Method and system for supporting portable desktop

The present invention generally relates to the field of data processing systems and networks and more particularly to a method and system for using a portable peripheral memory storage device to implement secure and portable personalized desktop functionality.

The concept of a portable desktop is well known in the field of data processing systems and data processing networks. A portable desktop generally refers to personal desktop that a user can recreate on any of a number of computers, for example connected to a network. Implied by the term personal desktop is the private data associated with each user including, for example, email, appointments, personal files, and the like. By enabling users to use a greater number of devices without sacrificing the benefits of a familiar and personalized interface, portable desktops have the potential to expand mobility and convenience, greatly. Typically, portable desktops are achieved by storing within a network a personalized file system or directory for each user. In order to enable a user's desktop, files and home directory to be portable, the user's file system or disk is networked within the network. This model, unfortunately, can lead to security lapses in which, for example, a root system administrator snoops and reads a user's personal email, files, etc.

One attempt to address this problem contemplates distributing a personal data device drive to each user. The user's personal directory is stored on the personal drive. When the user connects to the network using a particular computer, the personal drive is inserted into an appropriate slot of the machine. After “hot plugging” the drive into the machine, a network workstation mounts the personal directory on the personal drive and provides a personalized interface to the user. It will be appreciated, however, that the cost and inconvenience associated with requiring users to perform field installs and disk drive configurations every time they wish to access their portable disks makes this solution impractical. Further, the software for each computer supporting the personal desktop application is custom and therefore limits use of the personal desktop and all data associated therewith.

It would be desirable, therefore, to provide a system and method supporting benefits of personalized and portable desktops without sacrificing security and without incurring the cost and inconvenience of the prior art.

In accordance with the invention there is provided a portable peripheral memory storage device comprising: a housing; a port for interfacing with a workstation; and a memory comprising at least a first portion and a second portion, the first portion comprising portable desktop data and for supporting of portable desktop functionality on a workstation coupled thereto and the second portion for providing portable peripheral memory storage device functionality for a workstation coupled thereto via the port and independent of the portable desktop functionality.

In accordance with another aspect of the invention there is provided a method comprising: coupling a peripheral memory storage device with a workstation; in a first mode of operation, mounting a portion of the peripheral memory storage device on the workstation for operation therewith in a first mode of operation as a storage medium; and, in a second other mode of operation using data within the peripheral memory storage device to support a personal desktop on the workstation.

In accordance with another aspect of the invention, there is provided a portable peripheral memory storage device comprising: a housing; a port for interfacing with a workstation; and a memory comprising at least a first portion for supporting portable desktop functionality on a workstation coupled thereto, the first portion hidden unless the portable peripheral memory storage device is operable for providing the portable desktop functionality.

Other objects and advantages of the invention will become apparent upon reading the following detailed description and upon reference to the accompanying drawings in which:

FIG. 1 a is a simplified block diagram of a portable peripheral memory storage device in the form of a universal serial bus (USB) memory key;

FIG. 1 b is a simplified block diagram of a portable peripheral memory storage device in the form of a wireless memory key;

FIG. 2 is a simplified memory diagram for a prior art portable peripheral memory storage device;

FIG. 3 is a simplified memory diagram for a prior art portable peripheral memory storage device supporting virtualisation of a desktop;

FIG. 4 is a simplified memory diagram for a portable peripheral memory storage device according to an embodiment of the invention wherein the device supports a single security process;

FIG. 5 is a simplified memory diagram for a portable peripheral memory storage device according to an embodiment of the invention supporting several different security processes;

FIG. 6 is a simplified memory diagram for a portable peripheral memory storage device according to an embodiment of the invention absent security within the portable peripheral memory storage device

FIG. 7 is a simplified flow diagram of a method of providing a virtual desktop;

FIG. 8 is a simplified flow diagram of a method of supporting a portable desktop independent of a removable memory store within a portable peripheral memory device;

FIG. 9 is a simplified flow diagram of a method of supporting a portable desktop supporting limited access to a removable memory store within a portable peripheral memory device; and

FIG. 10 is a simplified flow diagram of a method of supporting a portable desktop supporting access to a removable memory store within a portable peripheral memory device

Referring to FIG. 1 a , shown is a prior art portable peripheral memory storage device 100 . The device comprises a USB connector 101 and a housing 102 . When the USB connector 101 is coupled to a mating connector on a host computer in the form of a personal computer (not shown), data is exchanged between the portable peripheral memory storage device 100 and the host computer. The USB communication circuit 103 communicates with another USB communication circuit within the host computer. The USB communication circuit 103 further communicates with processor 104 in the form of a microcontroller. The processor in turn communicates with static random access memory (static RAM) 105 within the portable peripheral memory storage device 100 .

When powered on, the prior art peripheral memory storage device commences interactions with a host computer system from which it draws power. The interactions allow the host computer system to mount the portable peripheral memory storage device 100 for access as a memory storage device by the host computer system. Thus, the portable peripheral memory storage device 100 , for example, appears as a storage device listed with other storage devices of the host computer. It is known to then store data on or retrieve data from the portable peripheral memory storage device 100 . Removing the portable peripheral memory storage device 100 from the host computer system allows for portability of any of the data stored therein to another host computer either locally or wherever the portable peripheral memory storage device 100 is taken.

Referring to FIG. 1 b , shown is a prior art portable peripheral memory storage device 110 . The device comprises an antenna 111 and a housing 112 . When the portable peripheral memory storage device 110 is wirelessly coupled to a host computer in the form of a personal computer (not shown), data is exchangeable between the portable peripheral memory storage device 110 and the host computer. A transceiver circuit 118 present within the housing 112 converts data into amplified signals for driving the antenna 111 . A communication circuit 113 communicates with another communication circuit within the host computer via the wireless communication link formed therebetween. The communication circuit 113 further communicates with processor 114 in the form of a microcontroller. The processor 114 in turn communicates with static random access memory (static RAM) 115 within the portable peripheral memory storage device 110 .

Once wirelessly coupled to a host computer, the prior art portable peripheral memory storage device commences interactions with the host computer system. The interactions allow the host computer system to mount the portable peripheral memory storage device 110 for access as a memory storage device by the host computer system. Thus, the portable peripheral memory storage device 110 , for example, appears as a storage device listed with other storage devices of the host computer. It is known to then store data on or retrieve data from the portable peripheral memory storage device 110 . Moving the portable peripheral memory storage device 110 allows for portability of any of the data stored therein to another host computer either locally or wherever the portable peripheral memory storage device 110 is taken.

Referring to FIG. 2 , it is further known to secure data within the portable peripheral memory storage device of FIG. 1 a and of FIG. 1 b and to require user authentication in order to access same. In such a portable peripheral memory storage device, a user is prompted to provide user authentication data, either to the host computer or to the peripheral memory storage device itself in order to “unlock” the data stored within the peripheral memory storage device. For example, a peripheral memory storage device comprising a fingerprint scanner requires a user to provide a live fingerprint thereto before releasing data stored therein. As shown in FIG. 2 , a memory space 20 includes a peripheral memory storage area 22 and a security data storage area 21 . Data stored within the security data storage area is for securing the data stored within the peripheral memory storage area. For example, this area includes processes for execution by a controller within the portable peripheral memory storage device for securing and de-securing of data. Optionally, this area includes correlation data for being correlated with user provided security data or information.

The peripheral memory storage area 22 comprises static RAM and effectively appears as the mounted storage area within an operating system of the host system.

Referring to FIG. 3 , it is further known to secure data within the portable peripheral memory storage device of FIG. 1 a and of FIG. 1 b and to require user authentication in order to access same. In such a portable peripheral memory storage device, a user is prompted to provide user authentication data, either to the host computer or to the peripheral memory storage device itself in order to “unlock” the data stored within the peripheral memory storage device. For example, a peripheral memory storage device comprising a fingerprint scanner requires a user to provide a live fingerprint thereto before releasing data stored therein. As shown in FIG. 3 , a memory space 30 includes a peripheral memory storage area 32 and a security data storage area 31 . Data stored within the security data storage area is for securing the data stored within the peripheral memory storage area. For example, this area includes processes for execution by a controller within the portable peripheral memory storage device for securing and de-securing of data. Optionally, this area includes correlation data for being correlated with user provided security data or information.

The peripheral memory storage area 32 comprises static RAM for having data relating to a personalized desktop stored therein for use with a host system in providing the user with portable desktop functionality. The data stored therein is modified and updated by the portable desktop application.

Generally speaking an embodiment of the present invention contemplates a system that enables personalized desktop functionality provided via a peripheral memory device while supporting other functions of the peripheral memory device.

Referring to FIG. 4 , a memory diagram of an exemplary device is shown. In such a portable peripheral memory storage device, a user is prompted to provide user authentication data, either to the host computer or to the peripheral memory storage device itself in order to “unlock” the data stored within the peripheral memory storage device. For example, a peripheral memory storage device comprising a fingerprint scanner requires a user to provide a live fingerprint thereto before releasing data stored therein. As shown in FIG. 4 , a memory space 40 includes peripheral memory storage areas 42 a and 42 b and a security data storage area 41 . Data stored within the security data storage area is for securing the data stored within the peripheral memory storage area. For example, this area includes processes for execution by a controller within the portable peripheral memory storage device for securing and de-securing of data. Optionally, this area includes correlation data for being correlated with user provided security data or information.

The peripheral memory storage area 42 a comprises static RAM for having data relating to a personalized desktop stored therein for use with a host system in providing the user with portable desktop functionality. The data stored therein is modified and updated by the portable desktop application. The peripheral memory storage area 42 b comprises static RAM and effectively appears as the mounted storage area within an operating system of the host system.

Thus, the portable peripheral memory storage device optionally includes circuitry for executing functions thereof such as cache management, memory use optimization, security functions, and communication functions. The portable peripheral memory storage device is operable in either of two modes of operation. In a first mode of operation, the device supports portable desktop functionality. In a second other mode of operation the portable peripheral memory storage device supports external memory storage as a mounted storage device within a host system.

Alternatively as shown in FIG. 5 , a memory space 50 includes peripheral memory storage areas 52 a and 52 b and security data storage areas 51 a and 51 b . Data stored within the security data storage areas is for securing data stored within an associated portion of the peripheral memory storage area. For example, each of the areas 51 a and 51 b includes processes for execution by a controller within the portable peripheral memory storage device for securing and de-securing of data. Optionally, each area includes correlation data for being correlated with user provided security data or information.

The peripheral memory storage area 52 a comprises static RAM for having data relating to a personalized desktop stored therein for use with a host system in providing the user with portable desktop functionality. The data stored therein is modified and updated by the portable desktop application. Accessing of the portable desktop is via security based on data within the area 51 a . The peripheral memory storage area 52 b comprises static RAM and effectively appears as the mounted storage area within an operating system of the host system. Accessing of the mounted storage area is via security based on data within the area 51 b.

Thus, the portable peripheral memory storage device optionally includes circuitry for executing functions thereof such as cache management, memory use optimization, security functions, and communication functions. The portable peripheral memory storage device is operable in either of two modes of operation. In a first mode of operation, the device supports portable desktop functionality. In a second other mode of operation the portable peripheral memory storage device supports external memory storage as a mounted storage device within a host system.

In FIG. 6 a simplified memory diagram for a portable peripheral memory storage device that is not secured is shown. A memory space 60 includes peripheral memory storage areas 62 a and 62 b . In applications of this nature, either the data and portable desktop security is not considered of concern or the physical security of the portable device is relied upon to secure the data.

The peripheral memory storage area 62 a comprises static RAM for having data relating to a personalized desktop stored therein for use with a host system in providing the user with portable desktop functionality. The data stored therein is modified and updated by the portable desktop application. The peripheral memory storage area 62 b comprises static RAM and effectively appears as the mounted storage area within an operating system of the host system.

Thus, the portable peripheral memory storage device optionally includes circuitry for executing functions thereof such as cache management, memory use optimization, security functions, and communication functions. The portable peripheral memory storage device is operable in either of two modes of operation. In a first mode of operation, the device supports portable desktop functionality. In a second other mode of operation the portable peripheral memory storage device supports external memory storage as a mounted storage device within a host system.

Referring to FIG. 7 , shown is a simplified flow diagram of a method of providing a virtual desktop. At 701 , a first user is provided with a peripheral memory storage device in the form of a universal serial bus (USB) memory key comprising memory storage therein for coupling to a USB port of a host computer system. The peripheral memory storage device has data stored therein for supporting the portable desktop of the first user, for example by having stored thereon the user's personal directory containing personal data/files including, for example, email, appointments, desktop files and the like. The peripheral memory storage device is preferably sufficiently small to enable users to clip it to their clothing or otherwise carry it on themselves in the same way that they might have a cellular telephone or a wireless paging device. Peripheral memory storage devices of this nature are well known and presently are offered in numerous small form factors many of which will fit in a change purse. Larger peripheral memory storage devices comprise hard drives, but even these are generally of a size and form factor for easy portability.

The portable peripheral storage device is coupled with a host computer during use thereof at 702 . Typically, this is performed by inserting the USB connector of the portable peripheral memory storage device into a mating connector of the host computer. Alternatively, another method of coupling in the form of wireless coupling is used. Further alternatively, yet another coupling process is employed.

Because the host computer system is in use, at 704 a first partition of the portable peripheral memory storage device is mounted as an external removable storage device within an operating system of the host computer system. The first user is then able to, at 706 , store and retrieve files within the partition. The first user, however, is barred from accessing any data within their portable desktop. Optionally, the portable desktop is completely hidden form the first user such that the device appears, for example, as a standard USB portable memory device.

Referring to FIG. 8 , when the host computer is rebooted at 801 , the portable peripheral memory device is detected at boot-up and at 802 causes the host computer to execute the personal desktop of the first user based on memory within a second partition of the portable peripheral memory storage device. The personal desktop denies the first user access to the first partition of the portable peripheral memory device.

Referring to FIG. 9 , an alternative embodiment is shown. When the host computer is rebooted at 901 , the portable peripheral memory device is detected at boot-up and at 902 causes the host computer to execute the personal desktop of the first user based on memory within a second partition of the portable peripheral memory storage device. At 903 , the personal desktop mounts the first partition of the portable peripheral memory storage device as a storage device. Thus, the portable peripheral memory storage device is usable as a personal desktop device and as a portable storage device. At 906 , the first user retrieves data from the first partition. The first user is prevented from storing data within the first partition thereby allowing importing of external data to the portable desktop while preventing exporting of internal data from the personal desktop.

Referring to FIG. 10 , an alternative embodiment is shown. When the host computer is rebooted at 1001 , the portable peripheral memory device is detected at boot-up and at 1002 causes the host computer to execute the personal desktop of the first user based on memory within a second partition of the portable peripheral memory storage device. At 1003 , the personal desktop mounts the first partition of the portable peripheral memory storage device as a storage device. Thus, the portable peripheral memory storage device is usable as a personal desktop device and as a portable storage device. At 1005 , the first user stores data within the first partition and at 1006 the first user retrieves data from the first partition.

Though the term partition is used hereinabove other methods of securing portions of a storage medium from access thereto are also supported. For example, instead of preventing access to the first partition, access is prevented to a portion of the memory device having files stored therein and accessible when the portable peripheral memory device is mounted as a removable memory device.

The term mounted is typically used to denote making a memory store accessible from within an operating system. When the portable peripheral memory storage device is used to implement a portable desktop, the portable desktop itself is a result of access to the device. As such, the term mounting of a memory store within the device is optionally a software function within the portable desktop environment.

Optionally, when the portable desktop device is coupled to a host computer, authentication of the first user is required before the portable desktop device is accessible for portable desktop execution.

Further optionally, when the portable desktop device is coupled to a host computer, authentication of the first user is required before the portable desktop device is accessible for use as a memory storage device. Alternatively, even after authentication has occurred, the portable desktop data within the portable desktop device is hidden form the user unless

Further optionally, when the portable desktop device is coupled to a host computer, authentication of the first user is required before the portable desktop device is accessible for use as either a portable desktop device or as a memory storage device.

Numerous other embodiments may be envisaged without departing from the spirit or scope of the invention.