METHOD AND SYSTEM FOR MONITORING A SECURE DOCUMENT

• US 20120260096A1
• Filed: 04/08/2011
• Published: 10/11/2012
• Est. Priority Date: 04/08/2011
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: BALINSKY, Helen, Simske, Steven J.
• Application Number:
  US13/082,746
• Publication Number:
  US 20120260096A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method for enabling access to a secure document by a document service includes receiving the document, and an ordered sequence of signature verification keys that are to be selected in an orderly manner, from a document owner. Access is enabled to the document via an allocated access address. Uploading an uploaded document is enabled. A signature associated with the uploaded document is verified using a currently selected signature verification key from the ordered sequence. If verification fails, the uploaded document is rejected. If verification succeeds, the document accessible via the allocated access address is replaced with the uploaded document and a next signature verification key of the ordered sequence is selected to be the currently selected signature verification key.

Claims

1. A method for enabling access to a secure document by a document service, the method comprising:

receiving from a document owner the document and an ordered sequence of signature verification keys that are to be selected in an orderly manner;

enabling access to the document via an allocated access address;

enabling uploading of an uploaded document and verifying a signature associated with the uploaded document using a currently selected signature verification key from the ordered sequence such that;

if verification fails, rejecting the uploaded document; and

if verification succeeds, replacing the document accessible via the allocated access address with the uploaded document and selecting a next signature verification key of the ordered sequence to be the currently selected signature verification key.

2. The method of claim 1, wherein the document is a composite document, and wherein each signature verification key of the ordered sequence is specific to a part of the composite document.

3. The method of claim 1, further comprising storing a secure copy of the document as received from the document owner and when the verification succeeds, storing a secure copy of the uploaded document.

4. The method of claim 3, further comprising replacing the document accessible via the allocated access address with a copy of the secure copy when the verification fails.

5. The method of claim 1, wherein the document service is implemented as a server application on a server, as an administrator-run daemon on a shared drive, or as an administrator-run service on a shared drive.

6. The method of claim 1, wherein each signature verification key of the ordered sequence corresponds to a workflow participant, the order of the signature verification keys in the ordered sequence corresponding to a workflow order.

7. The method of claim 1, wherein the document is encrypted.

8. A non-transitory computer readable medium containing instructions that when executed cause a processor to execute the steps of:

receiving from a document owner the document and an ordered sequence of signature verification keys that are to be selected in an orderly manner;

enabling access to the document via an allocated access address;

enabling uploading of an uploaded document and verifying a signature associated with the uploaded document using a currently selected signature verification key from the ordered sequence such that;

if verification fails, rejecting the uploaded document; and

if verification succeeds, replacing the document accessible via the allocated access address with the uploaded document and selecting a next signature verification key of the ordered sequence to be the currently selected signature verification key.

9. The non-transitory computer readable medium of claim 8, wherein the document is a composite document, and wherein each signature verification key of the ordered sequence is specific to a part of the composite document.

10. The non-transitory computer readable medium of claim 8, further comprising storing a secure copy of the document as received from the document owner and when the verification succeeds, storing a secure copy of the uploaded document.

11. The non-transitory computer readable medium of claim 10, further comprising replacing the document accessible via the allocated access address with a copy of the secure copy when the verification fails.

12. The non-transitory computer readable medium of claim 8, wherein each signature verification key of the ordered sequence corresponds to a workflow participant, the order of the signature verification keys in the ordered sequence corresponding to a workflow order.

13. The non-transitory computer readable medium of claim 8, wherein the document is encrypted.

14. The non-transitory computer readable medium of claim 8, containing instructions for providing a user interface for enabling uploading of data to the document service and for accessing the document.

15. A document service data processing system comprising:

a processing unit in communication with a computer readable medium, wherein the computer readable medium contains a set of instructions wherein the processing unit is designed to carry out the set of instructions to;

receive from a document owner the document and an ordered sequence of signature verification keys that are to be selected in an orderly manner;

enable access to the document via an allocated access address;

enable uploading of an uploaded document;

verify a signature associated with the uploaded document using a currently selected signature verification key from the ordered sequence such that;

if verification fails, reject the uploaded document;

if verification succeeds, replace the document accessible via the allocated access address with the uploaded document and select a next signature verification key of the ordered sequence to be the currently selected signature verification key.

16. The system of claim 15, wherein the allocated access address comprises a file on a shared drive or an address on a network.

17. The system of claim 15, comprising a secure channel for communicating with at least a document owner.

18. The system of claim 17, wherein the secure channel comprises hybrid key encryption or a key map associated with the document.

19. The system of claim 15, wherein an authorized party is provided with the ordered sequence of signature verification keys for enabling the authorized party to monitor a progress of the document through a workflow.