Data management

1. A method, comprising:

a first computer system receiving an encrypted version of data;

the first computer system decrypting the encrypted version of the data using a first crypt key to produce decrypted data;

the first computer system editing the decrypted data to produce edited decrypted data;

the first computer system re-encrypting the edited decrypted data using a second crypt key to produce a re-encrypted version of the data, wherein the second crypt key is different from the first crypt key, and wherein one or both of the first crypt key and the second crypt key is a utilization permit key usable to authorize at least one, but not all, of a plurality of types of usages of data;

the first computer system attaching identification information to the re-encrypted version of the data, wherein the identification information is associated with a user identifier that is authorized to decrypt the re-encrypted version of the data; and

after the attaching the identification information, the first computer system transmitting the re-encrypted version of the data and the attached identification information to a second computer system via a communication network, wherein the identification information is usable to request a key to decrypt the re-encrypted version of the data.

2. The method according to claim 1 , wherein the identification information identifies a user of the first computer system, and wherein the re-encrypted version of the data is decryptable to reproduce the decrypted data.

3. The method according to claim 2 , further comprising:

the first computer system sending a key request to a key control server, wherein the request includes the identification information; and

responsive to the request, the first computer system receiving the first crypt key and the second crypt key.

4. The method according to claim 3 ,

wherein the first crypt key and the second crypt key are single-use keys, wherein the decrypting is performed via a first processor during a first time period, wherein the re-encrypting is performed via a second processor during a second time period, and wherein the first time period and the second time period at least partially overlap.

5. The method according to claim 1 , wherein the plurality of types of usages includes two or more types of the following types of usages: viewing data, storing data, copying data, editing data, and transferring data.

6. An article of manufacture including a computer-readable medium having stored thereon instructions that, in response to execution by a first computing device, cause the first computing device to perform operations comprising:

receiving data, wherein the received data is encrypted;

decrypting the received data using a decryption key to produce decrypted data;

editing the decrypted data to produce edited decrypted data;

re-encrypting the edited decrypted data using a re-encryption key to produce re-encrypted data, wherein the re-encryption key is different from the decryption key, and wherein one or both of the decryption key and the re-encryption key is a utilization permit key that is usable to authorize at least one, but not all, of a plurality of types of usages of data;

appending identification information to the re-encrypted data, wherein the identification information is associated with a user identifier that is authorized decrypt the re-encrypted data; and

transmitting the re-encrypted data and the appended identification information to a second computing device via a computer network, wherein the identification information is usable to request a key to decrypt the re-encrypted data.

7. The article of manufacture according to claim 6 , wherein the article has a card-like package, and wherein the article includes at least first and second processors configured to decrypt and re-encrypt the data, and wherein the decrypting and the re-encrypting are performed during time periods that partially overlap.

8. The article of manufacture according to claim 6 , wherein the identification information identifies a user of the first computing device.

9. The article of manufacture according to claim 6 , wherein the operations further comprise:

sending a key request to a key control server, wherein the request includes the identification information; and

responsive to the request, receiving the decryption key and the re-encryption key.

10. The article of manufacture according to claim 9 , wherein the decryption key and the re-encryption key are single use keys, and wherein the re-encrypted data is decryptable to reproduce the decrypted data.

11. The article of manufacture according to claim 6 , wherein the identification information includes a digital signature.

12. The article of manufacture of claim 6 , wherein the identification information includes copyright information.

13. The article of manufacture of claim 6 , wherein the identification information includes information relating to a user from which the data was received, or to a user to which the re-encrypted data is to be transferred.

14. The article of manufacture of claim 6 , further comprising at least one processor configured to execute the program instructions.

15. A computer system, comprising:

one or more processors; and

a memory, coupled to the one or more processors, storing program instructions executable by the computer system to cause the computer system to:

decrypt encrypted data using a decryption key to produce decrypted data;

edit the decrypted data to produce edited decrypted data;

re-encrypt the edited decrypted data using a re-encryption key to produce re-encrypted data, wherein the re-encryption key is different from the decryption key, and wherein one or both of the decryption key and the re-encryption key is a utilization permit key that is usable to authorize at least one, but not all, of a plurality of types of usages of data;

add identification information to the re-encrypted data, wherein the identification information is associated with a user identifier that is authorized to decrypt the re-encrypted data; and

transfer the re-encrypted data and the added identification information to a receiving device via a computer network, wherein the identification information is usable by the receiving device to request a key to decrypt the re-encrypted data.

16. The computer system of claim 15 ,

wherein the identification information includes one or both of copyright information and a digital signature.

17. The computer system of claim 15 , wherein the program instructions are further executable by the computer system to cause the computer system to:

send a key request to a key control server, wherein the request includes the identification information; and

responsive to the request, receive the decryption key and the re-encryption key.

18. A method, comprising:

a computer system receiving an encrypted version of data;

the computer system decrypting the received data using a decryption key to produce decrypted data;

the computer system editing the decrypted data to produce edited decrypted data;

the computer system re-encrypting the edited decrypted data using a re-encryption key to produce re-encrypted data, wherein the re-encryption key is different from the decryption key, and wherein one or both of the decryption key and the re-encryption key is a utilization permit key that is usable to authorize at least one, but not all, of a plurality of types of usages of data; and

the computer system transmitting the re-encrypted data and identification information via a computer network to a receiving device, wherein the identification information is associated with a user identifier that is authorized to decrypt the re-encrypted data, and wherein the identification information is usable by the receiving device to obtain a key to decrypt the re-encrypted data.

19. The method of claim 18 , further comprising:

sending a key request to a key control server, wherein the request includes the identification information; and

responsive to the request, receiving the decryption key and the re-encryption key.

20. The method of claim 18 , wherein the identification information includes a digital signature.

21. The method of claim 18 , wherein the identification information includes copyright information.

22. The method of claim 18 , wherein the identification information includes information indicating a source from whom the encrypted data was received.

23. The method of claim 18 , wherein the identification information includes information indicating a recipient to whom the re-encrypted data is to be transferred.

24. An apparatus, comprising:

means for decrypting encrypted data using a decryption key to produce decrypted data;

means for editing the decrypted data to produce edited decrypted data;

means re-encrypting the edited decrypted data using a re-encryption key to produce re-encrypted data, wherein the re-encryption key is different from the decryption key, and wherein one or both of the decryption key and the re-encryption key is a utilization permit key that is usable to authorize at least one, but not all, of a plurality of types of usages of data;

means for adding identification information to the re-encrypted data, wherein the identification information is associated with a user identifier that is authorized to decrypt the re-encrypted data; and

means for transmitting the re-encrypted data and the added identification information via a computer network to a receiving party, wherein the identification information is usable by the receiving party to request a key to decrypt the re-encrypted data.