Providing access to application data

• US 9,817,984 B2
• Filed: 07/23/2015
• Issued: 11/14/2017
• Est. Priority Date: 03/02/2012
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Strand, William Alexander, Nguyen, Luan K., Kannanari, Ahamed A.
• Primary Examiner(s): Waliullah, Mohammed
• Application Number:
  US14/806,827
• Publication Number:
  US 20150324595A1
• Time in Patent Office: 845 Days
• Field of Search: 713189, 713193
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data

Abstract

Disclosed are various embodiments for providing access to application data associated with multiple applications of a user. A request to store application data is obtained by a data storage service from an application associated with a user. The application is executed in a client computing device, and the request is obtained by way of a network. The application data is stored by the data storage service in response to the request to store. The data storage service may be configured to store data for multiple applications associated with the user.

Claims

1. A method comprising:

causing, via at least one of one or more computing devices, application-specific data associated with individual ones of a plurality of applications to be stored in a data store, the individual ones of the plurality of applications being associated with a unique application-level security credential, wherein the application-specific data comprises one or more application settings that configure operation of the individual ones of the plurality of applications;

identifying, via the at least one of the one or more computing devices, a first application-specific data for a first one of the plurality of applications in response to receiving a first request to access the first application-specific data from the first one of the plurality of applications executed by a first client device, the first request including a first unique application-level security credential, wherein access to the first application-specific data is restricted to other ones of the plurality of applications apart from the first one of the plurality of applications;

authenticating, via the at least one of the one or more computing devices, the first one of the plurality of applications that sent the first request based at least in part on the first unique application-level security credential;

providing, via the at least one of the one or more computing devices, the first application-specific data to the first one of the plurality of applications executed by the first client device;

identifying the first application-specific data for the first one of the plurality of applications in response to receiving a second request to access the first application-specific data from the first one of the plurality of applications executed by a second client device, the second request including the first unique application-level security credential; and

causing, via the at least one of the one or more computing devices, cross-application data associated with the individual ones of the plurality of applications to be stored in the data store, wherein the cross-application data comprises one or more additional application settings that configure operation of the individual ones of the plurality of applications, wherein access to the cross-application data is not restricted to other ones of the plurality of applications apart from the first one of the plurality of applications.

2. The method of claim 1, further comprising identifying a second application-specific data for a second one of the plurality of applications in response to receiving a third request to access the second application-specific data from the second one of the plurality of applications executed by the first client device, the third request including a second unique application-level security credential being different from the first unique application-level security credential.

3. The method of claim 1, further comprising identifying a second application-specific data for a second one of the plurality of applications in response to receiving a third request to access the second application-specific data from the second one of the plurality of applications executed by a second client device, the third request including a second unique application-level security credential being different from the first unique application-level security credential.

4. The method of claim 3, further comprising authenticating the second one of the plurality of applications based at least in part on the second unique application-level security credential.

5. A system, comprising:

at least one computing device; and

a data storage service executable in the at least one computing device, the data storage service configured to at least;

cause application-specific data associated with individual ones of a plurality of applications to be stored in a data store, the individual ones of the plurality of applications being associated with a different at least one application-level security credential, wherein the application-specific data comprises one or more application settings that configure operation of the individual ones of the plurality of applications;

receive a first request to access a first application-specific application data for a first one of the plurality of applications from the first one of the plurality of applications, the first request including a first application-level security credential associated with the first one of the plurality of applications, wherein access to the first application-specific data is restricted to other ones of the plurality of applications apart from the first one of the plurality of applications;

authenticate the first one of the plurality of applications that sent the first request based at least in part on the first application-level security credential; and

provide the first application-specific data to the first one of the plurality of applications in response to receiving the first request to access the first application-specific data from the first one of the plurality of applications;

identify the first application-specific data for the first one of the plurality of applications in response to receiving a second request to access the first application-specific data from the first one of the plurality of applications executed by a client device, the second request including the first application-level security credential; and

cause cross-application data associated with the individual ones of the plurality of applications to be stored in the data store, wherein the cross-application data comprises one or more additional application settings that configure operation of the individual ones of the plurality of applications, wherein access to the cross-application data is not restricted to other ones of the plurality of applications apart from the first one of the plurality of applications.

6. The system of claim 5, wherein the first request to access specifies an offset for a file.

7. The system of claim 6, wherein the data storage service is further configured to read the first application-specific data from the file relative to the offset from the data store.

8. The system of claim 5, wherein the data storage service is further configured to:

obtain a third request to create a file folder in the data store, the file folder being associated with the first one of the plurality of applications and a user account, the third request to create the file folder specifying at least one master security credential associated with the user account;

create the file folder in response to the third request to create the file folder;

automatically generate the first application-level security credential and associate the first application-level security credential with the file folder; and

provide the first application-level security credential to the client device.

9. The system of claim 5, wherein the first one of the plurality of applications corresponds to a game, and the first application-specific data includes a saved state for the game.

10. The system of claim 5, wherein the application-specific data comprises preference data, wherein the data storage service is further configured to perform translation of the preference data between device-specific preference data and device-normalized preference data.

11. A method, comprising:

obtaining, via at least one computing device, application-specific data for an application by way of a network associated with a user, wherein the application is associated with a device location and at least one application-level security credential, wherein the application-specific data comprises one or more application settings that configure operation of the application, wherein the application-specific data configures at least a normalized hardware setting;

determining, by the at least one computing device, a location of a first client device, wherein the application resides on the first client device;

storing, via the at least one computing device, the application-specific data in a data store in association with the at least one application-level security credential, wherein the application-specific data is sent based at least in part on the location of the first client device and the device location associated with the application-specific data;

obtaining, via the at least one computing device, a request for the application-specific data, the request specifying the application-level security credential;

authenticating, via the at least one computing device, the application that sent the request based at least in part on the application-level security credential; and

sending, via the at least one computing device, the application-specific data to the application.

12. The method of claim 11, wherein an operating system delegate is configured to restrict access to the application-specific data based at least in part on an identity of the application.

13. The method of claim 11, wherein the request for the application-specific data is obtained from the application.

14. The method of claim 11, wherein the application-specific data is associated with a group of applications, and the application is a member of the group of applications.

15. The method of claim 11, wherein the application-specific data is sent to the application residing on a second client device, wherein the first client device and the second client device correspond to different computing device platforms.