One step security system in a network storage system

Patent metadata

Field	Value
Publication number	US-10938818-B2
Application number	US-201916581612-A
Country	US
Kind code	B2
Filing date	Sep 24, 2019
Priority date	Apr 23, 2010
Publication date	Mar 2, 2021
Grant date	Mar 2, 2021

Abstract

This is directed to providing access to content stored on a local cloud. In particular, a device can direct a librarian service overseeing the operation of a local cloud to provide another device with access to content stored on the local cloud. The librarian service can generate credentials for the other device, and provide the credentials to the other device. Using the credentials, the other device can connect directly to the local cloud and access the content. In addition, the local cloud can validate the credentials of the other before providing access to the content. The credentials can include, for example, a key to install or load on the device. The librarian may not require, however, the user to create credentials or register with the librarian before being permitted to access the content on the local cloud.

First claim

What is claimed is:

1. A method for managing access to resources, the method comprising, at a master device:
receiving, from a first computing device, an indication of at least one resource to be shared with a second computing device;
generating a set of access credentials associated with the at least one resource;
identifying a computing device that manages the at least one resource;
causing the computing device to bind the set of access credentials to the at least one resource;
causing the second computing device to install:
the set of access credentials, and
lookup information for accessing the at least one resource.

2. The method of claim 1 , wherein the second computing device is unknown to the master device when the set of access credentials is not already installed on the second computing device.

3. The method of claim 1 , wherein the indication of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

4. The method of claim 1 , wherein the set of access credentials includes at least one of a key, a password, or a certificate.

5. The method of claim 1 , wherein the set of access credentials dictates one or more types of privileges associated with accessing the at least one resource.

6. The method of claim 1 , wherein the lookup information is provided in at least one of a Uniform Resource Locator (URL) link, an email, or a file attached to the email.

7. The method of claim 1 , further comprising:
adding the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

8. At least one non-transitory computer readable storage medium configured to store instructions that, when executed by at least one processor included in a master device, cause the master device to manage access to resources, by carrying out steps that include:
receiving, from a first computing device, an indication of at least one resource to be shared with a second computing device;
generating a set of access credentials associated with the at least one resource;
identifying a computing device that manages the at least one resource;
causing the computing device to bind the set of access credentials to the at least one resource;
causing the second computing device to install:
the set of access credentials, and
lookup information for accessing the at least one resource.

9. The at least one non-transitory computer readable storage medium of claim 8 , wherein the second computing device is unknown to the master device when the set of access credentials is not already installed on the second computing device.

10. The at least one non-transitory computer readable storage medium of claim 8 , wherein the indication of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

11. The at least one non-transitory computer readable storage medium of claim 8 , wherein the set of access credentials includes at least one of a key, a password, or a certificate.

12. The at least one non-transitory computer readable storage medium of claim 8 , wherein the set of access credentials dictates one or more types of privileges associated with accessing the at least one resource.

13. The at least one non-transitory computer readable storage medium of claim 8 , wherein the lookup information is provided in at least one of a Uniform Resource Locator (URL) link, an email, or a file attached to the email.

14. The at least one non-transitory computer readable storage medium of claim 8 , wherein the steps further include:
adding the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

15. A master device configured to manage access to resources, the master device comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the master device to perform steps that include:
receiving, from a first computing device, an indication of at least one resource to be shared with a second computing device;
generating a set of access credentials associated with the at least one resource;
identifying a computing device that manages the at least one resource;
causing the computing device to bind the set of access credentials to the at least one resource;
causing the second computing device to install:
the set of access credentials, and
lookup information for accessing the at least one resource.

16. The master device of claim 15 , wherein the second computing device is unknown to the master device when the set of access credentials is not already installed on the second computing device.

17. The master device of claim 15 , wherein the indication of the at least one resource to be shared with the second computing device includes a request to add the second computing device to a list of trusted computing devices that are permitted to access the at least one resource.

18. The master device of claim 15 , wherein the set of access credentials includes at least one of a key, a password, or a certificate.

19. The master device of claim 15 , wherein the set of access credentials dictates one or more types of privileges associated with accessing the at least one resource.

20. The master device of claim 15 , wherein the lookup information is provided in at least one of a Uniform Resource Locator (URL) link, an email, or a file attached to the email.

Assignees

• Apple Inc

Inventors

• Ryder Scott

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title