Creating distinct user spaces through user identifiers

• US 8,650,658 B2
• Filed: 10/04/2011
• Issued: 02/11/2014
• Est. Priority Date: 10/25/2010
• Status: Active Grant

• Current Assignee: Etsy Incorporated
• Original Assignee: OpenPeak Inc.
• Inventors: Hyden, Eoin, Kelly, Michael, Schentrup, Philip
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US13/252,947
• Publication Number:
  US 20120102574A1
• Time in Patent Office: 861 Days
• Field of Search: None
• US Class Current: 726/28
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method of, and a processing system for, creating distinct user spaces. In a platform originally intended to be a single user platform, for each of a plurality of users, a first application used by the user can be assigned a user identifier (UID) unique to the user and the first application. The first UID can be associated with user data exclusively associated with the user and the first application to create a multi-user platform.

Claims

1. A method of creating distinct user spaces, comprising:

in a platform originally intended to be a single user platform, for each of a plurality of users;

via a processor, assigning to a first application used by the user a first user identifier (UID) unique to the user and the first application;

associating the first UID with user data exclusively associated with the user and the first application to create a multi-user platform;

providing user level-servicing using a loop device-based file system to enable the single user platform to accommodate multiple users; and

allocating to the user a range of UIDs, wherein the first UID is selected from the range of UIDs.

2. The method according to claim 1, further comprising:

assigning to a second application used by the user a second UID unique to the user and the second application; and

associating the second UID with user data exclusively associated with the user and the second application.

3. The method of claim 1, further comprising:

assigning to applications used by the user the UIDs from the range of UIDs in a serially incrementing manner.

4. The method of claim 3, further comprising:

when at least one of the applications used by the user is removed from the single user platform, returning a corresponding UID to a pool of available UIDs.

5. The method of claim 1, further comprising:

allocating for shared usage among the plurality of users a range of UIDs.

6. The method of claim 5, further comprising:

assigning UIDs to applications used by the plurality of users, wherein the UIDs are assigned to the applications in an interleaved manner.

7. The method of claim 1, further comprising:

allocating for system or administrative use a range of UIDs.

8. The method of claim 1, further comprising:

receiving from a process a request to access the user data, the request indicating the first UID exclusively unique to the user and the first application; and

allowing the process to access the user data corresponding to the user and the first application.

9. The method of claim 1, further comprising:

providing a new filing system for the single user platform by writing a list of functions configured to support and adding an entry into a Virtual Filesystem Switch (VFS) table to enable the single user platform to accommodate multiple users.

10. A processing system, comprising:

a processor configured to, in a platform originally intended to be a single user platform, for each of a plurality of users;

assign to a first application used by the user a first user identifier (UID) unique to the user and the first application;

associate the first UID with user data exclusively associated with the user and the first application to create a multi-user platform;

provide user level-servicing using a loop device-based file system to enable the single user platform to accommodate multiple users; and

allocate to the user a range of UIDs, wherein the first UID is selected from the range of UIDs.

11. The processing system of claim 10, wherein the processor further is configured to:

assign to a second application used by the user a second UID unique to the user and the second application; and

associate the second UID with user data exclusively associated with the user and the second application.

12. The processing system of claim 10, wherein the processor further is configured to:

assign to applications used by the user the UIDs from the range of UIDs in a serially incrementing manner.

13. The processing system of claim 12, wherein the processor further is configured to:

when at least one of the applications used by the user is removed from the single user platform, return a corresponding UID to a pool of available UIDs.

14. The processing system of claim 10, wherein the processor further is configured to:

allocate for shared usage among the plurality of users a range of UIDs.

15. The processing system of claim 14, wherein the processor further is configured to:

assign UIDs to applications used by the plurality of users, wherein the UIDs are assigned to the applications in an interleaved manner.

16. The processing system of claim 10, wherein the processor further is configured to:

allocate for system or administrative use a range of UIDs.

17. The processing system of claim 10, wherein the processor further is configured to:

receive from a process a request to access the user data, the request indicating the first UID exclusively unique to the user and the first application; and

allow the process to access the user data corresponding to the user and the first application.

18. The processing system of claim 10, wherein the processor further is configured to:

provide a new filing system for the single user platform by writing a list of functions configured to support and add an entry into a Virtual Filesystem Switch (VFS) table to enable the single user platform to accommodate multiple users.

19. A computer program product comprising:

a computer-readable storage medium comprising computer-usable program code stored thereon that creates distinct user spaces, the computer-readable storage medium comprising;

computer-usable program code configured to, in a platform originally intended to be a single user platform, for each of a plurality of users;

assign to a first application used by the user a first user identifier (UID) unique to the user and the first application;

associate the first UID with user data exclusively associated with the user and the first application to create a multi-user platform;

provide user level-servicing using a loop device-based file system to enable the single user platform to accommodate multiple users; and

allocate to the user a range of UIDs, wherein the first UID is selected from the range of UIDs.

20. The computer program product of claim 19, the computer-readable storage medium further comprising:

computer-usable program code configured to assign to a second application used by the user a second UID unique to the user and the second application; and

computer-usable program code configured to associate the second UID with user data exclusively associated with the user and the second application.

21. The computer program product of claim of claim 19, the computer-readable storage medium further comprising computer-usable program code configured to assign to the applications used by the user the UIDs from the range of UIDs in a serially incrementing manner.

22. The computer program product of claim of claim 21, the computer-readable storage medium further comprising computer-usable program code configured to, when at least one of the applications used by the user is removed from the single user platform, return a corresponding UID to a pool of available UIDs.

23. The computer program product of claim 19, the computer-readable storage medium further comprising computer-usable program code configured to allocate for shared usage among the plurality of users a range of UIDs.

24. The computer program product of claim 23, the computer-readable storage medium further comprising computer-usable program code configured to assign UIDs to applications used by the plurality of users, wherein the UIDs are assigned to the applications in an interleaved manner.

25. The computer program product of claim 19, the computer-readable storage medium further comprising computer-usable program code configured to allocate for system or administrative use a range of UIDs.

26. The computer program product of claim 19, the computer-readable storage medium further comprising:

computer-usable program code configured to receive from a process a request to access the user data, the request indicating the first UID exclusively unique to the user and the first application; and

computer-usable program code configured to allow the process to access the user data corresponding to the user and the first application.

27. The computer program product of claim 19, the computer-readable storage medium further comprising:

computer-usable program code configured to provide a new filing system for the single user platform by writing a list of functions configured to support and adding an entry into a Virtual Filesystem Switch (VFS) table to enable the single user platform to accommodate multiple users.