Back to results
US 9,313,182 B2Granted
Protecting information using policies and encryption
AssigneeNextLabs, Inc.
InventorKeng Lim
Life of this patent
Estimating the term…
Abstract
A technique and system protects documents at rest and in motion using declarative policies and encryption. Encryption in the system is provided transparently and can work in conjunction with policy enforcers installed at a system. A system can protect information or documents from: (i) insider theft; (ii) ensure confidentiality; and (iii) prevent data loss, while enabling collaboration both inside and outside of a company.
Claims20
A method comprising:
- providing a document management system managing a plurality of documents wherein the document management system comprises clients and servers;
- at a first client, executing a first policy enforcer program;
- at the first client, trapping by the first policy enforcer program a request by an e-mail application to send an e-mail with a document attachment, managed by the document management system, to a second client;
- at the first policy enforcer program, evaluating at least one policy associated with the document attachment;
- as a result of the evaluating, determining that the send request is allowed, but before allowing to e-mail application to send the document attachment, encrypting the document attachment;
- allowing the e-mail application to send the encrypted document attachment to the second client;
- sending a notification from a second policy enforcer regarding an attempt at the second client to open the encrypted document;
- determining that the encrypted document is encrypted;
- with the second policy enforcer program, requesting a key that will allow decryption of the encrypted document;
- and
- using the key to unencrypt the encrypted document attachment and obtaining the unencrypted document attachment.
8 more elements
A method comprising:
- providing a document management system managing a plurality of documents wherein the document management system comprises clients and servers;
- at a first client, executing a first policy enforcer program;
- at the first client, trapping by the first policy enforcer program a request by an e-mail application to send an e-mail with a document attachment, managed by the document management system, to a second client;
- at the first policy enforcer program, evaluating at least one policy associated with the document attachment;
- as a result of the evaluating, determining that the send request is allowed, but before allowing the e-mail application to send the document attachment, encrypting the document attachment;
- allowing the e-mail application to send the encrypted document attachment to the second client;
- receiving the encrypted document attachment at the second client;
- detecting an attempt to open the encrypted document attachment at the second client at a second policy enforcer program at the second client;
- at the second policy enforcer program, evaluating at least one policy associated with encrypted document attachment;
- as a result of the evaluating, determining that the open operation is allowed;
- at an encryption module executing on the second client, determining the encrypted document attachment is encrypted;
- and
- at the encryption module, attempting to obtain a key for the encrypted document attachment by sending a key request to the second policy enforcer program including information comprising a process identifier.
10 more elements
Dependencies are inferred from the claim text.