Managing file access via a designated place

A method for determining access to files via a designated store, the method comprising:

• associating a security template with the store;
• retrieving the security template when a secured file is deposited by a user in the store, wherein the secured file includes a header and an encrypted data portion, the header including embedded security information controlling restrictive access to the encrypted data portion;
• evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to revise the embedded security information of the secured file;
• and
• superseding the embedded security information with current security information from the security template after the user is determined to be permitted to revise the embedded security information of the secured file.

A method for determining access to files via a designated store, the method comprising:

• associating a security template with the store;
• retrieving the security template when a secured file is deposited by a user in the store, wherein the secured file includes a header and an encrypted data portion, the header including embedded security information controlling restrictive access to the encrypted data portion;
• evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to revise the embedded security information of the secured file;
• and
• after the user is determined to be permitted to revise the embedded security information of the secured file, evaluating current security information in the template to determine whether the user is permitted to access files in the store;
• after the user is determined not to be permitted to access the files in the store, adding a special access policy to the security information to be included in the header such that the user can still access the secured file secured in accordance with the security template associated with the store.

A method for determining access to files via a designated store, the method comprising:

• associating a decryption module with the store;
• when a secured file is deposited by a user in the store, the secured file including a header and an encrypted data portion and the header including embedded security information controlling restrictive access to the encrypted data portion, evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to unsecure the secured file;
• after the user is determined to be permitted to unsecure the secured file, retrieving a file key from the header;
• and
• decrypting the encrypted data portion to produce a plain file.

A software product to be executed in a computer for determining access to files via a designated store, the software product comprising:

• program code for associating a security template with the store;
• program code for retrieving the security template when a file is deposited in the store;
• program code for encrypting the file in accordance with the security template to produce an encrypted data portion;
• program code for generating a header to include security information from the security template;
• and
• program code for integrating the header with the encrypted data portion to produce a secured file.

A software product to be executed in a computer for determining access to files via a designated store, the software product comprising:

• program code for associating a security template with the store;
• program code for retrieving the security template when a secured file is deposited by a user in the store, wherein the secured file includes a header and an encrypted data portion, the header including embedded security information controlling restrictive access to the encrypted data portion;
• program code for evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to revise the embedded security information of the secured file;
• and
• program code for superseding the embedded security information with current security information from the security template after the user is determined to be permitted to revise the embedded security information of the secured file.

A software product to be executed in a computer for determining access to files via a designated store, the software product comprising:

• program code for associating a security template with the store;
• program code for retrieving the security template when a secured file is deposited by a user in the store, wherein the secured file includes a header and an encrypted data portion, the header including embedded security information controlling restrictive access to the encrypted data portion;
• program code for evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to revise the embedded security information of the secured file;
• and
• after the user is determined to be permitted to revise the embedded security information of the secured file, program code for evaluating current security information in the template to determine whether the user is permitted to access files in the store;
• after the user is determined not to be permitted to access the files in the store, program code for adding a special access policy to the security information to be included in the header such that the user can still access the secured file secured in accordance with the security template associated with the store.

A software product to be executed in a computer for determining access to files via a designated store, the software product comprising:

• program code for associating a decryption module with the store;
• when a secured file is deposited by a user in the store, the secured file including a header and an encrypted data portion and the header including embedded security information controlling restrictive access to the encrypted data portion, program code for evaluating the embedded security information from the header of the secured file against access privilege of the user to determine whether the user is permitted to unsecure the secured file;
• after the user is determined to be permitted to unsecure the secured file, program code for retrieving a file key from the header;
• and
• program code for decrypting the encrypted data portion to produce a plain file.