System and Method for Secure Document Distribution
A system and method for secure document distribution is provided. The system includes a computer system and a secure document distribution engine. The system includes a two-factor authentication system that includes a password and a hardware component. Documents can be accessed from a network (e.g., the Internet, a cloud computing resource, etc.), via a link as an e-mail attachment, or as a stored file. Redistribution of documents by malicious authorized users is not possible without attribution due to the view-only nature of the system in combination with other measures that include event logging and document watermarking. Access can be revoked or blocked in real time, regardless of how the files were distributed or where they reside.
1 . A system for secure document distribution comprising:
a computer system in electronic communication with a plurality of users over a network;
a secure document distribution engine stored on the computer system and accessible to the plurality of users over the network, the secure document distribution engine providing read-only access to data associated with a secure community of interest to an authorized user of the secure community of interest;
wherein the authorized user of the secure community of interest registers a password and a hardware component with the computer system; and
wherein access by the authorized user to the data within the secure community of interest is controlled by the password and the hardware component such that access to the data is lost if the user removes the hardware component.
2 . The system of claim 1 , wherein the authorized user registers a username with the computer system.
3 . The system of claim 2 , wherein the username is an email address, and a user must retrieve a hashed token from the email address to complete registration.
4 . The system of claim 1 , wherein the system requires a minimum password strength.
5 . The system of claim 1 , wherein the hardware component is a USB thumb drive, smartphone, or tablet computer.
6 . The system of claim 1 , wherein the user loses access to data within the secure community of interest after revocation of a user's authorization.
7 . The system of claim 1 , wherein access to the secure community of interest is restricted by geographic location.
8 . The system of claim 1 , wherein data within the secure community of interest is encrypted and transmitted to an authorized user as such.
9 . The system of claim 8 , wherein a watermark is displayed each time data is decrypted.
10 . The system of claim 1 , further comprising a detailed event log of actions of registered users.
11 . A method for secure document distribution comprising:
electronically communicating by a computer system with a plurality of users over a network, the computer system storing a secure document distribution engine therein;
prompting the user to register a password and a hardware component with the computer system;
authorizing the user with access to a secure community of interest;
allowing the user to access the secure community of interest using the password and the hardware component; and
allowing, upon receiving the password and hardware component, the user to access read-only data within the secure community of interest such that access to the data is lost if the user removes the hardware component.
12 . The method of claim 11 , further comprising prompting the user to register a username with the computer system.
13 . The method of claim 12 , wherein the username is an email address, and a user must retrieve a hashed token from the email address to complete registration.
14 . The method of claim 11 , wherein the system requires a minimum password strength.
15 . The method of claim 11 , wherein the hardware component is a USB thumb drive, smartphone, or tablet computer.
16 . The method of claim 11 , wherein the user loses access to data within the secure community of interest after revocation of a user's authorization.
17 . The method of claim 11 , wherein access to the secure community of interest is restricted by geographic location.
18 . The method of claim 11 , further comprising encrypting data within a community of interest is encrypted and transmitting to an authorized user as such.
19 . The method of claim 18 , further comprising displaying a watermark each time data is decrypted.
20 . The method of claim 11 , further comprising updating a detailed event log of actions of registered users.
21 . A computer-readable medium having computer-readable instructions stored thereon which, when executed by a computer system, cause the computer system to perform the steps of:
electronically communicating with a plurality of users over a network, the computer system storing a secure document distribution engine therein;
prompting the user to register a password and a hardware component with the computer system;
authorizing the user with access to a secure community of interest;
allowing the user to access the secure community of interest using the password and the hardware component; and
allowing, upon receiving the password and hardware component, the user to access read-only data within the secure community of interest such that access to the data is lost if the user removes the hardware component.
22 . The computer-readable medium of claim 21 , further comprising prompting the user to register a username with the computer system
23 . The computer-readable medium of claim 22 , wherein the username is an email address, and a user must retrieve a hashed token from the email address to complete registration.
24 . The computer-readable medium of claim 21 , wherein the system requires a minimum password strength.
25 . The computer-readable medium of claim 21 , wherein the hardware component is a USB thumb drive, smartphone, or tablet computer.
26 . The computer-readable medium of claim 21 , wherein the user loses access to data within the secure community of interest after revocation of a user's authorization.
27 . The computer-readable medium of claim 21 , wherein access to the secure community of interest is restricted by geographic location.
28 . The computer-readable medium of claim 21 , further comprising encrypting data within a community of interest is encrypted and transmitting to an authorized user as such.
29 . The computer-readable medium of claim 28 , further comprising displaying a watermark each time data is decrypted.
30 . The computer-readable medium of claim 21 , further comprising updating a detailed event log of actions of registered users.