Out of box experience application API integration

• US 10,362,013 B2
• Filed: 05/27/2016
• Issued: 07/23/2019
• Est. Priority Date: 05/27/2016
• Status: Active Grant

• Current Assignee: Dropbox, Inc.
• Original Assignee: Dropbox, Inc.
• Inventors: Gruskin, Samantha, Varenhorst, Chris, Sharma, Rohan, Lannin, Sara
• Primary Examiner(s): Jhaveri, Jayesh M
• Application Number:
  US15/167,751
• Publication Number:
  US 20170346802A1
• Time in Patent Office: 1,152 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/62 Uninstallation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

Disclosed are systems, methods, and non-transitory computer-readable storage media for providing an original equipment manufacturer with application program interface (API) for registering an account and creating a custom uniform resource locator (URL) on a content management system, from which the out-of-box experience application can download and install a pre-authorized version of a client application for the content management system.

Claims

1. A system comprising:

a content management system configured to host a client download application programming interface (API),

the client download API configured to receive, from an out-of-box-experience-application provided by a third-party original equipment manufacturer, a request to download a content management system client application, the request including an OAuth token identifying an account of the content management system;

wherein the content management system is configured to send, in response to receiving the request to download the content management system client application, a URL of a location from which the personal computing device can download the content management system client application, wherein the request is associated with a first Internet Protocol (IP) address and a first timestamp, wherein the content management system is configured to, in response to receiving a request directed to the URL;

determine that the first IP address is identical to a second IP address associated with the request directed to the URL;

determine that the first timestamp is within a predetermined time of a second timestamp associated with the request directed to the URL;

send, to the out-of-box-experience-application, the content management system client application bundled with the OAuth token; and

deactivate the URL.

2. The system of claim 1 wherein:

the content management system is configured to host a create account private API, configured to receive a request to create a new account including a proposed account credentials from the out-of-box-experience-application, and the content management system is further configured to send the OAuth token for a created account to the out-of-box-experience-application; and

the out-of-box-experience-application is configured to provide a form for receiving proposed account credentials, and to send the request to create a new account including the proposed account credentials to the create account API.

3. The system of claim 1 wherein:

the out-of-box-experience-application is configured to download, in a background process, the content management system client application bundled with the OAuth token.

4. The system of claim 3 wherein:

the out-of-box-experience-application is configured to install the content management system client application in a background process, to automatically login to the account using the installed content management system client application using the OAuth token, and to launch the content management system client application when logged into the account.

5. The system of claim 1 wherein:

the content management system client application is configured to execute on the personal computing device, and to automatically uninstall any other installer program of the content management system that is present on the personal computing device.

6. A non-transitory computer-readable medium comprising computer executable instructions stored thereon, the instructions, when executed, are effective to cause a personal computing device to:

send, by an out-of-box-experience-application executing on the personal computing device, a request to download a content management system client application, to a client download application programming interface (API) at a content management system, the out-of-box-experience-application provided by a third-party original equipment manufacturer of the personal computing device, the request including an OAuth token identifying an account of the content management system, wherein the request is associated with a first Internet Protocol (IP) address and a first timestamp;

receive from the content management system, a URL of a location from which the personal computing device can download the content management system client application based on the request including;

the first IP address that matches a second IP address associated with the request directed to the URL; and

the first timestamp that is sent within a predetermined time of a second timestamp associated with the received URL; and

download, at the out-of-box-experience-application, the content management system client application bundled with the OAuth token resulting in deactivation of the URL.

7. The non-transitory computer-readable medium of claim 6, wherein the instructions are effective to cause the personal computing device to:

provide a form within the out-of-box-experience-application for receiving proposed account credentials;

send a request to create a new account to a create account API, the request including proposed account credentials; and

receive the OAuth token for the new account by the personal computing device.

8. The non-transitory computer-readable medium of claim 6, wherein the instructions are effective to cause the personal computing device to:

provide a form within the out-of-box-experience-application for receiving existing account credentials;

send a request to an account login API, the request including existing account credentials; and

receive the OAuth token for an existing account by the personal computing device.

9. The non-transitory computer-readable medium of claim 6, wherein the instructions are effective to cause the personal computing device to:

in response to the request to download the content management system client application, receive the URL to download the content management system client application, the URL being unique for that request and the account.

10. The non-transitory computer-readable medium of claim 6, wherein the instructions are effective to cause the personal computing device to:

install the content management system client application in a background process;

automatically login to the account using the installed content management system client application using the OAuth token; and

launch the content management system client application when logged into the account.

11. The non-transitory computer-readable medium of claim 10, wherein the instructions are effective to cause the personal computing device to:

automatically uninstall any other installer program of the content management system that is present on the personal computing device.

12. A non-transitory computer-readable medium comprising computer executable instructions stored thereon, the instructions, when executed, are effective to cause a computing device to:

receive by a client download application programming interface (API) at a content management system a request to download a content management system client application, the request being from a third-party application, the request identifying a verified account of the content management system; and

in response to receiving the request to download the content management system client application, send a URL to download the content management system client application wherein the request to download the content management system client application is associated with a first Internet Protocol (IP) address and a first timestamp, and wherein the instructions are effective to cause the computing device to, in response to receiving a request directed to the URL;

determine that the first IP address is identical to a second IP address associated with the request directed to the URL;

determine that the first timestamp is within a predetermined time of a second timestamp associated with the request directed to the URL;

send, to the third-party application, the content management system client application bundled with an OAuth token; and

deactivate the URL.

13. The non-transitory computer-readable medium of claim 12, wherein the instructions are effective to cause the computing device to:

after receiving a request to access the URL, send the content management system client application to a requesting computing device, wherein the content management system client application is bundled with the OAuth token.

14. The non-transitory computer-readable medium of claim 12, wherein the URL to download the content management system client application is unique for that request and the verified account.

15. The non-transitory computer-readable medium of claim 12, wherein the instructions are effective to cause the computing device to:

receive a request to create a new account by a create account API, the request including a proposed account credentials, the request being from the third party application; and

accept the proposed account credentials; and

send the OAuth token to the third party application.

16. The non-transitory computer-readable medium of claim 12, wherein the request identifying the verified account of the content management system includes the OAuth token received from the content management system, the OAuth token identifying the verified account.

17. A method comprising:

hosting, on a content management system, a client download application programming interface (API), the client download API configured to receive, from an out-of-box-experience-application provided by a third-party original equipment manufacturer, a request to download a content management system client application, the request including an OAuth token identifying an account of the content management system;

sending, by the content management system, in response to receiving the request to download the content management system client application, a URL of a location from which the personal computing device can download the content management system client application, wherein the request is associated with a first Internet Protocol (IP) address and a first timestamp, wherein the content management system is configured to, in response to receiving a request directed to the URL;

determining that the first IP address is identical to a second IP address associated with the request directed to the URL;

determining that the first timestamp is within a predetermined time of a second timestamp associated with the request directed to the URL;

sending, to the out-of-box-experience-application, the content management system client application bundled with the OAuth token; and

deactivating the URL.

18. The method of claim 17 wherein:

the content management system is configured to host a create account private API, configured to receive a request to create a new account including a proposed account credentials from the out-of-box-experience-application executing on the personal computing device, and the content management system is further configured to send the OAuth token for a created account to the personal computing device; and

the out-of-box-experience-application is configured to provide a form for receiving proposed account credentials, and to send the request to create a new account including the proposed account credentials to the create account API.

19. The method of claim 17 wherein:

the out-of-box-experience-application is configured to download, in a background process, the content management system client application bundled with the OAuth token.

20. The method of claim 19 wherein:

the out-of-box-experience-application is configured to install the content management system client application in a background process, to automatically login to the account using the installed content management system client application using the OAuth token, and to launch the content management system client application when logged into the account.

21. The method of claim 17 wherein:

the content management system client application is configured to execute on the personal computing device, and to automatically uninstall any other installer program of the content management system that is present on the personal computing device.