Document management system and method

• US 8,364,729 B2
• Filed: 03/17/2011
• Issued: 01/29/2013
• Est. Priority Date: 03/17/2011
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Balinsky, Helen, Chen, Liqun, Simske, Steven J.
• Primary Examiner(s): Hwa, Shyue Jiunn
• Application Number:
  US13/050,888
• Publication Number:
  US 20120239714A1
• Time in Patent Office: 684 Days
• Field of Search: 707/608, 707/822, 713/178
• US Class Current: 707/822
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 40/131 Fragmentation of text files, e.g. creating reusable text-blocks; Linking to fragments, e.g. using XInclude; Namespaces
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A document management system includes a document. One or more of a plurality of map-files of the document correspond(s) with a step of a multi-step workflow associated with the document. A random nonce is generated for each of the steps of the multi-step workflow except for an initial step of the multi-step workflow. Each of the random nonces i) is incorporated as a map-file entry into a respective one of the plurality of map-files corresponding with a step of the multi-step workflow that directly precedes the step of the multi-step workflow for which the random nonce is generated and ii) is used to perform a nonce-based initiating operation a respective one of the plurality of map-files corresponding with the step of the multi-step workflow for which the random nonce is generated.

Claims

1. A document management system, comprising:

a processing device;

a secure authoring tool including software modules, embodied on a tangible, non-transitory, computer readable medium, executable by the processing device, the secure authoring tool generating;

a document;

a plurality of map-files of the document, each of the plurality of map-files corresponding with a step of a multi-step workflow associated with the document; and

a random nonce for each of the steps of the multi-step workflow except for an initial step of the multi-step workflow, wherein each of the random nonces i) is incorporated as a map-file entry into a respective one of the plurality of map-files corresponding with a respective one of the steps of the multi-step workflow that directly precedes the step of the multi-step workflow for which the random nonce is generated and ii) is used to perform a nonce-based initiating operation on a respective one of the plurality of map-files corresponding with the step of the multi-step workflow for which the random nonce is generated;

wherein;

each of the plurality of map-files is encrypted; and

each of the plurality of map-files, except for one of the plurality of map-files corresponding with the initial step of the multi-step workflow, has the nonce-based initiating operation applied thereto.

2. The document management system as defined in claim 1 wherein each of the random nonces is releasable from its respective one of the plurality of map-files when or after the respective one of the plurality of map-files is decrypted.

3. The document management system as defined in claim 2, further comprising a public-posting system that makes available each of the random nonces after the random nonce is released from its respective one of the plurality of map-files.

4. The document management system as defined in claim 1 wherein one of the plurality of map-files that corresponds with the initial step of the multi-step workflow is encrypted with a cryptographic method using a participant'"'"'s key.

5. The document management system as defined in claim 1 wherein each of the random nonces is a number of bytes from the map-file that corresponds with the step of the multi-step workflow for which the random nonce is generated.

6. The document management system as defined in claim 1 wherein the plurality of map-files is placed into a first level of a serialization of the document.

7. The document management system as defined in claim 1 wherein one of the plurality of map-files corresponding with a last step of the multi-step workflow does not include any of the random nonces incorporated therein.

8. The document management method as defined in claim 1 wherein the document is a composite document.

9. The document management system as defined in claim 1 wherein each of the plurality of map-files is encrypted using public key encryption, symmetric key encryption, or hybrid encryption.

10. A document management method, comprising:

creating a map-file for each step of a multi-step workflow associated with a document;

generating a random nonce for each of the steps of the multi-step workflow except for an initial step of the multi-step workflow;

incorporating each of the random nonces as a map-file entry into a respective one of the map-files that corresponds with a step of the multi-step workflow that directly precedes the step of the multi-step workflow for which the random nonce is generated, each of the creating, the generating, and the incorporating being accomplished by a processing device executing software modules, embodied on a tangible, non-transitory, computer readable medium, of a secure authoring tool;

encrypting each of the map-files, the encrypting being accomplished by the processing device executing an encryption module embodied on a tangible, non-transitory, computer readable medium; and

applying a nonce-based initiating operation to each of the map-files, except for the map-file that corresponds with the initial step of the multi-step workflow, using the random nonce that is generated for the step of the multi-step workflow corresponding with the respective map-file, the applying being accomplished by the processing device executing the software modules of the secure authoring tool.

11. The document management method as defined in claim 10, further comprising placing all of the map-files into a first level of a serialization of the document, the placing being accomplished by the processing device executing the software modules of the secure authoring tool.

12. The document management method as defined in claim 11, further comprising:

initiating the multi-step workflow;

decrypting the map-file that corresponds with the initial step of the multi-step workflow, thereby releasing the random nonce generated for a second step of the multi-step workflow, the decrypting being accomplished by a processing device of an individual computing system associated with the initial step of the multi-step workflow;

accessing the random nonce generated for the second step of the multi-step workflow; and

applying a nonce-based initiating operation using the random nonce generated for the second step of the multi-step workflow to restore the map-file that corresponds with the second step of the multi-step workflow;

each of the accessing and the applying being accomplished by a processing device of an individual computing system associated with the second step of the multi-step workflow.

13. The document management method as defined in claim 12, further comprising decrypting the map-file that corresponds with the second step of the multi-step workflow, the decrypting being accomplished by the processing device of the individual computing system associated with the second step of the multi-step workflow.

14. The document management method as defined in claim 10 wherein generating the random nonce includes applying an operation that removes a number of bytes from the map-file that corresponds with the step of the multi-step workflow for which the random nonce is generated.

15. The document management method as defined in claim 10 wherein generating the random nonce is accomplished via generating a random string.

16. The document management method as defined in claim 10 wherein generating the random nonce is accomplished by applying a chained XOR operation.

17. The document management method as defined in claim 10 wherein the document is a composite document.

18. The document management method as defined in claim 10 wherein each of the map-files is encrypted using public key encryption, symmetric key encryption, or hybrid encryption.