Encrypting File System

Abstract

A method of decrypting documents is disclosed. A plurality of document may be stored on a file server. A client computer is connected to the file server by a network. A first table contains the names of encrypted documents and, for each document, the name of an associated encryption key. A second table contains an encryption key value associated with an encryption key name. To open an encrypted document, the crypto server retrieves the encryption key name from the first table, retrieves the encryption key value from the second table, and causes the document to be decrypted.

1 . A process of decrypting documents comprising: 
 providing a file server for storing a plurality of documents having respective names    providing a client computer interconnected with the file server by a network, the client computer comprising a crypto server for causing documents to be decrypted    providing a first table having 
 the names of encrypted documents stored on the file server  
 for each of the names of encrypted documents in the first table, a key name associated with a decryption key value for the encrypted document  
   detecting an open command for a given document issuing from an application operative on the client computer    in response to the open command, the crypto server using the first table to determine if the given document should be decrypted    if the given document should be decrypted, the crypto server then 
 retrieving the key name associated with the name of the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table, the second table having at least one decryption key value  
 causing the given document to be decrypted.  
   
   
   
       2 . The process of decrypting documents of  claim 1 , wherein 
 the first table further includes 
 the names of unencrypted documents stored on the file server  
 for each document, an associated indicator if the document is encrypted or unencrypted  
   the action of using the first table to determine if the given document should be decrypted comprises using the indicator associated with the given document to determine if the given document is encrypted.    
   
   
       3 . The process of decrypting documents of  claim 1 , wherein the second table is stored on a portable data storage device.  
   
   
       4 . The process of decrypting documents of  claim 2 , wherein the portable data storage device is a smart card.  
   
   
       5 . A document management system comprising: 
 a file server for storing a plurality of documents having respective names    a client computer interconnected with the file server by a network, the client computer comprising 
 a processor  
 memory coupled to the processor  
 a data storage device storing computer-interpretable instruction for causing the client computer to perform actions including 
 operating an application program  
 providing a crypto server for causing documents to be decrypted  
 detecting an open command issued from the application program for a given document  
 in response to the open command, the crypto server using a first table to determine if the given document should be decrypted, wherein the first table includes 
 the names of encrypted documents stored on the file server  
 for each of the names of encrypted documents in the first table, a key name associated with a decryption key value for the encrypted document  
 
 if the given document should be decrypted, the crypto server then 
 retrieving the key name associated with the name of the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table, the second table having at least one decryption key value  
 causing the given document to be decrypted.  
 
 
   
   
   
       6 . The document management system of  claim 5 , wherein 
 the first table further includes 
 the names of unencrypted documents stored on the file server  
 for each document, an associated indicator if the document is encrypted or unencrypted  
   the action of using a first table to determine if the given document should be decrypted comprises using the indicator associated with the given document to determine if the given document is encrypted.    
   
   
       7 . The document management system of  claim 5 , wherein the second table is stored on a portable data storage device.  
   
   
       8 . The document management system of  claim 7 , wherein the portable data storage device is a smart card.  
   
   
       9 . A process of decrypting documents comprising: 
 providing a file server for storing a plurality of documents having respective names    providing a client computer interconnected with the file server by a network    providing a first table having 
 the names of the plurality of documents stored on the file server  
 an associated key name for each of the plurality of documents that is encrypted  
   in response to an open command for a given document issuing from an application operative on the client computer, using the first table to determine if the document is encrypted    if the given document is encrypted, then 
 retrieving the key name associated with the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table  
 causing the given document to be decrypted.  
   
   
   
       10 . The process of decrypting documents of  claim 9 , the first table further including, for each document, an associated indicator if the document is encrypted or unencrypted.  
   
   
       11 . The process of decrypting documents of  claim 9 , wherein the second table is stored on a portable data storage device.  
   
   
       12 . The process of decrypting documents of  claim 11 , wherein the portable data storage device is a smart card.  
   
   
       13 . A document management system comprising: 
 a file server for storing a plurality of documents having respective names    a client computer interconnected with the file server by a network, the client computer comprising 
 a processor  
 memory coupled to the processor  
 a data storage device storing computer-interpretable instruction for causing the client computer to perform actions including 
 operating an application program  
 in response to an open command for a given document issuing from the application program, using a first table to determine if the given document is encrypted, wherein the first table includes 
 the names of the plurality of documents stored on the file server  
 an associated key name for each of the plurality of documents that is encrypted  
 
 if the given document is encrypted, then 
 retrieving the key name associated with the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table  
 causing the given document to be decrypted.  
 
 
   
   
   
       14 . The document management system of  claim 13 , the first table further including, for each document, an associated indicator if the document is encrypted or unencrypted.  
   
   
       15 . The document management system of  claim 13 , wherein the second table is stored on a portable data storage device.  
   
   
       16 . The document management system of  claim 15 , wherein the portable data storage device is a smart card.  
   
   
       17 . A process of decrypting documents comprising: 
 providing a file server for storing documents having respective names, each document being encrypted or unencrypted    providing a client computer interconnected with the file server by a network    providing a first table having 
 the names of at least a portion of the documents stored on the file server  
 an associated key name for each encrypted document named in the first table  
   in response to an open command for a given document issuing from an application operative on the client computer, using the first table to determine if the given document is encrypted    if the given document is encrypted, then 
 retrieving the key name associated with the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table  
 causing the given document to be decrypted.  
   
   
   
       18 . The process of decrypting documents of  claim 9 , the first table further including, for each document named in the first table, an associated indicator if the document is encrypted or unencrypted.  
   
   
       19 . The process of decrypting documents of  claim 9 , wherein the second table is stored on a portable data storage device.  
   
   
       20 . The process of decrypting documents of  claim 11 , wherein the portable data storage device is a smart card.  
   
   
       21 . A document management system comprising: 
 a file server for storing documents having respective names, each document being encrypted or unencrypted    a client computer interconnected with the file server by a network, the client computer comprising 
 a processor  
 memory coupled to the processor  
 a data storage device storing computer-interpretable instruction for causing the client computer to perform actions including 
 operating an application program  
 in response to an open command for a given document issuing from the application program, using a first table to determine if the given document is encrypted, wherein the first table includes 
 the names of at least a portion of the documents stored on the file server  
 an associated key name for each encrypted document named in the first table  
 
 if the given document is encrypted, then 
 retrieving the key name associated with the given document from the first table  
 retrieving a decryption key value associated with the key name from a second table  
 causing the given document to be decrypted.  
 
 
   
   
   
       22 . The document management system of  claim 21 , the first table further including, for each document named in the first table, an associated indicator if the document is encrypted or unencrypted.  
   
   
       23 . The document management system of  claim 22 , wherein the second table is stored on a portable data storage device.  
   
   
       24 . The document management system of  claim 23 , wherein the portable data storage device is a smart card.