# US 2018/0322307 A1 · Cross Container User Model > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0322307 A1 - Document ID: US20180322307A1 - Status: Published application - Kind: A1 - Application number: 15/640,164 - Filed: 2017-06-30 - Published: 2018-11-08 - Earliest claimed: 2017-05-04 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Giridhar VISWANATHAN; Gerardo DIAZ CUELLAR; Hari R. PULAPAKA; Ivan Dimitrov PASHOV; Navin Narayan PAI; Benjamin M. SCHULTZ - Web page: https://patentgrep.com/patent/US20180322307A1 ## CPC - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/31: User authentication - G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode - G06F 9/45533: {Hypervisors; Virtual machine monitors} - G06F 9/5077: {Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455)} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A second operating system accessing resources from an external service. A method includes sending an anonymized request, for an anonymized user corresponding to an authorized user, for resources, through a broker. A request for proof indicating that the anonymized user is authorized to obtain the resources is received from the broker. As a result, a request is send to a first operating system for the proof that the anonymized user is authorized to obtain the resources. Proof is received from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources. The proof is provided to the broker. As a result, the resources are obtained by the second operating system from the service. ## Claims ### Claim 1 In an environment comprising a host system with a first operating system and a second operating system, where the first operating system and the second operating system are separated by a security boundary, comprising an at least partially anonymized, containerized operating system configured to anonymize an authorized user at the first operating system by hiding information for the authorized user from the second operating system, a computer system comprising: one or more processors; and one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to cause a second operating system to access resources from an external service, including instructions that are executable to configure the computer system to perform at least the following: send an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker; receive from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources; as a result, send a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources; receive the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources; provide the proof to the broker; and as a result obtain the resources from the service. ### Claim 2 (depends on 1) The system of claim 1, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication of the proof to the broker through a channel external to the second operating system. ### Claim 3 (depends on 1) The system of claim 1, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication to the broker through a channel external to the second operating system that a retry of the request for the resources by the second operating system should be granted, and wherein the proof provided from the second operating system to the broker comprises a retry of the request for resources. ### Claim 4 (depends on 1) The system of claim 1, wherein the one or more computer-readable media further have stored thereon instructions that are executable by the one or more processors to configure the computer system to perform at least the following: create the second operating system from the first operating system by anonymizing some elements of the first operating system in the second operating system, but maintaining some personalized elements of the first operating system in the second operating system. ### Claim 5 (depends on 4) The system of claim 4, wherein anonymizing some elements of the first operating system in the second operating system comprises filtering out location information. ### Claim 6 (depends on 4) The system of claim 4, wherein the personalized elements of the first operating system comprises at least one of location, input language, country, time zone, or default browser. ### Claim 7 (depends on 1) The system of claim 1, wherein the one or more computer-readable media further have stored thereon instructions that are executable by the one or more processors to configure the computer system to create the second operating system from the first operating system by the second operating system and the first operating system negotiating version and data schema for user objects. ### Claim 8 In an environment comprising a host system with a first operating system and a second operating system, where the first operating system and the second operating system are separated by a security boundary, comprising an at least partially anonymized, containerized operating system configured to anonymize an authorized user at the first operating system by hiding information for the authorized user from the second operating system, a method of the second operating system accessing resources from an external service, the method comprising: sending an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker; receiving from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources; as a result, sending a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources; receiving the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources; providing the proof to the broker; and as a result obtaining the resources from the service. ### Claim 9 (depends on 8) The method of claim 8, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication of the proof to the broker through a channel external to the second operating system. ### Claim 10 (depends on 8) The method of claim 8, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication to the broker through a channel external to the second operating system that a retry of the request for the resources by the second operating system should be granted, and wherein the proof provided from the second operating system to the broker comprises a retry of the request for resources. ### Claim 11 (depends on 8) The method of claim 8 further comprising: creating the second operating system from the first operating system by anonymizing some elements of the first operating system in the second operating system, but maintaining some personalized elements of the first operating system in the second operating system. ### Claim 12 (depends on 11) The method of claim 11, wherein anonymizing some elements of the first operating system in the second operating system comprises filtering out user information, the method further comprising injecting files into the second operating system having location information. ### Claim 13 (depends on 11) The method of claim 11, wherein the personalized elements of the first operating system comprises at least one of location, input language, country, time zone, or default browser. ### Claim 14 (depends on 8) The method of claim 8 further comprising creating the second operating system from the first operating system by the second operating system and the first operating system negotiating version and data schema for user objects. ### Claim 15 A system comprising: a host system, wherein the host system comprises: a first operating system; a second operating system, wherein the containerized operating system comprises an at least partially anonymized, containerized operating system configured to anonymize an authorized user at the first operating system by hiding information for the authorized user from the second operating system; a security boundary separating the first operating system and the second operating; wherein the second operating system is configured to: send an anonymized request, for an anonymized user corresponding to the authorized user, for resources, through a broker; receive from the broker a request for proof indicating that the anonymized user is authorized to obtain the resources; as a result, send a request to the first operating system for the proof that the anonymized user is authorized to obtain the resources; receive the proof from the first operating system, based on the anonymized user being associated with the authorized user, that the anonymized user is authorized to obtain the resources; provide the proof to the broker; and as a result obtain the resources from the service. ### Claim 16 (depends on 15) The system of claim 15, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication of the proof to the broker through a channel external to the second operating system. ### Claim 17 (depends on 15) The system of claim 15, wherein obtaining the resources from the service is performed as a result of the first operating system providing an indication to the broker through a channel external to the second operating system that a retry of the request for the resources by the second operating system should be granted, and wherein the proof provided from the second operating system to the broker comprises a retry of the request for resources. ### Claim 18 (depends on 15) The system of claim 15, wherein some elements of the first operating system are anonymized in the second operating system by having location information filtered out from the first operating system. ### Claim 19 (depends on 15) The system of claim 15, wherein the first operating system comprises personalized elements that are anonymized from the second operating system, including at least one of location, input language, country, time zone, or default browser. ### Claim 20 (depends on 15) The system of claim 15, wherein the second operating system is created from the first operating system by the second operating system and the first operating system negotiating version and data schema for user objects.