DEVICE PINNING CAPABILITY FOR ENTERPRISE CLOUD SERVICE AND STORAGE ACCOUNTS

• US 20130268999A1
• Filed: 06/11/2012
• Published: 10/10/2013
• Est. Priority Date: 04/05/2012
• Status: Active Grant

• Current Assignee: Box Incorporated
• Original Assignee: Box Incorporated
• Inventors: Kiang, Andy, Rexer, Peter
• Granted Patent: US 9,054,919 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 16/176 Support for shared access to files; File sharing support
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

Device pinning capabilities for cloud-based services and/or storage accounts are disclosed. In one aspect, embodiments of the present disclosure include a method, which may be implemented on a system, for authorizing synchronization of a synchronization client on a device with content associated with an account in the cloud-based service, responsive to determining that the device is on a list of devices that are authorized, and synchronizing the synchronization client on the device with the content associated with the account such that the content is also locally available for access on the device. The list of devices can be specific to and associated with devices for a user in the account and can be limited to an allowable number of devices for the account or a user associated with the account.

Claims

1. A method for limiting a number of devices that a user can use to synchronize with a cloud-based service, the method, comprising:

receiving a login request to synchronize a device with the cloud-based service from the user;

responsive to determining the number of devices that the user is allowed to use for content synchronization has been reached, determining whether the device has been authorized;

responsive to determining that the number of devices that the user is allowed to use for content synchronization has not been reached, registering the device and allowing synchronization of the device with the cloud-based service.

2. The method of claim 1, wherein, whether the device has been authorized is determined by comparing a device ID of the device with a list of existing device IDs associated with the user for an account in the cloud-based service.

3. The method of claim 1, further comprising, granting an authentication token to the device;

enabling synchronization of the device with cloud-based service of content associated with the account, if the device has been previously authorized.

4. The method of claim 3, further comprising, prohibiting the device from synchronizing with the cloud-based service of the content associated with the account, if the device has not been previously authorized.

5. The method of claim 1, wherein, the login request is sent by a desktop synchronization client associated with the cloud-based service installed on the device.

6. The method of claim 1, wherein, the login request is sent by a mobile application associated with the cloud-based service installed on the device;

wherein, the device is a smart phone or a tablet.

7. The method of claim 1, wherein, the device ID includes a CPU ID.

8. The method of claim 1, wherein, the number of devices that the user is allowed to use is specific to one account in the cloud-based service and not applicable to other accounts.

9. The method of claim 2, wherein, the number of devices is set by an administrator user of the account.

10. The method of claim 9, further comprising, updating or changing the number of devices allowable to the user to the account, responsive to reconfiguration by the administrator user.

11. The method of claim 1, wherein, the cloud-based service enables an online collaboration platform that hosts multiple accounts associated with different enterprises or different clients.

12. The method of claim 10, wherein, the number of devices allowed for any user is managed on a client by client basis or enterprise by enterprise basis.

13. A method for controlling devices that synchronize with a cloud-based service, the method, comprising:

authorizing synchronization of a synchronization client on a device with content associated with an account in the cloud-based service, responsive to determining that the device is on a list of devices that are authorized;

synchronizing the synchronization client on the device with the content associated with the account such that the content is also locally available for access on the device.

14. The method of claim 13, wherein, the list of devices is specific to and associated with devices for a user in the account.

15. The method of claim 13, wherein, the list of devices is limited to an allowable number of devices for the account or a user associated with the account.

16. The method of claim 13, wherein, the cloud-based service includes a collaboration environment.

17. The method of claim 13, wherein, the cloud-based service includes a storage service.

18. The method of claim 13, wherein, the collaboration environment is accessible via a desktop client to synchronize content.

19. The method of claim 13, wherein, the collaboration environment is accessible via a mobile application to synchronize content with a mobile device.

20. A machine-readable storage medium having stored thereon instructions which when executed by a processor performs a method for synchronizing content with a collaboration environment, the method, comprising:

retrieving a device identifier for a device by a synchronization application installed on the device;

sending the device identifier and user credentials to the collaboration environment associated with a synchronization request;

synchronizing the device with content in the collaboration environment if an authentication token is received based on the device identifier and the user credentials.

21. The method of claim 20, wherein, the synchronization client receives user credentials specific to a given user.

22. The method of claim 20, wherein, the device identifier includes a CPU ID of the device.

23. The method of claim 20, wherein, the synchronization application is a mobile application;

wherein, the device is a mobile device.

24. A system for limiting a number of devices allowable to synchronize with content of accounts in an online collaboration platform, the system, comprising:

a processing unit;

a memory unit having stored thereon instructions which when executed by the processing unit, causes the processing unit to;

track numbers of devices allowable for synchronization across the accounts in the online collaboration platform;

granting access to synchronization of a device with an account in response to determining that the device has previously been authorized for the account.

25. The system of claim 24, wherein the access to the account is granted for the device if a number of devices allowable for the account has not been reached or exceeded.

26. The system of claim 24, wherein the access to the account is granted for the device if a number of devices allowable for a user of the account has not been reached or exceeded.

27. The system of claim 24, wherein, each of the accounts is associated with different enterprise clients.

28. The system of claim 24, wherein, the device is prohibited from synchronizing with the online collaboration platform if a number of devices allowable for the account has been reached or exceeded and the device has not been previously authorized.

29. A system for controlling devices that synchronize with a cloud-based service, the system, comprising:

means for, receiving a synchronization request from a client on a device;

wherein, the synchronization request includes a device ID and user credentials;

means for, determining that the device is on a list of devices that are authorized, using the device ID;

means for, authorizing synchronization of the client with content associated with an account in the cloud-based service;

means for, synchronizing the client on the device with the content associated with the account such that the content is available for access on the device.

30. The system of claim 29, further comprising, means for, tracking a number of devices allowable for synchronization with the account.

31. The system of claim 29, wherein, the cloud-based service enables an online collaboration platform that hosts multiple accounts associated with different enterprises or different clients.