Method for selective encryption within documents

• US 7,346,769 B2
• Filed: 10/23/2003
• Issued: 03/18/2008
• Est. Priority Date: 10/23/2003
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Forlenza, Randolph Michael, Berstis, Viktors
• Primary Examiner(s): Peeso; Thomas R.
• Application Number:
  US10/692,142
• Publication Number:
  US 20050091499A1
• Time in Patent Office: 1,608 Days
• Field of Search: 713/151, 713/152, 713/154, 713/168
• US Class Current: 713/151
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

The present invention allows the user (author or creator) of a document to specify that certain portions of a document be selected for encryption while other portions of the document remain displayed as created. The user could employ a standard word processing editor technique to highlight (or swipe) portions of a document that the user desires to be encrypted. The highlighted portion would then be ‘tagged’ with a surrounding attribute indicating to the word processor that this highlighted portion of the document is to be encrypted. This process is similar to the existing word processor capability to highlight areas on a document and then assign rich text attributes, such as BOLD, ITALICS, etc., to those areas. With proper authorization, any encrypted portion of a document would be displayed as part of the document. Without proper authorization, the display of the document would only contain the unencrypted portions of the document.

Claims

1. A method for selective encryption within a document comprising the steps of:

detecting a portion of a document selected and marked for encryption; and

encrypting the detected portion of the document selected for encryption;

displaying the document with the selected portions of the document encrypted; and

repeating said detecting and encrypting steps for another selective portion of the document.

2. The method as describe in claim 1 wherein an encrypted portion of the document has a different encryption key from another encrypted portion of the document.

3. The method as described in claim 1 further comprising after said displaying step, the step of storing the document with the selected portions encrypted.

4. The method as described in claim 3 further comprising after said storing step, the steps of:

detecting an attempt to access an encrypted portion of the document; and

determining whether the accessor is authorized to access the encrypted portion of the document.

5. The method as described in claim 4 further comprising the step of displaying the document with the selected portions encrypted, when the determination is that the accessor does not have authority to access that portion of the document.

6. The method as described in claim 4 further comprising the step of displaying the document with any previously encrypted portions decrypted when the determination is that the accessor has the authority to access the encrypted portion of the document.

7. The method as described in claim 1 further comprising after said encrypting step, the steps of:

extracting the encrypted portion of the document;

storing the extracted portion of the document in an appendix location and identifying the location in the document of the extracted portion of the document.

8. The method as described in claim 7 further comprising after said identifying step, the step of storing the document with the encrypted portions in a designated location.

9. The method as described in claim 7 further comprising after said identifying step, the steps of:

detecting a requesting to access an encrypted portion of the document;

determining whether accessor is authorized to access that encrypted portion of the document;

decrypting, retrieving and inserting the extracted contents of that encrypted portion of the document when the determination is that accessor has proper authorization to access that portion of the document; and

displaying the document with that previously encrypted portion of the document in decrypted form.

10. The method as described in claim 7 further comprising after said identifying step, the steps of:

detecting a requesting to access an encrypted portion of the document;

determining whether accessor is authorized to access that encrypted portion of the document; and

rejecting the access request when the determination is that the accessor does not have authority to access that portion of the document.

11. The method as described in claim 7 further comprising after said identifying step, the step of filling the location of the extracted portion of the document with random symbols.

12. The method as described in claim 11 further comprising after said filling step, the step of transmitting the document across a computing network to an identified destination.

13. The method as described in claim 1 wherein said detecting step further comprises identifying a selected portion of a document that is marked by swiping a peripheral a apparatus that interfaces with a computing device over the portion of the document for which encryption is desired.

14. A computer program product in a computer readable medium for selective encryption within a document comprising:

instructions detecting a portion of a document selected and marked for encryption;

instructions encrypting the detected portion of the document selected for encryption;

instructions displaying the document with the selected portions of the document encrypted; and

instructions repeating said detecting, identifying and encrypting instructions for another selective portion of the document.

15. The computer program product as described in claim 14 further comprising after said displaying instructions, instructions for storing the document with the selected portions encrypted.

16. The computer program product as described in claim 14 further comprising after said storing instructions, instructions for:

detecting an attempt to access an encrypted portion of the document; and

determining whether the accessor is authorized to access the encrypted portion of the document.

17. The computer program product as described in claim 16 further comprising instructions displaying the document with the selected portions encrypted, when the determination is that the accessor does not have authority to access that portion of the document.

18. The computer program product as described in claim 16 further comprising instructions for displaying the document with any previously encrypted portions decrypted when the determination is that the accessor has the authority to access the encrypted portion of the document.

19. The computer program product as described in claim 14 further comprising after said encrypting instructions, instructions:

extracting the encrypted portion of the document;

storing the extracted portion of the document in an appendix location; and

identifying the location in the document of the extracted portion of the document.

20. The computer program product as described in claim 19 further comprising after said identifying instructions, instructions storing the document with the encrypted portions in a designated location.

21. The computer program product as described in claim 19 further comprising after said identifying instructions, instructions:

detecting a requesting to access an encrypted portion of the document;

determining whether accessor is authorized to access that encrypted portion of the document;

decrypting, retrieving and inserting the extracted contents of that encrypted portion of the document when the determination is that accessor has proper authorization to access that portion of the document; and

displaying the document with that previously encrypted portion of the document in decrypted form.

22. The computer program product as described in claim 19 further comprising after said identifying instructions, instructions:

detecting a requesting to access an encrypted portion of the document;

determining whether accessor is authorized to access that encrypted portion of the document; and

rejecting the access request when the determination is that the accessor does not have authority to access that portion of the document.

23. The computer program product as described in claim 19 further comprising after said identifying instructions, instructions filling the location of the extracted portion of the document with random symbols.

24. The computer program product as described in claim 23 further comprising after said filling instructions, instructions transmitting the document across a computing network to an identified destination.