Integrating operating systems with content offered by web based entities

• US 9,032,500 B2
• Filed: 10/28/2013
• Issued: 05/12/2015
• Est. Priority Date: 04/23/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Chander, Girish, Dutta, Tanmoy, Ilac, Cristian, Kavsan, Bronislav, Li, Ziquian, Luther, Andreas K., Medvinsky, Gennady, Zhu, Liquiang
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/065,361
• Publication Number:
  US 20140059653A1
• Time in Patent Office: 561 Days
• Field of Search: None
• US Class Current: 726/10
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Example embodiments are provided for integrating operating systems with content offered by internet based entities.

Claims

1. A method of facilitating a computer logon session comprising:

transmitting a validation request to an internet based service provider, wherein said validation request includes a user'"'"'s credentials, said credentials being verifiable by said internet based service provider;

receiving information related to said user from said internet based service provider, wherein said information includes a security context;

utilizing said user security context to generate a token;

logging said user into a client'"'"'s operating system, wherein the token is used by said operating system to authorize operations; and

using the security context to obtain content from one or more internet based service providers.

2. The method of claim 1, wherein the security context comprises a data structure having security data associated with the user.

3. The method of claim 1, wherein the token comprises an object containing information associated with the user.

4. The method of claim 3, wherein the token is generated by an authenticating system associated with the client'"'"'s operating system.

5. The method of claim 4, wherein logging said user into a client'"'"'s operating system includes creating, by the authenticating system, a logon session for the user.

6. The method of claim 1, wherein the authorize of operations includes using the token to determine whether the user possesses privileges to access the client'"'"'s operating system resources.

7. A computer system, comprising:

a processor; and

a memory coupled to the processor, wherein the memory includes executable instructions that upon executing by the processor cause the computer system to;

receive a user credential;

transmit the user credential to an internet based service provider;

receive a security context from the internet based service provider, wherein the security context is generated by the internet based service provider;

generate a token using information associated with the security context;

use the token to log the user into an operating system of the computer system,

wherein the token is used by the operating system to authorize operations; and

use the security context to obtain content from one or more internet based service providers.

8. The system of claim 7, further comprising:

rendering, by the computer system, a challenge in response to receiving an incorrect user credential to the internet based service provider.

9. The system of claim 7, further comprising:

caching the security context on the computer system.

10. The system of claim 7, wherein the security context comprises a ticket, wherein the ticket is operable to obtain content from one or more internet based service providers.

11. The system of claim 7, wherein authorizing operations includes using the token to determine whether the user possesses privileges to access content requested by the user.

12. The system of claim 7, further comprising:

transmitting a request to configure privileges to content associated with the user, wherein the privileges enable a separate user to access the content.

13. The system of claim 7, further comprising:

transmitting a request to configure a common view of the user'"'"'s computing environment across one or more clients.

14. The system of claim 7, wherein the token is generated by an authenticating system associated with the operating system.

15. A computer-readable storage medium wherein the medium is not a signal including executable instructions that, upon execution by a processor, cause a computer system to facilitate a method for creating a computer system logon session, the method comprising:

displaying a logon screen for an operating system associated with the computer system;

receiving a user credential;

transmitting the user credential to an internet based service provider;

receiving a security context from the internet based service provider, wherein the security context is generated by the internet based service provider;

generating a token using information associated with the security context;

using the token to log the user into the operating system, wherein the token is used by the operating system to authorize operations; and

using the security context to obtain content from one or more internet based service providers.

16. The computer-readable storage medium of claim 15, wherein the internet based service provider is selected from a plurality of internet based service providers.

17. The computer-readable storage medium of claim 15, further comprising:

transmitting a request to access an administrative profile to the internet based service provider, wherein the administrative profile is operable to manage one or more profiles.

18. The computer-readable storage medium of claim 15, further comprising:

prior to logging the user in to the operating system, downloading a file from the internet based service provider.

19. The computer-readable storage medium of claim 18, wherein the operating system displays an icon for the downloaded file after logging the user into the operating system.

20. The computer-readable storage medium of claim 15, wherein the token is generated by an authenticating system associated with the operating system.