Accessing protected content for archiving

Patent metadata

Field	Value
Publication number	US-9542563-B2
Application number	US-201314062035-A
Country	US
Kind code	B2
Filing date	Oct 24, 2013
Priority date	Oct 24, 2013
Publication date	Jan 10, 2017
Grant date	Jan 10, 2017

Abstract

According to one embodiment of the present invention, a system for accessing protected content includes a first computing device with at least one processor. The system determines one or more users associated with information required to access content of a protected document based on a set of rules. A request is generated and sent to at least one second computing device associated with the one or more determined users to retrieve and utilize the required information to access the content of the protected document. Embodiments of the present invention further include a method and computer program product for accessing protected content in substantially the same manner described above.

First claim

What is claimed is:

1. A computer system for accessing protected content comprising:
an archiving system with a hardware processor configured to archive documents, the archiving system having an encryption detection component that is configured to:
determine a presence of protection for a received encrypted document;
send a request to a decryption server system to determine one or more users able to decrypt the encrypted document;
wherein the decryption server system is configured to send a decryption request to agent modules of one or more client system computing devices to identify one or more users associated with information required to access content of the received protected document based on a set of rules that provide permission to decrypt the encrypted document, the agent modules are configured to decrypt the encrypted document to provide a decrypted document;
wherein the archiving system is further configured to generate a protected document by encrypting the decrypted document to ensure security of decrypted document content,
wherein the archiving system is further configured to archive the protected document

a link between said archived protected document and said encrypted document;
wherein a first of the one or more said computing devices is configured to generate an access request to obtain the content of the received protected document from the archiving system, wherein the request is transmitted through a secure interface to a second of the one or more said computing devices to retrieve and utilize the required information to access the content of the received protected document; and
wherein the archiving system is configured to allow utilization of the decrypted document content within a remote session of a secure virtual desktop, wherein the remote session of the secure virtual desktop that allows the identified one or more users to access the link between the archived protected document and the encrypted document allows the one or more users to access the decrypted document content.

2. The computer system of claim 1 , wherein the protected document is protected via at least one of encryption and password protection.

3. The computer system of claim 1 , wherein the first of the one or more said computing devices is further configured to send the access request to a plurality of users of the identified one or more users for permission to access the content of the protected document, whereby one or more of the client systems associated with the plurality of users is required to respond to the access request.

4. The computer system of claim 1 , wherein the first of the one or more said computing devices is further configured to receive via the secure interface the required information from a determined user and utilize the received information to access the content of the protected document.

5. The computer system of claim 4 , wherein the secure interface is a secure virtual desktop with an application that requests and utilizes the required information to access the content of the protected document.

6. The system of claim 1 , wherein the access request is sent to each of the at least two users in parallel.

7. The system of claim 1 , wherein the access request is serially sent to each of at least two users.

8. A non-transitory computer program product for accessing protected content comprising:
a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising computer readable program code for a first computing device configured to:
receive a notification from an archiving system, the archiving system having an encryption detection component that determines a presence of protection for a document received by the archiving system;
receive a request at a decryption server system from the encryption detection component to determine one or more users able to decrypt the encrypted document;
transmit a decryption request from the decryption server system to agent modules of one or more client system computing devices to identify at least users associated with information required to access the content of the protected document based on a set of rules that provide permission to decrypt the encrypted document, wherein the agent modules are configured to decrypt the encrypted document to provide a decrypted document;
generate a protected document generated by encrypting the decrypted document to ensure security of decrypted document content;
archive the protected document within the archiving system;
generate a link between said archived protected document and said encrypted document;
send an access request to at least one second computing device associated with the at least two determined users, the request being received by each of the at least two users to retrieve and utilize the required information to access the content of the protected document; and
allow access via a remote session of the secure virtual desk to the link between said archived protected document and said encrypted document to allow access to the decrypted document content for utilizing the decrypted document content within the remote session of the secure virtual desktop,

wherein the protected document is protected via at least one of encryption and password protection.

9. The computer program product claim 8 , wherein the computer readable program code further comprises computer readable program code for the at least one second computing device configured to: request permission to access the content of the protected document from an associated determined user and access the content in response to obtaining the permission.

10. The computer program product of claim 8 , wherein the computer readable program code for the first computing device further comprises computer readable program code configured to: provide an interface to receive the required information from a determined user and utilize the received information to access the content of the protected document.

11. The computer program product of claim 10 , wherein the interface is a virtual desktop with an application that requests and utilizes the required information to access the content of the protected document.

12. The computer program product of claim 11 , wherein the computer readable program code for the first computing device further comprises computer readable program code configured to: limit operations on the virtual desktop to prevent modification of the accessed content.

13. The computer program product claim 8 , wherein the computer readable program code for the first computing device further comprises computer readable program code configured to:
send the request to each of the at least two users in parallel.

14. The computer program product claim 8 , wherein the computer readable program code for the first computing device further comprises computer readable program code configured to:
serially send the request to each of the at least two users.

15. A computer-implemented method of accessing protected content comprising:
providing an archiving system having an encryption detection component;
examining a document received at the archiving system;
using the encryption detection component to determine presence of an encryption of the document;
upon detection of the encryption of the document, sending a request from the encryption detection component to a decryption server system to determine one or more users able to decrypt the encrypted document;
receiving a decryption request transmitted from the decryption server system to agent modules of the client s

Assignees

• Globalfoundries Inc

Inventors

• Baessler Michael
• Hoffmann Philipp
• Lorch Markus
• Maletz Juergen
• Pittner Daniel
• Seider Dirk

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/62 Primary

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title