COMPOSITE DOCUMENT ACCESS

• US 20170262642A1
• Filed: 08/12/2014
• Published: 09/14/2017
• Est. Priority Date: 08/12/2014
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: ALI, VALI, BALINSKY, HELEN
• Granted Patent: US 10,452,855 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services

Abstract

According to an example of accessing a composite document, a request to access a composite document is received. A key associated with a group is fetched, and the key is used to decrypt a part of the composite document comprising an attribute. In the event that the attribute is verified, access to the composite document is provided.

Claims

1. A method of accessing a composite document, comprising:

receiving a request to access a composite document;

fetching a key associated with a group;

using the key to decrypt a part of the composite document comprising an attribute; and

verifying the attribute,

wherein, in the event that the attribute is verified, providing access to the composite document.

2. The method according to claim 1, wherein the key is further associated with a composite document.

3. The method according to claim 1, wherein the key is stored on a server used for verifying an attribute.

4. The method according to claim 1, wherein the composite document comprises a symmetric key.

5. The method according to claim 1, wherein providing access to the composite document comprises providing access to at least one content-part of the composite document.

6. The method according to claim 1, wherein providing access to the composite document comprises sending a symmetric key to an access environment to decrypt a key-map, and releasing a key.

7. The method according to claim 1, wherein providing access to the composite document comprises requesting a key-map table from an access environment, using a symmetric key to decrypt a key-map table, and releasing a key to the access environment.

8. The method according to claim 1, wherein providing access to the composite document comprises requesting the composite document from an access environment, using a symmetric key to decrypt a key-map table and access at least one content-part, and sending at least one decrypted content-part to the access environment.

9. A computer system comprising:

a composite document;

an attribute verification service; and

at least one processor to implement the attribute verification service,

wherein the attribute verification service is to receive a request to access the composite document, fetch a private key associated with a group stored on the attribute verification service, use the key to decrypt a part of the composite document comprising an attribute, verify the attribute, and provide access to the composite document using a symmetric key.

10. The system according to claim 9, wherein the private key is generated by the attribute verification service.

11. The system according to claim 9, wherein the composite document comprises the symmetric key.

12. The system according to claim 9, wherein the attribute verification service is to send a symmetric key to the access environment, instruct the access environment to decrypt a key-map table, and release a key.

13. The system according to claim 9, wherein the attribute verification service is to use a symmetric key to decrypt a key-map table and release a key to the access environment.

14. The system according to claim 9, wherein the attribute verification service is to request the composite document from the access environment, use a symmetric key to decrypt a key-map table, access at least one content-part in the composite document, and send at least one decrypted content-part to the access environment.

15. A non-transitory computer readable storage medium on which is embedded a computer program, said computer program to manage access to a composite document, said computer program comprising a set of instructions to:

receive a request to access the composite document;

fetch a key associated with a group;

use the key to decrypt an entry table row in the composite document; and

verify an attribute stored in the entry table,

wherein, in the event that the attribute is verified, provide access to the composite document using at least one symmetric key.