Patent ID: 9203904
Filing Date: 2015-12-01
Classification: G06F,H04L

Abstract:
1. A method of controlling access to data, the method comprising: receiving, by processing circuitry, a request to share a file stored on a secure network with a target user, the request identifying the file and the target user; performing, by the processing circuitry, a location evaluation operation to determine whether the target user belongs to the secure network; when a result of the location evaluation operation indicates that the target user does not belong to the secure network, performing, by the processing circuitry, a sensitivity evaluation operation to determine whether the file identified by the request includes sensitive information; and performing, by the processing circuitry, an access control operation, the access control operation (i) rejecting the request when both (a) the result of the location evaluation operation indicates that the target user does not belong to the secure network, and (b) a result of the sensitivity evaluation operation indicates that the file includes sensitive information, and (ii) otherwise causing a link to access the file to be provided to the target user; wherein: performing the access control operation includes: the method further comprises: receiving the access request and rejecting the access request are performed by the web server in response to the file-seeking user being redirected to the web server after accessing the link at a cloud server on the public network; and causing the file to be sent to the file-seeking user includes the web server performing the following operations: