# US 12,111,943 B2 · Enhanced security mechanism for file access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,111,943 B2 - Document ID: US12111943B2 - Status: Granted - Kind: B2 - Application number: 16/942,142 - Filed: 2020-07-29 - Published: 2022-02-03 - Granted: 2024-10-08 - Earliest claimed: 2020-07-07 - Assignees: Citrix Systems, Inc. - Applicants: Citrix Systems, Inc. - Inventors: Zongpeng Qiao; Xiaolu Chu; Ke Xu; Ze Chen - Web page: https://patentgrep.com/patent/US12111943B2 ## CPC - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F 9/452: {Remote windowing, e.g. X-Window System, desktop virtualisation (protocols for virtual reality H04L67/131)} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/542: {Event management; Broadcasting; Multicasting; Notifications} - G06F 16/168: {Details of user interfaces specifically adapted to file systems, e.g. browsing and visualisation, 2d or 3d GUIs (query results presentation G06F16/156)} - G06F 21/31: User authentication - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 8/61: Installation - G06F 2009/45579: {I/O management, e.g. providing access to device drivers or storage} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems for providing secure file sharing are described herein. A computing device may receive data from a resource provider in response to a request received by the resource provider. The data may include information about a user of a client device that made the request for a file and information about the file, and the request may be for access to the file and made by the user with an owner of the requested file being unknown to the user. The computing device may parse the received data to identify a subset of data. The subset of data may be configured to enable the owner to determine whether to permit the user to access to the file. Further, the computing device may provide a notification, which includes at least some of the subset of data, to an endpoint device of the owner. ## Claims ### Claim 1 A method, comprising: receiving, by a computing device, a request to access a file, wherein the file is stored on a network storage device accessible by the computing device, and wherein an identity of a first user associated with the file is hidden from at least a second user of the request; retrieving, from the request, information about the second user and file information; generating a notification, wherein the notification comprises the information about the second user and the file information, and wherein the notification is stored in a database; sending the notification to a first user device of the first user, wherein the notification comprises a push notification identifying the information about the second user and the file information; receiving a response from the first user device, wherein the response comprises an indication of approval or denial of the request; and in response to approval of the request, permitting the second user to access the file, or in response to denial of the request, preventing the second user from accessing the file, wherein the network storage device is configured to present a user interface that includes an option for uploading the file anonymously. ### Claim 2 (depends on 1) The method of claim 1, wherein the retrieving comprises retrieving, by a micro application executed on the computing device and from the request, the information about the second user and the file information. ### Claim 3 (depends on 1) The method of claim 1, wherein the sending comprises sending the notification to an application installed on the first user device, and the file is uploaded using the installed application. ### Claim 4 (depends on 1) The method of claim 1, wherein the request to access the file is initiated by a plugin installed on the network storage device. ### Claim 5 (depends on 1) The method of claim 1, wherein at least a portion of a name of the file is hidden from at least the second user. ### Claim 6 (depends on 1) The method of claim 1, further comprising: after retrieving the information about the second user and the file information, causing display of the notification via a user interface on the first user device. ### Claim 7 (depends on 1) The method of claim 1, wherein a title of the file is obfuscated by the first user, and wherein the identity of the first user and the title of the file is stored in a database. ### Claim 8 An apparatus comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the apparatus to: receive a request to access a file, wherein the file is stored on a network storage device accessible by the apparatus, and wherein an identity of a first user associated with the file is hidden from at least a second user of the request; retrieve, from the request, information about the second user and file information; generate a notification, wherein the notification comprises the information about the second user and the file information, and wherein the notification is stored in a database; send a notification to a first user device of the first user, wherein the notification comprises a push notification identifying the information about the second user and the file information; receive a response from the first user device, wherein the response comprises an indication of approval or denial of the request; and in response to approval of the request, permit the second user to access the file, or in response to denial of the request, prevent the second user from accessing the file, wherein the network storage device is configured to present a user interface that includes an option for uploading the file anonymously. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein the instructions, when executed by the one or more processors, further cause the apparatus to retrieve, by a micro application executed on the apparatus and from the request, the information about the second user and the file information. ### Claim 10 (depends on 8) The apparatus of claim 8, wherein the instructions, when executed by the one or more processors, further cause the apparatus to send the notification to an application installed on the first user device, and wherein the file is uploaded using the installed application. ### Claim 11 (depends on 8) The apparatus of claim 8, wherein the request to access the file is initiated by a plugin installed on the network storage device. ### Claim 12 (depends on 8) The apparatus of claim 8, wherein the request to access the file comprises at least one of a request for read access, a request for write access, a request for download access, a request for share access, and a request for comment access. ### Claim 13 (depends on 8) The apparatus of claim 8, wherein at least a portion of a name of the file is hidden from at least the second user. ### Claim 14 (depends on 8) The apparatus of claim 8, wherein the instructions, when executed by the one or more processors, further cause the apparatus to cause display of the notification via a user interface on the first user device, after retrieving the information about the second user and the file information. ### Claim 15 A method, comprising: receiving, by a computing device, data from a resource provider in response to a request received by the resource provider, the data including information about a user of a client device that made the request for a file and information about the file, and the request being for access to the file and made by the user with an owner of the requested file being unknown to the user; parsing, by the computing device, the received data to identify a subset of data, the subset of data configured to enable the owner to determine whether to permit the user to access the file; generating, by the computing device, a notification, wherein the notification comprises the information about the second user and the file information, and wherein the notification is stored in a database; and providing, by the computing device, the notification to an endpoint device of the owner, the notification including at least some of the subset of data, wherein the notification is a push notification, wherein the resource provider is configured to present a user interface that includes an option for uploading the file anonymously. ### Claim 16 (depends on 15) The method of claim 15, further comprising: receiving a response from the endpoint device of the owner, the response comprising an indication of approval or denial of the request. ### Claim 17 (depends on 16) The method of claim 16, further comprising: in response to the response indicating the request is approved, allowing the user to access the file, or in response to the response indicating the request is denied, preventing access to the file by the user. ### Claim 18 (depends on 15) The method of claim 15, wherein the subset of data comprises at least a name of the user. ### Claim 19 (depends on 15) The method of claim 15, wherein the file is uploaded to the resource provider using the endpoint device of the owner. ### Claim 20 (depends on 15) The method of claim 15, wherein the request for access to the file comprises at least one of a request for read access, a request for write access, a request for download access, a request for share access, and a request for comment access.