Distributed Security Analysis for Shared Content
AssigneeCitrix Systems, Inc.
InventorsRamanjaneya Reddy Kamalapuram, Praveen Raja Dhanabalan
Life of this patent
Estimating the term…
Abstract
Methods and systems for providing a cost effective and robust security solution for shared files stored by file sharing software solutions are described herein. The methods and systems for generating a ledger associated with shared files, which may include scanning data received from applications associated with a number of client devices and from a cloud based scanner. An access manager may control file permissions granted to users based on requests for scan data from each user device requesting access to a shared file. A plurality of different scanning applications may provide data that is collected for each shared file to provide a diverse analysis of a shared file to increase user confidence in a file security status.
Claims20
A method comprising:
- storing, in a network storage system, a shared file received from a first user device;
- receiving, by the network storage system and from the first user device, scan data associated with the shared file;
- generating, by the network storage system, a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file;
- receiving, at the network storage system, scan data from one or more additional user devices;
- determining, by the network storage system, that the shared file is a valid file to share with users of the network storage system based on the scan data from one or more of the first user device and the one or more additional user devices;
- updating, by the network storage system and in response to the receipt of scan data from the one or more additional user devices, the ledger of the shared file in the network storage system;
- and
- providing, by the network storage system and based on the determination, permission to access the shared file to the one or more additional user devices.
An apparatus, comprising:
- at least one processor;
- and
- memory storing executable instructions configured to, when executed by the at least one processor, cause the apparatus to:
- store a shared file in a network storage system;
- requesting, from a first device, scan data associated with the shared file;
- generate a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file;
- receive a request from a second user device to access the shared file stored on the network storage system;
- in response to receiving the request to access the shared file, request scan data from the second user device;
- update, based on a response to the request for scan data from the second user device, the ledger of the shared file in the network storage system;
- and
- transmit, based on a positive result in the scan data from the second user device, write permission for the shared file to the second user device.
One or more non-transitory computer-readable media storing instructions configured to, when executed, cause a computing device to:
- store a shared file in a network storage system;
- requesting, from a first device, scan data associated with the shared file;
- generate a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file;
- receive a request from a second user device to access the shared file stored on the network storage system;
- in response to receiving the request to access the shared file, request scan data from the second user device;
- update, based on a response to the request for scan data from the second user device, the ledger of the shared file in the network storage system;
- and
- transmit, based on a positive result in the scan data from the second user device, write permission for the shared file to the second user device.
Dependencies are inferred from the claim text.