One step security system in a network storage system

摘要

This is directed to providing access to content stored on a local cloud. In particular, a device can direct a librarian service overseeing the operation of a local cloud to provide another device with access to content stored on the local cloud. The librarian service can generate credentials for the other device, and provide the credentials to the other device. Using the credentials, the other device can connect directly to the local cloud and access the content. In addition, the local cloud can validate the credentials of the other before providing access to the content. The credentials can include, for example, a key to install or load on the device. The librarian may not require, however, the user to create credentials or register with the librarian before being permitted to access the content on the local cloud.

主权项

1. A method for authorizing access to content stored on a local cloud, the method comprising:
receiving, at a librarian service operating on a master device, a request from a first device to provide a third device with access to the content stored on a second device, wherein:
the first device and the second device are associated with a first user account,the third device is associated with a second user account, andthe librarian service selects the first and second devices to form the local cloud associated with the first user account based on one or more resources of each of the first and second devices made available for the local cloud; receiving, at the librarian service from the second device, an indication that the third device associated with the second user account is authorized to access the content stored on the second device; determining, at the librarian service, whether the third device associated with the second user account is known to the librarian service, wherein said determining involves determining whether the third device has been made available to the librarian service to form another local cloud; when the third device associated with the second user account is determined to be known to the librarian service:
identifying credentials associated with the second user account, andwhen the credentials are already installed at the third device associated with the second user account, associating the credentials with the content to provide the third device authorization to access the content; and providing by the librarian service, addressing information for the local cloud to the third device associated with the second user account, wherein the addressing information is used by the third device to connect to the local cloud to gain access to the content stored on the second device.