Device-Bound Digital Signature for Secure Document Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current document management systems (DMS) face challenges in securely controlling access to documents and digital works, as encrypted files can be easily forwarded and edited outside the system, leading to security breaches and loss of update history, and password protection is cumbersome and easily defeated.
Innovation Solution
A method and system that incorporates a digital signature specific to a device within the digital work, allowing only authorized devices to decrypt and access the file, using a device key associated with the identified device, and optionally including additional security measures like AES encryption and audit trails.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If documents are stored in native format and retrieved for editing, then ease of operation is improved, but security is worsened as documents can be forwarded outside the system
Solution Approach 1:
A proprietary application acts as an intermediary between the user and the document. The application embeds security controls within the document viewing and editing environment, allowing users to work with documents in a familiar format while the intermediary layer prevents unauthorized forwarding and ensures all edits are tracked and saved back to the central repository.
2Reliability
If password protection is applied to documents, then security is improved, but ease of operation is worsened due to cumbersome password management
Solution Approach 1:
The system automatically manages authentication and authorization without requiring users to manually handle passwords. The proprietary application handles login credentials, session management, and permission verification in the background, allowing users to access and work with documents without being burdened by password entry and management.
3Reliability
If documents are encrypted, then security is improved, but ease of operation is worsened as documents cannot be easily edited in native format
Solution Approach 1:
Encryption and security controls are applied in advance to the document before it is made available to users. The proprietary application decrypts the document in a controlled environment, allowing editing in native format, and automatically re-encrypts and saves the updated document back to the repository, maintaining security throughout the workflow.
4Reliability
If proprietary application is used to access documents, then security is improved, but device complexity is worsened due to additional computing resources required
Solution Approach 1:
The proprietary application is designed to run on existing document management infrastructure and can be accessed through multiple platforms and devices. It provides universal access control and security features without requiring separate computing resources for each device, as the core security functions are hosted on the server side and the client applications are lightweight.
Data Source
AI summary
Systems and methods for controlling access to digital works are described herein, e.g., including receiving a request for a digital work from a requestor; retrieving the digital work from a repository; incorporating a digital signature throughout the digital work specific to a device, wherein the incorporated digital signature includes information identifying the device having the ability to access to the digital work; providing the identified device with a device key associated with the device; encrypting the digital work, wherein the digital work is decryptable using the device key and the identified device; and providing the requestor with the encrypted digital work.