Rights Management Server for Document Library Size Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file and document management systems face challenges in preventing unauthorized distribution and use of items after access rights are breached, as they require maintaining two sets of rights (access and DRM) and storing encrypted files, which increases system complexity and processing overhead.
Innovation Solution
Generating usage rights from access rights allows for storing only one set of rights per item, encrypting files only upon request, and using these rights to control item usage, ensuring that items are stored unencrypted, enabling normal backup and search operations without decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DRM rights are stored for each user on every file, then usage rights protection is improved, but library size grows to an unmanageable size
Solution Approach 1:
The patent extracts DRM functionality from the traditional model where encryption keys and usage rights are embedded in each file. Instead, it uses a rights management server that stores usage rights information centrally, and files are distributed with only access rights. This removes the burden of storing large amounts of DRM data within the library itself, solving the contradiction between protection and library size.
Solution Approach 2:
The patent introduces a rights management server as an intermediary between the library system and users. This server handles all DRM operations including license generation, key management, and usage rights enforcement. By moving DRM functionality to this external intermediary, the library system itself doesn't need to store or manage large amounts of DRM data, thus maintaining small library size while providing comprehensive usage rights protection.
2Reliability
If items are stored in encrypted form, then security is improved, but processing overhead for backup and search operations increases dramatically
Solution Approach 1:
The patent applies different security qualities to different contexts: files are stored in the library with only access rights (not fully encrypted), allowing efficient processing. When files are distributed to users, DRM encryption is applied locally at the point of distribution. This local application of encryption solves the contradiction by maintaining security where needed (during distribution and use) while preserving processing efficiency in the library storage context.
Solution Approach 2:
The patent performs preliminary encryption when files are distributed to users, not when they are stored in the library. The rights management server encrypts files with user-specific keys before distribution. This preliminary action ensures security is established before the file leaves the controlled environment, allowing the library to store files in a more accessible format for efficient backup and search operations.
3Adaptability or versatility
If two sets of rights (access rights and DRM rights) are maintained, then comprehensive control is improved, but system complexity increases
Solution Approach 1:
The patent merges access rights and DRM rights management into a unified system. The rights management server handles both types of rights through a single interface and unified policy framework. Administration of both access and usage rights is consolidated in one location, eliminating the need for separate management systems. This merging maintains comprehensive control capabilities while significantly reducing system complexity by eliminating redundant management layers.
Solution Approach 2:
The rights management server is designed as a universal system that handles multiple functions: access rights management, usage rights enforcement, license generation, and key distribution. By creating a multi-functional system rather than separate specialized systems, the patent reduces overall system complexity while maintaining comprehensive control capabilities across different right types.
Data Source
AI summary
A method and computer-readable medium are provided for generating usage rights for an item based upon rights to access the item. According to the method, a request is received at a document management system for an item stored in a library. In response to the request, access rights to the item for the requester are determined and usage rights are generated based upon the access rights. An encrypted file is then created that contains the item and the usage rights for the item. The location of the item in the library may also be included in the protected file. When an attempt is made to store the item back in the library, a comparison is made between the location where the item was previously retrieved from (as specified within the item) and the requested location in the library for saving the item. The item is only saved in the library if the two locations match.