Box Limited

Peter Rexer

Aniket Shivajirao Patil

Sean Rose

Andy Kiang

Vikram Sardesai

Timothy Martin Heilig

Lev Kantorovskiy

Charles Boyd Burnette

Rachel Kay Lambert

Drew Branden

Daniel Theurer

Rory Arend Paap

Dominic Anton Grillo

Wayne Cheng

Lyall Yatsun Chun

Steve Hackney

Techniques are disclosed for enabling collaborative work on a media content among collaborators through a cloud-based environment. An example method comprises receiving the media content; extracting a plurality of text-based data based on the media content; and indexing the plurality of text-based data so as to enable one or more actions to be performed on the media content using the plurality of text-based data. In some embodiments, the media content comprises an audio component, and the method further comprises transcribing the audio component of the media content so that the plurality of text-based data comprises a transcript of the media content. In some embodiments, the actions include a text-based search or a semantics-based search. Among other benefits, some embodiments provided herein enable indexing media content for text-based searches and/or metadata extraction to effectively manage multimedia files in a cloud-based storage/service environment.

Cloud-based platform enabled with media content indexed for text-based searches and/or metadata extraction

Systems for managing user-level security in a cloud-based service platform. A server in a cloud-based environment is configured to interface with storage devices that store objects that are accessible over a network by two or more users. An enterprise entity is identified using an enterprise identifier associated with the enterprise, and an application service is associated with an application identifier. An application service request comprising a user identifier and the application identifier is received, and authentication is determined based on the combination of the user identifier and a pre-authenticated application identifier. Once the application service request is authenticated, then specific aspects of the service request are authorized. The integrity of the application identifier is confirmed by locating a secure association of the given application identifier to a pre-shared enterprise identifier. Logging, auditing and other functions can be performed at the user level using the user identifier for user-level tracking.

Accessing a cloud-based service platform using enterprise application authentication

Security enhancement through application access control for cloud-based services and/or storage accounts is disclosed. In one aspect, embodiments of the present disclosure include a method, which may be implemented on a system, for providing, via the collaboration environment, applications for use by a user in the collaboration environment. The applications are selectable by a user, through the collaboration environment, for use in interaction and engagement with other users in the collaboration environment in collaboration sessions. The applications that are visible or available for use by the user is configurable by another user (e.g., administrator or IT specialist) with appropriate permissions, though a designated console.

Security enhancement through application access control

An example system and method comprises receiving a request from the third-party application, wherein the request includes a user identifier; allocating an area that is specific for the third-party application and for the user; and granting access of the area to the third-party application. In one embodiments, the method further comprises providing to the third-party application a token which allows the third-party application to access a given area. Additional embodiments provided herein enable a third-party application to use a user identifier (e.g., an email address or other identifiers) of its user to access area specific of a cloud-based environment/platform/services (e.g., collaboration, file sharing, and/or storage services) without necessarily triggering user account authentication, thereby avoiding the process of requiring access codes from the user which can adversely impact user experience as well as compromise security and/or user's privacy.

Sandboxing individual applications to specific user folders in a cloud-based service

Device pinning capabilities for cloud-based services and/or storage accounts are disclosed. In one aspect, embodiments of the present disclosure include a method, which may be implemented on a system, for authorizing synchronization of a synchronization client on a device with content associated with an account in the cloud-based service, responsive to determining that the device is on a list of devices that are authorized, and synchronizing the synchronization client on the device with the content associated with the account such that the content is also locally available for access on the device. The list of devices can be specific to and associated with devices for a user in the account and can be limited to an allowable number of devices for the account or a user associated with the account.

Device pinning capability for enterprise cloud service and storage accounts

Growing community of inventors

San Carlos, CA, United States of America

Peter Rexer