Systems and methods for secure cloud-based media file sharing

• US 9,830,330 B2
• Filed: 03/07/2017
• Issued: 11/28/2017
• Est. Priority Date: 03/30/2012
• Status: Active Grant

• Current Assignee: Signiant Incorporated
• Original Assignee: Signiant Incorporated
• Inventors: North, David, Vasile, Anthony, Clarkson, Richard C.
• Primary Examiner(s): Srivastava, Vivek
• Assistant Examiner(s): CELANI, NICHOLAS P
• Application Number:
  US15/451,580
• Publication Number:
  US 20170177609A1
• Time in Patent Office: 266 Days
• CPC Class Codes: G06F 16/176 Support for shared access to files; File sharing support
• CPC Class Codes: G06F 16/188 Virtual file systems
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Cloud-based systems and methods to securely share electronic files use a cloud or virtualized server to handle management tasks related to file sharing, while file storage is maintained securely by servers that are not part of the cloud. The content of the file to be shared is not transmitted to or by the cloud. Share requests from file senders, notifications to target recipients, and retrieve requests from target recipients are transmitted to and/or by the cloud.

Claims

1. A computer implemented method of securely sharing electronic files using a cloud-based interface, the method being implemented in a computer system having one or more physical processors programmed with computer program instructions that, when executed by the one or more physical processors, program the computer system to perform the method, the method comprising:

generating, by the computer system, a user interface for display on at least a first user device associated with a first user, wherein the user interface is accessed via a first access control;

receiving, by the computer system via the user interface, a share request that indicates intent by the first user to share an electronic file with a second user, wherein the electronic file is stored in electronic storage via a storage server accessed via a second access control different than the first access control;

providing, by the computer system, a notification to the second user that the electronic file is available to be shared with the second user;

receiving, by the computer system, a retrieve request from the second user, wherein the retrieve request indicates intent by the second user to receive a copy of the electronic file; and

transmitting, by the computer system, responsive to the retrieve request, one or more instructions to the storage server, the one or more instructions causing the storage server to make the electronic file available to the second user.

2. The method of claim 1, wherein the storage server is accessed independently from the user interface.

3. The method of claim 1, wherein the first access control is a first type of access control and the second access control is a second type of access control.

4. The method of claim 1, wherein the storage server is associated with the user.

5. The method of claim 1, wherein the share request includes a file identifier that identifies the electronic file and/or a target user identifier that identifies the second user.

6. The method of claim 5, the method further comprising:

providing, by the computer system, a notification to the second user, wherein the notification indicates intent to share the electronic file with the second user.

7. The method of claim 6, the method further comprising:

assigning, by the computer system, a cloud identifier to identify the electronic file based on the file identifier.

8. The method of claim 7, wherein the notification includes the cloud identifier.

9. The method of claim 7, wherein the retrieve request includes the cloud identifier.

10. The method of claim 7, wherein assigning the cloud identifier includes storing an association between the cloud identifier and the second user.

11. The method of claim 10, the method further comprising:

verifying, by the computer system, that the retrieve request is received from the second user as intended in the share request, wherein verification is based on the stored association between the cloud identifier and the second user.

12. The method of claim 6, wherein the target user identifier includes an email address, and wherein providing a notification to the second user includes sending an electronic message to the email address.

13. The method of claim 1, wherein the transmitted one or more instructions that cause the storage server to make the electronic file available to the second user include a specification of access rights for the electronic file, and wherein a retrieved copy of the electronic file includes the access rights in accordance with the specification of the access rights.

14. The method of claim 1, the method further comprising:

generating, by the computer system, a target user interface for display on at least a second user device associated with the second user, wherein the retrieve request is received via the target user interface.

29. The method of claim 1, wherein the electronic file is neither stored on the computer system nor transmitted through the computer system.

15. A system of securely sharing electronic files using a cloud-based interface, the system comprising:

a computer system comprising one or more processors programmed with computer program instructions that, when executed by the one or more physical processors, program the computer system to;

generate a user interface for display on at least a first user device associated with a first user, wherein the user interface is accessed via a first access control;

receive via the user interface a share request that indicates intent by the first user to share an electronic file with a second user, wherein the electronic file is stored in electronic storage via a storage server accessed via a second access control different than the first access control;

provide a notification to the second user that the electronic file is available to be shared with the second user;

receive a retrieve request from the second user, wherein the retrieve request indicates intent by the second user to receive a copy of the electronic file; and

responsive to the retrieve request, transmit one or more instructions to the storage server, the one or more instructions causing the storage server to make the electronic file available to the second user.

16. The system of claim 15, wherein the storage server is accessed independently from the user interface.

17. The system of claim 15, wherein the first access control is a first type of access control and the second access control is a second type of access control.

18. The system of claim 15, wherein the storage server is associated with the user.

19. The system of claim 15, wherein the share request includes a file identifier that identifies the electronic file and/or a target user identifier that identifies the second user.

20. The system of claim 19, wherein the computer system is further programmed to:

provide a notification to the second user, wherein the notification indicates intent to share the electronic file with the second user.

21. The system of claim 20, wherein the computer system is further programmed to:

assign a cloud identifier to identify the electronic file based on the file identifier.

22. The system of claim 21, wherein the notification includes the cloud identifier.

23. The system of claim 21, wherein the retrieve request includes the cloud identifier.

24. The system of claim 21, wherein assigning the cloud identifier includes storing an association between the cloud identifier and the second user.

25. The system of claim 24, wherein the computer system is further programmed to:

verify that the retrieve request is received from the second user as intended in the share request, wherein verification is based on the stored association between the cloud identifier and the second user.

26. The system of claim 20, wherein the target user identifier includes an email address, and wherein providing a notification to the second user includes sending an electronic message to the email address.

27. The system of claim 15, wherein the transmitted one or more instructions that cause the storage server to make the electronic file available to the second user include a specification of access rights for the electronic file, and wherein a retrieved copy of the electronic file includes the access rights in accordance with the specification of the access rights.

28. The system of claim 15, wherein the computer system is further programmed to:

generate a target user interface for display on at least a second user device associated with the second user, wherein the retrieve request is received via the target user interface.

30. The system of claim 15, wherein the electronic file is neither stored on the computer system nor transmitted through the computer system.