operative to:

provide an indication to the second user of the available access to the local cloud.

12. The electronic device of claim 11, wherein the control circuitry is further operative to:

provide the identified credentials to the second user.

13. The electronic device of claim 10, wherein the control circuitry is further operative to:

receive a request from the second user for available local clouds; and

provide identifying information for the defined local cloud in response to receiving.

14. The electronic device of claim 10, wherein the control circuitry is further operative to:

determine that no credentials exist for the second user;

generate credentials for the second user; and

transmit the generated credentials to the second user.

15. The electronic device of claim 14, wherein the control circuitry is further operative to:

associate the generated credentials with an access list of the defined local cloud.

16. A method for receiving access to a local cloud, comprising:

receiving a communication from a librarian, wherein the communication comprises credentials for a second device and a link to a local cloud owned by an owner;

installing the credentials; and

establishing a communications path with the owner'"'"'s local cloud using the link, wherein access to the local cloud is authorized by the credentials.

17. The method of claim 16, further comprising:

providing a request to the librarian for available local clouds, wherein the owner'"'"'s local cloud is among the available local clouds; and

receiving addressing information for the owner'"'"'s local cloud.

18. The method of claim 17, wherein:

the credentials are automatically generated by the librarian without requiring an input from a user of the second device.

19. Computer readable media for authorizing a second user to access content stored on a local cloud, comprising computer readable code recorded thereon for:

receiving a request from a first user to provide a second user with access to content stored on a local cloud;

identifying credentials associated with the second user;

authorizing the identified credentials to access the content; and

providing addressing information for the local cloud to the second user.

20. The computer-readable media of claim 19, comprising further computer readable code recorded thereon for:

determining that the second user is a new user; and

generating new credentials for the second user.