Secure storage and maintenance of potentially sensitive file downloads
One disclosed method involves detecting a request to download a file, via a network, to a first storage medium associated with a client device, and determining that the file is potentially sensitive. The method further involves initiating a process to download the file to a second storage medium rather than the first storage medium based at least in part on the file being potentially sensitive.
1 . A method, comprising:
detecting, by a client device, a first request to download a first file, via a network, to a first storage medium associated with the client device;
determining, by the client device, that the first file is potentially sensitive, based at least in part on sensitivity criteria applied to the first request and the first file; and
based at least in part on the first file being potentially sensitive, initiating, by the client device, a process to download the first file to a second storage medium rather than the first storage medium.
2 . The method of claim 1 , wherein initiating the process to download the first file to the second storage medium comprises:
causing the client device to present a prompt requesting authorization to download the first file to the second storage medium, and the method further comprises:
determining that a user input authorizing downloading of the first file to the second storage medium has been received; and
causing, based at least in part on the receipt of the user input, the first file to be downloaded to the second storage medium rather than the first storage medium.
3 . The method of claim 1 , wherein the first file is determined to be potentially sensitive based at least in part on a web domain from which the first file is to be downloaded.
4 . The method of claim 1 , wherein the first file is determined to be potentially sensitive based at least in part on metadata associated with the first file.
5 . The method of claim 1 , wherein the first file is determined to be potentially sensitive based at least in part on content of the first file.
6 . The method of claim 1 , further comprising:
detecting a second request to download a second file, via the network, to the first storage medium associated with the client device;
determining that the second file is unlikely to be sensitive; and
based at least in part on the second file being unlikely to be sensitive, initiating a process to download the second file to the first storage medium.
7 . The method of claim 6 , further comprising:
downloading the second file to the first storage medium;
determining that an amount of time that has elapsed since the second file on the first storage medium has been accessed exceeds a threshold; and
based at least in part on the amount of time exceeding the threshold, causing the client device to present a first prompt.
8 . The method of claim 1 , wherein initiating the process to download the first file to the second storage medium further comprises:
sending a hyperlink to a remote application that is configured to use the hyperlink to download the first file to the second storage medium.
9 . The method of claim 8 , wherein the remote application is further configured to use access credentials associated with a user of the client device to authenticate to the second storage medium to enable secure storage of the first file in the second storage medium.
10 . A computing system of a client device, the computing system comprising:
at least one processor; and
at least one computer-readable medium encoded with instructions which, when executed by the at least one processor, cause the computing system to:
detect a first request to download a first file, via a network, to a first storage medium associated with the client device;
determine that the first file is potentially sensitive, based at least in part on sensitivity criteria applied to the first request and the first file; and
based at least in part on the first file being potentially sensitive, initiate a process to download the first file to a second storage medium rather than the first storage medium.
11 . The computing system of claim 10 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the computing system to cause the computing system to initiate the process to download the first file to the second storage medium at least in part by:
causing the client device to present a prompt requesting authorization to download the first file to the second storage medium;
determining that a user input authorizing downloading of the first file to the second storage medium has been received; and
causing, based at least in part on the receipt of the user input, the first file to be downloaded to the second storage medium rather than the first storage medium.
12 . The computing system of claim 10 , wherein the first file is determined to be potentially sensitive based at least in part on a web domain from which the first file is to be downloaded.
13 . The computing system of claim 10 , wherein the first file is determined to be potentially sensitive based at least in part on metadata associated with the first file.
14 . The computing system of claim 10 , wherein the first file is determined to be potentially sensitive based at least in part on content of the first file.
15 . The computing system of claim 10 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the computing system to:
detect a second request to download a second file, via the network, to the first storage medium associated with the client device;
determine that the second file is unlikely to be sensitive; and
based at least in part on the second file being unlikely to be sensitive, initiate a process to download the second file to the first storage medium.
16 . The computing system of claim 15 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the computing system to:
download the second file to the first storage medium;
determine that an amount of time that has elapsed since the second file on the first storage medium has been accessed exceeds a threshold; and
based at least in part on the amount of time exceeding the threshold, cause the client device to present a first prompt.
17 . The computing system of claim 10 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the computing system to initiate the process to download the first file to the second storage medium at least in part by:
sending a hyperlink to a remote application that is configured to use the hyperlink to download the first file to the second storage medium.
18 . The computing system of claim 17 , wherein the remote application is further configured to use access credentials associated with a user of the client device to authenticate to the second storage medium to enable secure storage of the first file in the second storage medium.
19 . At least one non-transitory computer-readable medium encoded with instructions which, when executed by at least one processor of a client device, cause the client device to:
detect a first request to download a first file, via a network, to a first storage medium associated with the client device;
determine that the first file is potentially sensitive, based at least in part on sensitivity criteria applied to the first request and the first file; and
based at least in part on the first file being potentially sensitive, initiate a process to download the first file to a second storage medium rather than the first storage medium.
20 . The at least one non-transitory computer-readable medium of claim 19 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the client device to initiate the process to download the first file to the second storage medium at least in part by:
causing the client device to present a prompt requesting authorization to download the first file to the second storage medium;
determining that a user input authorizing downloading of the first file to the second storage medium has been received; and
causing, based at least in part on the receipt of the user input, the first file to be downloaded to the second storage medium rather than the first storage medium.