Access to documents in a document management and collaboration system
AssigneeAmazon Technologies, Inc.
InventorJonathan Matthew Miller
Life of this patent
Estimating the term…
Abstract
A method and apparatus for securing access to a document stored by a document management and collaboration system are disclosed. In the method and apparatus, access credentials pertaining to a document are obtained, whereby the access credentials are usable for authenticating a request to access the document. A message including the access credentials is then sent out-of-band in relation to a notification indicating availability of the document for access. The document management and collaboration system then receives a request to access the document, whereby the request includes the access credentials, and authenticates the request based at least in part on the access credentials.
Claims20
A computer-implemented method, comprising:
- receiving, by a document management and collaboration system, a request to make a document available for access by a second user, the request to make the document available for access being initiated by a first user of the document management and collaboration system;
- in response to receiving the request to make the document available for access, causing a first message to be sent to a first address associated with the second user, the first message including an indication that the document is made available for access;
- obtaining access credentials usable for authenticating a request to access the document by at least generating the access credentials based at least in part on information specified by the first user for use in authenticating the second user;
- causing the access credentials to be sent to a second address associated with the second user, the second address being different than the first address and associated with a first computing device operated by the second user;
- causing the access credentials to be provided from the first computing device to a second computing device associated with the second user and different from the first computing device;
- receiving, from the second computing device, a request to access the document, the request to access the document including the access credentials;
- and
- making the document accessible in response to authenticating the request to access the document based at least in part on the access credentials.
A system, comprising:
- at least one computing device implementing one or more services, wherein the one or more services:
- obtain access credentials for a document stored by a document management and collaboration system, the access credentials usable for authenticating a request to access the document and generated based at least in part on information provided by a second entity associated with the document;
- cause a message addressed to a first entity including the access credentials to be sent to a computing device associated with the first entity, the message being sent out-of-band in relation to a notification indicating availability of the document for access;
- receive, from a second computing device associated with the first entity a request to access the document, the request including the access credentials obtained from the computer device;
- and
- authenticate the request based at least in part on the access credentials.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:
- obtain access credentials for authenticating access to a document stored by a document management and collaboration system, the access credentials generated based at least in part on information provided by a user of the document management and collaboration system;
- cause a first message including access credentials for the document to be sent to a first address, the first message being sent on a different communication channel than a notification indicating availability of the document for access, the first message being sent to a different device than a device the notification indicating availability of the document for access is sent to;
- receive a request to access the document based at least in part on credentials information, where the credentials are provided by the different device to the device;
- and
- authenticate the request based at least in part on the access credentials and the credentials information.
Dependencies are inferred from the claim text.