Structure-based access control
The present disclosure provides systems and methods that perform structure-based access control. In particular, rather than relying upon a user-specific credential scheme, which can require manual sharing of user-specific credentials and/or switching between the multiple accounts to access the particular devices, applications, or services associated with such accounts, the systems and methods of the present disclosure facilitate user credentials to be inherited by or otherwise assigned to a structure identifier associated with a structure (e.g., a home in which the user resides), thereby generating a set of structure credentials. This enables other users in the structure, who may be part of a collaborative user group, to access devices, applications, and/or services using the structure credentials.
1 . A computer-implemented method, comprising:
receiving, from a first user, a first set of user credentials for accessing one or more of: a first computing device physically located within a physical structure, a first application, or a first web service;
assigning the first set of user credentials to a structure identifier of the physical structure to generate a first set of structure credentials, wherein the first set of structure credentials are distinct from the first set of user credentials;
receiving, from the first user, a setting that indicates whether a second user is authenticated to access or use the first computing device, the first application, or the first web service;
receiving, from the second user, a request to control the first computing device, the first application, or the first web service; and
in response to receiving the request from the second user:
determining, based on the setting, whether to use the first set of structure credentials to enable the second user to, without sharing the first set of user credentials with the second user, access the first computing device, the first application, or the first web service.
2 . The method of claim 1 , wherein the setting received from the first user enables any user to control the first computing device, the first application, or the first web service.
3 . The method of claim 2 , further comprising:
in response to receiving the request from the second user, fulfilling the request from the second user using the first set of structure credentials.
4 . The method of claim 2 , wherein the first set of user credentials is associated with a first user account of the first user for the first application, the first application being a music streaming application.
5 . The method of claim 1 , wherein the setting received from the first user enables only one or more authenticated users to control the first computing device, the first application, or the first web service.
6 . The method of claim 5 , further comprising:
in response to receiving the request from the second user and in response to determining that the second user is one of the one or more authenticated users, fulfilling the request from the second user using the first set of structure credentials.
7 . The method of claim 5 , further comprising:
in response to receiving the request from the second user and in response to determining that the second user is not any of the one or more authenticated users, not making available the first set of structure credentials to access or use the first computing device, the first application, or the first web service.
8 . The method of claim 5 , wherein the first set of user credentials is associated with a first user account of the first user for the first application, the first application being a calendar application.
9 . The method of claim 1 , wherein assigning the first set of user credentials to the structure identifier comprises:
using the first set of user credentials to obtain an authentication token from a web server; and
storing the authentication token at the first computing device.
10 . A computer-implemented method, comprising:
determining that a first user is assigned as an owner of a physical structure,
wherein the first user is assigned as the owner of the physical structure by a different user, and
wherein the different user is assigned as an additional owner of the physical structure;
receiving, from the first user, a first set of user credentials for accessing one or more of: a first computing device physically located within the physical structure, a first application, or a first web service,
wherein the first set of user credentials is associated with a user account of the first user; and
in response to receiving the first set of user credentials from the first user and based on the first user being assigned as the owner of the physical structure, assigning the first set of user credentials to a structure identifier of the physical structure to generate a first set of structure credentials,
wherein the first set of structure credentials are distinct from the first set of user credentials;
receiving, from the different user, a second set of user credentials for accessing one or more of: a second computing device physically located within the physical structure, a second application, or a second web service;
in response to receiving the second set of user credentials from the second user and based on the second user being the additional owner of the physical structure, assigning the second set of user credentials to the structure identifier of the physical structure to generate a second set of structure credentials,
wherein the second set of structure credentials are distinct from the first set of user credentials;
receiving a command from the first user to control the second computing device, the second application, or the second web service,
wherein the second computing device is the same as the first computing device, the second application is the same as the first application, and the second web service is the same as the first web service; and
in response to receiving the command from the first user and based on the first user being the owner of the structure, determining whether to use the first set of structure credentials or the second set of structure credentials to control the second computing device, the second application, or the second web service.
11 . The method of claim 10 wherein the command from the first user is to control the second computing device; and
wherein, in response to receiving the command from the first user and based on the first user being the owner of the structure, the second computing device is controlled using the second set of structure credentials.
12 . The method of claim 10 wherein the command from the first user is to control the second application; and
wherein, in response to receiving the command from the first user and based on the first user being the owner of the structure, the second application is controlled using the second set of structure credentials.
13 . The method of claim 10 wherein the command from the first user is to control the second web service; and
wherein, in response to receiving the command from the first user and based on the first user being the owner of the structure the second web service is accessed using the second set of structure credentials.
14 . The method of claim 10 , wherein the second set of user credentials is associated with a user account of the second user.
15 . The method of claim 10 , wherein the first set of user credentials is received via a voice command of the first user.
16 . The method of claim 10 , wherein:
the structure identifier is entered by the first user,
the structure identifier is programmed into the first computing device by a manufacturer, or
the structure identifier is assigned to the physical structure when the first computing device is deployed in the physical structure.
17 . A system comprising:
a processor, a computer-readable memory, one or more computer-readable storage media, and program instructions collectively stored on the one or more computer-readable storage media, the program instructions executable to:
receive, from a first user, a first set of user credentials for accessing one or more of: a first computing device physically located within a physical structure, a first application, or a first web service;
assign the first set of user credentials to a structure identifier of the physical structure to generate a first set of structure credentials, wherein the first set of structure credentials are distinct from the first set of user credentials;
receive, from the first user, a setting that indicates whether a second user is authenticated to access or use the first computing device, the first application, or the first web service;
receive, from the second user, a request to control the first computing device, the first application, or the first web service; and
in response to receiving the request from the second user:
determine, based on the setting, whether to use the first set of structure credentials to enable the second user to, without sharing the first set of user credentials with the second user, access the first computing device, the first application, or the first web service.
18 . The system of claim 17 , wherein the setting received from the first user enables any user to control the first computing device, the first application, or the first web service.
19 . The system according to claim 18 , the program instructions further being executable to:
in response to receiving the request from the second user, fulfill the request from the second user using the first set of structure credentials.
20 . The system of claim 18 , wherein the first set of user credentials is associated with a first user account of the first user for the first application, the first application being a music streaming application.