Adaptive document redaction
View Patent ↗Described are computer-based methods and apparatuses, including computer program products, for adaptive document redaction. A container is generated comprising a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location, and a header comprising encryption information for each redacted document in the set of redacted documents. A request to view the original document is received from a requesting device. The container is transmitted to the requesting device. A request for additional encryption information for a redacted document from the set of redacted documents is received from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device. The additional encryption information is transmitted to the requesting device.
1. A computerized method for accessing a document, comprising:
generating, by a computing device, a container comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;
a placeholder document for each redacted document in the set of redacted documents; and
a header comprising encryption information for each redacted document in the set of redacted documents;
receiving, by the computing device, a request to view the original document from a requesting device;
transmitting, by the computing device, the container to the requesting device;
receiving, by the computing device, a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;
transmitting, by the computing device, the additional encryption information to the requesting device;
determining at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) the user device is not configured to read the container, or any combination thereof; and
viewing the placeholder document instead of a particular redacted document.
2. The computerized method of claim 1 , wherein transmitting the container comprises transmitting a subset of redacted documents from the set of redacted documents to the requesting device, wherein the subset of documents are viewed more often than the remaining redacted documents in the set of redacted documents.
3. The computerized method of claim 2 , further comprising:
determining the additional encryption information is associated with a redacted document that was not transmitted to the requesting device; and
transmitting the redacted document to the requesting device.
4. The computerized method of claim 1 , wherein generating the container further comprises:
generating encryption information for each redacted document in the set of redacted documents, the encryption information comprising partial encryption information and additional encryption information;
encrypting each redacted document in the set of redacted documents based on its associated encryption information; and
adding the partial encryption information for each redacted document in the set of redacted documents to the header.
5. The computerized method of claim 1 , further comprising:
generating second encryption information for the container for the requesting device, the second encryption information comprising a public key and a private key;
encrypting the header of the container based on the second encryption information;
determining the requesting device is allowed to access the container; and
transmitting the second encryption information to the requesting device with the container for a first session, wherein the requesting device does not store the public key.
6. The computerized method of claim 5 , further comprising:
receiving a second request to view the original document from the requesting device;
determining the requesting device is allowed to access the container for a second session; and
transmitting the public key to the requesting device for the second session.
7. An apparatus for accessing a document, the apparatus comprising:
a processor; and
a memory coupled to the processor and including computer readable instructions that, when executed by the processor, are configured to cause the processor to:
generate a container comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;
a placeholder document for each redacted document in the set of redacted documents; and
a header comprising encryption information for each redacted document in the set of redacted documents;
receive a request to view the original document from a requesting device;
transmit the container to the requesting device;
receive a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;
transmit the additional encryption information to the requesting device;
determine at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) if the user device is not configured to read the container, or any combination thereof; and
view a placeholder document instead of a particular redacted document.
8. The apparatus of claim 7 , wherein transmitting the container comprises transmitting a subset of redacted documents from the set of redacted documents to the requesting device, wherein the subset of documents are viewed more often than the remaining redacted documents in the set of redacted documents.
9. The apparatus of claim 8 , wherein the computer readable instructions are further configured to:
determine the additional encryption information is associated with a redacted document that was not transmitted to the requesting device; and
transmit the redacted document to the requesting device.
10. The apparatus of claim 7 , wherein generating the container further comprises:
generating encryption information for each redacted document in the set of redacted documents, the encryption information comprising partial encryption information and additional encryption information;
encrypting each redacted document in the set of redacted documents based on its associated encryption information; and
adding the partial encryption information for each redacted document in the set of redacted documents to the header.
11. The apparatus of claim 7 , wherein the computer readable instructions are further configured to:
generate second encryption information for the container for the requesting device, the second encryption information comprising a public key and a private key;
encrypt the header of the container based on the second encryption information;
determine the requesting device is allowed to access the container; and
transmit the second encryption information to the requesting device with the container for a first session, wherein the requesting device does not store the public key.
12. The apparatus of claim 11 , wherein the computer readable instructions are further configured to:
receive a second request to view the original document from the requesting device;
determine the requesting device is allowed to access the container for a second session; and
transmit the public key to the requesting device for the second session.
13. A computer program product, tangibly embodied in a non-transitory computer readable medium, the computer program product including instructions being configured to cause a data processing apparatus to:
generate a container comprising:
a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location;
a placeholder document for each redacted document in the set of redacted documents; and
a header comprising encryption information for each redacted document in the set of redacted documents;
receive a request to view the original document from a requesting device;
transmit the container to the requesting device;
receive a request for additional encryption information for a redacted document from the set of redacted documents from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device;
transmit the additional encryption information to the requesting device;
determine at least one of (a) the requesting device attempts to view the particular redacted document, which comprises a level of redaction for a viewing location that is less than that required for the location of the viewing device, or (b) if the user device is not configured to read the container, or any combination thereof; and
view a placeholder document instead of a particular redacted document.