Portable computer accounts

• US 8,307,425 B2
• Filed: 08/04/2006
• Issued: 11/06/2012
• Est. Priority Date: 08/04/2006
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Gaya, Bruce
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): LEE, JASON T
• Application Number:
  US11/499,170
• Publication Number:
  US 20080034091A1
• Time in Patent Office: 2,286 Days
• Field of Search: 726/21, 709/225, 380/229
• US Class Current: 726/21
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

User accounts, authentication information and user home directories are stored on an external storage media that can be transferred from one device to another. Measures are included for detecting tampering of stored information and for preventing possibly conflicting or damaging account and file information from entering a host device.

Claims

1. A method, comprising:

detecting, by a host device, an external storage medium operatively coupled to the host device, the external storage medium storing portable account information, wherein the portable account information includes;

a home directory of the portable account;

authentication information of the portable account; and

a user profile of the portable account;

providing a login user interface for presentation on a display screen of the host device, the login user interface including one or more local accounts and the portable account for login;

adding the portable account to a local directory database as a local account associated with the external storage medium, wherein adding the portable account comprises;

determining whether the portable account has administrative privileges; and

when the portable account has administrative privileges, removing the administrative privileges before adding the portable account to the local directory database;

receiving, from a user of the host device, an input for logging in the local account associated with the external storage medium; and

responsive to the input, logging in the user using the user profile of the portable account and designating the home directory of the portable account as stored on the external storage medium as a home directory of the user.

2. The method of claim 1, further comprising:

if the local account has a corresponding network account, overwriting account information stored on the external storage medium with network account information.

3. The method of claim 2, further comprising:

adding the local account to an approved account list; and

allowing the login to proceed.

4. The method of claim 3, further comprising:

synchronizing the local account with the portable account.

5. The method of claim 1, further comprising:

encrypting a password associated with the portable account; and

storing the encrypted password on the external storage medium, where the encrypted password is information locally accessible by the host device to authenticate the user.

6. A non-transitory computer-readable storage medium having instructions stored thereon, which, when executed by a processor, causes the processor to perform operations comprising:

detecting, by a host device, an external storage medium operatively coupled to the host device, the external storage medium storing portable account information, wherein the portable account information includes;

a home directory of the portable account;

authentication information of the portable account; and

a user profile of the portable account;

providing a login user interface for presentation on a display screen of the host device, the login user interface including one or more local accounts and the portable account for login;

adding the portable account to a local directory database as a local account associated with the external storage medium, wherein adding the portable account comprises;

determining whether the portable account has administrative privileges; and

when the portable account has administrative privileges, removing the administrative privileges before adding the portable account to the local directory database;

receiving, from a user of the host device, an input for logging in the local account associated with the external storage medium; and

responsive to the input, logging in the user using the user profile of the portable account and designating the home directory of the portable account as stored on the external storage medium as a home directory of the user.

7. The non-transitory computer-readable medium of claim 6, the operations further comprising:

if the local account has a corresponding network account, overwriting account information stored on the external storage medium with network account information.

8. The non-transitory computer-readable medium of claim 7, further comprising:

adding the local account to an approved account list; and

allowing the login to proceed.

9. The non-transitory computer-readable medium of claim 6, the operations further comprising:

encrypting a password associated with the portable account; and

storing the encrypted password on the external storage medium, where the encrypted password is information locally accessible by the host device to authenticate the user.

10. A system, comprising:

one or more processors configured to perform operations comprising;

detecting, by a host device, an external storage medium operatively coupled to the host device, the external storage medium storing portable account information, wherein the portable account information includes;

a home directory of the portable account;

authentication information of the portable account; and

a user profile of the portable account;

providing a login user interface for presentation on a display screen of the host device, the login user interface including one or more local accounts and the portable account for login;

adding the portable account to a local directory database as a local account associated with the external storage medium, wherein adding the portable account comprises;

determining whether the portable account has administrative privileges; and

when the portable account has administrative privileges, removing the administrative privileges before adding the portable account to the local directory database;

receiving, from a user of the host device, an input for logging in the local account associated with the external storage medium; and

responsive to the input, logging in the user using the user profile of the portable account and designating the home directory of the portable account as stored on the external storage medium as a home directory of the user.

11. The system of claim 10, the operations further comprising:

encrypting a password associated with the portable account; and

storing the encrypted password on the external storage medium, where the encrypted password is information locally accessible by the host device to authenticate the user.

12. The system of claim 10, the operations further comprising:

if the local account has a corresponding network account, overwriting account information stored on the external storage medium with network account information.

13. The system of claim 12, the operations further comprising:

adding the local account to an approved account list; and

allowing the login to proceed.

14. The system of claim 13, the operations further comprising:

synchronizing the local account with the portable account.