File management system and method

摘要

A file management system comprises an identification device, an administration device, and a supervisory device. A first computing processor of the administration device generates an encrypted file from an original file and encryption information, and stores the encryption information into the identification device. The first computing processor further defines file management information for access control of the encrypted file, and the first computing processor also stores the file management information into the identification device. A second processor of the supervisory device loads the encryption information and the file management information in the identification device to control the usage of the encrypted file. The second computing processor further records the file usage information into the identification device, and transmits to the administration device. The file management system also records the file usage information for clarifying the responsibility of disclosing the content of the encrypted files.

主权项

1. A file management system, comprising:
an identification device being an electronic device having a storage space; an administration device comprising a first computing processor; wherein the first computing processor generates an encrypted file according to an original file and an encryption information, generates a file management information according to a plurality of file access control rules, and further stores the encryption information and the file management information into the identification device; and a supervisory device comprising a second computing processor; wherein the second computing processor loads the encryption information and the file management information from the identification device, authenticates the encrypted file by the encryption information of the identification device, access the encrypted file when the encryption information is authorized, and forbids accessing the encrypted file when the encryption information is not authorized; wherein the identification device is selectively and electronically connected to the administration device or the supervisory device; wherein the file access control rule comprises:
automatically adding a text or image watermark when printing the encrypted file;automatically adding a text or image watermark when using the encrypted file;forbidding printing the encrypted file;forbidding capturing or picturing a screen while the encrypted file is shown;forbidding copying or modifying the encrypted file; andforbidding transmitting the encrypted file through the Internet, wherein the first computing processor of the administration device comprises: an encryption module generating the encrypted file according to the original file and the encryption information, and storing the encryption information into the identification device; and
a file permission module setting the file access control rules, generating the file management information according to the file access control rules, and storing the file management information into the identification device, and wherein the second computing processor of the supervisory device further comprises: a device authentication module driving the identification device to load the encryption information and the file management information from the identification device; a decryption module authenticating the encrypted file via the encryption information of the identification device, and forbidding accessing the encrypted file when the encryption information of the identification device is not authorized; and
a file usage control module accessing the encrypted file according to the file access control rules of the file management information stored in the identification device when the encryption information of the identification device is authorized.