Non-resharable resource links

Patent metadata

Field	Value
Publication number	US-9934394-B1
Application number	US-201414563716-A
Country	US
Kind code	B1
Filing date	Dec 8, 2014
Priority date	Dec 8, 2014
Publication date	Apr 3, 2018
Grant date	Apr 3, 2018

Abstract

Provided are methods and systems for generating user-specific resource URIs for resources shared between users on the Internet. The user for whom the link was created and to whom the link was sent may use the link to access a shared resource; however, the link may not be used by any other user to do the same. No data needs to be created and/or stored on the server-side as a result of the link being provided to the user. Instead, by creating this customized/individualized link for the user, the particular user (and only the particular user) is being granted access to the shared resource. The methods and systems provided obviate the need to maintain any configuration data on the server side, thereby protecting against the possibility of the individualized URIs being forged by an intruder, while preserving the need for the accessing user to be authenticated.

First claim

The invention claimed is:

1. A computer-implemented method comprising:
generating a non-resharable link to a shared resource, the generating comprising augmenting a public identifier for the shared resource with a first fingerprint, the first fingerprint generated from a private passphrase and a recipient user identifier (ID);
providing the non-resharable link;
receiving a request for the shared resource, the request associated with a requestor user ID and the non-resharable link specifying the first fingerprint;
accessing metadata for the shared resource using the public identifier for the shared resource;
extracting, from the metadata, a passphrase associated with the shared resource, wherein the passphrase is generated and persisted in the metadata, and undetectable to users who do not have access to the shared resource;
generating a second fingerprint for the shared resource using the requestor user ID and the extracted passphrase associated with the shared resource;
verifying that the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource; and
upon verifying the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource, providing access to the shared resource.

2. The method of claim 1 , wherein the passphrase is a random number generated once for the shared resource.

3. The method of claim 1 , wherein the passphrase is based on one or more attributes of the shared resource.

4. The method of claim 1 , wherein providing access to the shared resource includes providing access for a specified amount of time.

5. The method of claim 1 , wherein providing access to the shared resource includes granting editing rights with respect to the shared resource.

6. The method of claim 1 , wherein the passphrase is altered and a third fingerprint for the shared resource is generated using the altered passphrase; and
determining that the third fingerprint fails to match the first fingerprint included in the non-resharable link associated with the request for the shared resource; and
upon determining the third fingerprint fails to match the first fingerprint included in the non-resharable link associated with the request for the shared resource, denying access to the shared resource.

7. The method of claim 1 , wherein the request associated with a requestor user ID and the non-resharable link comprises a request for access to the shared resource through the non-resharable link by a user having the requestor user ID.

8. A system comprising:
one or more processors; and
a non-transitory computer-readable medium coupled to said one or more processors having instructions stored thereon that, when executed by said one or more processors, cause said one or more processors to perform operations comprising:
generating a non-resharable link to a shared resource, the generating comprising augmenting a public identifier for the shared resource with a first fingerprint, the first fingerprint generated from a private passphrase and a recipient user identifier (ID);
providing the non-resharable link;
receiving a request for the shared resource, the request associated with a requestor user ID and the non-resharable link specifying the first fingerprint;
accessing metadata for the shared resource using the public identifier for the shared resource;
extracting, from the metadata, a passphrase associated with the shared resource, wherein the passphrase is generated and persisted in the metadata, and undetectable to users who do not have access to the shared resource;
generating a second fingerprint for the shared resource using the requestor user ID and the extracted passphrase associated with the shared resource;
verifying that the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource; and
upon verifying the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource, providing access to the shared resource.

9. The system of claim 8 , wherein the passphrase is a random number generated once for the shared resource.

10. The system of claim 8 , wherein the passphrase is based on one or more attributes of the shared resource.

11. The system of claim 8 , wherein providing access to the shared resource includes providing access for a specified amount of time.

12. The system of claim 8 , wherein providing access to the shared resource includes granting editing rights with respect to the shared resource.

13. The system of claim 8 , wherein the passphrase is altered and a third fingerprint for the shared resource is generated using the altered passphrase; and
determining that the third fingerprint fails to match the first fingerprint included in the non-resharable link associated with the request for the shared resource; and
upon determining the third fingerprint fails to match the first fingerprint included in the non-resharable link associated with the request for the shared resource, denying access to the shared resource.

14. One or more non-transitory computer readable media storing computer-executable instructions that, when executed by one or more processors, causes the one or more processors to
perform operations comprising:
generating a non-resharable link to a shared resource, the generating comprising augmenting a public identifier for the shared resource with a first fingerprint, the first fingerprint generated from a private passphrase and a recipient user identifier (ID);
providing the non-resharable link;
receiving a request for a shared resource, the request associated with a requestor user ID and the non-resharable link specifying the first fingerprint;
accessing metadata for the shared resource using the public identifier for the shared resource;
extracting, from the metadata, a passphrase associated with the shared resource, wherein the passphrase is generated and persisted in the metadata, and undetectable to users who do not have access to the shared resource;
generating a second fingerprint for the shared resource using the requestor user ID and the extracted passphrase associated with the shared resource;
verifying that the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource; and
upon verifying the second fingerprint matches the first fingerprint included in the non-resharable link associated with the request for the shared resource, providing access to the shared resource.

15. The one or more non-transitory computer readable media of claim 14 , wherein the passphrase is a random number generated once for the shared resource.

16. The one or more non-transitory computer readable media of claim 14 , wherein the passphrase is based on one or more attributes of the shared resource.

17. The one or more non-transitory computer readable media of claim 14 , wherein providing access to the shared resource includes providing access for a specified amount of time.

18. The one or more non-transitory computer readable media of claim 14 , wherein providing access to the shared resource includes granting editing rights with respect to the shared resource.

19. The one or more non-transitory computer readable media of claim 14 , wherein the passphrase is altered and a third fingerprint for the shared resource is generated using the al

Assignees

• Google Llc

Inventors

• Stolboushkin Alexei

Classifications

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F16/137

  Hash-based (content-based indexing of textual data G06F16/31) · CPC title

• G06F21/10

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title