AUTHORIZING AN UNTRUSTED CLIENT DEVICE FOR ACCESS ON A CONTENT MANAGEMENT SYSTEM

• US 20150222615A1
• Filed: 01/31/2014
• Published: 08/06/2015
• Est. Priority Date: 01/31/2014
• Status: Active Grant

• Current Assignee: Dropbox, Inc.
• Original Assignee: Dropbox, Inc.
• Inventors: ALLAIN, Francois Alexander, TANG, Jie
• Granted Patent: US 10,212,143 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method, system, and manufacture for authorizing an untrusted client device for access on a content management system. The content management system receives a request from an untrusted client device to access content on the content management system. The content management system sends an authentication key to the untrusted client device. The content management system then receives the authentication key from a trusted client device. Based on the matching authentication key, the content management system transmits data to the untrusted client device in accordance with any additional instructions that the trusted client device may have sent.

Claims

1. A synchronized online content management system comprising:

a processor;

a first module configured to control the processor to receive a request from a first client device to access content in the synchronized online content management system;

a second module configured to control the processor to send a code to the first client device, the code configured for playback on the first client device;

a third module configured to control the processor to receive the code from a second client device, the second client device authorized to access content associated with an account on the synchronized online content management system;

a fourth module configured to control the processor to push data to the first client device, the data configured based on an instruction received from the second client device.

2. The system of claim 1, wherein the data is at least one of a uniform resource locator providing access to a content item, a token, or a content item.

3. The system of claim 1, wherein the code is at least one of a text string, an optically machine-readable code, an image, a video, or a sound.

4. The system of claim 1, wherein the code is active for a specified period of time.

5. The system of claim 1, wherein the instruction includes at least one content item and a delivery method.

6. The system of claim 5, wherein the instruction further includes an expiration time.

7. A computer-implemented method comprising:

in response to requesting access to content in a content management system, receiving a code;

presenting, via a processor, the code in a manner perceivable by a client device; and

receiving data from the content management system, the data configured based on an instruction by the client device provided to the content management system.

8. The method of claim 7, wherein presenting the code in a manner perceivable by a client device comprises at least one of displaying a text string, displaying a QR code, displaying an image, or playing a sound.

9. The method of claim 7, wherein the data is at least one of a uniform resource locator providing access to a content item, a token, or a content item.

10. A computer-implemented method comprising:

perceiving, via a processor, a code presented by a client device;

sending the code to a content management system; and

sending a request to the content management system to transmit a content item to the client device.

11. The method of claim 10 further comprising:

authenticating with a user account on the content management system.

12. The method of claim 11, wherein the authenticating occurs in response to an authentication request from the content management system after sending the code.

13. The method of claim 10, wherein perceiving a code presented by a client device comprises at least one of receiving a text input, receiving an audio input, or capturing an image of the code presented on a display on the client device.

14. The method of claim 10, wherein the request further includes at least one of a delivery method or an expiration time.

15. A manufacture comprising:

a non-transitory computer-readable storage medium; and

a computer executable instruction stored on the non-transitory computer-readable storage medium which, when executed by a computing device, causes the computing device to perform a method comprising;

in response to receiving a request from a first client device to access content on a server, transmitting to the first client device a first authentication key configured for presentation;

receiving a second authentication key from a second client device; and

when the second authentication key matches the first authentication key, transmitting data to the first client device, the data configured based on the content and an instruction received from the second client device.

16. The manufacture of claim 15, the method further comprising:

sending an authentication request to the second client device, the authentication request triggered in response to receiving the authentication key from the second client device.

17. The manufacture of claim 15, wherein the data is at least one of a uniform resource locator (URL) providing access to the content, a token, or a content item.

18. The manufacture of claim 17, wherein the URL is deactivated after a predefined period of time.

19. The manufacture of claim 17, wherein the URL presents a user interface displaying a version of the content.

20. The manufacture of claim 19, the method further comprising:

refreshing the URL, the refreshing causing a display of a second version of the content.