File sharing and policy control based on file link mechanism
AssigneeInternational Business Machines Corporation
InventorsJunichi Kato, Takayuki Kushida, Tomoko Murayama, Masaharu Sakamoto, Kazuto Yamafuji
Life of this patent
Estimating the term…
Abstract
A method, a computing system and a computer program product are provided. A link for use by a user to access a file is created. Content of the file is encrypted using a common key. The common key is encrypted using a public key of the user and is registered in the link. Access rights regarding the file are set for the user and registered in the link. The link includes information for use by the user to access the file when the access rights indicate that the user is authorized to access the file.
Claims20
A machine-implemented method for accessing a file, the method comprising:
- creating, by a computing device, a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting, by the computing device, content of the file by using a common key;
- encrypting, by the computing device, the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective users;
- registering, by the computing device, the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting, by the computing device, respective access rights regarding the file for the each respective user;
- registering, by the computing device, the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting or denying access to the content of the file for the each respective user based on information stored in the respective link of the plurality of links.
A computing system comprising:
- at least one processor;
- and
- at least one memory connected to the at least one processor, wherein the at least one processor is configured to perform:
- creating a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting content of the file by using a common key;
- encrypting the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective user;
- registering the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting respective access rights regarding the file for the each respective user;
- registering the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting or denying access to the content of the file for the each respective user based on information stored in the respective link of the plurality of links.
A computer program product comprising:
- at least one computer readable storage medium having computer readable program code embodied therewith for execution on at least one processor, the computer readable program code being configured to be executed by the at least one processor to perform:
- creating a plurality of links to a file, each of the plurality of links being for use by a respective user of a plurality of users to access the file;
- encrypting content of the file by using a common key;
- encrypting the common key using a respective public key of each respective user to produce a respective encrypted common key for the each respective user;
- registering the respective encrypted common key for the each respective user in a respective link of the plurality of links;
- setting respective access rights regarding the file for the each respective user;
- registering the respective access rights for the each respective user in the respective link of the plurality of links;
- and
- permitting or denying access to the content of the file for the each respective user based on information stored in the respective link of the plurality of links.
Dependencies are inferred from the claim text.