Integrating operating systems with content offered by web based entities

• US 9,461,989 B2
• Filed: 04/30/2015
• Issued: 10/04/2016
• Est. Priority Date: 04/23/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Chander, Girish, Dutta, Tanmoy, Ilac, Cristian, Kavsan, Bronislav, Li, Ziquian, Luther, Andreas K., Medvinsky, Gennady, Zhu, Liquiang
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/700,985
• Publication Number:
  US 20150264036A1
• Time in Patent Office: 523 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Example embodiments are provided for integrating operating systems with content offered by internet based entities.

Claims

1. A computer system comprising:

a processing system comprising;

one or more processors; and

memory coupled to the one or more processors, the processing system configured to;

receive, via an operating system log-on screen associated with an operating system comprising a kernel, a credential associated with a user attempting to log into the operating system;

generate an authentication request using the credential;

transmit the authentication request to an internet-based service provider;

subsequent to successful verification of the authentication request by the internet-based service provider, receive a data structure generated by the internet-based service provider, the data structure including information associated with the user;

generate a security object, via an authentication process associated with the operating system, using the information that is stored in the data structure and is associated with the user, the security object including the information that is associated with the user;

log the user into the operating system using the security object;

authorize access using the security object, by the operating system, to local files associated with the user; and

obtain content, using the information that is associated with the user, from one or more internet-based service providers.

2. The computer system of claim 1, wherein the data structure is a security context.

3. The computer system of claim 1, wherein the security object is a token, the token including a security identifier.

4. The computer system of claim 1, wherein the authentication process verifies the information associated with the user to determine whether the user has permission to logon to the operating system.

5. The computer system of claim 1, wherein the processing system is further configured to:

allow an internet-based service provider selected from one or more internet-based service providers to authenticate the user.

6. The computer system of claim 1, wherein the processing system is further configured to:

render a challenge to the user in response to receiving an incorrect credential one or more times.

7. The computer system of claim 1, wherein the processing system is further configured to:

cache, on the computer system, the security object.

8. The computer system of claim 1, wherein the security object further includes a ticket, the ticket operable to acquire the content from the one or more internet-based service providers.

9. The computer system of claim 1, wherein the security object further authorizes access, by the operating system, to configure access rights for content associated with the user.

10. The computer system of claim 1, wherein the processing system is further configured to:

provide a common view of a computing environment of the user across one or more clients.

11. The computer system of claim 1, wherein the security object further authorizes access, by the operating system, to a user profile, the user profile including information related to settings associated with the user.

12. The computer system of claim 8, wherein the ticket is a ticket generating ticket, the ticket generating ticket operable to allow the user to acquire additional tickets for content from the one or more internet-based service providers.

13. A method of facilitating a computer logon session, the method comprising:

receiving, via an operating system log-on screen associated with an operating system comprising a kernel, a credential associated with a user attempting to log into the operating system;

generating an authentication request using the credential;

transmitting the authentication request to an internet-based service provider;

subsequent to successful verification of the authentication request by the internet-based service provider, receiving a data structure generated by the internet-based service provider, the data structure including information associated with the user;

generating a security object, via an authentication process associated with the operating system, using the information that is stored in the data structure and is associated with the user, the security object including the information that is associated with the user;

logging the user into the operating system using the security object;

authorizing access using the security object, by the operating system, to local files associated with the user; and

obtaining content, using the information that is associated with the user, from one or more internet-based service providers.

14. The method of claim 13, further comprising:

prior to receiving the credential associated with the user, adding an identifier associated with the internet-based service provider to a list of acceptable user accounts.

15. The method of claim 13, wherein the security object further includes a ticket, the ticket operable to acquire the content from the one or more internet-based service providers.

16. The method of claim 15, wherein the ticket is further operable to acquire a common view of a computing environment of the user across one or more clients.

17. The method of claim 15, wherein the ticket is further operable to allow the user to acquire one or more additional tickets.

18. The method of claim 17, wherein the one or more additional tickets stores the look of a computing environment of the user.

19. A computer-readable storage medium wherein the medium is not a signal including executable instructions that, upon execution by a processor, cause a computer system to facilitate a method for creating a computer system logon session, the method comprising:

receiving, via an operating system log-on screen associated with an operating system comprising a kernel, a credential associated with a user attempting to log into the operating system;

generating an authentication request using the credential;

transmitting the authentication request to an internet-based service provider;

subsequent to successful verification of the authentication request by the internet-based service provider, receiving a data structure generated by the internet-based service provider, the data structure including information associated with the user;

generating a security object, via an authentication process associated with the operating system, using the information that is stored in the data structure and is associated with the user, the security object including the information that is associated with the user;

logging the user into the operating system using the security object;

authorizing access using the security object, by the operating system, to local files associated with the user; and

obtaining content, using the information that is associated with the user, from one or more internet-based service providers.

20. The computer-readable storage medium of claim 19, wherein the security object further includes a ticket generating ticket, the ticket generating ticket operable to acquire one or more additional tickets for files stored on the one or more internet-based service providers without the user having to logon to each of the one or more internet-based service providers.