US6289450B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Information security architecture for encrypting documents for remote access while maintaining access control
Assignee: EMC Corp
•
Filing: 1999-05-28
•
Granted: 2001-09-11
•
Expires: 2019-05-28
Abstract
Abstract The invention provides for encrypting electronic information such as a document so that only users with permission may access the document in decrypted form. The process of encrypting the information includes selecting a set of policies as to who may access the information and under what conditions. A remote server stores a unique identifier for the information and associates an encryption/decryption key pair and access policies with the information. Software components residing on the author's computer retrieve the encryption key from the remote server, encrypt the information, and store the encrypted information at a location chosen by the author. A user wishing to access the information acquires the encrypted information electronically. Software components residing on the viewing user's computer retrieve the associated decryption key and policies, decrypt the information to the extent authorized by the policies, and immediately delete the decryption key from the viewing user's computer upon decrypting the information and rendering the clear text to the viewing user's computer screen. The software components are also capable of prohibiting functional operations by the viewing user's computer while the clear text is being viewed.
Inventors
- 👤 David A. Pensak
- 👤 John J. Cristy
- 👤 Steven J. Singles
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 21:25
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; H04L63/06; H04L63/062; H04L63/10; H04L63/16; H04L63/166; H04L2463/00; H04L2463/101
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
121 words
A method of controlling distribution of electronic information, comprising: retrieving, at a user location, a segment of encrypted electronic information; receiving, from a key server, a copy of a decryption key for the segment, and at least one user limitation assigned to the segment and associated with the decryption key; accessing the segment using the copy of the decryption key at the user location for the segment and a control process, the control process responsive to a user limitation to control distribution of the electronic information; destroying the copy of the decryption key at the user location in response to said accessing; rendering the decrypted segment in response to said accessing; and destroying the decrypted segment in response to said rendering.
Claim 2
Independent Claim
121 words
A method of controlling distribution of electronic information, comprising: retrieving, at a user location, a segment of encrypted electronic information; receiving, from a key server, a copy of a decryption key for the segment, and at least one user limitation assigned to the segment and associated with the decryption key; accessing the segment using the copy of the decryption key at the user location for the segment and a control process, the control process responsive to a user limitation to control distribution of the electronic information; destroying the copy of the decryption key at the user location in response to said accessing; rendering the decrypted segment in response to said accessing; and destroying the decrypted segment in response to said rendering.
Claim 3
Dependent Claim
42 words
The method of controlling distribution of electronic information of claim 1 , wherein access to the decryption key is controlled by the key server subject to a unique segment identification associated with the segment and the user limitation associated with the segment.
Claim 4
Independent Claim
73 words
A method of viewing encrypted electronic information on a display, comprising: retrieving, at a user location, a segment of encrypted electronic information; receiving, from a remote server, a decryption key for the segment; decrypting the segment using the decryption key; destroying, at the user location, the decryption key in response to said decrypting; rendering the segment as decrypted; and destroying, at the user location, the segment as decrypted in response to said rendering.
Claim 5
Independent Claim
73 words
A method of viewing encrypted electronic information on a display, comprising: retrieving, at a user location, a segment of encrypted electronic information; receiving, from a remote server, a decryption key for the segment; decrypting the segment using the decryption key; destroying, at the user location, the decryption key in response to said decrypting; rendering the segment as decrypted; and destroying, at the user location, the segment as decrypted in response to said rendering.
Claim 6
Dependent Claim
22 words
The method of claim 4 , further comprising providing an encrypted communication channel, wherein said receiving occurs over the encrypted communication channel.
Claim 7
Dependent Claim
32 words
The method of claim 3 , further comprising entering user identification information, said receiving being responsive to said user identification information representing at least one of an authorized user and authorized conditions.
Claim 8
Dependent Claim
33 words
The method of claim 3 , further comprising limiting access to the segment at the user location consistent with predetermined criteria associated with at least one of the segment and user identification information.
Claim 9
Dependent Claim
20 words
The method of claim 3 , further comprising changing the predetermined criteria associated with the segment and user identification information.
Claim 10
Dependent Claim
16 words
The method of claim 3 , further comprising destroying, at the remote server, the decryption key.
Claim 11
Independent Claim
81 words
A method of encrypting information, comprising: providing, at a user location, electronic information having at least one segment; receiving, from a remote server, an encryption key for a segment of said at least one segment, the encryption key being associated with a decryption key; associating at least one access precondition with the decryption key; encrypting the segment with the encryption key; destroying, at the user location, the encryption key and any unencrypted versions of said segment in response to said encrypting.
Claim 12
Independent Claim
81 words
A method of encrypting information, comprising: providing, at a user location, electronic information having at least one segment; receiving, from a remote server, an encryption key for a segment of said at least one segment, the encryption key being associated with a decryption key; associating at least one access precondition with the decryption key; encrypting the segment with the encryption key; destroying, at the user location, the encryption key and any unencrypted versions of said segment in response to said encrypting.
Claim 13
Dependent Claim
26 words
The method of claim 9 , further comprising performing said receiving, said associating, said encrypting, and said destroying for each of the at least one segment.
Claim 14
Dependent Claim
19 words
The method of claim 9 , further comprising communicating the at least one access precondition to the remote server.
Claim 15
Dependent Claim
28 words
The method of claim 11 , further comprising performing said receiving, said associating, said encrypting, said communicating, and said destroying for each of the at least one segment.
Claim 16
Dependent Claim
35 words
The method of claim 9 , said associating further comprising associating with the decryption key at least one of an authenticated user, a group name, time, date, day of week, and network address access precondition.
References Cited (Backward Citations)
US4605820A
Cited
US5410598A
Cited
US4937863A
Cited
US5263157A
Cited
US5058164A
Cited
US5432849A
Cited
US5438508A
Cited
US5440631A
Cited
US5689560A
Cited
US5586186A
Cited
US5727065A
Cited
US5629980A
Cited
US5883955A
Cited
US5754646A
Cited
US6002772A
Cited
US5765152A
Cited
US5708709A
Cited
US5933498A
Cited
US5796825A
Cited
US5818936A
Cited
US5673316A
Cited
US5809145A
Cited
US5956034A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-09-10 | 2005-03-12 | 2005-09-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-09-10 | 2009-03-12 | 2009-09-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-09-10 | 2013-03-12 | 2013-09-11 | $7700.00 | Window Closed / Lapsed |