Granted Patent B2

US 9,258,291 · App. 14/135,332 · Granted Feb 9, 2016

Abstract

Claims (71)

1. A method comprising:

while a client device is authorized to access a user account on a content management system, receiving, by a processor of the content management system, an installation request to install a client-side application on the client device, the installation request originating from a web-browser application running on the client device;

generating an identification tag for the installation request;

transmitting a client installer tagged with the identification tag and a web browser identifier identifying the web browser application from which the installation request originated, wherein the client installer is configured to:

install the client-side application on the client device,

generate an authentication key, and

upon the client-side application being successfully installed on the client device, cause the web-browser application to transmit an authorization message to the content management system, the authorization message including:

data cached by the web browser application,

the identification tag, and

the authentication key;

receiving the authentication message from the client device;

associating the authentication key with the installation request; and

upon receiving a pre-authorization request including the identification tag and the authentication key, authorizing the client-side application to access the user account on the content management system.

2. The method of claim 1 , further comprising:

receiving, from the client device, login credentials transmitted by the web-browser application;

determining that the login credentials are associates with the user account; and

authorizing the web-browser application on the client device to access the user account.

3. The method of claim 1 , further comprising:

creating an entry in a pre-authorization index, the entry including:

the identification tag,

an account identifier identifying the user account,

a creation time of the identification tag, and

an IP address.

4. The method of claim 3 , further comprising:

determining that the identification tag has not expired when a the pre-authorization request was received within a predetermined amount of time after the creation time of the identification tag.

5. The method of claim 3 , further comprising:

identifying a requesting IP address that the pre-authorization request was received from;

determining that the identification tag was received from an authorized IP address when the requesting IP address matches the IP address in the entry in the pre-authorization index.

6. The method of claim 5 , wherein the IP address included in the entry in the pre-authorization index is the IP address that the installation request was received from.

7. The method of claim 3 , further comprising:

determining that the identification tag has not been previously used to pre-authorize the client-side application, wherein the identification tag can only be used once to pre-authorize the client-side application.

8. The method of claim 7 , further comprising:

upon authorizing the client-side application to access the user account on the content management system, flagging the entry in the pre-authorization index to indicate that the identification tag has been used to pre-authorize the client side application.

9. A content management system comprising:

a processor; and

a memory containing instructions that, when executed, cause the processor to:

receive an installation request to install a client-side application on a client device;

determine that the installation request is associated with a user account;

generate, by the content management system, an identification tag for the installation request;

transmit, to the client device, a client installer tagged with the identification tag, wherein the client installer is configured to install the client-side application on the client device;

receive a pre-authorization request including the identification tag;

determine that the pre-authorization request was received within a predetermined amount of time after the identification tag was generated; and

authorize the client-side application to access the user account.

10. The content management system of claim 9 , wherein determining that the installation request is associated with the user account comprises:

determining that the client device was authorized to access the user account when the installation request was received.

11. The content management system of claim 9 , wherein the instructions further cause the processor to:

create an entry in a pre-authorization index, the entry including:

the identification tag,

a creation time for the identification tag, and

an account identifier identifying the user account.

12. The content management system of claim 11 , wherein the instructions further cause the processor to:

locate the entry in the pre-authorization index including the identification tag; and

identify the user account based on the account identifier included in the entry.

13. The content management system of claim 12 , wherein determine that the pre-authorization request was received within a predetermined amount of time after the identification tag was generated comprises:

comparing a request time that the pre-authorization request was received to the creation time for the identification tag.

14. The content management system of claim 11 , wherein the entry in the pre-authorization index further includes an IP address associated with the installation request, the instructions further causing the processor to:

determine that the pre-authorization request was received from an authorized IP address when an IP address associated with the pre-authorization request matches the IP address associated with the installation request.

15. The content management system of claim 11 , wherein the instructions further cause the processor to:

upon authorizing the client-side application to access the user account, mark the index in the pre-authorization index to indicate that the identification tag has been used to pre-authorize the client-side application.

16. A non-transitory computer-readable medium containing instructions that, when executed by a computing device, cause the computing device to:

receive an installation request to install a client-side application on a client device;

determine that the installation request is associated with a first user account and a second user account;

generate, by a content management system, an identification tag for the installation request;

transmit, to the client device, a client installer tagged with the identification tag, wherein the client installer is configured to install the client-side application on the client device;

receive a pre-authorization request including the identification tag;

determine that at least one verification measure is satisfied; and

authorize the client-side application to access the first user account and the second user account.

17. The non-transitory computer-readable medium of claim 16 , wherein the at least one verification measure is that the identification tag has not been used to pre-authorize the client-side application.

18. The non-transitory computer-readable medium of claim 16 , wherein the at least one verification measure is that the identification tag is not expired.

19. The non-transitory computer-readable medium of claim 18 , where the identification tag expires after a pre-determined time elapses after the identification tag was created.

20. The non-transitory computer-readable medium of claim 16 , wherein the at least one verification measure is that the pre-authorization request and the installation request were received from the same IP address.

Assignments (8)