Method and system for protecting user choices

• US 8,201,230 B2
• Filed: 02/20/2004
• Issued: 06/12/2012
• Est. Priority Date: 02/20/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Day, Robert F., Schrock, Sarah E., McKee, Timothy P., Sheldon, Isaac A.
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): Tolentino, Roderick
• Application Number:
  US10/783,558
• Publication Number:
  US 20050188208A1
• Time in Patent Office: 3,035 Days
• Field of Search: 726 2- 6, 726/18, 726/21, 382/115, 713/186, 709/227, 902/3, 718/103
• US Class Current: 726/6
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: G06F 3/04847 Interaction techniques to control parameter settings, e.g. interaction with sliders or dials

Abstract

A system, method, and computer-accessible medium for protecting user choice settings are provided. The system and method provide an application programming interface that uses a security subsystem to unlock, write, and relock the user choice settings to insure that the user'"'"'s choices are enforced and respected by the applications that attempt to change them in a manner that is verifiable and transparent to the user. The user is notified whenever a change to their user choice settings is made.

Claims

1. A method for prioritizing user application preferences based on user input data, the method comprising:

recognizing, at a computing device of a user, user input data relevant to a first application as a prioritized user choice setting associated with the first application, wherein the prioritized user choice setting determines at least one property of execution of at least one event of the first application;

securing, at the computing device of the user, the user choice setting as a protected value using an access control indicator, wherein the access control indicator prohibits a second application from modifying the prioritized user choice setting associated with the first application without authorization from the user;

receiving, at the computing device of the user, a request from the second application to modify the prioritized user choice setting associated with the first application;

in response to receiving the request from the second application to modify the prioritized user choice setting associated with the first application, generating an approval user interface on the computing device of the user, the approval user interface requesting authorization from the user to modify the prioritized user choice setting associated with the first application to be consistent with the modification request received from the second application;

receiving, at the computing device of the user, input from the user approving the modification of the prioritized user choice setting associated with the first application to be consistent with the modification request received from the second application;

modifying, at the computing device of the user, the access control indicator to permit modification of the prioritized user choice setting associated with the first application to be consistent with the modification request received from the second application;

modifying, at the computing device of the user, the prioritized user choice setting to a different value in accordance with the received user input; and

restoring, at the computing device of the user, the access control indicator to prohibit further modification by the second application of the prioritized user choice setting associated with the first application.

2. The method of claim 1,

wherein the computing device of the user has an operating system with a registry,

wherein the protected value is a registry key stored in the registry,

wherein the access control indicator is an access control list (ACL) that has been initialized to prevent writing to the protected value,

and wherein modifying the access control indicator includes modifying the access control indicator to permit writing to the protected value.

3. The method of claim 2, wherein the operating system also includes a security subsystem, and wherein modifying the access control indicator to permit writing to the protected value includes providing to the user rights to modify the ACL in accordance with the security subsystem of the operating system.

4. The method of claim 3, wherein modifying the access control indicator to permit writing to the protected value includes providing to the user ownership of the registry key that the ACL secures, and wherein ownership of the registry key automatically provides to the user rights to modify the ACL in accordance with the security subsystem of the operating system.

5. The method of claim 4, wherein providing to the user ownership of the registry key that the ACL secures includes temporarily providing to the ownership of the registry key that the ACL secures.

6. The method of claim 3,

wherein securing the prioritized user choice setting as a protected value using the access control indicator includes securing the prioritized user choice setting as a protected value using the access control indicator to prohibit the second application from writing to the protected value,

and wherein modifying the access control indicator to permit modification of the prioritized user choice setting associated with the first application to be consistent with the modification request received from the second application includes modifying the access control indicator to permit the second application to write to the protected value.

7. The method of claim 4, wherein restoring the access control indicator to prohibit further modification by the second application includes returning ownership of the registry key that the ACL secures to the operating system.

8. The method of claim 1, further comprising:

displaying, in association with the approval user interface, the prioritized user choice setting along with options for modifying the prioritized user choice setting,

wherein receiving input from the user approving the modification of the prioritized user choice setting comprises receiving input from the user in accordance with at least one of the displayed options.

9. The method of claim 1, further comprising generating a change notification when the prioritized user choice setting has been modified, the change notification identifying the second application and the prioritized user choice setting before and after the modification.

10. The method of claim 1, wherein the prioritized user choice setting includes at least one of a user preference relating to a file association, an autoplay setting, contents of a start menu, a registered client setting, a protocol handler, a MIME type handler, a task association, a Web browser home page, a reset Web page setting, and a sidebar setting.

11. The method of claim 10, wherein the prioritized user choice setting includes the registered client setting, and wherein the registered client setting includes at least one of a Web browser, e-mail, media player, instant messaging, and virtual machine for Java setting.

12. A system for storing user choice settings in a data repository to prevent undesired modifications to user choice settings, the system comprising:

a registry for storing a user choice setting associated with a first application as a protected value in a registry key, wherein the user choice setting determines at least one property of execution of at least one event of the first application, and wherein the user choice setting comprises at least one of a user preference relating to a file association, an autoplay setting, contents of a start menu, a registered client, a protocol handler, a MIME type handler, a task association, an internet explorer home page, a reset Web page setting, and a sidebar setting;

an access control list (ACL) to secure the registry key, wherein the ACL prevents the first application or another application from modifying the user choice setting associated with the first application; and

an approval user interface to control modifications to the user choice setting, wherein the approval user interface is generated on a computing device of the user in response to receiving a request from the first application or another application to modify the user choice setting, and wherein the approval user interface, upon obtaining approval to modify the user choice setting, modifies the ACL to permit writing to change the protected value in the registry key to a modified user choice setting.

13. The system of claim 12:

wherein the approval user interface restores the ACL to prevent writing to the protected value in the registry key after writing the modified user choice setting,

and wherein the approval user interface notifies the user whenever the approval user interface writes to the protected value, including notifying the user of a content of the protected value before and after the approval user interface writes to the protected value and an identity of the application that requested the modification.

14. The system of claim 13, wherein the user choice setting comprises a registered client setting, and wherein the registered client setting includes at least one of a Web browser, e-mail, media player, instant messaging, and virtual machine for Java setting.

15. The system of claim 12, wherein the computing device of the user includes an operating system having a security subsystem, and wherein the security subsystem modifies the ACL to permit the first application or another application to modify the user choice setting associated with the first application upon receiving user approval of the request to modify the user choice setting.

16. The system, of claim 12, wherein the security subsystem modifies the ACL to permit writing to the protected value in the registry key by providing to the user ownership of the registry key, wherein ownership of the registry key automatically provides to the user rights to modify the ACL in accordance with the security subsystem of the operating system.

17. The system of claim 12, wherein the security subsystem modifies the ACL to permit writing to the protected value in the registry key includes by providing to the user temporary ownership of the registry key, wherein temporary ownership of the registry key automatically provides to the user rights to temporarily modify the ACL in accordance with the security subsystem of the operating system.

18. Computer-accessible storage devices having components for performing a method of safely modifying user application preferences for when and how an application is to operate on a computer of a user, the method comprising:

recognizing user input data relevant to the application as a prioritized user choice setting, wherein the prioritized user choice setting determines at least one property of execution of at least one event of the application;

securing the prioritized user choice setting as a protected value using an access control indicator, wherein the access control indicator prohibits the application from modifying the prioritized user choice setting;

receiving a request from the application to modify the prioritized user choice setting;

in response to the request from the application to modify the prioritized user choice setting, generating an approval user interface requesting authorization from the user to modify the prioritized user choice setting in accordance with the modification request received;

receiving input from the user approving modification of the prioritized user choice setting associated with the application to be consistent with a value stated in the request received from the application;

modifying the access control indicator to permit modification of the prioritized user choice setting associated with the application to match the value stated in the request received from the application;

modifying the prioritized user choice setting to match the value stated in the request received from the application in accordance with the received user input;

restoring the access control indicator to prohibit further modification of the prioritized user choice setting; and

generating a change notification to the user once the prioritized user choice setting has been modified.

19. The devices of claim 18, wherein the computer of the user includes an operating system having a registry, wherein the protected value is a registry key stored in the registry, wherein the access control indicator an access control list (ACL) that has been initialized to prevent writing to the protected value, and wherein modifying the access control indicator includes modifying the access control indicator to permit writing to the protected value.

20. The devices of claim 19, wherein the

operating system also includes a security subsystem, and wherein modifying the access control indicator to permit writing to the protected value includes providing to the user rights to modify the ACL in accordance with the security subsystem of the operating system.

21. The devices of claim 20, wherein

modifying the access control indicator to permit writing to the protected value includes providing to the user ownership of the registry key that the ACL secures, and wherein ownership of the registry key automatically provides to the user rights to modify the ACL in accordance with the security subsystem of the operating system.

22. The devices of claim 19, wherein providing

to the user ownership of the registry key that the ACL secures includes temporarily providing to the user ownership of the registry key that the ACL secures.

23. The devices of claim 20, wherein

modifying the access control indicator to permit modification of the prioritized user choice setting associated with the application to be consistent with the modification request received includes requiring user to modify the access control indicator to permit writing to the protected value in accordance with the security subsystem of the operating system.

24. The devices of claim 23, wherein restoring

the access control indicator to prohibit further modification of the prioritized user choice setting includes returning ownership of the registry key that the ACL secures to the operating system.

25. The media of claim 18, wherein the

change notification identifies the application and the contents of the prioritized user choice setting before and after the modification.

26. The devices of claim 18, wherein the user

choice setting includes at least one of a user preference relating to a file association, an autoplay setting, contents of a start menu, a registered client setting, a protocol handler, a MME type handler, a task association, a Web browser home page, a reset Web page setting, and a sidebar setting.

27. The devices of claim 26, wherein the

prioritized user choice setting includes the registered client setting, and wherein the registered client setting includes at least one of a Web browser, e-mail, media player, instant messaging, and virtual machine for Java setting.