Generating a stub file corresponding to a classified data file

Abstract

Protecting data files is disclosed, including: in response to an indication that a data file has been generated by a client device, determining a security classification associated with the data file; determining that the security classification associated with the data file comprises a classified file; storing the data file in a designated virtual storage area; and generating a stub file at an original storage location of the data file, wherein the stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area.

What is claimed is: 
     
         1 . (canceled) 
     
     
         2 . A system, comprising:
 a processor configured to:
 store a data file in a designated virtual storage area; 
 generate a stub file at an original storage location of the data file, wherein the stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area; 
 receive a user selection associated with the stub file to access the data file; 
 receive an indication that a user associated with the user selection has permission to access the data file; 
 in response to the indication, execute a virtual application corresponding to the data file; and 
 provide access to the data file at the designated virtual storage area using the virtual application; and 
   a memory coupled to the processor and configured to provide the processor with instructions.   
     
     
         3 . The system of  claim 2 , wherein the designated virtual storage area is associated with a cloud server. 
     
     
         4 . The system of  claim 2 , wherein the processor is further configured to determine a security classification associated with the data file. 
     
     
         5 . The system of  claim 4 , wherein to determine the security classification associated with the data file comprises to:
 compare content information associated with the data file against a preset condition; and   determine the security classification based at least in part on a result of the comparison.   
     
     
         6 . The system of  claim 4 , wherein the security classification associated with the data file is set by a user. 
     
     
         7 . The system of  claim 2 , wherein the processor is further configured to store the stub file at the original storage location associated with the data file. 
     
     
         8 . The system of  claim 2 , wherein to provide access to the data file at the designated virtual storage area using the virtual application includes to:
 transmit information included in the stub file to a cloud server associated with the designated virtual storage area; and   receive a user interface associated with a document editor program from the cloud server.   
     
     
         9 . The system of  claim 2 , wherein to provide access to the data file at the designated virtual storage area using the virtual application includes to:
 transmit information included in the stub file to a cloud server associated with the designated virtual storage area;   receive a user interface associated with a document editor program from the cloud server;   receive an operation to be performed on the data file via the user interface; and   send the operation to the cloud server.   
     
     
         10 . The system of  claim 2 , wherein the stub file comprises a first stub file and wherein the processor is further configured to:
 receive a first instruction from a first user to share the data file with a second user;   determine user information associated with the second user;   determine that the second user has permission to access the data file based at least in part on the user information associated with the second user; and   send a second instruction to a client device associated with the second user, wherein the second instruction is configured to generate a second stub file corresponding to the data file at the client device associated with the second user.   
     
     
         11 . A method, comprising:
 storing a data file in a designated virtual storage area;   generating a stub file at an original storage location of the data file, wherein the stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area;   receiving a user selection associated with the stub file to access the data file;   receiving an indication that a user associated with the user selection has permission to access the data file;   in response to the indication, executing a virtual application corresponding to the data file; and   providing access to the data file at the designated virtual storage area using the virtual application.   
     
     
         12 . The method of  claim 11 , wherein the designated virtual storage area is associated with a cloud server. 
     
     
         13 . The method of  claim 11 , further comprising determining a security classification associated with the data file. 
     
     
         14 . The method of  claim 13 , wherein determining the security classification associated with the data file comprises:
 comparing content information associated with the data file against a preset condition; and   determining the security classification based at least in part on a result of the comparison.   
     
     
         15 . The method of  claim 13 , wherein the security classification associated with the data file is set by a user. 
     
     
         16 . The method of  claim 11 , further comprising storing the stub file at the original storage location associated with the data file. 
     
     
         17 . The method of  claim 11 , further comprising providing access to the data file at the designated virtual storage area using the virtual application includes:
 transmitting information included in the stub file to a cloud server associated with the designated virtual storage area; and   receiving a user interface associated with a document editor program from the cloud server.   
     
     
         18 . The method of  claim 11 , wherein providing access to the data file at the designated virtual storage area using the virtual application includes:
 transmitting information included in the stub file to a cloud server associated with the designated virtual storage area;   receiving a user interface associated with a document editor program from the cloud server;   receiving an operation to be performed on the data file via the user interface; and   sending the operation to the cloud server.   
     
     
         19 . The method of  claim 11 , wherein the stub file comprises a first stub file and further comprising:
 receiving a first instruction from a first user to share the data file with a second user;   determining user information associated with the second user;   determining that the second user has permission to access the data file based at least in part on the user information associated with the second user; and   sending a second instruction to a client device associated with the second user, wherein the second instruction is configured to generate a second stub file corresponding to the data file at the client device associated with the second user.   
     
     
         20 . A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
 storing a data file in a designated virtual storage area;   generating a stub file at an original storage location of the data file, wherein the stub file includes a viewing permission associated with the data file and a storage location of the data file in the designated virtual storage area;   receiving a user selection associated with the stub file to access the data file;   receiving an indication that a user associated with the user selection has permission to access the data file;   in response to the indication, executing a virtual application corresponding to the data file; and   providing access to the data file at the designated virtual storage area using the virtual application.