Encrypting file system
View Patent ↗An encryption method that is largely transparent to a user is accomplished by intercepting a change document or open document command, carrying out an encryption or decryption process, and then completing the command on an encrypted or decrypted file. The encryption method can be used in a wide variety of environments, such as an individual computer program, a database or electronic messaging over the Internet. The encryption method can select from a plurality of encryption algorithms.
1. A process of decrypting documents comprising:
providing plural documents having respective names
providing a crypto server for causing documents to be decrypted
providing a first table having
the names of encrypted documents
for each of the names of encrypted documents in the first table, a key name associated with a decryption key value for the encrypted document
detecting an open command for a given document issuing from a user of an application program using a user input device
in response to the open command, the crypto server using the first table to determine if the given document should be decrypted
if the given document should be decrypted, then
retrieving the key name associated with the name of the given document from the first table
retrieving the decryption key value associated with the key name from a second table, the second table having at least one decryption key value
causing the given document to be decrypted.
2. The process of decrypting documents of claim 1 further comprising providing an electronic document management system comprising a SQL database, a SQL database server and a SQL database client, wherein the electronic document management system performs the detecting step.
3. The process of decrypting documents of claim 1 further comprising
providing a database, the database including an indicator of whether the documents should be decrypted if the indicator in the database does not indicate that the given document is to be decrypted, determining that the document should not be decrypted.
4. The process of decrypting documents of claim 1 further comprising decrypting the given document with a DES algorithm.
5. The process of decrypting documents of claim 1 wherein the second table is stored in a smart card.
6. A computer program product comprising a computer usable medium having computer readable program code embodied therein for decrypting documents, the program code for causing a processor to
cause plural documents to be decrypted, the documents having respective names
record in a first table
the names of the encrypted documents
for each of the names of encrypted documents in the first table, a key name associated with a decryption key value for the encrypted document
detect an open command for a given document issuing from a user of an application program using a user input device
in response to the open command use the first table to determine if the given document should be decrypted
if the given document should be decrypted, then
retrieve the key name associated with the name of the given document from the first table
retrieve the decryption key value associated with the key name from a second table, the second table having at least one decryption key value
cause the given document to be decrypted.
7. The computer program product of claim 6 , the program code further for causing the processor to decrypt the given document with a DES algorithm.
8. A general purpose computer system comprising the computer program product of claim 6 .
9. The computer program product of claim 6 , the program code further for causing the processor to obtain decryption key values from a portable data storage device.
10. The computer program product of claim 6 wherein the second table is stored in a smart card.
11. A computer program product comprising a computer usable medium having computer readable program code embodied therein for encrypting documents, the program code for causing a processor to
cause plural documents to be encrypted, the documents having respective names
record in a first table
the names of the encrypted documents
for each of the names of encrypted documents in the first table, a key name associated with an encryption key value for the encrypted document
detect a close command for a given document issuing from a user of an application program using a user input device
in response to the close command use the first table to determine if the given document should be encrypted
if the given document should be encrypted, then
retrieve the key name associated with the name of the given document from the first table
retrieve the encryption key value associated with the key name from a second table, the second table having at least one encryption key value and at least one key name respectively associated with a one of the encryption key values
cause the given document to be encrypted.
12. The computer program product of claim 11 , the program code further for causing the processor to encrypt the given document with a DES algorithm.
13. A general purpose computer system comprising the computer program product of claim 11 .
14. The computer program product of claim 11 , the program code further for causing the processor to obtain encryption key values from a portable data storage device.
15. The computer program product of claim 11 wherein the second table is stored in a smart card.