Portable Device Virtual Desktop Isolation for Secure Multi-User Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Shared personal computers face compatibility, performance, and security issues when used by multiple users, as different users' requirements and software installations can be incompatible, and existing portable computing solutions rely on the host PC for execution, leading to performance and security concerns.

Innovation Solution

A portable device with a processing unit and communication link establishes a dynamic computing environment on a host device, providing data and services that can be accessed by the host device, allowing for a device-independent and secure computing experience, with features like authentication, backup, and updating services, and security mechanisms to ensure only authorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple users share a PC, then the PC can be used by different individuals, but compatibility and security problems arise due to conflicting software requirements and configurations

Engineering Contradiction:
Improvemulti-user capabilityVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the computing environment into separate virtual desktops, each isolated from others. Each user receives a dedicated virtual desktop with its own process space, registry, and configuration settings, eliminating conflicts between users while maintaining system stability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a virtual machine as an intermediary layer between the physical PC hardware and the users. This virtual machine manages and isolates multiple user sessions, allowing each user to have their own customized environment without affecting others or the underlying system.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If different users install different applications on a shared PC, then each user can access their preferred software, but system stability deteriorates due to incompatible applications

Engineering Contradiction:
Improvesoftware compatibilityVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent divides the system into separate process spaces for each user session. Each user can install and run applications within their own virtual desktop environment, isolated from other users' applications, preventing compatibility conflicts while maintaining overall system stability.

Inventive Principle:
Principle #1Segmentation

3Adaptability or versatility

If a USB flash drive stores the operating system, then portability is improved, but performance and security issues arise because the host PC must boot and execute software from the USB drive

Engineering Contradiction:
ImproveportabilityVSAvoidexecution performance
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent inverts the traditional model by having the portable device provide the virtual machine environment that then hosts the user's computing session on the host PC. Instead of the host PC executing software from the USB drive, the USB device creates a virtual machine that manages the execution environment, improving both performance and security.

Inventive Principle:
Principle #13The other way round (Inversion)

4Speed

If software is loaded from a USB drive onto the host PC's hard drive, then execution performance may improve, but the process is time-consuming and creates additional security concerns

Engineering Contradiction:
Improveexecution speedVSAvoidloading time
Core Design Contradiction:
SpeedVSLoss of time

Solution Approach 1:

The patent enables the virtual machine to directly access and execute software from the USB flash drive without requiring prior loading to the host PC's hard drive. This continuous execution capability eliminates the time-consuming transfer process while maintaining security through the virtualized environment.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS7540024B2Security features for portable computing environment
Publication Date: 2009.05.26 MICROSOFT TECHNOLOGY LICENSING LLC
  • US7540024B2 patent drawing
  • US7540024B2 patent drawing
  • US7540024B2 patent drawing

AI summary

The described systems, methods and data structures are directed to a portable computing environment. A communication link is established between a portable device and a host device. The portable device is equipped with a processing unit and is configured to execute a process that is accessible by the host device. The host device includes an application configured to interact with the process on the portable device. The process on the portable device provides data to the application on the host device using the communication link. The application uses the data to provide a computing environment.