User Access Control via Input Interception and Profile Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Portable operating systems lack the functionality to assign different permissions to different users, which is a common feature in traditional desktop operating systems, making it difficult to restrict access to features on shared devices.
Innovation Solution
A method and system that restricts user access to software on a computing device based on predefined user profile information by intercepting input data, comparing it with a list of restrictions, and allowing execution only if the action is not prohibited, using schema-based description language to create and manage user profiles, and modifying the registry to implement restricted actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If portable operating systems are used on shared devices, then device portability and wireless connectivity are improved, but user access control and permission management become unavailable
Solution Approach 1:
The system segments user access control into separate user profiles stored in a database, with each profile containing specific permission settings. This allows portable devices to maintain multiple user identities with different access levels, resolving the contradiction between device portability and user access control.
Solution Approach 2:
The system introduces a database as an intermediary between the portable operating system and the user access control mechanism. The database stores user profiles and permission information, enabling access control functionality to be added to portable devices without modifying the core operating system.
2Adaptability or versatility
If user profiles are created using schema-based description language, then access control customization is improved, but system complexity increases
Solution Approach 1:
The system uses a schema-based description language that allows administrators to customize access control by changing parameters such as permitted applications, files, and operations. This provides flexible customization without requiring complex system reconfiguration, as the schema framework handles the complexity of parameter validation and interpretation.
3Reliability
If input data is intercepted and compared with restriction lists, then security is improved, but processing time increases
Solution Approach 1:
The system performs preliminary action by pre-loading restriction lists and user profiles into memory before user interactions occur. The database is indexed to enable fast lookup of restricted items, so that when input data is intercepted, the comparison can be performed quickly without scanning through entire datasets, thus reducing processing time while maintaining security.
Data Source
AI summary
A method for restricting, based on predefined user profile information, access to software executing on a computing device of a user. The method comprises the following steps. Input data is intercepted from a user input device. The input data is compared with a list of restrictions in the user profile information to determining if an action associated with the input data is prohibited. The input data is passed to the software for execution only if the action associated with the input data is not prohibited. A method for restricting, based on predefined user profile information, access to notifications generated for a user is also provided.