Altering device behavior with limited purpose accounts
AssigneeMicrosoft Technology Licensing, LLC
InventorsAriel Gordon, Kristina Karen Hotz, Jesus Ferrer Labayen
Life of this patent
Estimating the term…
Abstract
A limited purpose account can be provided to a legitimate user to avoid some types of anti-abuse mechanisms from being triggered when the user connects to an identity verifier using a username known to belong to a limited purpose account. A limited purpose account is an account in which certain privileges of ordinary use are disabled or curtailed. A limited purpose account may be an account that can only be used with a limited number of applications or for a limited amount of time, thus reducing the ability of the limited purpose user to gain unauthorized access to resources. The operating system can reset itself to a previous state when the account is disconnected or when the device is turned off.
Claims20
A computing device comprising:
- a hardware processor;
- and
- a hardware computer-readable storage medium storing executable instructions which, when executed by the hardware processor, cause the hardware processor to implement an operating system,
- wherein the operating system provides first run logic that runs when the computing device is turned on for the first time, and
- wherein the operating system is configured to:
- send a request for connection to a cloud-based identity verifier, the request comprising a particular username associated with a particular account;
- receive, from the cloud-based identity verifier, a notification indicating that the particular account is a limited purpose account;
- and
- responsive to receiving the notification from the cloud-based identity verifier indicating that the particular account is a limited purpose account, configure the computing device so that the first run logic of the operating system executes the next time that the computing device is turned on.
A method comprising:
- receiving an account identifier on a computing device, the computing device having first run logic that runs when the computing device is turned on for the first time;
- sending the account identifier to a remote identity verifier;
- receiving, from the remote identity verifier, an indication that the account identifier is associated with a limited purpose account;
- and
- responsive to receiving the indication from the remote identity verifier that the account identifier is associated with the limited purpose account, configuring the computing device so that the first run logic executes the next time that the computing device is turned on.
A hardware computer-readable storage medium storing executable instructions which, when executed by a processor, cause a computing device comprising the processor to perform acts comprising:
- after the computing device is turned on for a first time, executing first run logic and sending a request to an identity verifier, the request comprising a particular username associated with a particular account;
- receiving, from the identity verifier, a notification indicating the particular account is a limited purpose account;
- and
- responsive to receiving the notification from the identity verifier indicating that the particular account is a limited purpose account, configuring the computing device to execute the first run logic again when the computing device is subsequently turned on a second time.
Dependencies are inferred from the claim text.