Patent US6185684B1 successfully refreshed from Google Patents.
← Back to Patent Explorer
US6185684B1 Expired / Lapsed US ⏱️ 0.0 years remaining

Secured document access control using recipient lists

Assignee: Adobe Inc
•
Filing: 1998-08-28
•
Granted: 2001-02-06
•
Expires: 2018-08-28
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method for providing secured access to a document includes the steps of embedding a permissions attribute into a recipient list. The permissions attribute identifies permissions allowing various levels of access to a predetermined document. Each recipient listed in the recipient list has a corresponding permission associated therewith. Further, the method renders the recipient list and its contents tamper-proof.

Inventors

  • 👤 James D. Pravetz
  • 👤 Thomas J. Malloy

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-08 11:46
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6209; G06F2221/00; G06F2221/21; G06F2221/2141

Claims Analysis

Total Claims: 48
Claim 1
Independent Claim 89 words
A method for providing secured access to a document comprising: embedding a plurality of permissions attribute into a recipient list listing intended recipients of a predetermined data, said plurality of permissions attribute identifying permissions to access said predetermined data, each said recipient in said recipient list having at least one of said plurality of permissions attribute being associated therewith; enforcing said permission on each recipient listed on said recipient list in response to said recipient attempting to access said predetermined document, said enforcing being controlled by a viewer application.
Claim 2
Independent Claim 89 words
A method for providing secured access to a document comprising: embedding a plurality of permissions attribute into a recipient list listing intended recipients of a predetermined data, said plurality of permissions attribute identifying permissions to access said predetermined data, each said recipient in said recipient list having at least one of said plurality of permissions attribute being associated therewith; enforcing said permission on each recipient listed on said recipient list in response to said recipient attempting to access said predetermined document, said enforcing being controlled by a viewer application.
Claim 3
Dependent Claim 21 words
The method of claim 1 wherein said predetermined document is a portable document format (PDF) document residing in a PDF file.
Claim 4
Dependent Claim 15 words
The method of claim 2 further comprising encapsulating said recipient list into said PDF file.
Claim 5
Dependent Claim 14 words
The method of claim 3 wherein said viewer application is a PDF viewer application.
Claim 6
Dependent Claim 17 words
The method of claim 1 comprising creating a list of recipients intended to receive said predetermined document.
Claim 7
Dependent Claim 13 words
The method of claim 5 comprising associating said permissions attribute with said recipient.
Claim 8
Dependent Claim 29 words
The method of claim 5 comprising encrypting an access key with a public key of said recipient, said access key configured to provide controlled access to said predetermined document.
Claim 9
Dependent Claim 17 words
The method of claim 7 comprising encrypting said permissions attribute with said public key of said recipient.
Claim 10
Dependent Claim 30 words
The method of claim 7 comprising performing a message digest operation on said access key and said permissions attribute to generate a document key having access to said predetermined document.
Claim 11
Independent Claim 41 words
An apparatus for providing secured access to a document comprising: a permissions attribute identifying varying levels of permission to access a predetermined document; and a recipient list listing intended recipients of said predetermined document and having said permissions attribute associated therewith.
Claim 12
Independent Claim 41 words
An apparatus for providing secured access to a document comprising: a permissions attribute identifying varying levels of permission to access a predetermined document; and a recipient list listing intended recipients of said predetermined document and having said permissions attribute associated therewith.
Claim 13
Dependent Claim 21 words
The apparatus of claim 10 wherein said predetermined document is a portable document format (PDF) document residing in a PDF file.
Claim 14
Dependent Claim 14 words
The apparatus of claim 10 wherein said recipient list comprises an array of recipients.
Claim 15
Dependent Claim 16 words
The apparatus of claim 12 wherein said array of recipients comprises a plurality of recipient entries.
Claim 16
Dependent Claim 19 words
The apparatus of claim 13 wherein each said plurality of entries comprises a recipient identifier identifying a corresponding recipient.
Claim 17
Dependent Claim 35 words
The apparatus of claim 13 wherein each said plurality of entries comprises an encrypted key, said encrypted key being the encrypted form of an access key configured to provide controlled access to said predetermined document.
Claim 18
Dependent Claim 15 words
The apparatus of claim 13 wherein each said plurality of entries comprises said permissions attribute.
Claim 19
Dependent Claim 12 words
The apparatus of claim 10 further comprising an array of PKCS#7 objects.
Claim 20
Dependent Claim 17 words
The apparatus of claim 17 wherein said array of PKCS#7 objects comprises a plurality of PKCS#7 objects.
Claim 21
Dependent Claim 14 words
The apparatus of claim 17 wherein each said PKCS#7 objects comprises said recipient list.
Claim 22
Dependent Claim 65 words
The apparatus of claim 19 wherein said recipient list comprises an encrypted key for each recipient listed in said recipient list, said encrypted key being an encrypted form of an access key, said encrypted key encrypted for each recipient in said recipient list using a public key of each recipient and capable of being decrypted using a private key of a corresponding said each recipient.
Claim 23
Dependent Claim 66 words
The apparatus of claim 20 wherein said recipient list comprises an encrypted seed data coupled to said permissions attribute, said encrypted seed data being the encrypted form of a seed data configured to provide controlled access to said predetermined data, each said PKCS#7 object associated with the same said predetermined document having the same said seed data, said encrypted seed data encrypted using said access key.
Claim 24
Dependent Claim 32 words
The apparatus of claim 21 wherein said permissions attribute is encrypted using said access key, said permissions attribute configured to be extracted from a corresponding said PKCS#7 object using said access key.
Claim 25
Independent Claim 55 words
A system for providing secured access to a document stored in a computer-readable medium and executable by a computer, comprising: a permissions attribute configured to identify varying levels of permission to access a predetermined document; and a recipient list configured to list intended recipients of said predetermined document and having said permissions attribute associated therewith.
Claim 26
Independent Claim 55 words
A system for providing secured access to a document stored in a computer-readable medium and executable by a computer, comprising: a permissions attribute configured to identify varying levels of permission to access a predetermined document; and a recipient list configured to list intended recipients of said predetermined document and having said permissions attribute associated therewith.
Claim 27
Dependent Claim 21 words
The system of claim 23 wherein said predetermined document is a portable document format (PDF) document residing in a PDF file.
Claim 28
Dependent Claim 14 words
The system of claim 23 wherein said recipient list comprises an array of recipients.
Claim 29
Dependent Claim 16 words
The system of claim 25 wherein said array of recipients comprising a plurality of recipient entries.
Claim 30
Dependent Claim 19 words
The system of claim 26 wherein each said plurality of entries comprises a recipient identifier identifying a corresponding recipient.
Claim 31
Dependent Claim 35 words
The system of claim 27 wherein each said plurality of entries comprises an encrypted key, said encrypted key being the encrypted form of an access key configured to provide controlled access to said predetermined document.
Claim 32
Dependent Claim 15 words
The system of claim 28 wherein each said plurality of entries comprises said permissions attribute.
Claim 33
Dependent Claim 12 words
The system of claim 29 further comprising an array of PKCS#7 objects.
Claim 34
Dependent Claim 17 words
The system of claim 30 wherein said array of PKCS#7 objects comprises a plurality of PKCS#7 objects.
Claim 35
Dependent Claim 14 words
The system of claim 31 wherein each said PKCS#7 objects comprises said recipient list.
Claim 36
Dependent Claim 65 words
The system of claim 32 wherein said recipient list comprises an encrypted key for each recipient listed in said recipient list, said encrypted key being an encrypted form of an access key, said encrypted key encrypted for each recipient in said recipient list using a public key of each recipient and capable of being decrypted using a private key of a corresponding said each recipient.
Claim 37
Dependent Claim 66 words
The system of claim 33 wherein said recipient list comprises an encrypted seed data coupled to said permissions attribute, said encrypted seed data being the encrypted form of a seed data configured to provide controlled access to said predetermined data, each said PKCS#7 object associated with the same said predetermined document having the same said seed data, said encrypted seed data encrypted using said access key.
Claim 38
Dependent Claim 32 words
The system of claim 34 wherein said permissions attribute is encrypted using said access key, said permissions attribute configured to be extracted from a corresponding said PKCS#7 object using said access key.
Claim 39
Dependent Claim 80 words
A computer readable media containing executable computer program instructions which when executed on a digital processing system causes the system to perform a method comprising: embedding a permissions attribute into a recipient list listing intended recipients of a predetermined document, said permissions attribute identifying permission to access said predetermined document; enforcing said permission on each recipient listed on said recipient list in response to said recipient attempting to access said predetermined document, said enforcing being controlled by a viewer application.
Claim 40
Dependent Claim 80 words
A computer readable media containing executable computer program instructions which when executed on a digital processing system causes the system to perform a method comprising: embedding a permissions attribute into a recipient list listing intended recipients of a predetermined document, said permissions attribute identifying permission to access said predetermined document; enforcing said permission on each recipient listed on said recipient list in response to said recipient attempting to access said predetermined document, said enforcing being controlled by a viewer application.
Claim 41
Dependent Claim 23 words
The computer readable media of claim 36 wherein said predetermined document is a portable document format (PDF) document residing in a PDF file.
Claim 42
Dependent Claim 17 words
The computer readable media of claim 37 further comprising encapsulating said recipient list into said PDF file.
Claim 43
Dependent Claim 16 words
The computer readable media of claim 38 wherein said viewer application is a PDF viewer application.
Claim 44
Dependent Claim 19 words
The computer readable media of claim 39 comprising creating a list of recipients intended to receive said predetermined document.
Claim 45
Dependent Claim 15 words
The computer readable media of claim 40 comprising associating said permissions attribute with said recipient.
Claim 46
Dependent Claim 31 words
The computer readable media of claim 41 comprising encrypting an access key with a public key of said recipient, said access key configured to provide controlled access to said predetermined document.
Claim 47
Dependent Claim 19 words
The computer readable media of claim 42 comprising encrypting said permissions attribute with said public key of said recipient.
Claim 48
Dependent Claim 32 words
The computer readable media of claim 43 comprising performing a message digest operation on said access key and said permissions attribute to generate a document key having access to said predetermined document.

References Cited (Backward Citations)

US4268911A Cited
US4453074A Cited
US4613937A Cited
US4650975A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2004-02-06 2004-08-07 2005-02-06 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2008-02-06 2008-08-07 2009-02-06 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2012-02-06 2012-08-07 2013-02-06 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag