Patent ID: 8560846

Claim:
A method for document security, comprising: recognizing an attempt to access a distribution version of a composite document with embedded access control, the distribution version being implemented as a flat file database located in a permanent storage and including a set of individually accessible content parts, a digital signature key for each content part, and a key-map file, the key-map file being associated with a particular user; in response to recognizing the attempt, creating an in-memory version of the composite document for the particular user based upon his access rights, the in-memory version including a new database stored in a transient memory; decrypting the key-map file located in the distribution version of the composite document with embedded access control; using information in the key-map file, identifying a content part of the composite document to which the particular user has access; decrypting the content part, wherein the key-map file provides a key to access the content part; loading the content part in decrypted form into the in-memory version of the composite document, wherein the content part in decrypted form is maintained exclusively in the transient memory; and erasing the content part in decrypted form from the transient memory upon termination of a program to access the decrypted content part from the in-memory version of the composite document.