Method and system for digital rights management of documents

• US 9,003,548 B2
• Filed: 04/13/2004
• Issued: 04/07/2015
• Est. Priority Date: 04/13/2004
• Status: Expired due to Fees

• Current Assignee: Keyavi Data Corp.
• Original Assignee: NL Systems LLC
• Inventors: Pigin, Vlad
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US10/823,042
• Publication Number:
  US 20050229258A1
• Time in Patent Office: 4,011 Days
• Field of Search: None
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/64 Self-signed certificates
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method and system of encrypting and decrypting documents and recipient rights.

Claims

1. A method for sending an electronic document and/or message from a sender to a recipient, the method performed by a hardware processor and comprising:

allowing the sender to select an electronic document to encrypt and send to the recipient;

allowing the sender to select a set of recipient rights for the selected document;

generating a graphic representation of the selected document in response to the sender selecting the set of recipient rights;

encrypting the graphic representation of the selected document and the set of recipient rights;

encapsulating the encrypted graphic representation of the selected document and the encrypted set of recipient rights into a cryptocontainer;

sending the cryptocontainer from the sender to the recipient as an email attachment; and

wherein the encapsulated and encrypted graphic representation of the selected document and the recipient rights are accessible by the recipient.

2. The method of claim 1 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

3. The method of claim 1 wherein the encrypting the document includes utilizing the terminal of the recipient to establish a computer passport.

4. The method of claim 3 further including utilizing at least one of the following to generate an unique symmetry key to encrypt a session key that is used to encrypt the document and set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

5. The method of claim 1 further including using a certificate of the sender.

6. The method of claim 1 further including selecting from a set of certificates of the sender.

7. A system for sending an electronic document and/or message from a sender to a recipient, and encrypting the document and/or message, the system comprising:

a sender'"'"'s email system that selects an electronic document to encrypt and to send to the recipient, wherein the sender'"'"'s email system provides;

selection of a set of recipient rights for selected the document;

generation of a graphical representation of the selected document in response to the selection of the set of recipient rights;

encryption of the graphical representation of the selected document and the set of recipient rights; and

an ability to send the encrypted graphical representation of the selected document and the set of recipient rights from the sender to the recipient; and

a receiver'"'"'s email system that receives the encrypted document and the set of recipient rights at a terminal of the recipient; and

a viewer that accesses the graphical representation of the selected document according to the set of recipient rights.

8. The system of claim 7 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

9. The system of claim 7 wherein the encryption of the document includes utilizing the terminal of the recipient to establish a computer passport.

10. The system of claim 9 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the document and set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

11. The system of claim 7 further including using a certificate of the sender.

12. The system of claim 7 wherein the sender'"'"'s email system includes selection from a set of certificates of the sender.

13. A method for sending an electronic document and/or message from a sender to a recipient, and encrypting the document and/or message, the method performed by a hardware processor and comprising:

selecting an electronic document to encrypt and send to the recipient;

selecting a set of recipient rights for the document, wherein the set of recipient rights includes at least one from the following set;

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date;

generating a graphic representation of the selected document in response to selecting the set of recipient rights;

encrypting the graphic representation of the selected document and the set of recipient rights;

sending the encrypted geographic representation of the selected document and the set of recipient rights from the sender to the recipient;

receiving the encrypted document and the set of recipient rights at a terminal of the recipient; and

accessing the document according to the set of recipient rights.

14. The method of claim 13 wherein the encrypting the document includes utilizing the terminal of the recipient to establish a computer passport.

15. The method of claim 14 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the document and set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

16. The method of claim 13 further including using a certificate of the sender.

17. The method of claim 13 further including selecting from a set of certificates of the sender.