Protecting visible content

Patent metadata

Field	Value
Publication number	US-11010480-B2
Application number	US-201816170301-A
Country	US
Kind code	B2
Filing date	Oct 25, 2018
Priority date	Oct 25, 2018
Publication date	May 18, 2021
Grant date	May 18, 2021

Abstract

The method, computer system, and computer program product for using a key management server to protect visible content. The method, computer program product, and computer system may include a key management server which may receive, from an encryption device, an identification of one or more portions of clear information visible on a physical document. The key management server may receive, from the encryption device, one or more permission parameters. The permission parameters may include a time duration parameter, a location parameter, a start and end time parameter, or a device identification parameter. Further, the key management server may receive, from a decryption device, a request to access a portion of the clear information. The key management server may transmit, to the decryption device, information permitting access to the portion of clear information.

First claim

What is claimed is:

1. A method for protecting clear information visible on a physical document, comprising:
receiving from an encryption device, by a key management server, an identification of one or more portions of clear information visible on a physical document, wherein the receiving from the encryption device, by the key management server, the identification of one or more portions of clear information further comprises receiving the one or more portions of clear information, the method further comprising storing the one or more portions of clear information at the key management server;
receiving from the encryption device, by the key management server, one or more permission parameters, wherein the one or more permission parameters includes a time duration parameter;
receiving from a decryption device, by the key management server, a request to access a portion of the clear information; and
transmitting to the decryption device, by the key management server, information permitting access to the portion of clear information.

2. The method of claim 1 , wherein the one or more permission parameters further comprises a user identification parameter.

3. The method of claim 1 , wherein the one or more permission parameters further comprises a location parameter.

4. The method of claim 1 , wherein the one or more permission parameters further comprises a start and end time parameter.

5. The method of claim 1 , wherein the one or more permission parameters further comprises a device identification parameter.

6. The method of claim 1 , wherein the transmitting to the decryption device by the key management server the information permitting access to the portion of clear information further comprises transmitting one or more keys.

7. The method of claim 6 , wherein the one or more keys is a symmetric key.

8. The method of claim 1 , further comprising transmitting one or more special characters to the encryption device by the key management server for use in masking the one or more portions of clear information.

9. A computer program product for protecting clear information visible on a physical document, the computer program product comprising:
a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method, comprising:
receiving from an encryption device, by a key management server, an identification of one or more portions of clear information visible on a physical document, wherein the receiving from the encryption device, by the key management server, the identification of one or more portions of clear information further comprises receiving the one or more portions of clear information, the method further comprising storing the one or more portions of clear information at the key management server;
receiving from the encryption device, by the key management server, one or more permission parameters, wherein the one or more permission parameters includes a time duration parameter;
receiving from a decryption device, by the key management server, a request to access a portion of the clear information; and
transmitting to the decryption device, by the key management server, information permitting access to the portion of clear information.

10. The computer program product of claim 9 , wherein the one or more permission parameters further comprises a user identification parameter.

11. The computer program product of claim 9 , wherein the one or more permission parameters further comprises a location parameter.

12. The computer program product of claim 9 , wherein the transmitting to the decryption device by the key management server the information permitting access to the portion of clear information further comprises transmitting one or more keys.

13. The computer program product of claim 9 , further comprising transmitting one or more special characters to the encryption device by the key management server for use in masking the one or more portions of clear information.

14. A system for protecting clear information visible on a physical document, the system comprising:
a computer system comprising, a processor, a computer readable storage medium, and program instructions stored on the computer readable storage medium being executable by the processor to cause the computer system to:
receive from an encryption device, by a key management server, an identification of one or more portions of clear information visible on a physical document, wherein the receiving from the encryption device, by the key management server, the identification of one or more portions of clear information further comprises receiving the one or more portions of clear information, the method further comprising storing the one or more portions of clear information at the key management server;
receive from the encryption device, by the key management server, one or more permission parameters, wherein the one or more permission parameters includes a time duration parameter;
receive from a decryption device, by the key management server, a request to access a portion of the clear information; and
transmit to the decryption device, by the key management server, information permitting access to the portion of clear information.

15. The system of claim 14 , wherein the one or more permission parameters further comprises a start and end time parameter.

16. The system of claim 14 , wherein the transmitting to the decryption device by the key management server the information permitting access to the portion of clear information further comprises transmitting one or more keys.

17. The system of claim 14 , further comprising transmitting one or more special characters to the encryption device by the key management server for use in masking the one or more portions of clear information.

18. The system of claim 14 , wherein the one or more permission parameters further comprises a location parameter.

19. The system of claim 14 , wherein the one or more permission parameters further comprises a user identification parameter.

20. The computer program product of claim 9 , wherein the one or more permission parameters further comprises a start and end time parameter.

Assignees

• IBM

Inventors

• Bansal Rinkesh I
• Thaker Chintan
• Panchal Sanjay B
• Valecha Vinod A

Classifications

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L9/083 Primary

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title