Method of transparent encryption and decryption for an electronic document management system
OwnerStephen Zizziinventor
Life of this patent
Estimating the term…
Abstract
Cryptographic methods and systems are disclosed. The cryptographic methods provide transparent encryption and decryption of documents in an electronic document management system. The cryptographic system adds a software module to an electronic document management system which traps file I/O events and performs cryptographic functions on the relevant documents before passing control back to the electronic document management system.
Claims30
A method of encrypting an electronic document which is open in an application program running in a general purpose computer, the general purpose computer including a display, a user input device, a crypto module and a processor, the method comprising:
- (a) from within the application program running in the general purpose computer, a user issuing one of a “close,” “save” or “save as” command for the document using the user input device;
- (b) automatically translating the command into an event;
- (c) the crypto module automatically trapping the event;
- (d) the crypto module automatically obtaining an encryption key value;
- (e) the crypto module automatically encrypting the document using the encryption key value;
- (f) the crypto module automatically passing control to an electronic document management system;
- and
- (g) the electronic document management system executing the issued “close,” “save” or “save as” command;
- whereby the electronic document is automatically encrypted.
A method of decrypting a document which is to be opened in an application program running in a general purpose computer, the general purpose computer including a display, user input device, a crypto module and a processor, the method comprising:
- (a) user selecting the document to be opened in the application program using the user input device;
- (b) an “open” command issuing for the document to be opened in the application program;
- (c) automatically translating the command into an event;
- (d) the crypto module automatically trapping the event;
- (e) the crypto module automatically retrieving a decryption key value;
- (f) the crypto module automatically decrypting the document using the decryption key value;
- (g) the crypto module automatically passing control to an electronic document management system;
- and
- (h) the electronic document management system automatically executing the issued “open” command so that the document is opened in the application program;
- whereby the document is automatically decrypted.
An electronic document management system for storing documents from an application in a workstation and retrieving documents from a file server to the application, the file server having a file system, the electronic document management system comprising:
- (a) an access server in the file server comprising software for handling user authentication and file system access control for the file server;
- (b) an access client in the workstation comprising software for enabling a user to sign on to the file server and obtain access to the file system on the file server;
- (c) an EDM server in the file server comprising software for controlling an EDM database and EDM indexes to the EDM database;
- (d) an EDM client in the workstation comprising software for interfacing the workstation to the EDM server and thereby allowing access by a user at the workstation to the EDM database;
- and
- (e) a crypto server comprising software for automatically intercepting I/O requests by the application and transparently handling encryption of the documents and decryption of encrypted documents;
- wherein the access server and access client are functionally positioned between the EDM server and EDM client, and
- the crypto server is functionally positioned between the application and the EDM client.
A program product for use in a general purpose computer that executes program steps recorded in a computer-readable media to perform a method of encrypting an electronic document which is open in an application program running in a general purpose computer, the general purpose computer including a display, a user input device and a processor, the program product comprising:
- a recordable media;
- and
- a program of computer-readable instructions executable by the computer system to perform method steps comprising:
- (a) in response to a user issuing one of a “close,” “save” or “save as” command for the document using the user input device from within the application program and the command being translated into an event, automatically trapping the event;
- (b) automatically obtaining an encryption key value;
- (c) automatically encrypting the document using the encryption key value;
- (d) automatically passing control to an electronic document management system;
- whereby the electronic document management system can then execute the issued “close,” “save” or “save as” command and the electronic document is automatically encrypted.
A program product for use in a general purpose computer that executes program steps recorded in a computer-readable media to perform a method of decrypting a document which is to be opened in an application program running in the general purpose computer, the general purpose computer including a display, user input device and a processor, the program product comprising:
- a recordable media;
- and
- a program of computer-readable instructions executable by the computer system to perform method steps comprising:
- (a) in response to a user selecting the document to be opened in the application program using the user input device and an “open” command issuing for the document to be opened in the application program and the command being translated into an event, automatically trapping the event;
- (b) automatically retrieving a decryption key value;
- (c) automatically decrypting the document using the decryption key value;
- and
- (d) automatically passing control to an electronic document management system;
- whereby the electronic document management system can then execute the issued open command so that the document is opened in the application program and the document is automatically decrypted.
Dependencies are inferred from the claim text.