Document-authorized access to a shared workspace

• US 9,166,954 B2
• Filed: 02/29/2008
• Issued: 10/20/2015
• Est. Priority Date: 02/29/2008
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Swineford, Randy L., James, Barnaby, Wibbeler, Patrick R.
• Primary Examiner(s): Edwards, Linglan
• Assistant Examiner(s): BECHTEL, KEVIN M
• Application Number:
  US12/040,114
• Publication Number:
  US 20140029751A1
• Time in Patent Office: 2,790 Days
• Field of Search: 380/283, 726/20
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Various embodiments described herein each provide one or more of systems, methods, software, and data structures that facilitate document-authorized access to a shared workspace. Some of these embodiments provide access to a shared workspace, such as a document review comment repository, through data embedded within a document. Mere possession of a document with a key, or other data element, allows a possessor of the document to participate in a workflow process.

Claims

1. A computerized method comprising:

requesting, by a client initiator to a computer server over a computer network, a shared workspace be instantiated on the computer server for a local instance of an electronic document, the shared workspace being a data repository apart from the electronic document configured to store workflow data comprising data representative of one or more modifications, comments, or combinations thereof to the electronic document;

receiving, by the client initiator from the computer server over the computer network in response to the request, an encryption key to an instantiated shared workspace on the computer server and a Uniform Resource Identifier of a computer network location of the shared workspace, wherein the instantiated shared workspace is indexed by the encryption key in the computer server;

inserting the encryption key and the Uniform Resource Identifier into a metadata or other portion of the electronic document that will not affect a graphical presentation of the electronic document when displayed to a user, the encryption key being an identifier of the electronic document to the shared workspace and being a sole credential for accessing workflow data stored in the shared workspace at the computer network location of the Uniform Resource Identifier, wherein any user in possession of the electronic document including the encryption key authorizes the user access to the workflow data stored in the shared workspace including enabling the user to post data to the shared workspace representative of modifications and/or comments to the electronic document; and

saving the electronic document.

2. The computerized method of claim 1, wherein, after receiving the encryption key, the computerized method further includes:

signing communications to be sent over the computer network to the shared workspace on the computer server as a function of the encryption key.

3. The computerized method of claim 1, further comprising:

distributing the electronic document.

4. The computerized method of claim 3, wherein the distributing of the electronic document includes emailing the electronic document.

5. The computerized method of claim 1, further comprising:

inserting a further key into the electronic document, the further key being unknown to the shared workspace and used for encryption and decryption of workflow data by participants in possession of the electronic document having the further key;

encrypting the workflow data to be sent to the shared workspace as a function of the further key; and

signing a communication to be sent over the computer network as a function of the encryption key of the instantiated shared workspace on the computer server.

6. The computerized method of claim 5, further comprising:

requesting from the shared workspace, all workflow data related to the electronic document stored thereon, the request signed as a function of the encryption key of the instantiated workspace on the computer server;

receiving a communication including the requested workflow data over the computer network;

verifying the communication is signed as a function of the encryption key of the instantiated shared workspace; and

decrypting as a function of the further key.

7. A computerized method comprising:

accessing a local instance of an electronic document stored in a computer memory;

retrieving, from a metadata or other portion of the electronic document that will not affect a graphical presentation of the electronic document when displayed to a user, data comprising a Uniform Resource Identifier identifying a computer network location of a workflow repository on a computer server and a first encryption key, the first encryption key being an identifier of the electronic document to the workflow repository and a sole credential for transmitting workflow information to and from the identified workflow repository, the workflow repository being a data repository apart from the electronic document configured to store workflow information comprising data representative of modifications, comments, or combinations thereof to the electronic document, wherein any user in possession of the electronic document including the encryption key authorizes the user access to the workflow information;

receiving input from a user, the input representative of modifications and/or comments to the electronic document;

processing the input as a function of the first encryption key to generate workflow information; and

uploading the workflow information to the workflow repository identified in the electronic document and indexed by the first encryption key in the server.

8. The computerized method of claim 7, wherein the processing of the input includes signing the workflow information as a function of the first encryption key.

9. The computerized method of claim 7, wherein the processing of the input includes encrypting the workflow information as a function of the first encryption key.

10. The computerized method of claim 7, further comprising:

retrieving a second key from the electronic document; and

wherein the processing of the input further includes processing the input as a function of the second key.

11. The computerized method of claim 10, wherein the processing of the input includes:

encrypting the input as a function of the second key; and

signing the workflow information as a function of the first encryption key.

12. The computerized method of claim 7, wherein the electronic document is encoded according to a page description language file format specification.

13. The computerized method of claim 7, further comprising:

retrieving workflow data from the workflow repository; and

adding the retrieved workflow data to the electronic document.

14. The computerized method of claim 13, further comprising:

decrypting the retrieved workflow data as a function of the first encryption key.

15. The computerized method of claim 7, further comprising:

storing the input in an electronic file of the electronic document.

16. A computerized method comprising:

receiving a workflow initiation request on a computer server from a client initiator over a computer network for an electronic document local to the client initiator;

verify the client initiator is identified as an authorized user in a permission database;

instantiating a workflow repository on the computer server, the workflow repository configured to store workflow data comprising data representative of modifications, comments, or combinations thereof;

issuing a Uniform Resource Identifier and a symmetric encryption key from the computer server to the client initiator over the computer network upon successful verification in the permission database, the Uniform Resource Identifier and symmetric encryption key to be inserted, into a metadata or other portion of the electronic document that will not affect a graphical presentation of the electronic document when displayed to a user, by the client initiator, wherein the symmetric encryption key is a sole credential used to verify an association with the instantiated workflow repository and provide access thereto, to users in possession of the electronic document including the symmetric encryption key;

maintaining an electronic record of the symmetric encryption key associated with the workflow repository for indexing; and

storing received workflow data representative of modifications and/or comments to the electronic document in the workflow repository responsive to the received workflow data being signed as a function of the symmetric encryption key.

17. The computerized method of claim 16, wherein the storing of the received workflow data in the workflow repository includes:

encrypting the workflow data as function of the symmetric encryption key.

18. A system comprising:

a computer network; and

a computer server coupled to the computer network, the computer server comprising instructions stored thereon that, when executed by the computer server, cause the computer server to;

receive, over the computer network, a shared workspace instantiation request from a client initiator for an electronic document local to the client initiator;

verify the client initiator is authorized to request instantiation of a shared workspace;

upon verified authorization of the client initiator, generating a shared workspace, a Uniform Resource Identifier, and an encryption key associated to the shared workspace, the shared workspace being a data repository apart from the electronic document configured to store workflow data comprising data representative of modifications, comments, or combinations thereof to the electronic document;

store the encryption key in association to the shared workspace in a key-workspace data structure for indexing the shared workspace; and

send, over the computer network, the Uniform Resource Identifier and the encryption key to the client initiator, the Uniform Resource Identifier and the encryption key to be inserted, into a metadata or other portion of the electronic document that will not affect a graphical presentation of the electronic document when displayed to a user, by the client initiator as a sole credential used to verify association with the generated shared workspace and provide access thereto, to users in possession of the electronic document including the encryption key.

19. The system of claim 18, wherein the computer server, in generating a shared workspace, is configured to:

create a folder in a data storage location accessible over the computer network to hold shared workspace data.

20. The system of claim 18, wherein the computer server is further configured to:

receive, over the computer network, a request to post data to the shared workspace, the request including a representation of the encryption key;

identify the shared workspace to post the data to as a function of the encryption key representation and the key-workspace data structure; and

store the data in the shared workspace.

21. The system of claim 20, wherein the computer server, in generating a shared workspace, is configured to:

receive, from a requestor and over the computer network, a shared workspace data retrieve request including a representation of the encryption key;

identify the shared workspace for which the retrieve request is for as a function of the encryption key representation and the key-workspace data structure, the key-workspace data structure being an index of shared workspaces identifiable by their key representations;

retrieve the data from the identified shared workspace; and

send, over the computer network, the shared workspace data to the requestor.

22. The system of claim 20, wherein the representation of the encryption key is a signing of the request to post data as a function of the encryption key.

23. The system of claim 18, wherein the encryption key is a symmetric encryption key.