Rachel Ann Lambert

US Patent:

20160065555, Mar 3, 2016

Filed:

Aug 27, 2015

Appl. No.:

14/838212

Inventors:

- Los Altos CA, US
Daniel Theurer - Mountain View CA, US
Aniket Shivajirao Patil - Milpitas CA, US
Lev Kantorovskiy - Mountain View CA, US
Sean Andrew Rose - San Francisco CA, US
Rachel Kay Lambert - San Francisco CA, US
Peter Otto Rexer - San Carlos CA, US
Rory Arend Paap - Palo Alto CA, US
Charles Boyd Burnette - Wake Forest NC, US
Vikram Sudhir Sardesai - San Jose CA, US
Dominic Anton Grillo - Mountain View CA, US
Wayne Cheng - Fremont CA, US
Lyall Yatsun Chun - San Jose CA, US
Steven Brett Hackney - Mountain View CA, US

Assignee:

BOX, INC. - Los Altos CA

International Classification:

H04L 29/06

Abstract:

Systems for managing user-level security in a cloud-based service platform. A server in a cloud-based environment is configured to interface with storage devices that store objects that are accessible over a network by two or more users. An enterprise entity is identified using an enterprise identifier associated with the enterprise, and an application service is associated with an application identifier. An application service request comprising a user identifier and the application identifier is received, and authentication is determined based on the combination of the user identifier and a pre-authenticated application identifier. Once the application service request is authenticated, then specific aspects of the service request are authorized. The integrity of the application identifier is confirmed by locating a secure association of the given application identifier to a pre-shared enterprise identifier. Logging, auditing and other functions can be performed at the user level using the user identifier for user-level tracking.