Secure redacted document access

• US 8,892,872 B2
• Filed: 08/07/2012
• Issued: 11/18/2014
• Est. Priority Date: 08/07/2012
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Appsense Incorporated
• Inventors: Davis, Anthony T.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US13/568,520
• Publication Number:
  US 20140047556A1
• Time in Patent Office: 833 Days
• Field of Search: 713/160, 726/28
• US Class Current: 713/160
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Described are computer-based methods and apparatuses, including computer program products, for secure redacted document access. A viewing application for viewing documents is executed, the viewing application comprising standard code for the viewing application that can not process the container data type, and custom code configured to allow the viewing application to process a container data type. A container of the container data type is received from a remote computing device comprising a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location, and a header comprising encryption information for each redacted document in the set of redacted documents. The container is processed based on a location of the computing device and the custom code.

Claims

1. A computerized method for accessing a redacted document, comprising:

executing, by a computing device, a viewing application for viewing documents, the viewing application comprising;

standard code for the viewing application that cannot process a container data type; and

custom code configured to allow the viewing application to process a container data type;

receiving, by the computing device, a container from a remote computing device comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and

a header comprising encryption information for each redacted document in the set of redacted documents;

processing, by the computing device, the container based on a location of the computing device and the custom codes;

executing a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;

opening the container using the second viewing application; and

displaying, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.

2. The computerized method of claim 1, wherein processing the container comprises:

storing a set of custom actions for the container data type;

intercepting an application call from the viewing application to perform an action to the container;

selecting a custom action from the set of custom actions based on the intercepted application call; and

executing the custom action instead of the application call.

3. The computerized method of claim 2, wherein:

a custom action in the set of custom actions comprises a custom open action configured to open a redacted document from the set of documents in the container based on the location of the computing device; and

executing the custom open action comprises;

intercepting the application call, the application call comprising a call to open the container;

determining the location of the computing device;

selecting a redacted document from the set of redacted documents comprising a level of redaction for a viewing location that is equal to the location of the computing device; and

opening the redacted document using the viewing application.

4. The computerized method of claim 3, wherein opening the reacted document comprises:

transmitting a request to view the redacted document to the remote computing device;

receiving additional encryption information for the redacted document;

decrypting the redacted document based on the decryption information in the header associated with the redacted document and the additional encryption information; and

displaying the decrypted redacted document using the viewing application.

5. The computerized method of claim 2, wherein:

a custom action in the set of custom actions comprises a custom close action configured to close a decrypted redacted document; and

executing the custom close action comprises;

intercepting the application call, the application call comprising a call to close the decrypted redacted document;

closing the decrypted redacted document so that the viewing application no longer displays the decrypted redacted document; and

deleting the decrypted redacted document from the computing device.

6. The computerized method of claim 2, wherein a custom action in the set of custom actions comprises a custom save action configured to protect a decrypted redacted document.

7. The computerized method of claim 6, further comprising executing the custom save action, comprising:

intercepting the application call, the application call comprising a call to save the decrypted redacted document;

determining the decrypted redacted document can be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and

saving the decrypted redacted document on the computing device.

8. The computerized method of claim 6, further comprising executing the custom save action, comprising:

intercepting the application call, the application call comprising a call to save the decrypted redacted document;

determining the decrypted redacted document can not be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and

preventing the decrypted redacted document from being saved on the computing device.

9. The computerized method of claim 1, further comprising downloading the viewing application from a custom application site.

10. An apparatus for accessing a redacted document, the apparatus comprising:

a processor; and

a memory coupled to the processor and including computer readable instructions that, when executed by the processor, are configured to cause the processor to;

execute a viewing application for viewing documents, the viewing application comprising;

standard code for the viewing application that can not process a container data type; and

custom code configured to allow the viewing application to process a container data type;

receive a container from a remote computing device comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and

a header comprising encryption information for each redacted document in the set of redacted documents;

process the container based on a location of the computing device and the custom code;

execute a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;

open the container using the second viewing application; and

display, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.

11. The apparatus of claim 10, wherein processing the container comprises:

storing a set of custom actions for the container data type;

intercepting an application call from the viewing application to perform an action to the container;

selecting a custom action from the set of custom actions based on the intercepted application call; and

executing the custom action instead of the application call.

12. The apparatus of claim 11, wherein:

a custom action in the set of custom actions comprises a custom open action configured to open a redacted document from the set of documents in the container based on the location of the computing device; and

executing the custom open action comprises;

intercepting the application call, the application call comprising a call to open the container;

determining the location of the computing device;

selecting a redacted document from the set of redacted documents comprising a level of redaction for a viewing location that is equal to the location of the computing device; and

opening the redacted document using the viewing application.

13. The apparatus of claim 12, wherein opening the reacted document comprises:

transmitting a request to view the redacted document to the remote computing device;

receiving additional encryption information for the redacted document;

decrypting the redacted document based on the partial decryption information in the header associated with the redacted document and the additional encryption information; and

displaying the decrypted redacted document using the viewing application.

14. The apparatus of claim 11, wherein:

a custom action in the set of custom actions comprises a custom close action configured to close a decrypted redacted document; and

executing the custom close action comprises;

intercepting the application call, the application call comprising a call to close the decrypted redacted document;

closing the decrypted redacted document so that the viewing application no longer displays the decrypted redacted document; and

deleting the decrypted redacted document from the computing device.

15. The apparatus of claim 11, wherein a custom action in the set of custom actions comprises a custom save action configured to protect a decrypted redacted document.

16. The apparatus of claim 15, wherein the computer readable instructions are further configured to execute the custom save action, comprising:

intercepting the application call, the application call comprising a call to save the decrypted redacted document;

determining the decrypted redacted document can be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and

saving the decrypted redacted document on the computing device.

17. The apparatus of claim 15, wherein the computer readable instructions are further configured to execute the custom save action, comprising:

intercepting the application call, the application call comprising a call to save the decrypted redacted document;

determining the decrypted redacted document can not be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and

preventing the decrypted redacted document from being saved on the computing device.

18. The apparatus of claim 10, wherein the computer readable instructions are further configured to download the viewing application from a custom application site.

19. A computer program product, tangibly embodied in a non-transitory computer readable medium, the computer program product including instructions being configured to cause a data processing apparatus to:

execute a viewing application for viewing documents, the viewing application comprising;

standard code for the viewing application that can not process a container data type; and

custom code configured to allow the viewing application to process a container data type;

receive a container from a remote computing device comprising;

a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and

a header comprising encryption information for each redacted document in the set of redacted documents;

process the container based on a location of the computing device and the custom code;

execute a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;

open the container using the second viewing application; and

display, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.