Method Of Encrypting/Decrypting The Document And A Safety Management Storage Device And System Method Of Its Safety Management

• US 20080215881A1
• Filed: 09/22/2006
• Published: 09/04/2008
• Est. Priority Date: 09/22/2005
• Status: Active Grant

• Current Assignee: Shenzhen Netcom Electronics Co. Ltd.
• Original Assignee: Shenzhen Netcom Electronics Co. Ltd.
• Inventors: Cai, Huabo, Zhu, Xuyang
• Granted Patent: US 8,296,585 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A method of encrypting/decrypting the document and a safety management storage device and system method of its safety management, using for the safety management of electronic documents, the said system comprising a PC or mainframe installed with common reading software and a storage device of safety management connected to the said PC/mainframe through hot-plug; when connected to the mainframe, the said storage device is enumerated as a USB CDROM device at least. The user owns the said storage device can encrypt the electronic documents by using the encryption keys to generate an encrypted document with the same file type, also can open the encrypted document by using common reading software, and then use the document according to the predetermined operation authority. By using present invention, the users and the range of using the documents will be limited through the control of the distribution of the said storage devices, thus, a document safety management system with high security and easy-use will be established, and with the advantage of easy control, low cost of investment and maintenance.

Claims

1. A method of encrypting an electronic document for safety management of the document, comprising steps of:

installing an encryption program on a PC or mainframe;

operating the PC or mainframe to read data of the electronic document which will be encrypted;

encrypting said data by using an encryption key; and

generating an encrypted electronic document which has a same file type as said electronic document.

2. The method of encrypting the document according to claim 1 wherein the encryption program is stored in a safety management storage device such that when connected to said PC or mainframe said storage device functions as a USB CDROM device by the PC or mainframe system so that said encryption program runs automatically.

3. The method of encrypting the document according to claim 1 wherein said operating step comprises:

operating the PC or mainframe to choose an electronic document which will be encrypted;

choosing an optional item of encrypting transformation in an operating prompt-menu of said electronic document; and

reading, by said PC or mainframe, the data of said electronic document.

4. The method of encrypting the document according to claim 1 wherein said encrypted electronic document contains encryption information which comprises information of authority settings, or serial number of encryption keys.

5. A method of decrypting an electronic document for the safety management of the document, comprising steps of:

storing an encrypted electronic document into a storage unit of a PC or mainframe;

finishing installation of a common reading software corresponding to a file type of said electronic document on said PC or mainframe;

connecting a storage device with content of decryption authority to said PC or mainframe;

recognizing, by said PC or mainframe, the storage device, and running automatically a document decryption program which is in said storage device;

taking over automatically, by said document decryption program, a scheduled operation run by said common reading software; and

running said common reading software to open said encrypted electronic document, and operating the document within a predetermined range of the rights.

6. The method of decrypting the document according to claim 5 wherein said storage device comprises a USB interface and control unit with its device type set as USB Mass Storage Device such that the PC or mainframe recognizes and enumerates said storage device as a USB CDROM device so that said document decryption program can be run automatically.

7. The method of decrypting the document according to claim 5 wherein said taking over automatically step comprises said document decryption program injecting an decryption module into the scheduled program process of said common reading software in the PC or mainframe operation system through a remote thread injection and function hook, so as to take over the scheduled operation ran by said common reading software, and said running step comprises:

taking over and controlling, by said decryption module, a read operation of said common reading software, while the PC or mainframe is operated to open said encrypted electronic document;

reading the data of said encrypted electronic document first;

restoring data from said encrypted data by using a decryption key in the decryption module, and reading the scheduled operation authority in the encrypted data; and

showing, by said common reading software, the restored data and the operation authority of the document.

8. The method of decrypting the document according to claim 7 wherein the running step comprises choosing a relevant decryption key according to a key serial number in encryption information of said encrypted data and performing decryption processing in the scheduled process of said common reading software such that the decrypted data is shown by said common reading software directly.

9. The method of decrypting the document according to claim 5 wherein said storage device contains authority information for using the document, which is coordinating with scheduled operation authority to limit an operator'"'"'s usage of the encrypted electronic document.

10. A safety management storage device for the safety management of the electronic document, comprising a USB interface circuit, control unit and storage unit connecting with said control unit, and an integrated circuit module connected with said control unit, the circuit module being operatively configured to provide a unique identifier which can distinguish said device from other same kind of devices.

11. A safety management system of the electronic document, comprising a personal computer (PC) or mainframe which installed with a common reading software and a safety management storage device which can be connected with said PC or mainframe by hot plugging;

said storage device comprises a USB interface circuit, a control unit and a storage unit connecting with said control unit, and an integrated circuit module connecting with said control unit for providing a unique identifier that can distinguish said storage device from the other same kind of devices;

while connected with said PC or mainframe, said storage device should be enumerated as a USB CDROM device at least.

12. A safety management method for an of electronic document, comprising steps of:

setting up at least a storage device for safety management, and writing at least one encryption or decryption key into its storage unit;

distributing said storage device for safety management to a predetermined user;

connecting, by said predetermined user, said storage device to a PC or mainframe with Windows operation system so that said device should be enumerated as a USB CDROM device by the system;

injecting, by a loading program in said storage device, an encryption or decryption module into a scheduled program process of a common reading software in the PC or mainframe through a remote thread injection and function hook so as to take over the scheduled operation ran by said common reading software; and

encrypting the electronic document of a predetermined file type to generate encrypted electronic document with a same file type, or open a decrypted electronic document having a predetermined file type where the encrypted electronic document has a same predetermined file type by using said common reading software.

13. The safety management method of according to claim 12 wherein the storage device for safety management can be distinguished into parent device and subsidiary device, endowed with different management authority.

14. The safety management method of according to claim 13 wherein a plurality of certified encryption keys are saved in the storage media of said parent device;

they can be transmitted from the parent device inserted into a PC or mainframe to a subsidiary device, or be backed up between the parent devices.

15. The safety management method of according to claim 12 wherein encrypting an electronic document comprises setting encryption information including information of authority and serial number of keys, and wherein after the opening of encrypted electronic document, said common reading software is managed under an operation authority.

16. The safety management method of according to claim 12 wherein an authority saved in said storage device for safety management is updated through the mainframe or net;

said update comprises;

writing scheduled invalid data into the storage device to invalidate an encryption key and relevant information.