Abstract: Representative embodiments set forth herein disclose techniques for enabling a local file system implemented on a computing device to interact with remote files that have not yet been synchronized to the local file system. According to some embodiments, a method can be implemented at the computing device, and include the steps of (1) receiving a system call directed to an operating system kernel to access a file stored on a remote server device, (2) invoking a fault handler in response to processing the system call, (3) generating a remote procedure call (RPC) associated with the user space application to store the file in a local file system implemented on the computing device, and (4) executing a callback function associated with the RPC when the file is stored in the local file system.

Abstract: This application relates to a technique that enables a software application to perform an operation on a file stored on a file system, while enforcing privacy measures. The technique includes receiving, from a file browser, a selection of file made accessible by a file access service. The file access service is associated with the file system storing the file. The file browser executes in a mode that prevents the software application from identifying content displayed within the file browser. The technique also includes, provided the software application is authorized to access the file, communicating a first list of operations for receipt by the software application, in which the software application selects a first subset of operations, to perform on the file. Furthermore, the technique includes establishing, to perform the first subset of operations on the file, a first direct communication link between the software application and the file access service.

Abstract: Representative embodiments set forth herein disclose techniques for enabling a local file system implemented on a computing device to interact with remote files that have not yet been synchronized to the local file system. According to some embodiments, a method can be implemented at the computing device, and include the steps of (1) receiving a system call directed to an operating system kernel to access a file stored on a remote server device, (2) invoking a fault handler in response to processing the system call, (3) generating a remote procedure call (RPC) associated with the user space application to store the file in a local file system implemented on the computing device, and (4) executing a callback function associated with the RPC when the file is stored in the local file system.

Abstract: This application relates to a technique that enables a software application to access files at a computing device while enforcing privacy measures. The technique includes a file browser that can act on behalf of a software application to communicate a user file selection to a relevant file access service. While operating in a sandboxed mode, the file browser can communicate the user file selection while the software application is unaware of the file browser's activities. The file browser can display a set of files that are available for user selection using an enumeration logic that is distinct from an enumeration logic implemented by either the software application or the relevant file access service. When a user file selection is detected, the file browser can assist the software application in receiving a secure URL to enable the software application to directly-access the file associated with the user file selection.

Abstract: Disclosed herein is a technique for managing storage space in a user device by efficiently downloading files from a cloud-based storage system and evicting files from the user device. According to some embodiments, files are continuously downloaded in a download mode until a particular threshold is satisfied. When the threshold is satisfied, the files can be downloaded in an on-demand mode as needed by the user, where the user device operates in the on-demand mode until a sufficient amount of storage space is freed by evicting files from the user device. Thereafter, the user device can switch back to the download mode.

Abstract: Disclosed herein is a technique for managing storage space in a user device by efficiently downloading files from a cloud-based storage system and evicting files from the user device. According to some embodiments, files are continuously downloaded in a download mode until a particular threshold is satisfied. When the threshold is satisfied, the files can be downloaded in an on-demand mode as needed by the user, where the user device operates in the on-demand mode until a sufficient amount of storage space is freed by evicting files from the user device. Thereafter, the user device can switch back to the download mode.

Abstract: Systems and methods are disclosed for synchronizing one or more user data sets on one or more client devices of a user, using a synchronization system. Each client device can have two independent and asynchronously-operating synchronization engines. The synchronization system can include a synchronization system manager that can resolve conflicts in data that arise from different versions of software being used generate a data set. Each client can maintain two separate databases: a first database that can contain a snapshot of the state of the user data sets across client devices, as known to the synchronization system. The second database can contain a snapshot of the local file system and information about the state of synchronization of the local file system with the synchronization system.

Abstract: Some embodiments provide a method for storing multiple data assets in a folder structure on a cloud services platform. The method stores a separate encrypted structure for each of the data assets on the cloud services platform. A same first key provides access to each of the encrypted structures. The method stores, on the cloud services platform, a folder structure with an encrypted copy of the first key. The method stores a parent structure of the folder on the cloud services platform. The parent structure includes an encrypted copy of a second key that provides access to the encrypted copy of the first key.

Abstract: Disclosed herein is a technique for managing storage space in a user device by efficiently downloading files from a cloud-based storage system and evicting files from the user device. According to some embodiments, files are continuously downloaded in a download mode until a particular threshold is satisfied. When the threshold is satisfied, the files can be downloaded in an on-demand mode as needed by the user, where the user device operates in the on-demand mode until a sufficient amount of storage space is freed by evicting files from the user device. Thereafter, the user device can switch back to the download mode.

Abstract: This application relates to a technique that enables a software application to perform an operation on a file stored on a file system, while enforcing privacy measures. The technique includes receiving, from a file browser, a selection of file made accessible by a file access service. The file access service is associated with the file system storing the file. The file browser executes in a mode that prevents the software application from identifying content displayed within the file browser. The technique also includes, provided the software application is authorized to access the file, communicating a first list of operations for receipt by the software application, in which the software application selects a first subset of operations, to perform on the file. Furthermore, the technique includes establishing, to perform the first subset of operations on the file, a first direct communication link between the software application and the file access service.

Abstract: This application relates to a technique that enables a software application to access files at a computing device while enforcing privacy measures. The technique includes a file browser that can act on behalf of a software application to communicate a user file selection to a relevant file access service. While operating in a sandboxed mode, the file browser can communicate the user file selection while the software application is unaware of the file browser's activities. The file browser can display a set of files that are available for user selection using an enumeration logic that is distinct from an enumeration logic implemented by either the software application or the relevant file access service. When a user file selection is detected, the file browser can assist the software application in receiving a secure URL to enable the software application to directly-access the file associated with the user file selection.

Abstract: This application relates to techniques for dynamically displaying relevant files for selection by a user at a computing device. The technique can provide a file browser that, upon detection of a file selection, performs enumeration procedures on a file access service that provides the file. The results of the enumeration procedures are utilized by a file provider daemon to synchronize locally cached files that fall under the domain of at least one file access service. Using key property data identified by the file provider daemon, a file access service responsible for a locally cached file can communicate an updated version of the locally cached for receipt by the file browser. The file browser can then display the updated version of the locally cached file within a pre-defined category for quick access by the user.

Abstract: Some embodiments provide a method for storing multiple data assets in a folder structure on a cloud services platform. The method stores a separate encrypted structure for each of the data assets on the cloud services platform. A same first key provides access to each of the encrypted structures. The method stores, on the cloud services platform, a folder structure with an encrypted copy of the first key. The method stores a parent structure of the folder on the cloud services platform. The parent structure includes an encrypted copy of a second key that provides access to the encrypted copy of the first key.

Abstract: Disclosed herein is a technique for managing storage space in a user device by efficiently downloading files from a cloud-based storage system and evicting files from the user device. According to some embodiments, files are continuously downloaded in a download mode until a particular threshold is satisfied. When the threshold is satisfied, the files can be downloaded in an on-demand mode as needed by the user, where the user device operates in the on-demand mode until a sufficient amount of storage space is freed by evicting files from the user device. Thereafter, the user device can switch back to the download mode.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for data synchronization. In general, one aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a knowledge vector from a first device of the pair of devices, the knowledge vector identifying data items and latest changes to the data items known to the peer device; comparing, at a second device of the pair of devices, the received knowledge vector with a local knowledge vector for changes unknown to the first device; and sending a list of changes to the first device.

Abstract: Systems and methods are disclosed for synchronizing one or more user data sets on one or more client devices of a user, using a synchronization system. Each client device can have two independent and asynchronously-operating synchronization engines. The synchronization system can include a synchronization system manager that can resolve conflicts in data that arise from different versions of software being used generate a data set. Each client can maintain two separate databases: a first database that can contain a snapshot of the state of the user data sets across client devices, as known to the synchronization system. The second database can contain a snapshot of the local file system and information about the state of synchronization of the local file system with the synchronization system.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for data synchronization. In general, one aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a knowledge vector from a first device of the pair of devices, the knowledge vector identifying data items and latest changes to the data items known to the peer device; comparing, at a second device of the pair of devices, the received knowledge vector with a local knowledge vector for changes unknown to the first device; and sending a list of changes to the first device.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for data synchronization. In general, one aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a knowledge vector from a first device of the pair of devices, the knowledge vector identifying data items and latest changes to the data items known to the peer device; comparing, at a second device of the pair of devices, the received knowledge vector with a local knowledge vector for changes unknown to the first device; and sending a list of changes to the first device.

Abstract: A cloud computing system can be used to facilitate data item sharing and collaboration among groups of users through the creation and management of collections. A group of users, each of which is associated with at least one client device, can subscribe to a collection. A subscribed user can create a data item locally on a client device and assign the data item to a collection. In response to the assignment, each user subscribed to the collection can receive and store a copy of the data item locally on a client device. Any modifications made to a local copy of the data item can automatically be distributed to each subscribed user's client device. The modifications, including conflicting modifications, can be merged into the local copy.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for data synchronization. In general, one aspect of the subject matter described in this specification can be embodied in methods that include the actions of receiving a knowledge vector from a first device of the pair of devices, the knowledge vector identifying data items and latest changes to the data items known to the peer device; comparing, at a second device of the pair of devices, the received knowledge vector with a local knowledge vector for changes unknown to the first device; and sending a list of changes to the first device.