# US 10,454,976 B2 · Confidentiality-based file hosting > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,976 B2 - Document ID: US10454976B2 - Status: Granted - Kind: B2 - Application number: 16/151,172 - Filed: 2018-10-03 - Published: 2019-01-31 - Granted: 2019-10-22 - Earliest claimed: 2016-06-15 - Assignees: Prysm, Inc. - Applicants: Prysm, Inc. - Inventors: Brandon Fischer; Adam P. Cuzzort - Web page: https://patentgrep.com/patent/US10454976B2 ## CPC - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/105: {Multiple levels of security} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Various embodiments provide confidentiality-based file hosting by automatically directing assets in a shared workspace to appropriate storage locations. The storage location can be determined by comparing a security level that is associated with an asset to security levels of multiple possible storage locations. If a security level of the asset is changed in the shared workspace, the asset is automatically directed to an appropriate storage location based on the changed security level. This can include directing the asset to either a more secure or a less secure storage location. ## Claims ### Claim 1 A method comprising: participating, by an appliance, in a shared workspace with one or more other appliances, said participating taking place via one or more networks that enable said appliance and said one or more other appliances to share assets, wherein a first asset of the shared assets has a first security level indicated in metadata associated with the first asset; causing the first asset to be directed to a first storage location, from a collection of locations, based upon a location security level associated with each location of the collection of locations, the first location at which the first asset is stored having a location security level that is at least commensurate with or more secure than the indicated security level the first asset, wherein the first location at which the first asset is stored is remote from said appliance; and detecting a content change to the first asset that causes modification of the first security level to a second different security level; and responsive to modification of the first security level to the second different security level, dynamically directing the first asset to be stored at a second storage location, from the collection of locations, the second storage location having a location security level that is at least commensurate with or more secure than the second different security level of the first asset. ### Claim 2 (depends on 1) The method of claim 1, wherein the detecting a content change comprises detecting that the first asset has been edited. ### Claim 3 (depends on 1) The method of claim 1, wherein the detecting a content change comprises detecting that information has been added to the first asset. ### Claim 4 (depends on 1) The method of claim 1, wherein the detecting a content change comprises detecting that information has been removed from the first asset. ### Claim 5 (depends on 1) The method of claim 1, wherein the detecting a content change comprises detecting that the first asset has been combined with a second asset. ### Claim 6 (depends on 1) The method of claim 1, wherein the detecting a content change comprises detecting that the first asset has been divided. ### Claim 7 (depends on 1) The method of claim 1, wherein the first security level is lower than the second different security level. ### Claim 8 A system comprising: one or more processors; one or more non-transitory computer-readable storage media storing computer-readable instructions which, when executed by the one or more processors, perform operations comprising: participating, by an appliance, in a shared workspace with one or more other appliances, said participating taking place via one or more networks that enable said appliance and said one or more other appliances to share assets, wherein a first asset of the shared assets has a first security level indicated in metadata associated with the first asset; causing the first asset to be directed to a first storage location, from a collection of locations, based upon a location security level associated with each location of the collection of locations, the first location at which the first asset is stored having a location security level that is at least commensurate with or more secure than the indicated security level the first asset, wherein the first location at which the first asset is stored is remote from said appliance; and detecting a content change to the first asset that causes modification of the first security level to a second different security level; and responsive to modification of the first security level to the second different security level, dynamically directing the first asset to be stored at a second storage location, from the collection of locations, the second storage location having a location security level that is at least commensurate with or more secure than the second different security level of the first asset. ### Claim 9 (depends on 8) The system of claim 8, wherein the detecting a content change comprises detecting that the first asset has been edited. ### Claim 10 (depends on 8) The system of claim 8, wherein the detecting a content change comprises detecting that information has been added to the first asset. ### Claim 11 (depends on 8) The system of claim 8, wherein the detecting a content change comprises detecting that information has been removed from the first asset. ### Claim 12 (depends on 8) The system of claim 8, wherein the detecting a content change comprises detecting that the first asset has been combined with a second asset. ### Claim 13 (depends on 8) The system of claim 8, wherein the detecting a content change comprises detecting that the first asset has been divided. ### Claim 14 (depends on 8) The system of claim 8, wherein the first security level is lower than the second different security level. ### Claim 15 One or more non-transitory computer-readable storage media storing computer readable instructions which, when executed, perform operations comprising: participating, by an appliance, in a shared workspace with one or more other appliances, said participating taking place via one or more networks that enable said appliance and said one or more other appliances to share assets, wherein a first asset of the shared assets has a first security level indicated in metadata associated with the first asset; causing the first asset to be directed to a first storage location, from a collection of locations, based upon a location security level associated with each location of the collection of locations, the first location at which the first asset is stored having a location security level that is at least commensurate with or more secure than the indicated security level the first asset, wherein the first location at which the first asset is stored is remote from said appliance; detecting a content change to the first asset that causes modification of the first security level to a second different security level; and responsive to modification of the first security level to the second different security level, dynamically directing the first asset to be stored at a second storage location, from the collection of locations, the second storage location having a location security level that is at least commensurate with or more secure than the second different security level of the first asset. ### Claim 16 (depends on 15) The one or more non-transitory computer-readable storage media of claim 15, wherein the detecting a content change comprises detecting that the first asset has been edited. ### Claim 17 (depends on 15) The one or more non-transitory computer-readable storage media of claim 15, wherein the detecting a content change comprises detecting that information has been added to the first asset. ### Claim 18 (depends on 15) The one or more non-transitory computer-readable storage media of claim 15, wherein the detecting a content change comprises detecting that information has been removed from the first asset. ### Claim 19 (depends on 15) The one or more non-transitory computer-readable storage media of claim 15, wherein the detecting a content change comprises detecting that the first asset has been combined with a second asset. ### Claim 20 (depends on 15) The one or more non-transitory computer-readable storage media of claim 15, wherein the detecting a content change comprises detecting that the first asset has been divided.