Secure area in a file storage system

A system for controlling access to data, the system comprising:

• one or more hardware data processing units;
• and
• a non-transitory computer-readable medium having encoded thereon computer-executable instructions to cause the one or more hardware data processing units to perform operations comprising:
• storing files and folders associated with a user account, the files and folders requiring an authentication protocol for access to the files and folders, the files and folders uploaded to a cloud-based storage service and accessible by users having access to the uploaded files and folders via the user account;
• receiving a first request from the user account, to cause a selected folder of the files and folders to be associated with a heightened authentication protocol;
• in response to the first request, causing the selected folder to require the heightened authentication protocol for access, wherein files in the selected folder are restricted from file sharing capability while the selected folder is associated with the heightened authentication protocol, and wherein files moved into the selected folder require the heightened authentication protocol for access without applying the heightened authentication protocol to an entirety of the files and folders associated with the user account or individually applying the heightened authentication protocol to individual files;
• receiving a second request from the user account for access to the selected folder that is associated with the heightened authentication protocol;
• authenticating the second request based on the heightened authentication protocol;
• in response to authenticating the second request, granting a session to access the selected folder and files that are stored in the selected folder that is associated with the heightened authentication protocol,
• wherein visibility to the selected folder and files is provided in response to requests from applications that include an indication that the applications are configured to interact with files and folders that are associated with the heightened authentication protocol;
• and
• in response to a failure to authenticate the second request, denying access to the selected folder and files that are stored in the selected folder that is associated with the heightened authentication protocol, while allowing access to other folders associated with the user account based on other authentication mechanisms associated with the user account, wherein visibility to the selected folder and files is hidden in response to requests from applications that do not include the indication that the applications are configured to interact with files and folders that are associated with the heightened authentication protocol.

A computing device comprising:

• one or more hardware data processing units;
• and
• a non-transitory computer-readable medium having encoded thereon computer-executable instructions to cause the one or more hardware data processing units to perform operations comprising:
• receiving a first request to cause a selected folder of files and folders of a storage area to be associated with a heightened authentication protocol, the selected folder of the storage area associated with a user account, the files and folders requiring an authentication protocol for access to the files and folders, the files and folders uploaded to a cloud-based storage service and accessible by users having access to the uploaded files and folders via the user account;
• in response to the first request, causing the selected folder of the storage area to require the heightened authentication protocol for access, wherein files in the selected folder are restricted from file sharing capability while the selected folder is associated with the heightened authentication protocol, and wherein files moved into the selected folder require the heightened authentication protocol for access without applying the heightened authentication protocol to an entirety of the files and folders associated with the user account or individually applying the heightened authentication protocol to individual files;
• receiving a second request from the user account to access a file that is stored in the selected folder that is associated with the heightened authentication protocol;
• authenticating the second request based on the heightened authentication protocol;
• in response to authenticating the second request, granting a session to access the file that is stored in the selected folder associated with the heightened authentication protocol, wherein visibility to the file is provided in response to requests from applications that include an indication that the applications are configured to interact with files and folders that are associated with the heightened authentication protocol;
• and
• in response to a failure to authenticate the second request, denying access to the file that is stored in the selected folder associated with the heightened authentication protocol, while allowing access to other areas associated with the user account based on a different authentication mechanism associated with the user account, wherein visibility to the selected folders and files is hidden in response to requests from applications that do not include the indication that the applications are configured to interact with files and folders that are associated with the heightened authentication protocol.