Back to results
US 10,834,060 B2Granted
File sharing and policy control based on file link mechanism
AssigneeInternational Business Machines Corporation
InventorsJunichi Kato, Takayuki Kushida, Tomoko Murayama, Masaharu Sakamoto, Kazuto Yamafuji
Life of this patent
Estimating the term…
Abstract
A method, a computing system and a computer program product are provided. A link for use by a user to access a file is created. Content of the file is encrypted using a common key. The common key is encrypted using a public key of the user and is registered in the link. Access rights regarding the file are set for the user and registered in the link. The link includes information for use by the user to access the file when the access rights indicate that the user is authorized to access the file.
Claims12
A machine-implemented method for accessing a file, the method comprising:
- creating, by a computing device, a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting, by the computing device, content of the file by using a common key;
- encrypting, by the computing device, the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective users;
- registering, by the computing device, the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting, by the computing device, respective access rights regarding the file for the each respective user;
- registering, by the computing device, the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting access to the content of the file for a respective user only when a request to access the file is received including a private key of the respective user, and the access rights registered in one of the plurality of created links for use by the respective user indicating that the respective user is authorized to access the file.
5 more elements
A computing system comprising:
- at least one processor;
- and
- at least one memory connected to the at least one processor, wherein the at least one processor is configured to perform:
- creating a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting content of the file by using a common key;
- encrypting the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective user;
- registering the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting respective access rights regarding the file for the each respective user;
- registering the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting access to the content of the file for a respective user only when a request to access the file is received including a private key of the respective user, and the access rights registered in one of the plurality of created links for use by the respective user indicating that the respective user is authorized to access the file.
8 more elements
A computer program product comprising:
- at least one computer readable storage medium having computer readable program code embodied therewith for execution on at least one processor, the computer readable program code being configured to be executed by the at least one processor to perform:
- creating a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting content of the file by using a common key;
- encrypting the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective user;
- registering the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting respective access rights regarding the file for the each respective user;
- registering the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting access to the content of the file for a respective user only when a request to access the file is received including a private key of the respective user, and the access rights registered in one of the plurality of created links for use by the respective user indicating that the respective user is authorized to access the file.
6 more elements
Dependencies are inferred from the claim text.