Switching users and sync bubble for EDU mode

Patent metadata

Field	Value
Publication number	US-10133868-B2
Application number	US-201614991988-A
Country	US
Kind code	B2
Filing date	Jan 10, 2016
Priority date	Jan 10, 2016
Publication date	Nov 20, 2018
Grant date	Nov 20, 2018

Abstract

Systems and methods are disclosed for implementing an educational mode on a portable computing device, such as a tablet computer, that is a single-user system, used serially by multiple users. Each user can have a separate user storage that may be encrypted. The computing device boots as a system user to a login screen. A first student user enters user credentials into the login screen. The computing device can reboot the user-space processes, while leaving the kernel running, rebooting the computing device as the first student user. When the first student user logs out, data to be synchronized to, e.g., the cloud, can be synchronized for the first student user while a second student user is logged into the device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
booting a client device as a first user, in response to receiving login information of the first user, wherein the client device is configured to be used serially by multiple users, with a single user logged in at a time;
displaying a user-specific user interface of the first user;
executing a user-space computing process that generates data to be stored, thereby generating first user data, in response to receiving one or more inputs to the user-specific user interface of the first user;
receiving a request to logout the first user from the client device;
in response to receiving the request to logout the first user from the client device:
generating, and persisting in a system storage, a manifest for the first user that includes a task to store the first user data to a remote storage, wherein the first user data is accessible by the first user at a subsequent login of the first user into the client device; and
performing the task in the manifest to store the first user data to the remote storage;

rebooting the user-space processes of the client device as a second user, in response to receiving login information of the second user;
displaying a user-specific user interface of the second user;
executing a user-space computing process of the second user, in response to receiving one or more inputs to the user-specific user interface of the second user;
in response to receiving login information of the second user and determining that the task in the manifest has not completed, continuing performing the task in the manifest that stores the first user data to the remote storage.

2. The method of claim 1 , wherein the client device comprises a tablet computing device, and the user-specific user interface of the first user comprises a home page of the first user.

3. The method of claim 1 , wherein the manifest includes one or more access keys of the first user to a storage service where the first user data is to be stored.

4. The method of claim 3 , wherein the one or more access keys are generated from at least a portion of the login information of the first user.

5. The method of claim 1 , further comprising:
deleting, from the manifest of the first user, the task to store the first user data, in response to determining that the task to store the first user data has been completed; and
deleting the manifest from the system storage, in response to determining that there are no more tasks in the manifest for the first user.

6. The method claim 1 , further comprising:
receiving a request to logout the second user;
storing, in the manifest of the first user, status information indicating a completion status of the task to store the first user data, in response to determining that the task to store the first user data was not completed;
generating, and persisting in a system storage, a manifest for the second user that includes a task to store the second user data;
rebooting the user-space processes of the client device as a third user, in response to receiving login information of the third user;
executing a user-space computing process of the third user;
completing the task in the manifest of the first user that stores the first user data;
performing the task in the manifest of the second user that stores the second user data.

7. The method of claim 1 , wherein performing the task in the manifest of the first user further comprises:
storing the first user data to a storage on the client device, and the first user data stored on the client device is accessible to the first user at a subsequent login of the first user to the client device.

8. The method of claim 1 , wherein the request to logout the first user is a classroom-wide user logout command initiated by a teacher workstation.

9. The method of claim 1 , wherein the storing the first user data to a remote storage comprises synchronizing the first user data to the client device storage and a cloud storage.

10. The method of claim 7 , wherein the data is encrypted when stored on the storage of the client device, wherein the encryption is based at least in part on a user credential of the first user.

11. A non-transitory computer readable medium programmed with instructions that, when executed by a processing system, perform operations, comprising:
booting a client device as a first user, in response to receiving login information of the first user, wherein the client device is configured to be used serially by multiple users, with a single user logged in at a time;
displaying a user-specific user interface of the first user;
executing a user-space computing process that generates data to be stored, thereby generating first user data, in response to receiving one or more inputs to the user-specific user interface of the first user;
receiving a request to logout the first user from the client device;
in response to receiving the request to logout the first user from the client device:
generating, and persisting in a system storage, a manifest for the first user that includes a task to store the first user data to a remote storage, wherein the first user data is accessible by the first user at a subsequent login of the first user into the client device;
performing the task in the manifest to store the first user data to the remote storage;

rebooting the user-space processes of the client device as a second user, in response to receiving login information of the second user;
displaying a user-specific user interface of the second user;
executing a user-space computing process of the second user, in response to receiving one or more inputs to the user-specific user interface of the second user;
in response to receiving login information of the second user and determining that the task in the manifest has not completed, continuing performing the task in the manifest that stores the first user data to the remote storage.

12. The medium of claim 11 , wherein the client device comprises a tablet computing device, and the user-specific user interface comprises a home page of the first user.

13. The medium of claim 11 , wherein the manifest includes one or more access keys of the first user to a storage service where the first user data is to be stored.

14. The medium of claim 13 , wherein the one or more access keys are generated from at least a portion of the login information of the first user.

15. The medium of claim 11 , the operations further comprising:
deleting, from the manifest of the first user, the task to store the first user data, in response to determining that the task to store the first user data has been completed; and
deleting the manifest from the system storage, in response to determining that there are no more tasks in the manifest for the first user.

16. The medium claim 11 , the operations further comprising:
receiving a request to logout the second user;
storing, in the manifest of the first user, status information indicating a completion status of the task to store the first user data, in response to determining that the task to store the first user data was not completed;
generating, and persisting in a system storage, a manifest for the second user that includes a task to store the second user data;
rebooting the user-space processes of the client device as a third user, in response to receiving login information of the third user;
executing a user-space computing process of the third user;
completing the task in the manifest of the first user that stores the first user data;
performing the task in the manifest

Assignees

• Apple Inc

Inventors

• Wright Matthew W
• Auricchio Joseph R
• Gupta Puja D
• Ramesh Ananthakrishna
• Hannon Timothy P

Classifications

• G06F21/575 Primary

  Secure boot · CPC title

• G06F9/4401

  Bootstrapping (security arrangements therefor G06F21/57) · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L9/0863

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title