User authentication system and method for encryption and decryption

1. A system comprising:

an authentication module authenticating a user; and

a crypto module encrypting an electronic document generated by an application program using at least one encryption key to generate an encrypted document in response to a command related to the electronic document received by the application program if the user has been authenticated by the authentication module and at least one encryption criteria is met,

wherein the crypto module communicates with an electronic document management system to permit execution of the command by the electronic document management system on the encrypted document.

2. The system according to claim 1 , wherein the authentication module compares a stored user identifier and a stored password to an entered user identifier and an entered password to authenticate the user.

3. The system according to claim 2 , wherein the entered user identifier and the entered password are provided by one of a smart card, a hand-held token and a wireless identification device.

4. The system according to claim 2 , wherein the entered user identifier and the entered password are associated with biometric information.

5. The system according to claim 1 , wherein the authentication module compares stored biometric information with entered biometric information to authenticate the user.

6. The system according to claim 1 , wherein the authentication module provides, upon authentication of the user, access to the at least one encryption key.

7. The system according to claim 1 , wherein the command is translated into an event.

8. The system according to claim 7 , wherein the crypto server traps the event and prevents the event from being communicated to the electronic document management system.

9. The system according to claim 1 , wherein the at least one encryption criteria is data indicating the electronic document had previously been encrypted.

10. The system according to claim 1 , wherein the at least one encryption criteria is data indicating the electronic document should be encrypted.

11. The system according to claim 1 , wherein the application displays an error message when the crypto module does not encrypt the electronic document.

12. The system according to claim 1 , wherein the electronic document management system does not execute the command until the crypto module communicates that the electronic document has been encrypted.

13. The system according to claim 1 , further comprising: a key storage storing a table including the at least one encryption key, wherein the at least one encryption key includes a key name and a key value associated with the key name.

14. The system according to claim 13 , wherein the crypto module determines whether a key name is associated with the electronic document.

15. The system according to claim 14 , wherein the crypto module encrypts the electronic document with the key value associated with the key name associated with the electronic document.

16. The system according to claim 1 , wherein the at least one encryption key is associated with the user.

17. The system according to claim 1 , wherein the crypto module encrypts the electronic document without any input from the user.

18. A system configured to authenticate a user for encryption or decryption, the system comprising:

a bio-metric user authentication apparatus;

a storage device storing bio-metric user identifying information and encryption and decryption data; and

an encryption and decryption computer communicating with the bio-metric user authentication apparatus and configured to:

communicate with an application interfacing with the bio-metric user authentication apparatus;

receive from the storage device via the application the bio-metric user identifying information;

authenticate a user based on the bio-metric user identifying information; and

read, via the application, the encryption and decryption data once the user is authenticated.

19. The system according to claim 18 , wherein the encryption and decryption data comprise one or more encryption and decryption keys, respectively.

20. The system according to claim 19 , wherein each of the one or more encryption and decryption keys is associated with a key value.

21. The system according to claim 20 , wherein the encryption and decryption computer provides, upon authentication of the user, access to the one or more encryption and decryption keys.

22. The system according to claim 21 , wherein the encryption and decryption computer uses the one or more encryption and decryption keys to perform at least one of encrypting and decrypting data.

23. The system according to claim 22 , wherein the encryption and decryption computer performs at least one of transparently decrypting data using one or more of the one or more encryption and decryption keys, and transparently encrypting data using one or more of the one or more encryption and decryption keys.

24. The system according to claim 21 , wherein the one or more encryption and decryption keys is associated with the user.

25. The system according to claim 18 , wherein the storage device stores the encryption and decryption keys in a hierarchy.

26. The system according to claim 18 , wherein the encryption and decryption computer transmits user authentication information to a server via a network.

27. The system according to claim 26 , wherein the user authentication information comprises at least one of a password and a key, and wherein the encryption and decryption computer accesses the user authentication information once the user is authenticated based on the bio-metric user identifying information.