SECURE MANAGEMENT OF DOCUMENT IN A CLIENT-SERVER ENVIRONMENT

• US 20080294899A1
• Filed: 01/12/2007
• Published: 11/27/2008
• Est. Priority Date: 01/17/2006
• Status: Abandoned Application

• Current Assignee: Boardvantage, Inc. (Nasdaq, Inc.)
• Original Assignee: Boardvantage, Inc. (Nasdaq, Inc.)
• Inventors: La, Luke K., Karnawat, Mahesh P., Gazzetta, Marco R.
• Application Number:
  US11/623,014
• Publication Number:
  US 20080294899A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819

Abstract

A computer-implemented method for securely handling a document in a client-server environment includes receiving at a server a request from a user to initiate a session to access a plurality of documents stored in a server. The documents include a first type that is allowed to be accessed only while the user is online and a second type that is allowed to be accessed while the user is both online and offline. The server transfers at least one offline vault key and at least one online vault key to a client enable the client to load the documents and enable the user to access the documents, the documents including at least one document of first type and at least one document of second type.

Claims

1. A computer-implemented method for securely handling a document in a client-server environment, the method comprising:

receiving at a server a request to initiate a session to access documents stored in a global vault associated with the server from a client; and

authenticating the request from the client; and

transferring at least one offline vault key and at least one online vault key to the client to grant access to the documents for viewing or modifying at the client.

2. The method of claim 1, wherein the documents are opened in a secure vault environment in the client, the secure vault mirroring a my-vault folder associated with the global vault.

3. The method of claim 1, further comprising:

determining whether or not any document stored at the client has been modified; and

synchronizing any document that has been determined to have been revised with a master copy of the revised document that is stored in the global vault at the server.

4. The method of claim 3, wherein the synchronization occurs during a session initiation step.

5. The method of claim 1, wherein the documents are opened in a secure vault environment in the client, the secure vault mirroring a my-vault folder associated with the global vault, wherein the documents includes first documents that are encrypted using one or more online keys and second documents that are encrypted using one or more offline keys, wherein the first documents are allowed to be accessed only while the client is log onto the server, and the second documents are allowed to be accessed both while the client is log onto the server and while the client is offline.

6. A computer-implemented method for securely handling a document in a client-server environment, the method comprising:

receiving at a server a request from a user to initiate a session to access a plurality of documents stored in a server, the documents include a first type that is allowed to be accessed only while the user is online and a second type that is allowed to be accessed while the user is both online and offline; and

transferring at least one offline vault key and at least one online vault key to a client to enable the client to load the documents and allow the user to access the documents, the documents including at least one document of first type and at least one document of second type.

7. The method of claim 6, wherein the document of first type is encrypted with an online key, and the document of second type is encrypted with an offline key, and the online key is saved in a first file, and the offline key is saved in a second file.

8. The method of claim 7, wherein the first file is encrypted using the online vault key, and the second file is encrypted using the offline vault key.

9. The method of claim 8, wherein the offline vault key is generated using a password or phrase provided by the user.

10. The method of claim 8, wherein the online vault key is generated by the server independent of the user input.

11. The method of claim 6, further comprising:

authenticating the request from the user; and

generating a download list and an upload once the user request has been authenticated to synchronize the client and server, the download list including files that need to be downloaded to the client and the upload list including files that need to be uploaded to the server.

12. The method of claim 11, wherein the user is not allowed to access the documents until the files in the download list have been downloaded and the files in the upload lists have been uploaded.

13. The method of claim 12, wherein the user reviews and makes an annotation on a given document, the method further comprising:

uploading an annotation file that includes the annotation made on the given file from the client to the server;

storing the uploaded annotation file as a new file at the server, the new file being linked to the given file.

14. The method of claim 13, wherein only the user is granted access to the new file unless the user grants access to another user.

15. The method of claim 14, wherein the new file is downloaded to a client associated with another user when the another user successfully logs onto the server if the user had indicated that the user wishes to grant the another user access to the new file.

16. The method of claim 13, wherein the upload of the annotation file is initiated upon closing of the annotation file.