Systems and method for the transparent management of document rights

• US 20050120212A1
• Filed: 03/14/2003
• Published: 06/02/2005
• Est. Priority Date: 03/14/2002
• Status: Abandoned Application

• Current Assignee: Kinar Incorporated
• Original Assignee: Kinar Incorporated
• Inventors: Kanungo, Rajesh, Thakkar, Hemant Ambalal
• Application Number:
  US10/389,488
• Publication Number:
  US 20050120212A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Systems and methods are described for enabling documents to be controlled by a sender, in a manner which is transparent to any end recipients. The invention include mechanisms enabling a sender to control documents sent to recipient, in a manner that (1) encrypts the message to ensure its security, and (2) restricts operations the recipient may perform on the received message. The recipient and sender need not agree on a control protocol in advance of the communication. Wide distribution of a Digital Rights Management System may be facilitated by use of self-installing modules, which integrate with existing software used for document publishing and retrieval. The modules are forwarded to unregistered recipients upon authentication of the recipient, and install automatically on the recipient'"'"'s computer. The modules authenticate instructions from a sender, and, per instructions from the sender, may pre-empt certain types of operations on the e-mail by the recipient

Claims

1. A method of transparently controlling an e-mail message, the method comprising:

composing an e-mail at an e-mail composer, composing the e-mail including inserting one or more control instructions in the e-mail;

forwarding the e-mail to a recipient, forwarding the e-mail message further including determining if an e-mail reader of the recipient has access to one or more control modules for decoding the one or more control instructions;

if the e-mail reader does not have the one or more control modules, downloading the control modules to the e-mail reader;

upon receipt of the e-mail message at the e-mail reader, executing the one or more control modules, executing the one or more control modules further including decoding the one or more control instructions.

2. The method of claim 1, wherein the one or more control instructions include an instruction to disable printing for the e-mail message.

3. The method of claim 1, wherein the one or more control instructions include an instruction to disable copying the e-mail message.

4. The method of claim 1, wherein the one or more control instructions include an instruction to disable replying to the e-mail message.

5. The method of claim 1, further comprising:

prior to forwarding the e-mail, encrypting the e-mail message.

6. The method of claim 5, wherein encrypting the e-mail further includes performing a Simple Hash Algorithm (SHA) on the e-mail.

7. The method of claim 5, wherein encrypting the e-mail further includes performing a Rivest-Shamir-Adleman (RSA) algorithm on the e-mail.

8. The method of claim 5, wherein encrypting the e-mail further includes performing a Pretty Good Privacy (PGP) algorithm on the e-mail.

9. The method of claim 1, wherein the e-mail message is in MIME format.

10. The method of claim 1, wherein the e-mail message is in SMTP format.

11. The method of claim 1, wherein the e-mail reader is in communication with an IMAP e-mail server.

12. The method of claim 1, wherein the e-mail reader is in communication with a POP e-mail server.

13. The method of claim 1, wherein the one or more control instructions include an instruction to disable saving of one or more attachments the e-mail message.

14. A secure e-mail format for an e-mail message, the secure e-mail format comprising:

a header in MIME format;

a recipient information field indicating an encrypted key for each of one or more recipients for the e-mail message;

a digital signature by a sender of the e-mail message;

a data field, the data field further comprising

a subfield indicating a length of encrypted data,

a subfield indicating an encryption algorithm used to encrypt the encrypted data, and

an encrypted payload field containing the encrypted data.

15. The secure e-mail format of claim 14, wherein the encryption algorithm is RSA.

16. The secure e-mail format of claim 14, wherein the encryption algorithm is PGP.

17. The secure e-mail format of claim 14, wherein the encryption algorithm is SHA.

18. A method of controlling access to an electronic document, comprising:

generating one or more flags for the electronic document, the one or more flags indicating access permissions for at least one recipient of the electronic document;

forwarding the electronic document to the at least one recipient in encrypted format, wherein forwarding the electronic document further includes forwarding the one or more flags with the electronic document, the one or more flags also in the encrypted format;

accessing the electronic document by the recipient via a client program;

receiving a command by the recipient at the client program for execution on the electronic document;

intercepting the command prior to execution;

comparing the one or more flags to the command;

in response to comparing the one or more flags to the command, permitting or denying execution of the command on the electronic document.

19. The method of claim 18, wherein the command is one of the group consisting of save, print, forward.

20. The method of claim 18, wherein the intercepting the command is performed by a plug-in module to the client program.

21. The method of claim 20, wherein the forwarding the electronic document includes forwarding the plug-in module to the recipient.

22. The method of claim 21, further comprising:

prior to intercepting the command, installing the plug-in module to the client program.

23. The method of claim 18, wherein the encryption format includes a PKI encryption format.

24. The method of claim 18, wherein the encryption format includes a DES encryption format.

25. The method of claim 18, wherein the one or more flags are forwarded via a Simple Object Access Protocol.

26. The method of claim 18, wherein the encryption format includes a SHA encryption format.

27. The method of claim 18, wherein the encryption format includes an RSA encryption format.

28. The method of claim 18, wherein the encryption format includes a PGP encryption format.

29. A secure e-mail system comprising:

a client e-mail reader, the client e-mail reader executing on a first terminal in communication with an internetwork;

a source e-mail composer, the source e-mail composer executing on a second terminal in communication with the internetwork;

a self-installing add-in component for the client e-mail reader, wherein the add-in component is originally resident on a dedicated server accessible via the internetwork, such that the self-installing add-in component is operative to install itself on the first terminal upon downloading to the first terminal, and authenticate one or more instructions from the source e-mail composer, the one or more instructions intercepting and pre-empting commands from the client e-mail reader.

30. The secure e-mail system of claim 29, wherein the one or more instructions includes an instruction operative to pre-empt forwarding of e-mail messages.

31. The secure e-mail system of claim 29, wherein the one or more instructions includes an instruction operative to pre-empt copying of e-mail messages.

32. The secure e-mail system of claim 29, wherein the one or more instructions includes an instruction operative to pre-empt replying to e-mail messages.

33. The secure e-mail system of claim 29, wherein the one or more instructions includes an instruction operative to pre-empt saving of e-mail messages.

34. The secure e-mail system of claim 29, wherein the one or more instructions includes an instruction operative to pre-empt printing of e-mail messages.

35. An e-mail reader capable of reading MIME encoded messages, the e-mail reader comprising:

a first one or more software modules for validating sender certificates embedded in e-mail messages received by the e-mail reader;

a second one or more software modules for intercepting user commands, at the instruction of e-mail messages validated by the first one or more software modules.

36. The e-mail reader of claim 35, wherein the user commands include a forwarding instruction.

37. The e-mail reader of claim 35, wherein the user commands include a print instruction.

38. The e-mail reader of claim 35, wherein the user commands include a save instruction.

39. The e-mail reader of claim 35, wherein the user commands include a copy instruction.

40. A computer program product comprising:

a computer usable medium having computer readable program code means embodied therein for reading secure e-mail, the computer readable program code means in said computer program product comprising;

computer readable program code means for causing a computer to open an e-mail message;

computer readable program code means for causing the computer to authenticate a sender of the message; and

computer readable program code means for causing the computer to preempt one or more commands from a reader of the e-mail, wherein flags for preempting the one or more commands are embedded in the e-mail by the authenticated sender.

41. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for reading secure e-mail, the method steps comprising;

authenticating an encrypted e-mail;

reading one or more flags in the authenticated e-mail, the one or more flags identifying user commands to be pre-empted;

pre-empting one or more user commands indicated by the one or more flags.

42. The program storage device of claim 41, wherein the one or more user commands includes a forward command.

43. The program storage device of claim 41, wherein the one or more user commands includes a print command.

44. The program storage device of claim 41, wherein the one or more user commands includes a save command.

45. The program storage device of claim 41, wherein the one or more user commands includes a copy command.