System and method for providing customized secure access to shared documents

• US 7,299,502 B2
• Filed: 02/14/2001
• Issued: 11/20/2007
• Est. Priority Date: 02/14/2001
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Schmeling, Garth F., Cherry, Darrel D.
• Primary Examiner(s): Sheikh; Ayaz
• Assistant Examiner(s): Chai; Longbit
• Application Number:
  US09/784,116
• Publication Number:
  US 20020112164A1
• Time in Patent Office: 2,470 Days
• Field of Search: 380277-285, 380/4.23, 380/30, 380/259, 382115-123, 709217-219, 713200-202, 713/194, 713/165
• US Class Current: 726/29
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

A document management system and method. The inventive system includes a server for providing data from a stored document. Software is provided on the server for encrypting the data. A communications subsystem is included for transporting the encrypted data from the server to the client. Software is provided at the client for decrypting the encrypted data. The inventive method includes the steps of: using a client machine to access a server via a network and to request data therefrom; encrypting at least a portion of said data on said server; communicating said encrypted data from said server to said client; and decrypting said data on said client. In the illustrative embodiment, the inventive method operates under the control of an agent residing on the server. The encrypting software is a first applet residing on the server and the decrypting software is a second applet residing on the client. In the illustrative implementation, the second applet is communicated from the server to the client. Several mechanisms are included for verifying the user'"'"'s identity including a digital signature, a private key and a public key. In accordance with the invention, software is included for customizing the data based on the user'"'"'s access rights; providing for secure modification of the shared document; and tracking submission, access, and changes in the document.

Claims

1. A method for sharing documents including the steps of:

receiving, from a user of a client, a request for a document from a server;

obtaining access rights for the user;

downloading to the client the access rights, the document, and an applet, the applet being operable to customize a display of the document by the client according to the access rights, and allowing modification of the document according to the access rights.

2. The invention of claim 1 further comprising verifying that the user has access rights for the document.

3. The invention of claim 2 wherein the step of verifying includes the step of authenticating a digital signature.

4. The invention of claim 2 wherein the step of verifying includes the step of authenticating a private key.

5. The invention of claim 2 wherein the step of verifying includes the step of authenticating a public key.

6. The invention of claim 1 further including the step of tracking changes in said document.

7. The invention of claim 1 further including the step of tracking access of said document.

8. The invention of claim 1 further including the step of tracking submission of documents.

9. The invention of claim 1 further including the step of the applet causing the client to display a view of the data for the user, the view being customized according to the access rights.

10. The method of claim 1 wherein downloading includes downloading the accesses rights and the document with a session key, wherein the access rights and the document have been encrypted with the session key and the session key has been encrypted with a public key for the user.

11. The method of claim 10 wherein the applet is operable to decrypt the session key with a private key for the user and to decrypt the data and the access rights with the decrypted session key.

12. The method of claim 10 further comprising randomly generating the session key.

13. A document management system comprising:

a server for providing data from a document stored in a folder, the server operable to receive, from a user of a client, a request for the data; and

an agent associated with said folder, the agent operable to obtain access rights for the user and to cause the server to download to the client the access rights, the data, and an applet, the applet being operable to customize a display of the data by the client according to the access rights, wherein the agent is further operable to allow modifications of the data according to the access rights.

14. The invention of claim 13 wherein the agent is operable to encrypt the data and the access rights and the applet is operable to decrypt the data and the access rights.

15. The invention of claim 13 further including means for verifying a user'"'"'s identity before the agent causes the server to download the data to the client.

16. The invention of claim 13, further comprising means for encrypting the data and the access rights with a session key and means for encrypting the session key with a public key for the user, and wherein the agent is operable to cause the server to download the encrypted session key to the client along with the applet, the encrypted access rights, and the encrypted data.

17. The invention of claim 16, wherein the applet is operable to decrypt the session key with a private key for the user and to decrypt the data and the access rights with the decrypted session key.

18. The invention of claim 16 further including means for randomly generating said session key.

19. The invention of claim 13 wherein said access rights are stored in a database.