The Design And Implementation Of Connected Document Rights Management System

Along with the rapid development of electronic information technology, information systems are widely established in enterprises and more and more classified documents are stored and processed in digital format. Information leaks by internal staffs and external attacks become serious information security threats to enterprises. Relying solely on strict secrecy system is not sufficient to deal with the documents information security threats, thus management and audit must be applied by technical means before information leaks and providing basis for tracking leaks after security events.This paper investigated the current electronic document security management systems, finding that most of them are applying encryption and decryption methods with access control schemes. This paper also found many deficiencies of above products, such as:Users have to take encryption and decryption operations manually, which is badly disturbing users’ habits; Individually business units establish document rights management systems separately, so that documents cannot be distributed from one system to another and users cannot roaming between systems; Document content and rights are spread separately, so that users have to send documents by email or other communication tools after grant; None of those products provides efficient information leaks risk warnings because of lack of users’document operations audit or lack of usage of those audit information.In order to supplement these products, this paper designed and implemented a connected digital document rights management system. This paper mainly introduce the server part of this system. To achieve the designing goals, several key problems were solved:Solution to the document rights distribution control problem is to manage the rights generation and cost. Schemes for document rights grant and sync between systems were designed to ensure that the document keys are delivered safely and prevent the rights from being over used; In order to solve the document content transfer problem, a file transfer method based on pull/push mode with minimal requests was proposed. It is a general file transfer method on Windows costing less memory and CPU resources and performing well in high concurrent requests; A scheme for documents distribution analysis and information leaks evaluation were designed to deal with the information leak risk warning problem. Risk warnings are showed on the Web of this system. Details of the designing and implementation about problems above will be described in this paper. Then this paper shows how the system works and does some analysis of this system.