Server-side rendering password protected documents

Patent metadata

Field	Value
Publication number	US-11216568-B2
Application number	US-201815866837-A
Country	US
Kind code	B2
Filing date	Jan 10, 2018
Priority date	Jan 10, 2018
Publication date	Jan 4, 2022
Grant date	Jan 4, 2022

Abstract

In some examples, a system for server-side rendering of password-protected files can receive, from a client device, a request to view a file on the system, determine that the file should be converted to a different format prior to presentation at the client device, and determine that the file is a password-protected file. The system can send a response to the client device indicating the file is a password-protected file. In response to receiving the password from the client device, the system can generate, based on the password, a preview of the password-protected file including at least a portion of the password-protected file rendered in the different format. After generating the preview, the system can store an encrypted copy of the preview in storage for future requests, and send the preview to the client device.

First claim

What is claimed is:

1. A method comprising:
receiving, through a web interface service of a content management system, from a client application at a client device, an initial request to view a password-protected file on the content management system;
in response to receiving the initial request, determining, by the content management system, that a preview of the password-protected file is not stored in a cache of the content management system;
in response to the determination, receiving a password from the client device and generating a token based on the received password;
sending, to the client device, a message with the token, the message configured to prompt the client device to retry requesting the password-protected file with the token;
after receiving, from the client device, a second request comprising the token, generating, by the content management system, the preview of the password-protected file, based on the received password supplied by the token, by converting the password-protected file from an original format to a different format to yield the preview, the preview comprising at least a portion of the password-protected file rendered for the client application;
encrypting, by the content management system, the preview based on the received password supplied by the token to yield an encrypted copy of the preview stored in the cache; and
sending, through the web interface service of the content management system in response to the second request, a decrypted copy of the preview to the client device that was decrypted at the content management system using the received password from the token.

2. The method of claim 1 , wherein generating the preview of the password-protected file comprises:
extracting the received password from the token in the second request; and
accessing the password-protected file with the received password.

3. The method of claim 2 , wherein converting the password-protected file from the original format to the different format to yield the preview involves converting one or more intermediate formats.

4. The method of claim 1 , further comprising:
prior to generating the preview, searching for the preview in storage based on at least one of the second request or the token in the second request; and
generating the preview after determining that the preview is not available in storage.

5. The method of claim 4 , further comprising:
receiving, from the client device, a third request to view the password-protected file, the third request comprising the token;
in response to the third request, searching for the preview in storage based on at least one of the third request or the token in the third request;
based on the searching, determining the encrypted copy of the preview is available in storage;
extracting the encrypted copy of the preview from storage;
decrypting the encrypted copy of the preview to yield the preview, the encrypted copy being decrypted using at least one of the third request, the token, or the received password; and
sending the preview to the client device in response to the third request.

6. The method of claim 1 , further comprising:
determining that the password-protected file is password-protected comprising:
attempting to generate the preview of the password-protected file; and
detecting an error when attempting to generate the preview without the password associated with the password-protected file.

7. The method of claim 6 , further comprising based on the error, sending, to the client device, a password error configured to trigger a password prompt.

8. The method of claim 1 , wherein the password-protected file comprises a password-protected portable document format (PDF) file, and wherein generating the preview comprises converting the password-protected PDF file to a rendered file format, the rendered file format comprising at least one of a text layer or an image layer.

9. The method of claim 8 , wherein converting the password-protected PDF file to the rendered file format comprises:
extracting, from the password-protected PDF file, at least one of the text layer or the image layer; and
converting the at least one of the text layer or the image layer to the rendered file format.

10. A non-transitory computer-readable medium comprising instructions stored therein which, when executed by one or more processors, cause the one or more processors to:
receive, through a web interface service of a content management system, from a client application at a client device, an initial request to view a password-protected file on the content management system;
determine, by the content management system, that the password-protected file should be converted to a different format to yield a preview at the client device;
in response to receiving the initial request, determine, by the content management system, that the preview of the password-protected file is not stored in a cache of the content management system;
in response to the determination that the preview of the password-protected file is not stored in the cache, receive a password from the client device and generate a token based on the received password;
send, to the client device, a message with the token, the message configured to prompt the client device to retry requesting the password-protected file with the token;
after receiving, from the client device, a second request comprising the token
generate, by the content management system, the preview of the password-protected file, based on the received password supplied by the token, by converting the password-protected file from an original format to a different format to yield the preview, the preview comprising at least a portion of the password-protected file rendered in the different format;
encrypt, by the content management system, the preview based on the received password supplied by the token to yield an encrypted copy of the preview stored in the cache; and
send, through the web interface service of the content management system in response to the second request, a decrypted copy of the preview to the client device that was decrypted at the content management system using the received password from the token.

11. The non-transitory computer-readable medium of claim 10 , wherein generating the preview of the password-protected file comprises:
extracting the received password from the token in the second request; and
accessing the password-protected file with the received password.

12. The non-transitory computer-readable medium of claim 11 , wherein converting the password-protected file from the original format to the different format to yield the preview involves converting one or more intermediate formats.

13. The non-transitory computer-readable medium of claim 10 , storing additional instructions which, when executed by the one or more processors, cause the one or more processors to:
prior to generating the preview, searching for the preview in storage based on at least one of the second request or the token in the second request; and
generating the preview after determining that the preview is not available in storage.

14. The non-transitory computer-readable medium of claim 13 , storing additional instructions which, when executed by the one or more processors, cause the one or more processors to:
receive, from the client device, a third request to view the password-protected file, the third request comprising the token;
in response to the third request, search for the preview in storage based on at least one of the third request or the token in the third request;
based on the searching, determine the e

Assignees

• Dropbox Inc

Inventors

• Acharya Aditya
• Zhu Jingsi
• Vente Sarah
• Macartney Ian
• Ünal Ahmet Emre

Classifications

• G06F40/106 Primary

  Display of layout of documents; Previewing · CPC title

• H04L2463/101

  applying security measures for digital rights management · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title