Method and apparatus for providing content
AssigneeAbsio Corporation
InventorsMitchell J. Tanenbaum, Daniel L. Kruger
Life of this patent
Estimating the term…
Abstract
Methods and systems for enabling content to be securely and conveniently distributed to authorized users are provided. More particularly, content is maintained in encrypted form on sending and receiving devices, and during transport. In addition, policies related to the use of, access to, and distribution of content can be enforced. Features are also provided for controlling the release of information related to users. The distribution and control of contents can be performed in association with a client application that presents content and that manages keys.
Claims20
A method for providing content, comprising:
- using a client application, decrypting a document package containing encrypted first content, a first content key, and at least first information related to the first content by applying a private key;
- using the client application, decrypting the encrypted first content obtained from the document package by applying the first content key;
- using the client application, providing access to the first content;
- discontinuing providing access to the first content;
- and
- overwriting memory containing the first content to remove any unencrypted portion of the first content from the memory.
A system for distributing content, comprising:
- a first device;
- a first client application running on the first device;
- first data storage associated with the first device;
- a first document stored as an encrypted first document in an object store on the first data storage of the first device;
- first encrypted information related to the first encrypted document stored in the object store on the first data storage of the first device;
- an encrypted first content key for decrypting the first encrypted document stored as part of a first content key ring on the first data storage of the first device,
- wherein a first system key is required to be applied by the first client application to decrypt the encrypted first content key and to thereby access the first content key,
- wherein the first client application enables the first content key to be used to decrypt the first encrypted document,
- wherein the first content key for decrypting the first encrypted document stored as part of the first content key ring cannot be directly accessed by a user of the first device,
- wherein the first client application applies the first content key to decrypt the first encrypted document and to provide access to the first document to a user, and
- wherein following the decryption of the first encrypted document the decrypted first content key is overwritten in memory.
A method for distributing content, comprising:
- receiving a first data wrapper containing first encrypted content at a first computer, a first content key, and at least first information related to the first encrypted content;
- applying using first computer programming running on the first computer a first user key to the first data wrapper, wherein the first encrypted content is removed from the first data wrapper and stored in an object store in encrypted form, wherein the first content key is stored in a key ring in encrypted form as an encrypted first content key, and wherein the information related to the first encrypted content is stored in the object store in encrypted form;
- applying using the first computer programming running on the first computer a first system key to the encrypted first content key to thereby obtain the first content key;
- applying using the first computer programming running on the first computer the first content key to the first encrypted content, wherein the first encrypted content is decrypted to obtain first content;
- accessing using the first computer programming the first content, wherein actions a user takes with respect to the first content are limited according to permissions associated with the first decrypted content;
- and
- overwriting the first content in memory.
Dependencies are inferred from the claim text.