Patent ID: 7913311

Claim:
A method for controlling access to electronic data, comprising: receiving an access request on a server machine for electronic data, wherein the request includes an identifier identifying a user and an associated client machine; establishing a secured link between the server machine and the client machine associated with the user; validating the user according to the identifier; sending an authentication message to the client machine in response to determining that the user is validated, wherein the authentication message includes a user key and a link to the requested electronic data; formatting the electronic data to include a header portion and an encrypted data portion; controlling access to the encrypted data portion of the electronic data by constructing the header portion to contain a signature signifying that the electronic data is secured, encrypted security information with access rules controlling access to the data portion, and a key that can be retrieved to decrypt the encrypted data portion, wherein the encrypted security information is encrypted with the user key; determining if user access to the electronic data is permitted by the access rules; and decrypting the encrypted security information with the user key in response to determining that the user is permitted to access the electronic data.