Distributed access control for document centric collaborations

US8689352B2 · kind B2 · utility

Assignee

• SAP AG · DE

Inventors

• Andreas Schaad · Bruchsal, DE
• Mohammad Ashiqur Rahaman · Antibes, FR

Key dates

• Filing date: Dec 18, 2008
• Grant date: Apr 1, 2014
• Expiry date: Jun 4, 2031

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2209/30
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Document collaboration may be implemented by executing an access interest specification phase. The access interest specification phase may include receiving access requests from collaboration participants for access to a document instance, the access requests specified using a document schema of the document instance and referencing at least one schema portion for access to a corresponding document instance portion based thereon, determining a common access interest group of the collaboration participants, based on the access requests, access credentials of the collaboration participants, and on an access control policy specified in terms of the access credentials, and providing a control data block to the participants of the common access interest group including information for generating a common secret key that is common to the participants of the common access interest group. The document collaboration may further be implemented by executing a collaboration phase. The collaboration phase execution may include encrypting the document instance portion using the access control policy, and providing access to the document instance for access to the document instance portion by an …