System and method for password protecting an attribute of content transmitted over a network

• US 20060230459A1
• Filed: 03/29/2005
• Published: 10/12/2006
• Est. Priority Date: 03/29/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Lam, Arthur K. T.
• Granted Patent: US 7,571,486 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

System and methods for password protecting an attribute of content transmitted over a network. Content such as a text file, an audio file, a video file, and the like, sent over a network is protected by a password. A sender setting up the protection may determine which attribute of the content is to be protected by the password. Attributes that may be protected include time to access, number of accesses, permission to forward, permission to store, and the like. In a time to view example, the received content may self-destruct unless the receiver enters the password within a specified time period. Protection may be set up such that every time the receiver attempts to access the content, the password has to be re-entered. Access by an unauthorized user who may have possession of the computing device with the received content is prevented by content level protection.

Claims

1. A computer-implemented method for password protection of content transmitted over a network, comprising:

selecting an attribute for protection; and

associating a password with the selected attribute, wherein the password is stored within the content, and wherein user interaction with the content is dependent on the user'"'"'s possession of the password.

2. The method of claim 1, wherein the user interaction with the content includes the user accessing the content.

3. The method of claim 2, wherein accessing the content includes at least one of using the content in an application, storing the content, limiting an editing function of a receiving application on the content, and forwarding the content to another user.

4. The method of claim 2, wherein repeated accessing the content requires entry of the password each time the content is accessed such that another user attempting to access the content without the password is prevented.

5. The method of claim 1, wherein the content includes at least one of a text file, an image file, an audio file, a video file, and a combination file.

6. The method of claim 1, wherein the content is an XML file and the password is stored in a metadata portion of the file.

7. The method of claim 1, wherein the attribute includes at least one of a time to access, a number of allowed accesses, a permission to store the content, and a permission to forward the content to another user.

8. The method of claim 1, wherein the content is exchanged by at least one of a file download, a file upload, an email exchange, an audio stream, and a video stream.

9. A computer-readable medium having computer instructions for password protecting a document on a mobile device, the instructions comprising:

receiving a password protected document;

requesting a user attempting to access the document to provide the password;

if the provided password is correct, enabling interaction with the document based on an attribute associated with the password;

else

destroying the document.

10. The computer-readable medium of claim 9, wherein the attribute includes at least one of a time to access, a number of allowed accesses, a permission to store the content, and a permission to forward the content to another user.

11. The computer-readable medium of claim 9, wherein the password is stored in a metadata portion of the document.

12. The computer-readable medium of claim 9, wherein interaction with the document includes at least one of using the document in an application, storing the document limiting an editing function of a receiving device on the document, and forwarding the document to another user.

13. The computer-readable medium of claim 12, wherein repeated interaction with the document requires entry of the password each time the document is accessed such that another user attempting to access the document without the password is prevented.

14. The computer-readable medium of claim 11, wherein destroying the document includes deleting the document from a storage medium in the mobile device.

15. The computer-readable medium of claim 11, wherein the document is encoded with multiple passwords each password associated with a different attribute.

16. A system for password protecting an attribute of content transmitted over a network, comprising:

a sender that is arranged to;

select the attribute for protection; and

associate a password with the selected attribute, wherein the password is stored within the content, and wherein a user action with relation to the content is dependent on the user'"'"'s possession of the password; and

a receiver that is arranged to;

receive the password protected content;

request the user attempting to access the content to provide the password;

if the provided password is correct, enable access to the content based on the attribute associated with the password;

else

destroy the content.

17. The system of claim 16, wherein the sender includes at least one of an exchange server, a client device, and a client application;

and wherein the receiver includes at least one of a client application, a client device, a mobile device, and a mobile exchange application.

18. The system of claim 16, wherein accessing the content includes at least one of using the content in an application, storing the content, and forwarding the content to at least a second user, and wherein repeated accessing the content requires entry of the password each time the content is accessed such that a third user attempting to access the content without the password is prevented.

19. The system of claim 16, wherein the attribute includes at least one of a time to access, a number of allowed accesses, a permission to store the content, and a permission to forward the content to another user.

20. The system of claim 16, wherein destroying the content includes deleting the content from a storage medium in the receiver.