Secure sharing and collaborative editing of documents in cloud based applications

Patent metadata

Field	Value
Publication number	US-9774574-B2
Application number	US-201514827799-A
Country	US
Kind code	B2
Filing date	Aug 17, 2015
Priority date	Oct 19, 2012
Publication date	Sep 26, 2017
Grant date	Sep 26, 2017

Abstract

Collaboratively editing a document in a system of sharee clients includes creating a document change, generating a document token for encrypting the document change, encrypting the document change with the document token, making the encrypted document change available to the other sharee clients, and generating a plurality of copies of the sharee document token. Each sharee document token is encrypted with a respective sharee's public key. Each encrypted sharee document token is distributed to respective sharee clients. Each sharee client is configured to: decrypt a sharee document token using a respective private key, decrypt the encrypted document change using the share document token, and consolidate the document change into a document.

First claim

What is claimed is:

1. A method for collaboratively editing a document in a system of sharee clients, the method comprising:
creating a document change;
generating a document token for encrypting the document change;
encrypting, using a processor, the document change with the document token;
making the encrypted document change available to the other sharee clients;
generating a plurality of copies of the sharee document token;
encrypting each sharee document token with a respective sharee's public key; and
distributing each encrypted sharee document token to respective sharee clients wherein each sharee client is configured to:
decrypt a sharee document token using a respective private key;
decrypt the encrypted document change using the share document token; and
consolidate the document change into a document.

2. The method of claim 1 , wherein the encrypted document change is loaded onto one or more servers and made available to sharee clients.

3. The method of claim 2 , wherein the servers are Cloud servers.

4. The method of claim 2 , further comprising:
forming the share document token by splitting the document token into a server document token and sharee document token wherein each sharee client is configured to combine the decrypted share document token with the server document token and decrypt the encrypted document using the combined document token.

5. The method of claim 2 , wherein the plurality of sharee clients and the plurality of sharee document token copies correspond.

6. The method of claim 2 , wherein the encrypted document is stored in a document server.

7. The method of claim 2 , wherein the encrypted tokens are stored in a key server.

8. The method of claim 1 , wherein every piece of the document is protected.

9. The method of claim 1 , wherein the document change is a creation of a new document.

10. The method of claim 1 , wherein the document change is an addition or deletion of content to an existing document.

11. A system for collaboratively editing a document between a plurality of sharee clients comprising:
a processor programmed to initiate executable operations comprising:
creating a document change;
generating a document token for encrypting the document change;
encrypting the document change with the document token;
making the encrypted document change available to the other sharee clients;
generating a plurality of copies of the sharee document token;
encrypting each sharee document token with a respective sharee's public key; and
distributing each encrypted sharee document token to respective sharee clients wherein each sharee client is configured to:
decrypt a sharee document token using a respective private key;
decrypt the encrypted document change using the share document token; and
consolidate the document change into a document.

12. The system of claim 11 , wherein the encrypted document change is loaded onto one or more servers and made available to sharee clients.

13. The system of claim 12 , wherein the servers are Cloud servers.

14. The system of claim 12 , wherein the processor is further programmed to initiate executable operations comprising:
forming the share document token by splitting the document token into a server document token and sharee document token wherein each sharee client is configured to combine the decrypted share document token with the server document token and decrypt the encrypted document using the combined document token.

15. The system of claim 12 , wherein the plurality of share clients and the plurality of sharee document token copies correspond.

16. The system of claim 12 , wherein the encrypted document is stored in a document server.

17. The system of claim 12 , wherein the encrypted tokens are stored in a key server.

18. The system of claim 11 , wherein every piece of the document is protected.

19. The system of claim 11 , wherein the document change is a creation of a new document.

20. A computer program product for collaboratively editing a document in a system of sharee clients, comprising
a computer readable hardware storage device having program code stored thereon, the program code executable by a processor to perform:
creating a document change;
generating a document token for encrypting the document change;
encrypting the document change with the document token;
making the encrypted document change available to the other sharee clients;
generating a plurality of copies of the sharee document token;
encrypting each sharee document token with a respective sharee's public key; and
distributing each encrypted sharee document token to respective sharee clients wherein
each sharee client is configured to:
decrypt a sharee document token using a respective private key;
decrypt the encrypted document change using the share document token; and
consolidate the document change into a document.

Assignees

• IBM

Inventors

• Crosbie Mark
• Flood Jason
• Lara Juan Galiana
• Marcos De Prado Javier

Classifications

• H04L63/0442 Primary

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• G06F40/197

  Version control (for software G06F8/71) · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F40/166 Primary

  Editing, e.g. inserting or deleting · CPC title