Dropbox, Inc.

Material Security Inc.

Abhishek Agrawal

Samir Goel

Franck Chastagnol

Christopher J Park

Ryan M Noon

Nikhil Bhargava

Pranav Piyush

Rasmus Mathias Andersson

Devdatta Akhawe

Samir Naik

Jitendra Vaidya

Nicholas Sundin

Renuka Apte

Adam Faulkner

Disclosed herein are techniques for combining content management system functionality with an email or messaging server. A system can associate an email with a content item, through express attachment, direct reference such as a link, indirect reference, or otherwise. The system can store the associated content item within content item storage or identify a stored content item that is identical to the content item that is associated with the email. The system can then enhance email service functionality with the stored content item. For example, the system can present the stored content item or information about the stored content item along with the email. The system can also automatically grant permissions to the stored content item with participants of the email.

Content management system with integrated email service

A tool is disclosed for searching information redacted from electronic communications. The tool receives, based on input by a user into an interface of an electronic communication repository, a request to search through vaulted information, the vaulted information redacted from the electronic communication repository. The tool transmits an identity verification challenge to a device of the user and determines whether the identity verification challenge is successful. Responsive to determining that the identity verification challenge is successful, the tool searches the vaulted information for one or more files comprising a symbol input by the user, and generates, for display within the interface, identifiers corresponding to each of the one or more files.

One-shot challenge to search and access unredacted vaulted electronic communications

An example method comprises receiving, by a secure content system, an email from a sender to a recipient, scanning the contents of the email, evaluating the contents of the email based on a plurality of security rules, storing the sensitive data within a secure storage, generating a replacement email including a security link and not including at least the sensitive data, the security link providing a requester access to the sensitive data providing that a security function is satisfied, sending the replacement email including the security link to the recipient, receiving a request to access the sensitive data, the request being related to the security function challenging the requester using the security function, receiving, from the requester, a response to the security function, determining if the security function is satisfied by the response, and if the security function is satisfied, providing access to the sensitive data to the requester.

Protecting contents and accounts using scan operation

A system and a method are disclosed for verifying a suspicious electronic communication. To this end, a secure communications service may detect an electronic communication comprising an identifier of a purported originator of the electronic communication and an identifier of an intended recipient, and determine that an attribute of the electronic communication corresponds to a suspicious attribute. Responsively, the service may intercept the electronic communication and storing the electronic communication in purgatory memory, so as to prevent the electronic communication from being populated in a private repository of the intended recipient, transmit a verification message, and receive a reply to the verification message that verifies the authenticity of the electronic communication. In response to receiving the reply, the service may release the electronic communication from the purgatory memory, so as to cause the electronic communication to be populated in the private repository of the intended recipient.

Secure communications service for intercepting suspicious messages and performing backchannel verification thereon

Disclosed are systems and methods of querying a hybrid event index of a user. The systems and methods can include receiving a search request pertaining to at least a first namespace of a plurality of namespaces and determining a first index server storing a first portion of the hybrid event index associated with the first namespace. The systems and methods can further include searching, the first portion of the hybrid event index stored at the first index server, determining one or more attributes from the search request, and determining a payload based on the search results of the first portion of the hybrid event index. Finally, the systems and methods can include applying one or more attributes to the payload and sending the filtered payload.

Servicing queries of a hybrid event index

A system and a method are disclosed for determining that a first electronic communication, received in a first private repository of a user, has been identified (e.g., flagged) as including a threat, and determining a probability that the first electronic communication includes the threat. In response to determining that the probability exceeds a threshold probability, the system monitors monitoring for a second electronic communication, received in a second private repository, that includes contents that match the contents of the first electronic communication. In response to, based on the monitoring, identification of the second electronic communication, the system generates a copy of the second electronic communication to an administrative private repository of an administrator, edits the copy to remove a portion that is likely to include the threat, inserts the copy of the second electronic communication to the second private repository, and deletes the second electronic communication from the second private repository.

Defanging malicious electronic files based on trusted user reporting

Systems and methods for protecting contents and accounts

A content management system rendering a file sharing GUI on a first device which is communicatively coupled to a content management system and associated with a first user having an account with the content management system. A file to be shared with a second user is identified in response to the file being selected and dragged. In response to the file being identified, a contact section displaying contact icons is rendered. The selected file is released on a displayed contact icon and a user identifier, e.g., an email address or account, associated with the displayed contact icon is identified. In response to the user identifier being identified, the selected file is shared with a second user associated with the user identified.

Sharing a file with a single contact

A system and method for enabling a user to use a user computer to search the user's personal content items hosted by an online content management service. In one aspect, the user computer is configured to obtain a search query, use the search query to identify in a local index at the user computer one or more of the user's hosted content items that satisfy the search query, and display, in a graphical user interface at the user computer, a search answer summary for each of the one or more of the user's hosted content items that satisfy the search query.

Personal content item searching system and method

Enable using a user computer to search the user's personal content items hosted by an online content management service, the online content management service having an indexer computer configured to generate a base index of the user's content items hosted by the service, a base index server computer configured to transmit the generated base index over a network to the user computer, an index mutation generator computer configured to generate index mutations for subsequent changes to user's hosted content items, and an index mutation sever computer configured to transmit the generated index mutations over the network to the user computer. In one aspect, the system and method enable searches of the user's hosted content items and changes thereto to be conducted at the user computer using an index local to the user computer constructed based on the base index and the index mutations received by the user computer.

Growing community of inventors

San Francisco, CA, United States of America

Abhishek Agrawal