Method for enforcing document privacy through third party systems
The application discloses systems and methods for securing a document while routing through native or third party infrastructure. A process resident on the user's platform generates a three-part secure document from the user's original document. The first part is public and contains document metadata such as a public key. The public key is used to encrypt the second part of the document's metadata which includes a user supplied password. The third part contains the original document that has been symmetrically encrypted using the user supplied password. The result is that only the first part of the new document is visible to unsecured transmission channels or third party infrastructure.
1. An apparatus for generating a secured electronic document, wherein said apparatus comprises a non-volatile computer readable medium storing a plurality of programmatic instructions, wherein said programmatic instructions, when executed by a processor, generate the secured electronic document by:
receiving an unprotected document comprising content;
receiving a public key specific to a document service;
generating a first portion of said secured electronic document, wherein said first portion comprises said public key;
generating a second document portion of said secured electronic document, wherein said second document portion comprises a password and wherein the second document portion is encrypted using said public key;
generating a third document portion of said secured electronic document, wherein said third document portion comprises the content of the unprotected document wherein said third document portion is protected using said password; and
forming said secured document using said first document portion, second document portion, and third document portion, thereby creating the secured electronic document having the public key, the password, and the content incorporated therein.
2. The apparatus of claim 1 wherein said first portion further comprises routing information, wherein said routing information details a network location of said document service.
3. The apparatus of claim 2 wherein said network location is designated by a network address, a universally unique identifier (UUID), or a service name.
4. The apparatus of claim 1 further comprising prompting a user for a password and receiving an input indicative of said password.
5. The apparatus of claim 1 wherein said public key corresponds to a private key specific to said document service.
6. The apparatus of claim 1 wherein neither the first document portion nor the third document portion is encrypted using a public or private key.
7. The apparatus of claim 1 wherein said second document portion comprises at least one of a job ticket, document name, document ownership details, account information, financial information, financial transaction data, credit card data, access control lists, storage repository information, client data, confidentiality designations, time of creation, place of creation, or version number.
8. The apparatus of claim 1 wherein said public key is received directly from said document service.
9. The apparatus of claim 1 further comprising transmitting the secured document to the document service through an unsecured transmission channel.
10. A system for generating and processing a secured electronic document, wherein said system comprises:
a first non-volatile computer readable medium storing a plurality of programmatic instructions, wherein said programmatic instructions, when executed by a processor, generate the secured electronic document by:
receiving a public key specific to a document service;
generating a first portion of said secured electronic document, wherein said first portion comprises said public key;
generating a second document portion of said secured electronic document, wherein said second document portion comprises a password and wherein the second document portion is encrypted using said public key;
generating a third document portion of said secured electronic document, wherein said third document portion comprises content of the unprotected document wherein said third document portion is protected using said password;
forming said secured electronic document using said first document portion, second document portion, and third document portion, thereby creating the secured electronic document having the public key, the password, and the content incorporated therein;
transmitting said secured electronic document;
a second non-volatile computer readable medium storing a plurality of programmatic instructions, wherein said programmatic instructions, when executed by a processor, process said secured electronic document by:
generating and transmitting the public key to the first non-volatile computer readable medium;
receiving the secured document from the first non-volatile computer readable medium;
acquiring the public key from the first portion of said secured electronic document;
decrypting the second portion of the secured electronic document using a private key corresponding to said public key;
acquiring the password from the second portion of said secured electronic document; and
unlocking the third portion of said secured electronic document using said password.
11. The system of claim 10 wherein said first portion further comprises routing information, wherein said routing information details a network location of said document service.
12. The system of claim 10 wherein neither the first document portion nor the third document portion is encrypted using a public or private key.
13. The system of claim 10 wherein said second document portion comprises at least one of a job ticket, document name, document ownership details, account information, financial information, financial transaction data, credit card data, access control lists, storage repository information, client data, confidentiality designations, time of creation, place of creation, or version number.
14. The system of claim 10 wherein second non-volatile computer readable medium is associated with the document service and wherein said document service processes the secured electronic document using at least one of a job ticket, document name, document ownership details, account information, financial information, financial transaction data, credit card data, access control lists, storage repository information, client data, confidentiality designations, time of creation, place of creation, or version number.
15. The system of claim 14 wherein the document service is at least one of a document repository service or printing service.
16. The system of claim 10 wherein said public key is transmitted directly from second non-volatile computer readable medium to said first non-volatile computer readable medium.
17. The system of claim 10 wherein said secured electronic document is transmitted through, and received from, an unsecured transmission channel.
18. The system of claim 10 wherein the first non-volatile computer readable medium is part of a first computing device and wherein said first computing device is adapted to access a document service across a network connection.
19. The system of claim 18 wherein the second non-volatile computer readable medium is part of a second computing device and wherein said second computing device is adapted to provide a document service across a network connection, and wherein said document service is at least one of a document repository, printing, scanning, facsimile, bookmaking, document management, or optical character recognition.
20. A method for generating and processing a secured electronic document, wherein said method is implemented using non-volatile computer readable mediums that store a plurality of programmatic instructions, wherein said programmatic instructions, when executed by processors, generate the secured electronic document and wherein said method comprises:
receiving a public key specific to a document service;
generating a first portion of said secured electronic document, wherein said first portion comprises said public key;
generating a second document portion of said secured electronic document, wherein said second document portion comprises a password and wherein the second document portion is encrypted using said public key;
generating a third document portion of said secured electronic document, wherein said third document portion comprises content of the unprotected document wherein said third document portion is protected using said password;
forming said secured document using said first document portion, second document portion, and third document portion, thereby creating the secured electronic document having the public key, the password, and the content incorporated therein; and
transmitting said secured electronic document to the document service.
21. The method of claim 20 further comprising
generating and transmitting the public key;
receiving the secured electronic document;
acquiring the public key from the first portion of said secured electronic document;
decrypting the second portion of the secured electronic document using a private key corresponding to said public key;
acquiring the password from the second portion of said secured electronic document; and
unlocking the third portion of said secured electronic document using said password.
22. The method of claim 20 wherein neither the first document portion nor the third document portion is encrypted using a public or private key.