Per-User Application File Overlay for Shared OS Partitioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current operating systems and execution environments fail to provide sufficient user partitioning for applications shared among multiple users, leading to modifications by one user affecting all users, and existing solutions either restrict access or require duplicating application files, which is inefficient in terms of storage and user experience.
Innovation Solution
Implementing a system where application files are installed in a read-only installation location and projected into per-user mutable locations, using filter drivers to isolate and manage modifications, allowing users to modify their files without affecting others, while maintaining a common execution point.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If multiple users share a single application copy, then storage space is reduced, but user modifications affect all users
Solution Approach 1:
The patent segments the application file system into a read-only base layer (common for all users) and a writeable overlay layer (user-specific). This segmentation allows multiple users to share the same application copy while maintaining independent modification spaces, resolving the contradiction between storage efficiency and user isolation.
Solution Approach 2:
The patent implements a nested file system structure where user-specific modification directories are contained within the application directory. The overlay filesystem layer is nested over the base application layer, allowing user modifications to be contained within the shared application structure without affecting other users.
2Reliability
If separate application copies are installed for each user, then user isolation is improved, but storage space increases
Solution Approach 1:
The patent merges the common application codebase into a single read-only base layer that is shared by all users. Only the necessary modification overlays are duplicated per user, significantly reducing storage space compared to complete copies while maintaining user isolation through the overlay filesystem mechanism.
Solution Approach 2:
The patent applies local quality by making the base application layer read-only (common quality) while allowing user-specific overlay layers to be writable (local quality). This differential access model enables user isolation for modifications while maintaining shared access to the common application code.
3Object-affected harmful factors
If administrators restrict modification access, then system security is improved, but user experience deteriorates
Solution Approach 1:
The patent introduces an intermediary overlay filesystem layer between the user and the base application. This intermediary layer mediates modification operations, allowing users to modify applications locally in their overlay directories while the base layer remains protected and immutable, thus maintaining both security and user experience.
Solution Approach 2:
The patent segments modification rights by creating separate read-only (base layer) and writeable (overlay layer) file system layers. This segmentation allows unrestricted user modifications in the overlay layer while protecting the base application layer from corruption, resolving the contradiction between security and ease of operation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Examples described herein generally relate to a computer device including a memory, and at least one processor configured to partition application files for multiple users of the computer device. The computer device creates a per-user location for a first user when installing an application package to an installation location. The application package includes a plurality of files for an application that are read-only for the first user. The computer device projects, via one or more filter drivers, installed package files from the installation location into the per-user location. The computer device receives a modification to the plurality of files for the application projected into the per-user location. The computer device writes at least one modified file into the per-user location. The computer device loads, during execution of the application by the first user, the at least one modified file from the per-user location for the first user.