IP Library Granted Patent US 10,114,962
Granted Patent B2
US 10,114,962 · App. 15/158,423 · Granted Oct 30, 2018

Generating a stub file corresponding to a classified data file

Inventor: Changxiong Lin (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
G06F21/6209G06F3/06G06F17/30G06F17/30082G06F21/53G06F21/6272H04L29/00H04L63/10H04L63/101H04L63/102H04L63/105H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,114,962
App. No.
15/158,423
Granted
Oct 30, 2018
Kind
B2
Abstract

Protecting data files is disclosed, including: in response to an indication that a data file has been generated by a client device, determining a security classification associated with the data file; determining that the security classification associated with the data file comprises a classified file; storing the data file in a designated virtual storage area; and generating a stub file at an original storage location of the data file, wherein the stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area.

Claims (84)

1. A method, comprising:

in response to an indication that a data file has been generated by a first client device, determining a security classification associated with the data file;

determining that the security classification associated with the data file comprises a classified file;

storing, using one or more processors, the data file in a designated virtual storage area;

generating a first stub file at an original storage location of the data file, wherein the first stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area;

receiving a first instruction from a first user to share the data file with a second user;

determining user information associated with the second user;

determining that the second user has permission to access the data file based at least in part on the user information associated with the second user; and

sending a second instruction to a second client device associated with the second user, wherein the second instruction is configured to generate a second stub file corresponding to the data file at the second client device associated with the second user, wherein the second stub file is configured to be usable to obtain the data file in the designated virtual storage area.

2. The method of claim 1 , wherein the designated virtual storage area is associated with a cloud server.

3. The method of claim 1 , wherein determining the security classification associated with the data file comprises:

comparing content information associated with the data file against a preset condition; and

determining the security classification based at least in part on a result of the comparison.

4. The method of claim 1 , wherein the security classification associated with the data file is set by a third user.

5. The method of claim 1 , further comprising storing the first stub file at the original storage location associated with the data file.

6. The method of claim 1 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application.

7. The method of claim 1 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application including by:

transmitting information included in the first stub file to a cloud server associated with the designated virtual storage area; and

receiving a user interface associated with a document editor program from the cloud server.

8. The method of claim 1 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application including by:

transmitting information included in the first stub file to a cloud server associated with the designated virtual storage area;

receiving a user interface associated with a document editor program from the cloud server;

receiving an operation to be performed on the data file via the user interface; and

sending the operation to the cloud server.

9. A computer program product, the computer program product comprising a non-transitory computer readable storage medium and comprising computer instructions for:

in response to an indication that a data file has been generated by a first client device, determining a security classification associated with the data file;

determining that the security classification associated with the data file comprises a classified file;

storing the data file in a designated virtual storage area;

generating a first stub file at an original storage location of the data file, wherein the first stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area;

receiving a first instruction from a first user to share the data file with a second user;

determining user information associated with the second user;

determining that the second user has permission to access the data file based at least in part on the user information associated with the second user; and

sending a second instruction to a second client device associated with the second user, wherein the second instruction is configured to generate a second stub file corresponding to the data file at the second client device associated with the second user, wherein the second stub file is configured to be usable to obtain the data file in the designated virtual storage area.

10. The computer program product of claim 9 , wherein the designated virtual storage area is associated with a cloud server.

11. The computer program product of claim 9 , wherein determining the security classification associated with the data file comprises:

comparing content information associated with the data file against a preset condition; and

determining the security classification based at least in part on a result of the comparison.

12. The computer program product of claim 9 , wherein the security classification associated with the data file is set by a third user.

13. The computer program product of claim 9 , further comprising storing the first stub file at the original storage location associated with the data file.

14. The computer program product of claim 9 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application.

15. The computer program product of claim 9 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application including by:

transmitting information included in the first stub file to a cloud server associated with the designated virtual storage area; and

receiving a user interface associated with a document editor program from the cloud server.

16. The computer program product of claim 9 , further comprising:

receiving a user selection associated with the first stub file to access the data file;

determining whether a third user associated with the user selection has permission to access the data file;

in the event that the third user has permission to access the data file, executing a virtual application corresponding to the data file; and

providing access to the data file at the designated virtual storage area using the virtual application including by:

transmitting information included in the first stub file to a cloud server associated with the designated virtual storage area;

receiving a user interface associated with a document editor program from the cloud server;

receiving an operation to be performed on the data file via the user interface; and

sending the operation to the cloud server.

17. A system, comprising:

one or more processors configured to:

in response to an indication that a data file has been generated by a first client device, determine a security classification associated with the data file;

determine that the security classification associated with the data file comprises a classified file;

store the data file in a designated virtual storage area;

generate a first stub file at an original storage location of the data file, wherein the first stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area;

receive a first instruction from a first user to share the data file with a second user;

determine user information associated with the second user;

determine that the second user has permission to access the data file based at least in part on the user information associated with the second user; and

send a second instruction to a second client device associated with the second user, wherein the second instruction is configured to generate a second stub file corresponding to the data file at the second client device associated with the second user, wherein the second stub file is configured to be usable to obtain the data file in the designated virtual storage area; and

one or more memories coupled to the one or more processors and configured to provide instructions to the one or more processors.

18. The system of claim 17 , wherein the designated virtual storage area is associated with a cloud server.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2016
From: LIN, CHANGXIONG
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 038750/0743 →
Priority Claims (1)
CN 2015 1 0295401 · Jun 2, 2015 · national
Continuity (1)
Related Publication 20160357978A1 · Dec 8, 2016