Document security in enterprise content management systems
AssigneeInternational Business Machines Corporation
InventorsKenytt D. Avery, Jean-Marc Costecalde, David B. Harnick-Shapiro
Life of this patent
Estimating the term…
Abstract
Methods and apparatus, including computer program products, implementing and using techniques for enhancing the security of content in a records management system. A document is received to be stored as a record in the records management system. A unique combination of an encryption key and encryption parameters is selected for the document. The encryption key and encryption parameters are stored on a server that is different from a server upon which the document is to be stored in the records management system. The document is encrypted using the selected unique combination of encryption key and encryption parameters. The encrypted document is stored in the records management system.
Claims12
A computer program product for a records management system, comprising a computer readable storage medium having program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program code being executable by a processor to perform operations comprising:
- generating a unique encryption key for each document in a plurality of documents stored on a first server in a records management system, wherein each unique encryption key is generated in accordance with an assigned classification level for each document;
- encrypting each document in the plurality of documents at the first server, using the unique encryption key for each document and a set of encryption parameters for each document;
- and
- storing the unique encryption key and the set of encryption parameters for each document on a second server.
A records management system, comprising:
- a first server storing a plurality of documents;
- a second server being configured to store one or more encryption keys and one or more sets of encryption parameters for the one or more documents that are stored on the first server;
- a processor;
- and
- a memory storing instructions that when executed by the processor causes the processor to:
- generate a unique encryption key for each document in the plurality of documents stored on the first server, wherein each unique encryption key is generated in accordance with an assigned classification level for each document;
- encrypt each document in the plurality of documents at the first server, using the unique encryption keys for each document and a set of encryption parameters for each document;
- and
- store the unique encryption keys and the sets of encryption parameters for each document on the second server.
Dependencies are inferred from the claim text.