Cloud Storage Data Account Segmentation for Access Control

The patent divides a user profile into multiple data accounts, where each data account stores a specific type of data (e.g., work-related data, personal data) with distinct access control rules. This segmentation enables the cloud-based storage service to differentiate between data with different ownership rights and apply appropriate access controls to each data account independently, resolving the contradiction between maintaining simple operation and ensuring reliable access control.

By organizing data into separate data accounts within a user profile, the patent enables users to delegate access to specific data accounts independently. Each data account can have its own access control settings, allowing users to grant access to particular portions of their data (e.g., work-related data) while maintaining restricted access to other portions (e.g., personal data), thus resolving the contradiction between ease of operation and reliability of access rights management.

The patent segments the employee's user profile into distinct data accounts, with one data account for work-related data and another for personal data. The organization is granted access rights only to the work-related data account, while the personal data account remains inaccessible to the organization. This segmentation approach protects ownership rights by ensuring the organization cannot access personal data without proper authorization, while avoiding the need for complex access control mechanisms through clear structural separation.