Creating distinct user spaces through user identifiers

• US 9,122,885 B1
• Filed: 09/03/2014
• Issued: 09/01/2015
• Est. Priority Date: 10/25/2010
• Status: Active Grant

• Current Assignee: Etsy Incorporated
• Original Assignee: OpenPeak Inc.
• Inventors: Hyden, Eoin, Kelly, Michael, Schentrup, Philip
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US14/476,233
• Publication Number:
  US 20150235037A1
• Time in Patent Office: 363 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method of, and a processing system for, creating distinct user spaces. In a platform originally intended to be a single user platform, for each of a plurality of users, a first application used by the user can be assigned a user identifier (UID) unique to the user and the first application. The first UID can be associated with user data exclusively associated with the user and the first application to create a multi-user platform.

Claims

1. A method of creating distinct user accounts, comprising:

in a platform originally designed to accommodate a single user account, via a processor;

segmenting the platform into multiple user accounts, wherein such segmenting comprises;

assigning to a first application associated with a first user account a first user identifier (UID) unique to the first user account and the first application;

assigning to a second application associated with a second user account a second UID unique to the second user account and the second application;

assigning a first range of unique UIDs to the first user account, wherein the first unique UID assigned to the first user account and the first application is from the first range of unique UIDs; and

assigning a second range of unique UIDs to the second user account, wherein the second unique UID assigned to the second user account and the second application is from the second range of unique UIDs.

2. The method according to claim 1, further comprising:

assigning a common range of unique UIDs to both the first user account and the second user account; and

assigning a unique UID from the common range to an application to be associated with the first user account and the second user account to enable the first user account and the second user account to share resources.

3. The method of claim 1, wherein assigning the first unique UID to the first application and the first user account and assigning the second unique UID to the second application and the second user account is performed in a serially incrementing manner.

4. The method according to claim 1, wherein the first unique UID is assigned to the first application when the first application is installed and the second unique UID is assigned to the second application when the second application is installed.

5. The method according to claim 1, further comprising differentiating system functions by the unique UIDs assigned to the first application and the second application.

6. The method according to claim 1, wherein assigning the first and second range of unique UIDs enables isolation of data with respect to the first user account and the second user account.

7. The method according to claim 1, further comprising allocating a third range of unique UIDs for system or administrative use.

8. A method of creating distinct user accounts on a computing device, comprising:

assigning a first range of unique UIDs to a first user account;

assigning to a first application associated with the first user account a first UID unique to the first user account and the first application, wherein the first unique UID is selected from the first range of unique UIDs;

assigning a second range of unique UIDs to a second user account; and

assigning to a second application associated with the second user account a second UID unique to the second user account and the second application, wherein the second unique UID is selected from the second range of unique UIDs;

wherein assigning the first and second range of unique UIDs enables data associated with the first user account to be isolated from data associated with the second user account.

9. The method according to claim 8, wherein assigning the first and second unique UIDs to the first and second applications occurs when the first and second applications are respectively installed.

10. The method according to claim 8, further comprising differentiating system functions based on the unique UIDs assigned to the first and second applications.

11. The method according to claim 8, wherein the first range of unique UIDs and the second range of unique UIDs both include a portion of a total number of UIDs available on the computing device.

12. The method according to claim 8, further comprising selectively encrypting the data associated with the first user account or the data associated with the second user account.

13. The method according to claim 8, further comprising authenticating a user associated with the first user account or the second user account.

14. A computing device, comprising:

one or more data storage elements; and

a processor configured to cause data to be stored to the data storage element, wherein the processor is further configured to;

cause a first range of unique UIDs to be assigned to a first user account created on the computing device;

cause a first application associated with the first user account to be assigned a first UID unique to the first user account and the first application, wherein the first unique UID is from the first range of unique UIDs assigned to the first user account;

cause a second range of unique UIDs to be assigned to a second user account created on the computing device; and

cause a second application associated with the second user account to be assigned a second UID unique to the second user account and the second application, wherein the second unique UID is from the second range of unique UIDs assigned to the second user account;

wherein assignment of the first and second range of unique UIDs enables data associated with the first user account that is stored on the data storage element to be isolated from data associated with the second user account that is stored on the data storage element.

15. The computing device according to claim 14, further comprising an encryption engine that is configured to selectively encrypt the data associated with the first user account or the data associated with the second user account.

16. The computing device according to claim 14, wherein the processor is further configured to execute an authentication module to cause an authentication to be performed with respect to a user of the first user account or the second user account.

17. The computing device according to claim 14, wherein the processor is further configured to cause the differentiation of system functions based on the unique UIDs assigned to the first and second applications.

18. The computing device according to claim 14, wherein the processor is further configured to cause the first unique UID and the second unique UID to be assigned in a serially incremental manner.

19. The computing device according to claim 14, wherein the first unique UID and the second unique UID are both unsigned integer values.

20. The computing device according to claim 14, wherein the processor is further configured to cause a third range of unique UIDs to be reserved for system or administrative use.