Log in/log out process for EDU mode

Patent metadata

Field	Value
Publication number	US-10970083-B2
Application number	US-201916259730-A
Country	US
Kind code	B2
Filing date	Jan 28, 2019
Priority date	Jan 10, 2016
Publication date	Apr 6, 2021
Grant date	Apr 6, 2021

Abstract

Systems and methods are disclosed for implementing an educational mode on a portable computing device, such as a tablet computer, that is a single-user system, used serially by multiple users. Each user can have a separate user storage that may be encrypted. The computing device boots as a system user to a login screen. A first student user enters user credentials into the login screen. The computing device can reboot the user-space processes, while leaving the kernel running, rebooting the computing device as the first student user. When the first student user logs out, data to be synchronized to, e.g., the cloud, can be synchronized for the first student user while a second student user is logged into the device.

First claim

What is claimed is:

1. A non-transitory computer readable medium programmed with instructions that, when executed by a processing system, perform a method to synchronize data for a first user account on a multi-user device, comprising:
receiving an indication to log out a first user from a first user account of a multiuser device, wherein the multi-user device hosts a plurality of user accounts;
identifying data associated with the first user account to be synchronized with a remote storage;
tearing down the user space for the first user account;
rebooting the multi-user device, as a system user, to the login screen of the system user, including generating one or more processes associated with the system user;
detecting a login for a second user account of the multi-user device; and
synchronizing a first part of the data associated with the first user account with a remote storage after the first user has logged out and while the second user account is executing.

2. The non-transitory computer readable medium of claim 1 , wherein the synchronization of the data is performed in at least one background process, and wherein a kernel process of the multi-user device continues running after the first user logs out and when the second user logs in.

3. The non-transitory computer readable medium of claim 2 , wherein work of the second user account is performed in at least one foreground process.

4. The non-transitory computer readable medium of claim 1 , wherein the indication for the log out is generated in response to the first user logging out of the multi-user device, and wherein the multi-user device is used by multiple different users each serially logging on using the multi-user device, then logging off.

5. The non-transitory computer readable medium of claim 1 , wherein the indication for the log out is generated in response to a command to logout user accounts from a plurality of devices and the multi-user device is one of the plurality of devices.

6. The non-transitory computer readable medium of claim 5 , wherein each of the plurality of devices is part of a classroom session.

7. The non-transitory computer readable medium of claim 1 , further comprising:
rebooting the multi-user device into a user space of the second user account.

8. The non-transitory computer readable medium of claim 1 , wherein receiving the indication to log out a first user from a first user account comprises:
registering the multi-user device for a switch user event, wherein the multi-user device is executing for the first user account; and detecting a switch user event.

9. The non-transitory computer readable medium of claim 1 , further comprising:
synchronizing a second part of the data associated with the first user account prior to tearing down the user space for the first user account.

10. The non-transitory computer readable medium of claim 1 , wherein the multi-user device presents a user interface for the currently executing user account.

11. A method to synchronize data for a first user account on a multi-user device, comprising:
receiving an indication to log out a first user from a first user account of a multiuser device, wherein the multi-user device hosts a plurality of user accounts;
identifying data associated with the first user account to be synchronized with a remote storage;
tearing down the user space for the first user account;
rebooting the multi-user device, as a system user, to the login screen of the system user, including generating one or more user processes associated with the system user;
detecting a login for a second user account of the multi-user device; and
synchronizing a first part of the data associated with the first user account with a remote storage after the first user has logged out and while the second user account is executing.

12. The method of claim 11 , wherein the synchronization of the data is performed in at least one background process, and wherein a kernel process of the multi-user device continues running after the first user logs out and when the second user logs in.

13. The method of claim 12 , wherein work of the second user account is performed in at least one foreground process.

14. The method of claim 11 , wherein the indication for the log out is generated in response to the first user logging out of the multi-user device, and wherein the multi-user device is used by multiple different users each serially logging on, using the multi-user device, then logging off.

15. The method of claim 11 , wherein the indication for the log out is generated in response to a command to logout user accounts from a plurality of devices and the multi-user device is one of the plurality of devices.

16. The method of claim 15 , wherein each of the plurality of devices is part of a classroom session.

17. The method of claim 11 , further comprising:
rebooting the multi-user device into a user space of the second user account.

18. The method of claim 11 , wherein receiving the indication to log out a first user from a first user account comprises:
registering the multi-user device for a switch user event, wherein the multi-user device is executing for the first user account; and detecting a switch user event.

19. The method of claim 11 , further comprising:
synchronizing a second part of the data associated with the first user account prior to tearing down the user space for the first user account.

20. The method of claim 11 , wherein the multi-user device presents a user interface for the currently executing user account.

Assignees

• Apple Inc

Inventors

• Drummond Jonathan E
• Griffin Anthony R
• Cato Andrew B
• Nielsen Benjamin E
• Kurtz Daniel T
• Steinberg David

Classifications

• H04L67/01

  Protocols · CPC title

• H04L67/1095

  Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04W12/08

  Access security · CPC title