Secure redacted document access
View Patent ↗Described are computer-based methods and apparatuses, including computer program products, for secure redacted document access. A viewing application for viewing documents is executed, the viewing application comprising standard code for the viewing application that can not process the container data type, and custom code configured to allow the viewing application to process a container data type. A container of the container data type is received from a remote computing device comprising a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location, and a header comprising encryption information for each redacted document in the set of redacted documents. The container is processed based on a location of the computing device and the custom code.
1. A computerized method for accessing a redacted document, comprising:
executing, by a computing device, a viewing application for viewing documents, the viewing application comprising:
standard code for the viewing application that cannot process a container data type; and
custom code configured to allow the viewing application to process a container data type;
receiving, by the computing device, a container from a remote computing device comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and
a header comprising encryption information for each redacted document in the set of redacted documents;
processing, by the computing device, the container based on a location of the computing device and the custom codes;
executing a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;
opening the container using the second viewing application; and
displaying, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.
2. The computerized method of claim 1 , wherein processing the container comprises:
storing a set of custom actions for the container data type;
intercepting an application call from the viewing application to perform an action to the container;
selecting a custom action from the set of custom actions based on the intercepted application call; and
executing the custom action instead of the application call.
3. The computerized method of claim 2 , wherein:
a custom action in the set of custom actions comprises a custom open action configured to open a redacted document from the set of documents in the container based on the location of the computing device; and
executing the custom open action comprises:
intercepting the application call, the application call comprising a call to open the container;
determining the location of the computing device;
selecting a redacted document from the set of redacted documents comprising a level of redaction for a viewing location that is equal to the location of the computing device; and
opening the redacted document using the viewing application.
4. The computerized method of claim 3 , wherein opening the reacted document comprises:
transmitting a request to view the redacted document to the remote computing device;
receiving additional encryption information for the redacted document;
decrypting the redacted document based on the decryption information in the header associated with the redacted document and the additional encryption information; and
displaying the decrypted redacted document using the viewing application.
5. The computerized method of claim 2 , wherein:
a custom action in the set of custom actions comprises a custom close action configured to close a decrypted redacted document; and
executing the custom close action comprises:
intercepting the application call, the application call comprising a call to close the decrypted redacted document;
closing the decrypted redacted document so that the viewing application no longer displays the decrypted redacted document; and
deleting the decrypted redacted document from the computing device.
6. The computerized method of claim 2 , wherein a custom action in the set of custom actions comprises a custom save action configured to protect a decrypted redacted document.
7. The computerized method of claim 6 , further comprising executing the custom save action, comprising:
intercepting the application call, the application call comprising a call to save the decrypted redacted document;
determining the decrypted redacted document can be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and
saving the decrypted redacted document on the computing device.
8. The computerized method of claim 6 , further comprising executing the custom save action, comprising:
intercepting the application call, the application call comprising a call to save the decrypted redacted document;
determining the decrypted redacted document can not be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and
preventing the decrypted redacted document from being saved on the computing device.
9. The computerized method of claim 1 , further comprising downloading the viewing application from a custom application site.
10. An apparatus for accessing a redacted document, the apparatus comprising:
a processor; and
a memory coupled to the processor and including computer readable instructions that, when executed by the processor, are configured to cause the processor to:
execute a viewing application for viewing documents, the viewing application comprising:
standard code for the viewing application that can not process a container data type; and
custom code configured to allow the viewing application to process a container data type;
receive a container from a remote computing device comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and
a header comprising encryption information for each redacted document in the set of redacted documents;
process the container based on a location of the computing device and the custom code;
execute a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;
open the container using the second viewing application; and
display, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.
11. The apparatus of claim 10 , wherein processing the container comprises:
storing a set of custom actions for the container data type;
intercepting an application call from the viewing application to perform an action to the container;
selecting a custom action from the set of custom actions based on the intercepted application call; and
executing the custom action instead of the application call.
12. The apparatus of claim 11 , wherein:
a custom action in the set of custom actions comprises a custom open action configured to open a redacted document from the set of documents in the container based on the location of the computing device; and
executing the custom open action comprises:
intercepting the application call, the application call comprising a call to open the container;
determining the location of the computing device;
selecting a redacted document from the set of redacted documents comprising a level of redaction for a viewing location that is equal to the location of the computing device; and
opening the redacted document using the viewing application.
13. The apparatus of claim 12 , wherein opening the reacted document comprises:
transmitting a request to view the redacted document to the remote computing device;
receiving additional encryption information for the redacted document;
decrypting the redacted document based on the partial decryption information in the header associated with the redacted document and the additional encryption information; and
displaying the decrypted redacted document using the viewing application.
14. The apparatus of claim 11 , wherein:
a custom action in the set of custom actions comprises a custom close action configured to close a decrypted redacted document; and
executing the custom close action comprises:
intercepting the application call, the application call comprising a call to close the decrypted redacted document;
closing the decrypted redacted document so that the viewing application no longer displays the decrypted redacted document; and
deleting the decrypted redacted document from the computing device.
15. The apparatus of claim 11 , wherein a custom action in the set of custom actions comprises a custom save action configured to protect a decrypted redacted document.
16. The apparatus of claim 15 , wherein the computer readable instructions are further configured to execute the custom save action, comprising:
intercepting the application call, the application call comprising a call to save the decrypted redacted document;
determining the decrypted redacted document can be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and
saving the decrypted redacted document on the computing device.
17. The apparatus of claim 15 , wherein the computer readable instructions are further configured to execute the custom save action, comprising:
intercepting the application call, the application call comprising a call to save the decrypted redacted document;
determining the decrypted redacted document can not be saved based on the computing device, the location of the computing device, the decrypted redacted document, or any combination thereof; and
preventing the decrypted redacted document from being saved on the computing device.
18. The apparatus of claim 10 , wherein the computer readable instructions are further configured to download the viewing application from a custom application site.
19. A computer program product, tangibly embodied in a non-transitory computer readable medium, the computer program product including instructions being configured to cause a data processing apparatus to:
execute a viewing application for viewing documents, the viewing application comprising:
standard code for the viewing application that can not process a container data type; and
custom code configured to allow the viewing application to process a container data type;
receive a container from a remote computing device comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location; and
a header comprising encryption information for each redacted document in the set of redacted documents;
process the container based on a location of the computing device and the custom code;
execute a second viewing application for viewing documents, wherein the second viewing application is not configured to process the container data type;
open the container using the second viewing application; and
display, using the second viewing application, a placeholder document in place of any redacted documents from the set of redacted documents in the container.