Application of digital rights management to emails based on user-selected email property settings

Patent metadata

Field	Value
Publication number	US-2016140328-A1
Application number	US-201414547053-A
Country	US
Kind code	A1
Filing date	Nov 18, 2014
Priority date	Nov 18, 2014
Publication date	May 19, 2016
Grant date	—

Abstract

A method for automatically applying digital rights management (DRM) to outgoing emails based on a color category of the email set by the sending user. A plugin module on the user's computer interacts with the email application to extract the color category setting for the email and converts it to a category ID recognized by the digital rights management (RMS) server. The RMS server determines the DRM policy corresponding to the category ID using an association table, and applies that DRM policy to protect the email before sending the email to an exchange server. When a recipient receives the email, the application program on the recipient's computer cooperates with the RMS server to determine whether the recipient is allowed to access the email based on the DRM policy that has been applied to the email.

First claim

What is claimed is:

1 . A digital rights management method implemented in a system including a client computer and a digital rights management server (RMS server) for protecting electronic mails (emails), comprising:
by the client computer: (a) receiving data representing an email; (b) retrieving a category setting parameter associated with the email, the category setting parameter having been specified by a user; (c) converting the category setting parameter into a category ID, by looking up a category mapping table stored on the client computer which maps a plurality of category setting parameters to a plurality of category IDs; and (d) transmitting the data representing the email along with the category ID to the RMS server; and by the RMS server: (e) determining a digital rights management (DRM) policy ID corresponding to the category ID received from the client computer, by looking up a category ID mapping table stored on the RMS server which maps a plurality of category IDs to a plurality of DRM policy IDs; (f) applying digital rights management protection to the data representing the email based on a DRM policy corresponding to the DRM policy ID, to generate a protected email document; and (g) transmitting the protected email document to an email exchange server.

2 . The method of claim 1 , wherein the category setting is a color category setting.

3 . The method of claim 1 , wherein the category setting is selected from a group consisting of a color category setting, an importance setting, a sensitivity setting, and a security settings.

4 . The method of claim 1 ,
wherein step (a) includes a plugin module on the client computer receiving the data representing the email from an email application on the client computer, wherein the category setting parameter in step (b) has been specified by the user via the email application, and wherein steps (b), (c) and (d) are performed by the plugin module.

5 . The method of claim 1 , wherein steps (e) and (g) are performed by an adapter module of the RMS server, and step (f) is performed by an RMS program of the RMS server.

6 . The method of claim 1 , wherein step (f) includes:
generating a unique document ID and an encryption key; encrypting the data representing the email using the encryption key; embedding metadata including the document ID in the encrypted data to generate the protected email document; and storing the document ID in association with the DRM policy ID and the encryption key in a protected document database.

7 . A digital rights management method implemented in a system including a client computer and a digital rights management server (RMS server) for protecting electronic mails (emails), comprising:
by the client computer: (a) receiving data representing an email; (b) retrieving a category setting parameter associated with the email, the category setting parameter having been specified by a user; (c) converting the category setting parameter into a category ID, by looking up a category mapping table stored on the client computer which maps a plurality of category setting parameters to a plurality of category IDs; and (d) transmitting the category ID to the RMS server; and by the RMS server: (e) determining a digital rights management (DRM) policy ID corresponding to the category ID received from the client computer, by looking up a category ID mapping table stored on the RMS server which maps a plurality of category IDs to a plurality of DRM policy IDs; (f) generating a unique document ID and an encryption key; (g) storing the document ID in association with the DRM policy ID and the encryption key in a protected document database; and (h) transmitting the unique document ID and the encryption key to the client; by the client computer: (i) encrypting the data representing the email using the encryption key to generate an encrypted document, and embedding metadata including the document ID in the encrypted document to generate a protected email document; and (j) transmitting the protected email document to an email exchange server.

8 . The method of claim 7 , wherein the category setting is a color category setting.

9 . The method of claim 7 , wherein the category setting is selected from a group consisting of a color category setting, an importance setting, a sensitivity setting, and a security settings.

10 . The method of claim 7 ,
wherein step (a) includes a plugin module on the client computer receiving the data representing the email from an email application on the client computer, wherein in step (b), the category setting parameter has been specified by the user via the email application, and wherein steps (c), (d), (i) and (j) are performed by the plugin module.

11 . The method of claim 7 , wherein steps (e) and (h) are performed by an adapter module of the RMS server, and steps (f) and (g) is performed by an RMS program of the RMS server.

12 . A computer program product comprising a first computer usable non-transitory medium having a first computer readable program code embedded therein for controlling a client computer, and a second computer usable non-transitory medium having a second computer readable program code embedded therein for controlling a digital rights management server (RMS server) computer,
wherein the first computer readable program code is configured to cause the client computer to execute a process comprising: (a) receiving data representing an email; (b) retrieving a category setting parameter associated with the email, the category setting parameter having been specified by a user; (c) converting the category setting parameter into a category ID, by looking up a category mapping table stored on the client computer which maps a plurality of category setting parameters to a plurality of category IDs; and (d) transmitting the data representing the email along with the category ID to the RMS server; and wherein the second computer readable program code is configured to cause the RMS server to execute a process comprising: (e) determining a digital rights management (DRM) policy ID corresponding to the category ID received from the client computer, by looking up a category ID mapping table stored on the RMS server which maps a plurality of category IDs to a plurality of DRM policy IDs; (f) applying digital rights management protection to the data representing the email based on a DRM policy corresponding to the DRM policy ID, to generate a protected email document; and (g) transmitting the protected email document to an email exchange server.

13 . The computer program product of claim 12 , wherein the category setting is a color category setting.

14 . The computer program product of claim 12 , wherein the category setting is selected from a group consisting of a color category setting, an importance setting, a sensitivity setting, and a security settings.

15 . The computer program product of claim 12 ,
wherein the first computer readable program code is a plugin module, wherein in step (a) the data representing the email is received from an email application on the client computer, and wherein the category setting parameter in step (b) has been specified by the user via the email application.

16 . The computer program product of claim 12 , wherein the second computer readable program code includes an adapter module that performs steps (e) and (g), and an RMS program that performs step (f).

17 . The computer program product of claim 12 , wherein step (f) includes:
generating a unique docume

Assignees

• Konica Minolta Lab Usa Inc

Inventors

• Pathak Rabindra
• Shiraishi Kyohei

Classifications

• G06F2221/2115

  Third party · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title