Systems and methods for document management
View Patent ↗A user retains access to a document previously generated or received by an institution system and stored in encrypted form in storage of the institution system or another entity associated with the institution system. However, the institution system does not have access to the document (in readable form) after an expiration of an amount of time. The document is encrypted in such a manner that only the user can decrypt the document, but the institution system cannot decrypt it. In this manner, the institution system may meet business or regulatory requirements or policies directed to discarding (i.e., purging) the document after a predetermined amount of time, but can still provide secure storage of the document in encrypted form to the user independent of the business or regulatory requirements or policies that mandate purging the document.
1. A document management system, comprising:
at least one subsystem that stores a document of a user in storage of an institution system in accordance with a retention policy;
at least one subsystem that encrypts the document with a key using an encryption module of a computing device of the institution system to generate an encrypted document;
at least one subsystem that sends the encrypted document from the institution system to a document store of an aggregator, the aggregator being a separate entity from an institution associated with the institution system and storing the encrypted document in the document store beyond when the document is accessible by the institution system based on the retention policy;
at least one subsystem that forwards a user request to retrieve the encrypted document from the aggregator;
at least one subsystem that provides the retrieved encrypted document to a user; and
at least one subsystem that sends the key via a communications network from a key store of the institution system to a user computing device to decrypt the encrypted document from the aggregator after the document is purged from the storage of the institution system based on the retention policy.
2. The system of claim 1 , further comprising at least one subsystem that generates the document at the institution system prior to storing the document in the storage of the institution system.
3. The system of claim 1 , further comprising at least one subsystem that receives the document at the institution system from the user prior to storing the document in the storage of the institution system.
4. The system of claim 1 , further comprising at least one subsystem that maintains the key in the key store of the institution system after the document is purged from the storage of the institution system.
5. The system of claim 1 , further comprising:
at least one subsystem that receives a request for the document from the user when the document is not accessible by the institution system;
at least one subsystem that retrieves the encrypted document from the document store of the aggregator; and
at least one subsystem that provides the encrypted document to the user computing device from the aggregator.
6. The system of claim 5 , further comprising at least one subsystem that provides the request from the user to the aggregator in a transaction that is transparent to the user.
7. The system of claim 5 , further comprising at least one subsystem that authenticates the user before providing the encrypted document to the user computing device from the aggregator.