Obfuscated User Identifiers for Multi-User State Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Third-party applications on multi-user devices cannot effectively manage user-specific application state without compromising user privacy, as they lack information about the active user account and share application data across user profiles.

Innovation Solution

The operating system provides obfuscated user identifiers to third-party applications, allowing them to manage user-specific application state by associating these identifiers with user accounts, while preserving privacy through pseudorandom numbers and the option to reset identifiers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If third-party applications access user account information to manage user-specific application state, then user-specific state management is improved, but user privacy is compromised

Engineering Contradiction:

Improveuser-specific application state managementVSAvoiduser privacy compromise

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary mechanism (obfuscated identifier system) between the user account information and third-party applications. The operating system generates pseudorandom identifiers that serve as mediators, allowing applications to distinguish and manage user-specific state without direct access to actual user account information, thus resolving the contradiction between state management capability and privacy protection

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the parameter representation from actual user account identifiers to pseudorandom obfuscated identifiers. This parameter change allows the system to maintain functional differentiation of user states while changing the form of identification to one that does not reveal sensitive user information, solving both the need for state management and the requirement for privacy protection

Inventive Principle:

Principle #35Parameter changes

2Adaptability or versatility

If applications share application data across user profiles, then data sharing is improved, but user-specific state differentiation is lost

Engineering Contradiction:

Improvedata sharing capabilityVSAvoiduser-specific state information

Core Design Contradiction:

Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent segments the application data space by creating separate storage regions for each user profile based on obfuscated identifiers. This segmentation allows different user profiles to have isolated data spaces while still using the same application, preventing cross-contamination of user-specific state and maintaining clear differentiation between users

Inventive Principle:

Principle #1Segmentation

3Productivity

If the operating system provides user account information to third-party applications, then application functionality is improved, but security and privacy controls are weakened

Engineering Contradiction:

Improveapplication functionalityVSAvoidprivacy security control

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The operating system acts as an intermediary that provides obfuscated identifiers to third-party applications instead of actual user account information. This intermediary layer maintains security and privacy controls by filtering what information is exposed, while still providing sufficient information for applications to deliver their functionality, thus resolving the contradiction between productivity and security

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a copy of user identification information in the form of pseudorandom obfuscated identifiers. This copy contains sufficient information for application functionality (user differentiation) but lacks the sensitive characteristics of the original user account information, allowing functional access while maintaining security controls

Inventive Principle:

Principle #26Copying

Data Source

PatentUS11281802B2Providing obfuscated user identifiers for managing user-specific application state on multiuser devices

Publication Date: 2022.03.22 APPLE INC

AI summary

A device implementing a system for associating a profile with an active user account includes a processor configured to receive, from an application running on a device, a request to identify an active user account on the device. The processor is further configured to generate, in response to the request, a unique identifier corresponding to the active user account on the device, the unique identifier being distinct from a user account identifier of the active user account. In addition, the processor is configured to provide the unique identifier to the application for differentiation, by the application, of the active user account on the device relative to at least one other account on the device.