Multi-user universal serial bus (USB) key with customizable file sharing permissions

• US 9,245,131 B2
• Filed: 04/01/2013
• Issued: 01/26/2016
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ashok, Rohith K., Brabson, Roy F., Hockett, Hugh E., Low, Andrew R.
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US13/854,213
• Publication Number:
  US 20140298489A1
• Time in Patent Office: 1,030 Days
• Field of Search: 726 2- 21, 726 26- 33
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories

Abstract

A method, data storage device and computer program product for having multiple users share a single data storage device securely. A data storage device, such as a Universal Serial Bus (USB) key, is plugged into a computing device. A USB controller of the USB key recognizes the computing device and creates an account for the user. The created account is associated with the user as well as associated with the computing device. Data uploaded to the USB key by the user is then associated with the created account. Only that user will be able to view that data on his/her computing device (computing device associated with the created account) unless the user indicates to share that data with other users. Such a process may be repeated each time the USB key is plugged into a different computing device thereby creating multiple accounts associated with multiple computing devices and users.

Claims

1. A method for having multiple users share a single data storage device securely, the method comprising:

recognizing a first computing device in response to plugging said data storage device into said first computing device;

creating a first account on said data storage device for a first user, wherein said first account is associated with said first user and said first computing device;

receiving, by a controller, data from said first user to be associated with said first account;

recognizing a second computing device in response to plugging said data storage device into said second computing device;

creating a second account on said data storage device for a second user, wherein said second account is associated with said second user and said second computing device;

receiving, by said controller, data from said second user to be associated with said second account;

receiving an authentication parameter for securing access to said data associated with said first account from said first user; and

presenting said data associated with said first account in response to receiving said authentication parameter;

wherein said first user has access to data associated with said first account in response to plugging said data storage device into said first computing device and said second user has access to data associated with said second account in response to plugging said data storage device into said second computing device.

2. The method as recited in claim 1 further comprising:

setting up a profile to identify said first user to other users on said data storage device.

3. The method as recited in claim 1 further comprising:

receiving control access rights to said data associated with said first account from said first user; and

enabling said data associated with said first account to be accessed by other users according to said control access rights.

4. The method as recited in claim 3, wherein said control access rights comprise one or more of the following:

creating, reading, writing and deleting permissions.

5. The method as recited in claim 1 further comprising:

establishing access to all accounts created on said data storage device for an owner for said data storage device.

6. The method as recited in claim 1, wherein said data storage device comprises a flash memory with an integrated Universal Serial Bus (USB) interface.

7. The method as recited in claim 6, wherein said first and second computing devices are recognized based on one or more properties available on said USB interface.

8. The method as recited in claim 7, wherein said properties comprise one or more of the following:

name, type and serial number.