Portable computer accounts

• US 8,850,563 B2
• Filed: 09/15/2012
• Issued: 09/30/2014
• Est. Priority Date: 08/04/2006
• Status: Active Grant

• Current Assignee: Bruce Gaya
• Original Assignee: Bruce Gaya
• Inventors: Gaya, Bruce
• Primary Examiner(s): Lee, Jason
• Application Number:
  US13/621,197
• Publication Number:
  US 20130014252A1
• Time in Patent Office: 745 Days
• Field of Search: 726/21
• US Class Current: 726/21
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

User accounts, authentication information and user home directories are stored on an external storage media that can be transferred from one device to another. Measures are included for detecting tampering of stored information and for preventing possibly conflicting or damaging account and file information from entering a host device.

Claims

1. A method, comprising:

at a host device;

detecting an external storage medium operatively coupled to the host device, wherein the external storage medium is configured to store a portable account comprising portable account information, and the portable account information comprises;

a home directory of the portable account,

authentication information of the portable account, and

a user profile of the portable account;

determining whether the portable account stored in the external storage medium is safe for the host device;

when the portable account stored in the external storage medium is determined to be safe;

adding the portable account to a local directory database of the host device,

displaying, via a login user interface presented on a display screen of the host device,-the portable account for login of a user, and

adding a hash of a password associated with the portable account to the host device;

receiving, from the user of the host device, an input for logging in the portable account via the login user interface; and

responsive to the input, logging in the user with the user profile of the portable account and designating the home directory of the portable account as stored on the external storage medium as a home directory of the user.

2. The method of claim 1, further comprising:

in response to a determination that the portable account has a corresponding network account, overwriting the portable account information stored on the external storage medium with network account information.

3. The method of claim 2, further comprising:

adding the portable account to an approved account list; and

allowing the login to proceed.

4. The method of claim 1, further comprising:

encrypting a password associated with the portable account; and

storing the encrypted password on the external storage medium, where the encrypted password is information locally accessible by the host device to authenticate the user.

5. A host computer system, comprising:

an input device;

a display device;

a local directory database;

a network interface configured to receive an external storage media; and

a processor configured to;

determine whether a portable account stored in the external storage media is safe for the host computer system, wherein the portable account is associated with a user registered with a network server, and the portable account is created based on a network account associated with the user;

when the portable account stored in the external storage media is determined to be safe;

add the portable account to the local directory database,

display, via a login user interface presented via the display device, the portable account for login of the user, and

add a hash of a password associated with the portable account to the host computer system;

receive, from the user of the host computer system, an input for logging in the portable account via the login user interface; and

authenticating the user for logging in the portable account.

6. The host computer system of claim 5, wherein the processor is further configured to:

when the portable account stored in the external storage media is determined to be unsafe;

add a safe version of the portable account to the local directory database, and

display, via the login user interface, the safe version of the portable account.

7. The host computer system of claim 6, wherein the safe version of the portable account is marked with a visual indication that indicates to the user that the portable account was deemed to be unsafe.

8. The host computer system of claim 5, wherein the login user interface is configured to display the network account and the portable account for login.

9. The host computer system of claim 7, wherein, in response to a movement of a pointer over the visual indication, the display device is configured to display an alert in the login user interface, and the alert provides information regarding why the portable account was deemed to be unsafe.

10. The host computer system of claim 5, wherein the portable account is created in response to an input received from the user via the display device.

11. A method for managing a portable account for a user registered with a network server, the method comprising:

at a host computer system;

locating a portable account stored in an external storage media operatively coupled to the host computer system;

determining whether the portable account stored in the external storage media is safe for the host computer system;

when the portable account stored in the external storage media is determined to be safe;

adding the portable account to a local directory database of the host computer system,

displaying the portable account via a login user interface presented on a display screen of the host computer system, and

adding a hash of a password associated with the portable account to the host computer system;

receiving, from a user of the host computer system, an input for logging in the portable account via the login user interface; and

authenticating the user for logging in the portable account.

12. The method of claim 11, wherein the portable account is associated with a portable account identifier, and the method further comprising:

determining whether the local directory database comprises at least one other user account with a same account identifier as the portable account identifier; and

in response to a determination that the at least one other user account with the same account identifier does not exist in the local directory database, allowing the portable account to be displayed in the login user interface.

13. The method of claim 11, wherein said determining whether the portable account stored in the external storage media is safe comprises determining whether the portable account is a threat to a security of the host computer system.

14. The method of claim 11, further comprising:

when the portable account stored in the external storage media is determined to be unsafe;

adding a safe version of the portable account to the local directory database,

displaying, via the login user interface, the safe version of the portable account, and

marking the portable account with a visual indication that indicates to the user that the portable account was deemed to be unsafe.

15. The method of claim 11, further comprising determining whether the portable account has a corresponding network account in the network server.

16. The method of claim 11, wherein said locating the portable account comprises searching the external storage media for one or more account database files associated with the portable account.

17. The method of claim 15, further comprising:

when the portable account does not have a corresponding network account, authenticating the user based on the hash of the password associated with the portable account.

18. The method of claim 15, further comprising:

when the portable account has a corresponding network account, authenticating the user based on the network account.

19. The method of claim 18, further comprising overwriting portable account information stored on the external storage medium with network account information.

20. The method of claim 19, further comprising:

adding the portable account to an approved account list;

allowing the login to proceed; and

providing the user with access to the portable account.