DIGITAL RIGHTS MANAGEMENT THROUGH VIRTUAL CONTAINER PARTITIONING

• US 20140304836A1
• Filed: 03/13/2014
• Published: 10/09/2014
• Est. Priority Date: 04/27/2012
• Status: Abandoned Application

• Current Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Original Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Inventors: Velamoor, Sudhakar, Siddiqui, Fahim
• Application Number:
  US14/207,942
• Publication Number:
  US 20140304836A1
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In embodiments of the present invention improved capabilities are described for securely sharing documents among users within separate business entities, comprising providing a virtual container control facility, on a computing device with an operating system, and at least one virtual container where commands from the operating system for saving, copying, and printing of computer files are restricted for users other than unrestricted users; storing by a first unrestricted user of a first business entity a computer file in the virtual container; granting access permission by the first unrestricted user to view and edit the computer file by a restricted user of a second business entity; and receiving editing of the computer file by the restricted user, the editing creating an edited computer file within the virtual container that is accessible by the unrestricted user.

Claims

1. A method for securely sharing documents among users within separate business entities, comprising:

providing a virtual container control facility, on a computing device with an operating system, and at least one virtual container where commands from the operating system for saving, copying, and printing of computer files are restricted for users other than unrestricted users;

storing by a first unrestricted user of a first business entity a computer file in the virtual container;

granting access permission by the first unrestricted user to view and edit the computer file by a restricted user of a second business entity; and

receiving editing of the computer file by the restricted user, the editing creating an edited computer file within the virtual container that is accessible by the unrestricted user.

2. The method of claim 1, further comprising at least one of saving, copying, and printing the edited computer file by the first unrestricted user.

3. The method of claim 2, wherein printing comprises a print-screen command.

4. The method of claim 2, wherein saving, copying, and printing comprise saving, copying, and printing any portion of the computer file.

5. The method of claim 1, further comprising removing the access permission of the first unrestricted user to the computer file and the edited computer file by the restricted user.

6. The method of claim 1, wherein the data file is encrypted with digital rights management protection.

7. The method of claim 6, wherein the edited computer file is encrypted with digital rights management protection.

8. The method of claim 1, wherein the virtual container is a file location within a virtual machine configured to restrict the commands from the operating system.

9. The method of claim 1, wherein the virtual container is a file location within a computer drive configured to restrict the commands from the operating system.

10. The method of claim 1, wherein editing the computer file is through a source application for the computer file, where the source application is permitted to edit the computer file.

11. The method of claim 1, wherein the granted access permission is for a limited time period.

12. The method of claim 1, wherein the granted access permission is for a limited number of accesses to the data file.

13. The method of claim 1, wherein the granted access permission is based on a role of the restricted user within a transaction process involving the first and second business entities.