Method and device for assessing a probative value of electronic document management systems

• US 9,444,645 B2
• Filed: 04/21/2009
• Issued: 09/13/2016
• Est. Priority Date: 04/22/2008
• Status: Active Grant

• Current Assignee: Trustseed SAS
• Original Assignee: Trustseed SAS
• Inventors: Blot-Lefevre, Eric
• Primary Examiner(s): Parsons, Theodore C
• Application Number:
  US12/988,618
• Publication Number:
  US 20110107408A1
• Time in Patent Office: 2,702 Days
• Field of Search: 726/7, 726/22, 713/168, 713/176
• US Class Current: 1/1
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method for securing data assessing a probative value of document transfers. The identity of a recipient of a document is authenticated. The document is transmitted from a document sender to the recipient by processing the document processing. A probative value of the processing step is measured. The probative values of processing of the transmission are aggregated to provide a measure of the overall probative value of said document transmission. The overall probative value is associated with the transmission of the document. Also provided is a trusted third party network system for managing secure electronic correspondence which includes at least one application computer server handling a directory service for users of the system and a service for supplying the users with current correspondence accounts on the computer server.

Claims

1. A method for securing data transfers between users of a trusted third party network, said method comprising:

a step of checking the identity of at least one recipient to whom a sender of a document wants to transmit said document through said trusted third party network,

a step of transmission, over said trusted third party network, by the sender to at least one of the recipients whose identity has been checked, of said document by implementing a plurality of steps of processing of said document by at least a document processing server, said plurality of document processing steps being selected from a group consisting of composition, switching, copying, communication, and archiving,

for said plurality of document processing steps performed by the at least one document processing server, a step of measuring, by a computer of the trusted third party network, a processing step probative value indicative of a trustworthiness of each said processing step actually applied to said document, the processing step probative value being based at least in part according to a result returned concerning the processing step operation actually applied to the document,

a step of aggregating the processing step probative values of the plurality of steps of document processing in said transmission to provide a measurement of an overall document transmission probative value of said transmission of the document, and

a step of associating, in memory, said overall document transmission probative value with an identifier of said transmission of said document.

2. The method of claim 1, wherein the processing step probative value measured is a function of the procedure for identifying the sender implemented by the at least one document processing server.

3. The method of claim 1, wherein the processing step probative value measured is a function of the type of electronic signature used by at least one user sending or receiving data.

4. The method of claim 1, wherein the processing step probative value measured is a function of the type of archiving of the data transmitted by the at least one document processing server.

5. The method of claim 1, wherein the processing step probative value measured is a function of the result of computer reads performed by the at least one document processing server.

6. The method of claim 1, further comprising a step of construction of an acknowledgement of receipt comprising an information item representative of the overall document transmission probative value, said acknowledgement of receipt being associated with said document during said association step.

7. The method of claim 1, further comprising a step of assignment of an estimated overall document transmission probative value to a future document transmission and a step of selection of the processing steps to be carried out during this transmission according to the estimated overall document transmission probative value allowed by said document processing.

8. A trusted third party network system for managing secure electronic correspondence comprising at least one application computer server handling a directory service for users of said system and a service for supplying said users with current correspondence accounts on said computer server, said trusted third party network system handling scheduling of operations for processing said electronic correspondence belonging to a group consisting of composition before sending, transmission of the composed correspondence, copying of the transmitted correspondence and archiving of the sent correspondence, wherein said system also provides a service for end-to-end validation of the operations scheduled by the application server, said validation operations comprising computing probative values of identification of the users connecting to the directory service and of results returned concerning the operations actually applied to each individual correspondence and an overall probative value of the secured electronic correspondence.

9. The trusted third party network system for managing secure electronic correspondence of claim 8, wherein the validation service handles at least one validation operation chosen from the group consisting of operations used to ensure traceability of the integrity of the electronic correspondence, verification of the conformity of the operations for processing to predefined procedures and assignment of a probative value score to each of the operations for processing.

10. The trusted third party network system of claim 9, wherein the probative value scores of a determined list of operations for processing, comprising at least one operation not involving the directory service, are aggregated by the validation operation in a probative value score for each correspondence.