System and method for secure inter-domain document transmission

• US 20070061264A1
• Filed: 09/15/2005
• Published: 03/15/2007
• Est. Priority Date: 09/15/2005
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Shahindoust, Amir, Yeung, Michael, Yami, Sameer
• Application Number:
  US11/227,510
• Publication Number:
  US 20070061264A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

The present invention is directed to a system and method for secure inter-domain document transmission. Encrypted electronic document data is received from a source domain into a target domain. The encrypted electronic document includes header data containing encrypted user authentication data and data representing an identified file server associated with the target domain. Next, key data is retrieved from the identified file server. Decryption of the encrypted electronic document is then commenced using the retrieved key data.

Claims

1. A system for secure inter-domain document transmission comprising:

means adapted for receiving into a target domain from a source domain, an encrypted electronic document inclusive of header data, the header data including data representative of an identified file server associated with the source domain;

means adapted for retrieving, from the identified file server, key data; and

means adapted for commencing a decryption of the electronic document with the key data.

2. The system for secure inter-domain document transmission of claim 1, further comprising:

means adapted for receiving the encrypted electronic document into a data storage associated with a document processor;

means adapted for receiving the key data into the data storage;

means adapted for completing a decryption of the electronic document;

means adapted for storing a decrypted electronic document in the data storage; and

means adapted for commencing a selected document processing operation on the decrypted electronic document.

3. The system for secure inter-domain document transmission of claim 2, wherein the header data includes data representative of a plurality of identified file servers in a plurality of domains.

4. The system for secure inter-domain document transmission of claim 3, wherein the header data further includes data representative of user authentication information.

5. The system for secure inter-domain document transmission of claim 4, wherein the user authentication information includes at least one of the group consisting of a user identification, a user network password, a user public key, an encrypted user private key, an encrypted symmetric password key, and encrypted user document processing preferences.

6. The system for secure inter-domain document transmission of claim 5, further comprising:

means adapted for encrypting the user authentication information using a public key associated with the receiving document processor; and

means adapted for storing, in the data storage associated with the document processor, the encrypted user authentication information.

7. A method for secure inter-domain document transmission comprising the steps of:

receiving into a target domain from a source domain, an encrypted electronic document inclusive of header data, the header data including data representative of an identified file server associated with the source domain;

retrieving, from the identified file server, key data; and

commencing a decryption of the electronic document with the key data.

8. The method for secure inter-domain document transmission of claim 7, further comprising the steps of:

receiving the encrypted electronic document into a data storage associated with a document processor;

receiving the key data into the data storage;

completing a decryption of the electronic document;

storing a decrypted electronic document in the data storage; and

commencing a selected document processing operation on the decrypted electronic document.

9. The method for secure inter-domain document transmission of claim 8, wherein the header data includes data representative of a plurality of identified file servers in a plurality of domains.

10. The method for secure inter-domain document transmission of claim 9, wherein the header data further includes data representative of user authentication information.

11. The method for secure inter-domain document transmission of claim 10, wherein the user authentication information includes at least one of the group consisting of a user identification, a user network password, a user public key, an encrypted user private key, an encrypted symmetric password key, and plurality of encrypted user document processing preferences.

12. The method for secure inter-domain document transmission of claim 11, further comprising the steps of:

encrypting the user authentication information using a public key associated with the receiving document processor; and

storing, in the data storage associated with the document processor, the encrypted user authentication information.

13. A computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission comprising:

instructions for receiving into a target domain from a source domain, an encrypted electronic document inclusive of header data, the header data including data representative of an identified file server associated with the source domain;

instructions for retrieving, from the identified file server, key data; and

instructions for commencing a decryption of the electronic document with the key data.

14. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission of claim 13, further comprising:

instructions for receiving the encrypted electronic document into a data storage associated with a document processor;

instructions for receiving the key data into the data storage;

instructions for completing a decryption of the electronic document;

instructions for storing a decrypted electronic document in the data storage; and

instructions for commencing a selected document processing operation on the decrypted electronic document.

15. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission of claim 14, wherein the header data includes data representative of a plurality of identified file servers in a plurality of domains.

16. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission of claim 15, wherein the header data further includes data representative of user authentication information.

17. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission of claim 16, wherein the user authentication information includes at least one of the group consisting of a user identification, a user network password, a user public key, an encrypted user private key, an encrypted symmetric password key, and encrypted user document processing preferences.

18. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure inter-domain document transmission of claim 17, further comprising:

instructions for encrypting the user authentication information using a public key associated with the receiving document processor; and

instructions for storing, in the data storage associated with the document processor, the encrypted user authentication information.