Adaptive document redaction

• US 8,868,905 B2
• Filed: 08/07/2012
• Issued: 10/21/2014
• Est. Priority Date: 08/07/2012
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Appsense Incorporated
• Inventors: Davis, Anthony T., Somerfield, Richard J.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US13/568,528
• Publication Number:
  US 20140047234A1
• Time in Patent Office: 805 Days
• Field of Search: 713/160, 726/28
• US Class Current: 713/160
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Described are computer-based methods and apparatuses, including computer program products, for adaptive document redaction. A container is generated comprising a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location, and a header comprising encryption information for each redacted document in the set of redacted documents. A request to view the original document is received from a requesting device. The container is transmitted to the requesting device. A request for additional encryption information for a redacted document from the set of redacted documents is received from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device. The additional encryption information is transmitted to the requesting device.

Claims

1. A computerized method for accessing a document, comprising:

generating, by a computing device, a container comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;

a placeholder document for each redacted document in the set of redacted documents; and

a header comprising encryption information for each redacted document in the set of redacted documents;

receiving, by the computing device, a request to view the original document from a requesting device;

transmitting, by the computing device, the container to the requesting device;

receiving, by the computing device, a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;

transmitting, by the computing device, the additional encryption information to the requesting device;

determining at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) the user device is not configured to read the container, or any combination thereof; and

viewing the placeholder document instead of a particular redacted document.

2. The computerized method of claim 1, wherein transmitting the container comprises transmitting a subset of redacted documents from the set of redacted documents to the requesting device, wherein the subset of documents are viewed more often than the remaining redacted documents in the set of redacted documents.

3. The computerized method of claim 2, further comprising:

determining the additional encryption information is associated with a redacted document that was not transmitted to the requesting device; and

transmitting the redacted document to the requesting device.

4. The computerized method of claim 1, wherein generating the container further comprises:

generating encryption information for each redacted document in the set of redacted documents, the encryption information comprising partial encryption information and additional encryption information;

encrypting each redacted document in the set of redacted documents based on its associated encryption information; and

adding the partial encryption information for each redacted document in the set of redacted documents to the header.

5. The computerized method of claim 1, further comprising:

generating second encryption information for the container for the requesting device, the second encryption information comprising a public key and a private key;

encrypting the header of the container based on the second encryption information;

determining the requesting device is allowed to access the container; and

transmitting the second encryption information to the requesting device with the container for a first session, wherein the requesting device does not store the public key.

6. The computerized method of claim 5, further comprising:

receiving a second request to view the original document from the requesting device;

determining the requesting device is allowed to access the container for a second session; and

transmitting the public key to the requesting device for the second session.

7. An apparatus for accessing a document, the apparatus comprising:

a processor; and

a memory coupled to the processor and including computer readable instructions that, when executed by the processor, are configured to cause the processor to;

generate a container comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;

a placeholder document for each redacted document in the set of redacted documents; and

a header comprising encryption information for each redacted document in the set of redacted documents;

receive a request to view the original document from a requesting device;

transmit the container to the requesting device;

receive a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;

transmit the additional encryption information to the requesting device;

determine at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) if the user device is not configured to read the container, or any combination thereof; and

view a placeholder document instead of a particular redacted document.

8. The apparatus of claim 7, wherein transmitting the container comprises transmitting a subset of redacted documents from the set of redacted documents to the requesting device, wherein the subset of documents are viewed more often than the remaining redacted documents in the set of redacted documents.

9. The apparatus of claim 8, wherein the computer readable instructions are further configured to:

determine the additional encryption information is associated with a redacted document that was not transmitted to the requesting device; and

transmit the redacted document to the requesting device.

10. The apparatus of claim 7, wherein generating the container further comprises:

generating encryption information for each redacted document in the set of redacted documents, the encryption information comprising partial encryption information and additional encryption information;

encrypting each redacted document in the set of redacted documents based on its associated encryption information; and

adding the partial encryption information for each redacted document in the set of redacted documents to the header.

11. The apparatus of claim 7, wherein the computer readable instructions are further configured to:

generate second encryption information for the container for the requesting device, the second encryption information comprising a public key and a private key;

encrypt the header of the container based on the second encryption information;

determine the requesting device is allowed to access the container; and

transmit the second encryption information to the requesting device with the container for a first session, wherein the requesting device does not store the public key.

12. The apparatus of claim 11, wherein the computer readable instructions are further configured to:

receive a second request to view the original document from the requesting device;

determine the requesting device is allowed to access the container for a second session; and

transmit the public key to the requesting device for the second session.

13. A computer program product, tangibly embodied in a non-transitory computer readable medium, the computer program product including instructions being configured to cause a data processing apparatus to:

generate a container comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;

a placeholder document for each redacted document in the set of redacted documents; and

a header comprising encryption information for each redacted document in the set of redacted documents;

receive a request to view the original document from a requesting device;

transmit the container to the requesting device;

receive a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;

transmit the additional encryption information to the requesting device;

determine at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) if the user device is not configured to read the container, or any combination thereof; and

view a placeholder document instead of a particular redacted document.