Box Limited

Justin Tim Peng

Florian Jourda

Victor De Vansa Vikramaratne

Pierre-Alexandre Masse

Jeremy Glassenberg

Bryan Huh

Hieu Minh Nguyen

Winston Yih-Jiun Huang

Benjamin John Kus

Adelbert Chang

Lev Kantorovskiy

Nakul Chander

Divya Jain

Josh Kline

Victor DeVansa Vikramaratne

Minh-Tue Vo Thanh

Seena Burns

Jonathan Shih-Shuo Fan

Systems for dynamic watermarking within a cloud-based collaboration environment. Storage facilities are managed by servers to provide cloud-based storage services to two or more client entities as a service across a network. The servers maintain versions of editable documents or photo images or video clips using a version indication. Dynamic watermarking applies a first watermark image to a first version of the editable document and grants edit access to a first client entity of the two or more client entities. While the first client entity has edit access to the first version of the editable document the system generates a second version of the editable document and applies a second watermark image to the second version of the editable document before delivering the second version to a second client entity. A security watermark is based on a user credential, and a leak source can be determined based the user credential.

Event-driven generation of watermarked previews of an object in a collaboration environment

Systems for secure cloud-based collaboration over shared objects. Embodiments operate within systems in a cloud-based environment, wherein one or more servers are configured to interface with storage devices that store objects accessible by one or more users. A process receives an electronic message comprising a user request to access an object. Before providing user access to the object, the system generates a requestor-specific steganographic message that is derived from some portion of requestor identification information and/or other user attributes, and/or object storage parameters. Various forms of a requestor-specific steganographic message are applied to selected portions of the object to generate a requestor-specific protected object, which is then provided to the requestor. A web crawler can identify posted unauthorized protected object disclosures. Using quantitative calculations and/or heuristics together with requestor-specific aspects of the embedded steganographic message, the source of the unauthorized disclosure can be identified.

Securing shared documents using dynamic natural language steganography

Systems and corresponding computer-implemented methods for context-based rule evaluation in an electronic data storage system are described. A request to perform an operation with respect to a resource is received from a client device, with the request including various attributes associated with the client device. At least one set of rules applicable to the operation is identified. The rules can be formed from a combination of primitives arranged to dynamically evaluate attributes associated with the resource and attributes associated with the client device. Based on the evaluation of the rule set(s), an action is identified to be performed with respect to the resource.

Access control system for enterprise cloud storage

Growing community of inventors

Mountain View, CA, United States of America

Justin Tim Peng