Composite Document Secure Access via Key Map Table
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital document management systems face inefficiencies in handling composite documents, particularly in managing and accessing separate content parts stored in different file formats, leading to redundant downloads, unauthorized access, and inefficient workflow propagation.
Innovation Solution
The system enables composite documents to reference content parts externally through URIs, allowing for secure, version-controlled access and editing, while reducing unnecessary downloads and optimizing bandwidth usage by using a secure content manager and key map table for access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If content parts are embedded in the composite document, then access control is simplified, but data transfer redundancy increases and bandwidth efficiency decreases
Solution Approach 1:
The patent divides the composite document into separate content parts stored externally, with only metadata embedded in the document. This segmentation allows the system to maintain access control through the key map table while reducing bandwidth usage by avoiding redundant transfers of actual content data.
Solution Approach 2:
The patent introduces a key map table as an intermediary between the composite document and external content parts. This intermediary structure enables secure access control by mapping keys to content locations without requiring the content itself to be embedded, thus resolving the contradiction between security and bandwidth efficiency.
2Loss of energy
If content parts are stored externally via URIs, then bandwidth efficiency improves, but access control complexity increases
Solution Approach 1:
The key map table serves as an intermediary that simplifies external access control. It maps cryptographic keys to external content locations, allowing the system to maintain simple access control semantics while using external storage for bandwidth efficiency.
Solution Approach 2:
The patent creates a virtual copy of the content structure through the key map table, which references external content without copying it. This copying approach maintains access control simplicity while enabling bandwidth-efficient external storage.
3Speed
If all content parts are downloaded immediately, then access speed is maximized, but data transfer time and bandwidth consumption increase
Solution Approach 1:
The patent applies partial action by downloading only the metadata and key map table initially, with actual content parts loaded on-demand when needed. This reduces initial data transfer time and bandwidth consumption while maintaining fast access to required content.
Solution Approach 2:
The system performs preliminary action by pre-loading the key map table and metadata before actual content access is needed. This allows the system to prepare access information in advance while avoiding premature download of large content files, thus reducing transfer time.
4Loss of energy
If content parts are accessed on-demand, then data transfer efficiency improves, but access latency increases
Solution Approach 1:
The patent implements preliminary action by pre-resolving URIs and preparing content locations in the key map table before actual access. This allows on-demand content retrieval to proceed with minimal latency, as the infrastructure is already in place and configured.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
According to one example, a method is described in which a computer system receives a composite document with at least one referenced resource location. The computer system decrypts the referenced resource location, determines if the referenced resource location requires loading, and determines if the referenced resource location is editable. In the event that the referenced resource location requires loading, the referenced resource may be loaded from the referenced resource location and decrypted. In the event that the referenced resource location is editable, the referenced resource location may be edited.