Secure sharing and collaborative editing of documents in cloud based applications
Collaboratively editing a document in a system of sharee clients includes creating a document change, generating a document token for encrypting the document change, encrypting the document change with the document token, making the encrypted document change available to the other sharee clients, and generating a plurality of copies of the sharee document token. Each sharee document token is encrypted with a respective sharee's public key. Each encrypted sharee document token is distributed to respective sharee clients. Each sharee client is configured to: decrypt a sharee document token using a respective private key, decrypt the encrypted document change using the share document token, and consolidate the document change into a document.
1. A method for collaboratively editing a document in a system of sharee clients, the method comprising:
creating a document change;
generating a document token for encrypting the document change;
encrypting, using a processor, the document change with the document token, wherein the encrypted document change is loaded onto one or more Cloud servers;
making the encrypted document change available to sharee clients;
forming a share document token by splitting the document token into a server document token and a sharee document token;
generating a plurality of copies of the sharee document token;
encrypting each sharee document token with a respective sharee's public key;
distributing each encrypted sharee document token to respective sharee clients;
wherein each sharee client is configured to:
decrypt the encrypted sharee document token using a respective private key;
combine the decrypted sharee document token with the server document token;
decrypt the encrypted document change using the combined share document token; and
consolidate the decrypted document change into the document.
2. The method of claim 1 , wherein every piece of the document is protected.
3. The method of claim 1 , wherein the encrypted document is stored in a document server.
4. The method of claim 1 , wherein the encrypted tokens are stored in a key server.
5. The method of claim 1 , wherein the document change is a creation of a new document.
6. The method of claim 1 , wherein the document change is an addition or deletion of content to an existing document.
7. A system for collaboratively editing a document between a plurality of sharee clients comprising:
a processing hardware programmed to initiate executable operations comprising:
creating a document change;
generating a document token for encrypting the document change;
encrypting, using a processor, the document change with the document token, wherein the encrypted document change is loaded onto one or more Cloud servers;
making the encrypted document change available to sharee clients;
forming a share document token by splitting the document token into a server document token and a sharee document token;
generating a plurality of copies of the sharee document token;
encrypting each sharee document token with a respective sharee's public key;
distributing each encrypted sharee document token to respective sharee clients;
wherein each sharee client is configured to:
decrypt the encrypted sharee document token using a respective private key;
combine the decrypted sharee document token with the server document token;
decrypt the encrypted document change using the combined share document token; and
consolidate the decrypted document change into the document.
8. The system of claim 7 , wherein every piece of the document is protected.
9. The system of claim 7 , wherein the encrypted document is stored in a document server.
10. The system of claim 7 , wherein the encrypted tokens are stored in a key server.
11. The system of claim 7 , wherein the document change is a creation of a new document.
12. A computer program product for collaboratively editing a document in a system of sharee clients, the computer program product comprising a computer readable storage device having program code stored thereon, the program code executable by a processor to perform a method comprising: creating, using the processor, a document change;
generating, using the processor, a document token for encrypting the document change;
encrypting, using the processor, the document change with the document token;
wherein the encrypted document change is loaded onto one or more Cloud servers;
making, using the processor, the encrypted document change available to sharee clients;
forming a share document token by splitting the document token into a server document token and a sharee document token;
generating, using the processor, a plurality of copies of the sharee document token;
encrypting, using the processor, each sharee document token with a respective sharee's public key;
distributing each encrypted sharee document token to respective sharee clients;
wherein each sharee client is configured to:
decrypt the encrypted sharee document token using a respective private key;
combine the decrypted sharee document token with the server document token;
decrypt the encrypted document change using the combined share document token; and
consolidate the decrypted document change into the document.