SYSTEMS AND METHOD FOR THE TRANSPARENT MANAGEMENT OF DOCUMENT RIGHTS

• US 20090077381A1
• Filed: 12/03/2008
• Published: 03/19/2009
• Est. Priority Date: 03/14/2002
• Status: Abandoned Application

• Current Assignee: Trusttone Communications, Inc.
• Original Assignee: Trusttone Communications, Inc.
• Inventors: Kanungo, Rajesh, Thakkar, Hemant Ambalal
• Application Number:
  US12/327,748
• Publication Number:
  US 20090077381A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Systems and methods are described for enabling documents to be controlled by a sender, in a manner which is transparent to any end recipients. The invention include mechanisms enabling a sender to control documents sent to recipient, in a manner that (1) encrypts the message to ensure its security, and (2) restricts operations the recipient may perform on the received message. The recipient and sender need not agree on a control protocol in advance of the communication. Wide distribution of a Digital Rights Management System may be facilitated by use of self-installing modules, which integrate with existing software used for document publishing and retrieval. The modules are forwarded to unregistered recipients upon authentication of the recipient, and install automatically on the recipient'"'"'s computer. The modules authenticate instructions from a sender, and, per instructions from the sender, may pre-empt certain types of operations on the e-mail by the recipient

Claims

1. ) A method comprising the steps of:

a) composing an e-mail to a recipient at an e-mail composer;

b) querying a registry to an entry corresponding to the recipient;

c) if no entry corresponding to the recipient is registered in the registry, generating a first key pair corresponding to the recipient, the first key pair including a first public encryption key and a first private encryption key;

d) encrypting the e-mail using the first public key;

e) encrypting the first key pair using a second public key to create an encrypted first key pair;

f) forwarding the e-mail to the recipient, forwarding the e-mail message further including sending a URL to the recipient;

g) selecting the URL;

h) forwarding an invitation to the recipient, the invitation comprising the second public key;

i) sending the encrypted first key pair to the e-mail reader;

j) decrypting the encrypted first key pair using the second public key at the e-mail reader;

k) installing the first private key at the e-mail reader wherein the first private key stored at the e-mail reader may be used to decrypt subsequent e-mails without querying the registry; and

l) decrypting the e-mail with the first private key at the e-mail reader.

2. ) The method of claim 1, further comprising the steps of:

i) inserting one or more control instructions in the e-mail;

ii) encrypting the control instructions;

iii) determining if an e-mail reader of the recipient has access to one or more control modules for

iv) decoding the one or more control instructions;

v) if the e-mail reader does not have the one or more control modules, downloading the control modules to the e-mail reader; and

vi) executing the one or more control modules, executing the one or more control modules further including decoding the one or more control instructions.

3. ) The method of claim 2, wherein the one or more control instructions include an instruction to disable printing for the e-mail message.

4. ) The method of claim 2, wherein the one or more control instructions include an instruction to disable copying the e-mail message.

5. ) The method of claim 2, wherein the one or more control instructions include an instruction to disable replying to the e-mail message.

6. ) The method of claim 1, wherein encrypting the e-mail further includes performing a Simple Hash Algorithm (SHA) on the e-mail.

7. ) The method of claim 1, wherein encrypting the e-mail further includes performing a Rivest-Shamir-Adleman (RSA) algorithm on the e-mail.

8. ) The method of claim 1, wherein encrypting the e-mail further includes performing a Pretty Good Privacy (PGP) algorithm on the e-mail.

9. ) The method of claim 1, wherein the e-mail message is in MIME format.

10. ) The method of claim 1, wherein the e-mail message is in SMTP format.

11. ) The method of claim 1, wherein the e-mail reader is in communication with an IMAP e-mail server.

12. ) The method of claim 1, wherein the e-mail reader is in communication with a POP e-mail server.

13. ) The method of claim 3, wherein the one or more control instructions include an instruction to disable saving of one or more attachments the e-mail message.

14. ) A secure e-mail system, comprising:

i) a first key pair comprising a first public key and a first private key;

ii) a second key pair comprising a second public key and a second private key;

iii) a client e-mail reader, the client e-mail reader executing on a first terminal in communication with an internetwork;

iv) a source e-mail composer, the source e-mail composer executing on a second terminal in communication with the internetwork, the source e-mail composer operable to send a message to the client e-mail reader, the message comprising an encrypted portion encrypted with the first public key and a key portion comprising the second public key; and

v) a server in communication with the internetwork and operative to respond to a URL request received from the first terminal, to encrypt the first key pair with the second private key, and to send the resulting encrypted first key pair to the client e-mail reader;

vi) whereby the client e-mail reader may decrypt the encrypted first key pair with the second public key and decrypt the encrypted portion using the first private key.

15. ) The secure e-mail system of claim 14, further comprising:

a self-installing add-in component for the client e-mail reader, wherein the add-in component is downloadable via the internetwork and is operable to authenticate one or more instructions from the source e-mail composer, the one or more instructions intercepting and pre-empting commands from the client e-mail reader.

16. ) The secure e-mail system of claim 15, wherein the one or more instructions includes an instruction operative to pre-empt forwarding of e-mail messages.

17. ) The secure e-mail system of claim 15, wherein the one or more instructions includes an instruction operative to pre-empt copying of e-mail messages.

18. ) The secure e-mail system of claim 15, wherein the one or more instructions includes an instruction operative to pre-empt replying to e-mail messages.

19. ) The secure e-mail system of claim 15, wherein the one or more instructions includes an instruction operative to pre-empt saving of e-mail messages.

20. ) The secure e-mail system of claim 15, wherein the one or more instruction includes an instruction operative to pre-empt printing of 3-mail messages.

21. ) The secure e-mail system of claim 14, further comprising a registry operable to create and store a key pair corresponding to a recipient, the key pair including a public encryption key and corresponding private encryption key, wherein the key pair may be downloaded to the client e-mail reader after a message.