Box Limited

Rico Sebastian Yao

Simon Tan

Don Cung

Michael Smith

Benjamin Campbell Smith

David S Maynard

Sahil Amoli

Naeim Semsarilar

Brian James Emerick

Shuo Liu

Nick Terry

Tom Carpel

Oluwatosin Onafowokan

A server in a cloud-based environment interfaces with storage devices that store shared content. A user retrieves a web-based application from the server. The web-based application comprises a set of native operating system application code, a web content viewer, and a native operating system interface, which are configured to facilitate a transfer of one or more objects between the native operating system application code and the web content viewer. In response to a user upload request, the server generates an object placeholder in an editable document. Using the native operating system application code, objects can be selected for incorporation into the editable document. Shared access to the editable document and shared access to uploaded objects are provided by the server by posting links to locations in the storage devices. The web-based application replaces the object placeholder with a link to the object as stored by the server.

Creating shared content in a device&#x2014;independent content editor using a native operating system interface

Systems for collaboration system application authentication. A collaboration system identifies a downloadable application that comprises at least one operation that functions only after obtaining user authentication credentials. The application is configured to invoke one of a plurality of different authentication procedures based on a set of server-provided authentication style parameters. After establishing a connection between an application server that interfaces with the user device that runs the application, the collaboration system determines the set of authentication style parameters, wherein the determination is based at least in part on an identification of the user device or based at least in part on an identification of a user of the user device. The application server sends at least a portion of the set of authentication style parameters to the user device. The application obtains user authentication credentials by invoking one or more authentication procedures based on received server-provided authentication style parameters.

Server-side authentication policy determination for mobile applications

System and method of a manipulative handle for revealing detail information in an interactive mobile user interface are disclosed. In one embodiment, when an activity supported by a cloud-based (e.g., online cloud-based collaboration platform) is initiated, the status of the activity is tracked and displayed using an animated user interface element. On and/or near the animated user interface element are hidden grab points that can be engaged to expand the user interface element to reveal detail relating to the activity. If the user interface element is already in an expanded state, detecting activation of hidden grab points on and/or near the user interface element causes minimization of the user interface element, thereby concealing the detail revealed earlier.

System and method of a manipulative handle in an interactive mobile user interface

A server in a cloud-based environment interfaces with storage devices that store shared content. A user retrieves a document editing application from the server. The document editing application comprises a set of native operating system application code, a web content viewer, and a native operating system interface, which are configured to facilitate a transfer of one or more objects between the native operating system application code and the web content viewer. In response to a user upload request, the server generates an object placeholder in an editable document. Using the native operating system application code, objects can be selected for incorporation into the editable document. Shared access to the editable document and shared access to uploaded objects are provided by the server by posting links to locations in the storage devices. The document editing application replaces the object placeholder with a link to the object as stored by the server.

Creating shared content in a device-independent content editor using a native operating system interface

Techniques are disclosed for using a third-party application to access or edit a file within a cloud-based environment within a cloud-based platform or environment. In one embodiment, a method includes, in response to a request to access the content in the cloud-based environment, providing the third-party application with a login view to verify an identity of a user. The login view is generated from a server hosting the environment. The method further includes, upon the verification of the user's identity, providing the requested content to the third-party application.

Identification verification mechanisms for a third-party application to access content in a cloud-based platform

Techniques are disclosed for using a third-party application to access or edit a file within a cloud-based environment within a cloud-based platform or environment. In one embodiment, a method includes, in the cloud-based environment, responsive to detecting a request to access or edit a file using the third-party application, the file is provided for access or edit using the third-party application. The third-party application includes a user interface which is customized to enable storage of the accessed or edited file to the cloud-based environment. In some embodiments, the third-party application is allowed or restricted to store the accessed file back to the cloud-based environment.

System and method for a third-party application to access content within a cloud-based platform

Systems and methods which forces or automatically upgrades a mobile application installed on a mobile device for security, stability or any other concerns via a server-side configuration file are disclosed. In one embodiment, a configuration file including a list of build identifiers that have been banned or flagged is placed on a server, which can be a server providing cloud-based collaboration or file sharing services, for access by associated mobile applications and/or devices. A mobile application installed on a mobile device can download the configuration file and determine whether a build identifier of the mobile application is listed on the configuration file. If so, the mobile application can shut down, prompt or force an upgrade, or restrict operation of the mobile application in other ways.

Force upgrade of a mobile application via a server side configuration file

Techniques are disclosed for methods, architectures and security mechanisms for a third-party application to access content in a cloud-based platform. In one embodiment, a method includes, receiving, at the third-party application, metadata that identifies the file. The method further includes transmitting the metadata to a server which is associated with the third-party application. The metadata enables the server to request the file from the cloud-based environment.

Metadata enabled third-party application access of content at a cloud-based platform via a native client to the cloud-based platform

Systems and methods for disabling the self-referential appearance of a mobile application in an Intent via a background thread are disclosed. On the Android platform, an application such as a mobile application for providing access to a cloud environment or cloud based service including cloud-based storage and/or collaborative services, can serve as both a source and a target for a given Intent. In one implementation, such a mobile application that can receive and send the same Intent, can include a background service that detects when the Intent is about to be issued, and unregisters the application to prevent the application from receiving the Intent. When a target application for handling the Intent is identified, the background service re-registers the application to receive the Intent.

Disabling the self-referential appearance of a mobile application in an intent via a background registration

System and method for creating a secure channel for inter-application communication based on the messaging system called Intents in the Android OS are disclosed. In one embodiment, an application for accessing a cloud-based storage platform triggers the broadcast of a custom Intent to all applications on a mobile device to detect an authorized application that is capable of interacting with the application. Once an authorized application is chosen, the application opens a secure channel for communication with the authorized application and passes encrypted data stream to the to the secure channel for access by the authorized application.

System and method for creating a secure channel for inter-application communication based on intents

Systems and methods for secure file portability between mobile applications in a cloud-based environment or cloud-based collaboration and file sharing environment. In one embodiment, a server-based key generation service generates an encryption key that is unique to each file transfer transaction between mobile applications accessed via a mobile device. Data packages leaving a mobile application are then encrypted using the encryption key to provide secure file portability between mobile applications. In another embodiment, a background service triggered by a mobile application detects when a user is logged out of the mobile application and revalidates the user session with the mobile application to maintain portability of files between mobile applications. The background service presents a minimal user interface to get the user's credentials for the mobile application, without the user having to switch to the mobile application, and obtains an authentication token from a remote server using the user's credentials.

Systems and methods for secure file portability between mobile applications on a mobile device

Techniques are disclosed for methods, architectures and security mechanisms for a third-party application to access content in a cloud-based platform. In one embodiment, a method includes, providing a third-party application with direct access to content in a cloud-based environment. The third-party application is hosted by an entity different from that of the cloud-based environment. In some embodiments, the direct access to the content in the cloud-based environment is provided to the third-party application and accomplished without a need to access an application that is native to the cloud-based environment.

Growing community of inventors

San Jose, CA, United States of America

Rico Sebastian Yao