Secure document management using distributed hashing

• US 8,086,570 B2
• Filed: 11/17/2005
• Issued: 12/27/2011
• Est. Priority Date: 06/27/2005
• Status: Active Grant

• Current Assignee: Fujifilm Business Innovation Corp. (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Inventors: Kunitake, Setsu, Ueda, Yoshihiro, Numata, Kenichi, Suzuki, Akira, Nukaga, Masao, Terao, Taro, Shi, Meng, Kawabe, Shigehisa
• Primary Examiner(s): Mofiz, Apu
• Assistant Examiner(s): DAYE, CHELCIE L
• Application Number:
  US11/282,022
• Publication Number:
  US 20060294152A1
• Time in Patent Office: 2,231 Days
• Field of Search: 707/200, 707/10, 707/638, 707/659, 709/229, 705/14
• US Class Current: 707/638
• CPC Class Codes: G06F 16/93 Document management systems

Abstract

The document management server includes an identification information providing unit that receives a request to obtain identification information required for accessing a document from a client, generates the identification information for the received request, and sends the generated identification information to the client; a relation information management unit that manages relation information of the requested document and the identification information generated for the request; and a history information management unit that manages information on the client who has sent the request, associating with the identification information.

Claims

1. A document management server connected to a network that receives documents from a client, comprising:

an identification information providing unit that receives a request for duplicated copy identification information required for accessing a document from a client, generates unique duplicated copy identification information for the received request, wherein the generated duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information, and sends the generated duplicated copy identification information to the client;

a relation information management unit that manages relation information between the original copy identification information designated by the request and the duplicated copy identification information generated for the request, the original copy identification information uniquely identifying the document;

a history information management unit that manages information by associating the client who has sent the request, with the duplicated copy identification information generated for the request;

an identification information obtaining unit that send the request to obtain identification information and receives the generated duplicated copy identification information as a response;

a document-obtaining unit that sends a document access request, which designates the obtained duplicated copy identification information, to obtain a document associated with the duplicated copy identification information;

a document-providing unit that receives an access request for the document, identifies the original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information, and sends the document identified by the identified original copy identification information as a response to the access request; and

an identification information changing unit that changes the identification information designated by the access request according to the updating information received as the response to the access request.

2. The document management server according to claim 1, wherein the history information management unit manages information of the client who has sent the access request and the original copy identification information designated by the access request.

3. The document management server according to claim 1, wherein the identification information providing unit sends access site information as well as the generated duplicated copy identification information as the response to the request, the access site information indicating an access site where the document corresponding to the request is stored.

4. The document management server according to claim 1, wherein the document-providing unit references access condition information indicating an access condition for each original copy identification information, checks if the original copy identification information designated by the access request satisfies the access condition and, if the access condition is satisfied, provides the document as the response to the access request.

5. The document management server according to claim 4, wherein the access condition information includes access request sources, which are permitted to access the document, for each original copy identification information, and the document-providing unit references the access condition information and, if an access request source of the access request is included in the access condition information, provides the document as the response to the access request.

6. The document management server according to claim 5, wherein the document-providing unit does not provide, for original copy identification information which is included in the access condition information and whose associated access request sources have all already received the document, the document thereafter as the response to an access request designating the original copy identification information.

7. The document management server according to claim 4, wherein the access condition information includes a document accessible period for original copy identification information, and the document-providing unit references the access condition information and, if the access request is received during the accessible period for the original copy identification information designated by the access request, provides the document as the response to the access request.

8. The document management server according to claim 4, wherein the access condition information includes a maximum number of accesses for a document for original copy identification information, and if a number of accesses to a document by the original copy identification information designated by the access request is smaller than the maximum number of accesses, the document-providing unit provides the document as the response to the access request.

9. The document management server according to claim 1, further comprising a document registration unit that receives a document registration request, generates identification information associated with the document, registers the document in a storage unit associated with the document, and sends the generated identification information as a response to the registration request.

10. A document management system comprising:

a processor;

an identification information providing unit that receives a request for duplicated copy identification information required for accessing a document from a client, generates unique duplicated copy identification information for the received request, wherein the generated duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information, and sends the generated duplicated copy identification information to the client;

a relation information management unit that manages relation information between the original copy identification information designated by the request and the duplicated copy identification information generated for the request, the original copy identification information uniquely identifying the document;

a history information management unit that manages information by associating the client who has sent the request, with the duplicated copy identification information generated for the request;

identification information obtaining unit that send the request to obtain identification information and receives the generated duplicated copy identification information as a response;

a document-obtaining unit that sends a document access request, which designates the obtained duplicated copy identification information, to obtain a document associated with the duplicated copy identification information;

a document-providing unit that receives an access request for the document, identifies the original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information, and sends the document identified by the identified original copy identification information as a response to the access request; and

an identification information changing unit that changes the identification information designated by the access request according to the updating information received as the response to the access request.

11. The document management system according to claim 10, further comprising:

a document registration unit that receives a document registration request, generates identification information associated with the document, registers the document associated with the identification information, and sends the generated identification information as a response to the registration request;

an identification information management unit that manages identification information instead of documents; and

an obtaining request response unit that receives an obtaining request for a document and sends identification information of the requested document as a response to the obtaining request.

12. A storage medium readable by a computer, the storage medium storing a program of instructions executable by the computer to function as a document management server, the function comprising:

causing a document management server to receive a request for duplicated copy identification information required for accessing a document from a client;

causing a document management server to generate unique duplicated copy identification information for the received request, wherein the generated duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information;

causing a document management server to send the generated duplicated copy identification information to the client;

causing a document management server to manage relation information between the original copy identification information designated by the request and the duplicated copy identification information generated for the request, the original copy identification information uniquely identifying the document;

causing a document management server to manage information by associating the client who has sent the request with the duplicated copy identification information generated for the request;

causing a document management server to receive an access request for the document;

causing a document management server to identify the original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information; and

causing a document management server to send the document identified by the identified original copy identification information as a response to the access request.

13. A storage medium readable by a computer, the storage medium storing a program of instructions executable by the computer to function as a client that obtains a document via a network, the function comprising:

causing an identification information obtaining unit to send an obtaining request designating a document to be obtained and to obtain unique duplicated copy identification information, as a response to the obtaining request, the unique duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information;

causing a document obtaining unit to send a document access request, which designates the obtained unique duplicated copy identification information, and to obtain a document associated with the unique duplicated copy identification information and an updating information as a response to the access request;

causing an identification information changing unit to change the unique duplicated copy identification information designated by the access request, according to the updating information; and

causing a document-providing unit to receive an access request for a document, identifies original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information, and sends the document identified by the identified original copy identification information as a response to the access request.

14. A document management server that manages history information on access to documents connected to a network that receives the documents from a client, the document management server comprising:

an identification information providing unit that receives a request for duplicated copy identification information required for accessing a document from a client, generates the unique duplicated copy identification information for the received request, wherein the generated duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information;

a history information management unit that manages information by associating the client who has sent the request with the duplicated copy identification information generated for the request;

an identification information obtaining unit that send the request to obtain identification information and receives the generated duplicated copy identification information as a response;

a document-obtaining unit that sends a document access request, which designates the obtained duplicated copy identification information, to obtain a document associated with the duplicated copy identification information;

a document-providing unit that receives an access request for the document, identifies the original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information, and sends the document identified by the identified original copy identification information as a response to the access request; and

an identification information changing unit that changes the identification information designated by the access request according to the updating information received as the response to the access request.

15. A document management method comprising:

receiving a request for duplicated copy identification information required for accessing a document from a client;

generating unique duplicated copy identification information for the received request, wherein the generated duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information;

sending the generated duplicated copy identification information to the client;

managing relation information between the original copy identification information designated by the request and the duplicated copy identification information generated for the request, the original copy identification information uniquely identifying the document;

managing information by associating the client who has sent the request with the duplicated copy identification information generated for the request;

receiving an access request for the document;

identifying the original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information; and

sending the document identified by the identified original copy identification information as a response to the access request.

16. A client of a document management system, the client comprising:

an identification information obtaining unit that sends the obtaining request to the document management server and receives unique duplicated copy identification information as a response, the unique duplicated copy identification information is not identical to any already-generated original copy identification information and other duplicated copy identification information;

a document obtaining unit that sends a document access request, which designates the obtained unique duplicated copy identification information, and obtains a document associated with the unique duplicated copy identification information and an updating information as a response to the access request;

an identification information changing unit that changes the identification information designated by the access request, according to the updating information; and

a document-providing unit that receives an access request for a document, identifies original copy identification information corresponding to the access request by referencing the duplicated copy identification information designated by the access request and the relation information, and sends the document identified by the identified original copy identification information as a response to the access request.