Ad hoc secure access to documents and services

• US 20030196087A1
• Filed: 04/16/2002
• Published: 10/16/2003
• Est. Priority Date: 04/16/2002
• Status: Active Grant

• Current Assignee: III Holdings 6, LLC (Intellectual Ventures LLC)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Smetters, Diana K., Soutloglou, Elisabeth, Stringer, Mark
• Granted Patent: US 6,971,017 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A document server residing on a network behind a firewall provides secure access to documents or services residing thereon. A first user outside the firewall communicates with the document server over an established first secure session to generate a token in a database of tokens on the document server. The first user digitally signs the public key of a second user and an identifier of the token. The first user transmits a URL token to the second user that identifies the location of the document server and the token identifier. When the second user outside the firewall redeems the URL token at the document server, the document server and the second user establish a second secure session. The document server authenticates the URL token against the second secure session before providing the second user with access to the document or service.

Claims

1. A method for a first user to provide secure access to electronic documents or services stored on a document server located on a network to a second user, where the first user is a registered user of the document server and the second user is not a registered user of the document server, and where both the first user, the second user, and the document server have each associated therewith a public key that is associated with a corresponding private key, the method performed on the document server comprising:

exchanging public keys with the first user to establish a first secure session;

receiving from the first user a request to list a file directory;

authenticating the first user'"'"'s access to the file directory using credentials provided by the first user when the first secure session is established;

transmitting to the first user a listing of the file directory over the first secure session;

the listing identifying a set of paths to content available on the document server;

exchanging public keys with the second user to establish a second secure session;

receiving from the second user a request for access to selected content on the document server;

the request for access including a token identifier that is recorded at the document server and associated with a path from the set of paths to the selected content available on the document server;

authenticating the request for access using;

(a) the public key of the second user received from the second user while establishing the second secure session, and (b) a digital signature signed using the private key of the first user that is a signed cryptographic digest of the public key of the second user and other information relating to the request for access to the selected document content on the document server; and

providing the second user with access to the selected content over the second secure session if the request for access is authenticated.

2. The method according to claim 1, further comprising:

receiving from the first user a request to create a token that is associated with the path to the selected content available on the document server;

creating the token in a database of tokens on the document server;

the token having associated therewith the token identifier; and

transmitting to the first user over a secure session the token identifier that uniquely identifies the token in the token database.

3. The method according to claim 2, further comprising:

receiving from the first user over the first secure session the path from the set of paths identifying selected content available on the document server;

transmitting to the first user the token identifier over the first secure session;

the token identifier being associated with the path to the selected content available on the document server; and

receiving from the first user over the first secure session the digital signature of the signed cryptographic digest of the public key of the second user and the token identifier.

4. The method according to claim 3, wherein each public key forms part of a digital certificate.

5. The method according to claim 3, further comprising receiving over a third secure session a request from the first user to modify access rights recorded with the token in the token database.

6. The method according to claim 2, receiving from the first user over a third secure session the digital signature of the signed cryptographic digest of the public key of the second user and the other information relating to the request for access to the selected document content on the document server.

7. The method according to claim 2, wherein the digital signature signed by the private key of the first user is received with the request for access to the selected content available on the document server from the second user.

8. The method according to claim 2, wherein the cryptographic digest signed using the private key of the first user includes a cryptographic digest of all or portions of the selected content.

9. The method according to claim 2, wherein the other information relating to the request for access to the selected document content on the document server includes one or more of the token identifier, a creation date of the token, access rights to the selected content, all or portions of the selected content, and a version number of the selected content.

10. The method according to claim 1, wherein the request for access is specified using a secure hypertext transfer protocol that includes a gateway address, the digital signature, and the path of the selected content available on the document server.

11. The method according to claim 1, wherein the document server is located on an intranet protected by a firewall and wherein the first secure session and the second secure session tunnel through the firewall.

12. The method according to claim 1, wherein the other information relating to the request for access to the selected document content on the document server is one of the token identifier, the path from the set of paths to the selected content available on the document server, and access rights to the selected document content, and wherein the selected content is one of a document and a service available on the document server.

13. An article of manufacture for use in a machine, comprising:

a memory;

instructions stored in the memory for a method in which a first user provides secure access to electronic documents or services stored on a document server located on a network to a second user, where the first user is a registered user of the document server and the second user is not a registered user of the document server, and where both the first user, the second user, and the document server have each associated therewith a public key that is associated with a corresponding private key, the method comprising;

exchanging public keys with the first user to establish a first secure session;

receiving from the first user a request to list a file directory;

authenticating the first user'"'"'s access to the file directory using credentials provided by the first user when the first secure session is established;

transmitting to the first user a listing of the file directory over the first secure session;

the listing identifying a set of paths to content available on the document server;

exchanging public keys with the second user to establish a second secure session;

receiving from the second user a request for access to selected content on the document server;

the request for access including a token identifier that is recorded at the document server and associated with a path from the set of paths to the selected content available on the document server;

authenticating the request for access using;

(a) the public key of the second user received from the second user while establishing the second secure session, and (b) a digital signature signed using the private key of the first user that is a signed cryptographic digest of the public key of the second user and other information relating to the request for access to the selected document content on the document server; and

providing the second user with access to the selected content over the second secure session if the request for access is authenticated.

14. The article of manufacture according to claim 13, wherein the method further comprises:

receiving from the first user a request to create a token that is associated with the path to the selected content available on the document server;

creating the token in a database of tokens on the document server;

the token having associated therewith the token identifier; and

transmitting to the first user over a secure session the token identifier that uniquely identifies the token in the token database.

15. The article of manufacture according to claim 14, wherein the method further comprises:

receiving from the first user over the first secure session the path from the set of paths identifying selected content available on the document server;

transmitting to the first user the token identifier over the first secure session;

the token identifier being associated with the path to the selected content available on the document server; and

receiving from the first user over the first secure session the digital signature of the signed cryptographic digest of the public key of the second user and the token identifier.

16. The article of manufacture according to claim 13, wherein the other information relating to the request for access to the selected document content on the document server is one of the token identifier, the path from the set of paths to the selected content available on the document server, and access rights to the selected document content, and wherein the selected content is one of a document and a service available on the document server.

17. A document server for performing a method in which a first user provides secure access to electronic documents or services stored on the document server located on a network to a second user, where the first user is a registered user of the document server and the second user is not a registered user of the document server, and where both the first user, the second user, and the document server have each associated therewith a public key that is associated with a corresponding private key, the document server comprising:

a memory for storing instructions; and

a processor coupled to the memory for executing the instructions of the document server;

the processor in executing the instructions;

exchanging public keys with the first user to establish a first secure session;

receiving from the first user a request to list a file directory;

authenticating the first user'"'"'s access to the file directory using credentials provided by the first user when the first secure session is established;

transmitting to the first user a listing of the file directory over the first secure session;

the listing identifying a set of paths to content available on the document server;

exchanging public keys with the second user to establish a second secure session;

receiving from the second user a request for access to selected content on the document server;

the request for access including a token identifier that is recorded at the document server and associated with a path from the set of paths to the selected content available on the document server;

authenticating the request for access using;

(a) the public key of the second user received from the second user while establishing the second secure session, and (b) a digital signature signed using the private key of the first user that is a signed cryptographic digest of the public key of the second user and other information relating to the request for access to the selected document content on the document server; and

providing the second user with access to the selected content over the second secure session if the request for access is authenticated.

18. The document server according to claim 17, wherein the processor in executing the instructions executes instructions for:

receiving from the first user a request to create a token that is associated with the path to the selected content available on the document server;

creating the token in a database of tokens on the document server;

the token having associated therewith the token identifier; and

transmitting to the first user over a secure session the token identifier that uniquely identifies the token in the token database.

19. The method according to claim 18, wherein the processor in executing the instructions executes instructions for:

receiving from the first user over the first secure session the path from the set of paths identifying selected content available on the document server;

transmitting to the first user the token identifier over the first secure session;

the token identifier being associated with the path to the selected content available on the document server; and

receiving from the first user over the first secure session the digital signature of the signed cryptographic digest of the public key of the second user and the token identifier.

20. The method according to claim 17, wherein the other information relating to the request for access to the selected document content on the document server is one of the token identifier, the path from the set of paths to the selected content available on the document server, and access rights to the selected document content, and wherein the selected content is one of a document and a service available on the document server.