Secure sharing and collaborative editing of documents in cloud based applications

Patent metadata

Field	Value
Publication number	US-10681019-B2
Application number	US-201715714524-A
Country	US
Kind code	B2
Filing date	Sep 25, 2017
Priority date	Oct 19, 2012
Publication date	Jun 9, 2020
Grant date	Jun 9, 2020

Abstract

Collaboratively editing a document in a system of sharee clients includes creating a document change, generating a document token for encrypting the document change, encrypting the document change with the document token, making the encrypted document change available to the other sharee clients, and generating a plurality of copies of the sharee document token. Each sharee document token is encrypted with a respective sharee's public key. Each encrypted sharee document token is distributed to respective sharee clients. Each sharee client is configured to: decrypt a sharee document token using a respective private key, decrypt the encrypted document change using the share document token, and consolidate the document change into a document.

First claim

What is claimed is:

1. A computer-implemented method for collaboratively editing a document in a system of sharee clients, comprising:
encrypting, with a document token, a document change to the document;
splitting the document token into a server document token and a sharee document token;
generate a plurality of copies of the sharee document token;
encrypting each of the plurality of copies of the sharee document tokens with a public key of a respective sharee client; and
distributing each encrypted sharee document token to the respective sharee clients.

2. The method of claim 1 , wherein
each respective sharee client is configured to:
decrypt the respective encrypted sharee document token using a respective private key;
decrypt the encrypted document change using the respective sharee document token; and
consolidate the document change into the document.

3. The method of claim 1 , wherein
the encrypted document change and the server document token is loaded onto a server and made available to the sharee clients.

4. The method of claim 3 , wherein
each respective sharee client is configured to:
load, from the server, the server document token and the encrypted document change;
combine the respective decrypted sharee document token with the server document token to generate a combined document token, and
decrypt the encrypted document change using the combined document token.

5. The method of claim 1 , wherein
the document is stored in a document server.

6. The method of claim 5 , wherein
the tokens are stored in a key server.

7. The method of claim 1 , wherein
the document change is a creation of a new document.

8. The method of claim 1 , wherein
the document change is an addition or deletion of content to an existing document.

9. A computer-implemented system for collaboratively editing a document between a plurality of sharee clients, comprising:
a hardware processor configured to initiate the following executable operations:
encrypting, with a document token, a document change to the document;
splitting the document token into a server document token and a sharee document token;
generate a plurality of copies of the sharee document token;
encrypting each of the plurality of copies of the sharee document tokens with a public key of a respective sharee client; and
distributing each encrypted sharee document token to the respective sharee clients.

10. The system of claim 9 , wherein
each respective sharee client is configured to:
decrypt the respective encrypted sharee document token using a respective private key;
decrypt the encrypted document change using the respective sharee document token; and
consolidate the document change into the document.

11. The system of claim 9 , wherein
the encrypted document change and the server document token is loaded onto a server and made available to the sharee clients.

12. The system of claim 11 , wherein
each respective sharee client is configured to:
load, from the server, the server document token and the encrypted document change;
combine the respective decrypted sharee document token with the server document token to generate a combined document token, and
decrypt the encrypted document change using the combined document token.

13. The system of claim 9 , wherein
the document is stored in a document server.

14. The system of claim 13 , wherein
the tokens are stored in a key server.

15. The system of claim 9 , wherein
the document change is a creation of a new document.

16. The system of claim 9 , wherein
the document change is an addition or deletion of content to an existing document.

17. A computer program product, comprising
a hardware storage device having stored therein program code for collaboratively editing a document in a system of sharee clients,
the computer program product, which when executed by a computer hardware system, causes the computer hardware system to perform:
encrypting, with a document token, a document change to the document;
splitting the document token into a server document token and a sharee document token;
generate a plurality of copies of the sharee document token;
encrypting each of the plurality of copies of the sharee document tokens with a public key of a respective sharee client; and
distributing each encrypted sharee document token to the respective sharee clients.

18. The computer program product of claim 17 , wherein
each respective sharee client is configured to:
decrypt the respective encrypted sharee document token using a respective private key;
decrypt the encrypted document change using the respective sharee document token; and
consolidate the document change into the document.

19. The computer program product of claim 17 , wherein
the encrypted document change and the server document token is loaded onto a server and made available to the sharee clients.

20. The computer program product of claim 19 , wherein
each respective sharee client is configured to:
load, from the server, the server document token and the encrypted document change;
combine the respective decrypted sharee document token with the server document token to generate a combined document token, and
decrypt the encrypted document change using the combined document token.

Assignees

• IBM

Inventors

• Crosbie Mark
• Flood Jason
• Lara Juan Galiana
• Marcos De Prado Javier

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F40/197

  Version control (for software G06F8/71) · CPC title

• H04L63/0442 Primary

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• G06F40/166 Primary

  Editing, e.g. inserting or deleting · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title