Abstract: A document comprises a body having at least one defined portion therein, each defined portion being represented in the body of the document as a body object, each of the document and each body object therein being rights-managed as protected content based on license terms specified in a digital license. A recipient of the document can render the protected content of each of the document and each body object therein by acquiring the digital license and satisfying the license terms set forth in the digital license.

Abstract: An online service includes managed databases that include one or more tenants (e.g. customers, users). A multi-tenant database may be split between two or more databases while the database being split continues processing requests. For example, web servers continue to request operations on the database while content is being moved. After moving the content, tenant traffic is automatically redirected to the database that contains the tenant's content.

Abstract: A system for online collaboration includes an application for online collaboration, the application including an application feature set, a control module programmed to receive a request from a user to access a tenancy associated with the application on the system, the tenancy including a site provisioned for a tenant, the request including a tenancy identifier identifying the tenancy and a user identifier identifying the user, the control module using the tenancy identifier to identify a tenancy feature set associated with the tenancy, and the control module using the user identifier to identify a user feature set associated with the user, and a web-page render module programmed to generate a collaboration web site including a site feature set including the tenancy feature set and the user feature set, the web site being sent to the user for rendering on the user's computing device.

Abstract: A document comprises a body having at least one defined portion therein, each defined portion being represented in the body of the document as a body object, each of the document and each body object therein being rights-managed as protected content based on license terms specified in a digital license. A recipient of the document can render the protected content of each of the document and each body object therein by acquiring the digital license and satisfying the license terms set forth in the digital license.

Abstract: Methods, systems, and computer program products digitally sign an electronic entity, such as an electronic document, with a user-entered signature image. The method involves rendering the document and rendering a sign dialog. Rendering the sign dialog includes prompting the signer to write a signature to sign the document. The method also involves receiving and inking the signature from the signer, creating a digital representation incorporating an image of the signature; creating a unique value of the image of the signature and of the document, and saving the unique value in association with the document thereby digitally signing the document. The unique value saved in association with the document is verifiable for authenticity by users of the document. Additionally, the method may also involve automatically selecting a signing certificate appropriate for the signer based on selection criteria.

Abstract: An email comprises a body having at least one related and previously sent email, where each previously sent email is represented in the body of the email as a body object. Each of the email and each body object therein is rights-managed as protected content, whereby a recipient of the email can render the protected content of each of the email and each body object therein with a corresponding license if the recipient satisfies terms set forth in the license.

Abstract: A rights-managed email is provided for sending protected content from a sender to a recipient, whereby the recipient can render the protected content with a corresponding license if the recipient satisfies terms set forth in the license. In the email, a main information portion has a message that the email is rights management protected, and an attachment portion has the protected content. The recipient if enabled can render the protected content in the attachment portion. If not enabled, the recipient can only review the main information portion having the message. The enabled recipient recognizes that the email has the protected content in the attachment portion thereof, discounts the main information portion of the email, and examines the attachment portion of the email and proceeds based thereon to render the protected content in the attachment portion.

Abstract: A method is disclosed for rendering content encrypted according to a cryptographic key, where the content has corresponding rights data including a decryption key (KD) for decrypting the encrypted content, and where (KD) in the rights data is encrypted according to a public key of a rights management (RM) server (PU-RM) to result in (PU-RM(KD)). The RM server normally delivers (KD) within a license, but upon being decommissioned can no longer issue such license. In the method, a notification is received that the RM server has been decommissioned, and thereafter an attempt is made to render a piece of content. Such content is determined to be protected to the decommissioned RM server, and a request is sent to the decommissioned RM server for the content key (KD) for the content rather than any license. Thereafter (KD) is received from the decommissioned RM server.

Abstract: A rights-managed document has protected content from an author thereof, whereby a recipient of the document can render the protected content with a corresponding license if the recipient satisfies terms set forth in the license. In the document, a storage portion has a message that the document is rights management protected, and a custom data portion has a section including the protected content. The recipient if enabled can render the protected content in the custom data portion and if not enabled can only review the storage portion having the message. An enabled recipient handles the received rights-managed document by recognizing that the document has the protected content in the custom data portion thereof, and discounting the storage portion of the document. Thus, the recipient examines the custom data portion of the document and proceeds based thereon to render the protected content in the custom data portion.

Abstract: A method is employed to propagate rights management (RM) protection to an email and to an attachment thereof comprising an RM-protectable document. The email with the RM-protectable attachment is authored, and a content key (KD) and a bind ID are generated. RM protection is first applied to the RM-protectable attachment of the email based on the generated (KD) and the generated bind ID, and the RM-protected attachment is attached to the email. RM protection is then applied to the email with the attached RM-protected attachment based on the generated (KD) and the generated bind ID. The RM-protected email and the RM-protected attachment thereof thus share the generated (KD) and the generated bind ID such that a license obtained for the RM-protected email and having therein the generated bind ID and the generated (KD) can be applied to render the RM-protected email and also the RM-protected attachment thereof.

Abstract: Content is encrypted according to a content key (CK) to result in (CK(content)) and the content key (CK) is protected according to a public key for a license server (PU-RM). Rights data is retrieved from a rights template to be associated with the content, and rules for modifying the retrieved rights data are also retrieved from the retrieved rights template. The retrieved rights data from the rights template is modified according to the rules, and the rights data and the protected content key (CK)) are submitted as a rights label to the license server for signing thereby. The license server thus validates the rights label and, if valid, creates a digital signature based on a private key (PR-RM) corresponding to (PU-RM) and based at least in part on the rights data to result in a signed rights label (SRL), and returns the SRL.

Abstract: A document store delivers a document requested therefrom from a folder having rights information associated therewith. In response to a request for a copy of the document, rights data for the copy of the document is defined based on the rights information of the folder, and the copy of the document and the defined rights data thereof are published to result in a package with the rights data and the copy of the document encrypted according to a content key (KD) to result in (KD(copy)). The formed package is then delivered to the requester. The rights data can be discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on such rights data. The license includes (KD) therein in a form available to the requester to decrypt (KD(copy)) if the requester satisfies the rights data.

Abstract: A method is disclosed for a recipient to receive rights management (RM) protected content. The protected content is encrypted and decryptable according to a content key (KD), where (KD) is found in a corresponding license. In the method, the protected content is received while connectively coupled to a network through which the protected content may be obtained, and it is recognized that the received protected content is in fact protected content. In response to receiving the protected content and recognizing same, the license for the protected content is obtained from an RM server while still connectively coupled to the network and in an automatic manner. Thus, the license is available to the recipient even when such recipient is not connectively coupled to the RM server by way of the network at a later time. In one particular embodiment of the present invention, the protected content is received within an email.

Abstract: Systems and methods for secure signatures are described. In one aspect, a secure signature is generated. The secure signature strongly binds an image of an electronic signature (an “electronic signature”) to content in either electronic or printed form. Responsive to receiving a request from a user, the systems and methods determine whether an electronic signature associated with a printed page represents a secure signature. If so, the systems and methods determine and notify the user of whether the secure signature was cryptographically bound by a signer of the electronic signature to the content being signed.

Abstract: A method and computer-readable medium are provided for jointly managing digital assets and non-digital assets. According to the method, a database is maintained that includes one or more digital assets and records corresponding to one or more non-digital assets. A request may be received to perform an action on an asset identified in the database. In response to the request, a determination is made as to whether the request is to perform an action on a digital or non-digital asset. If the request is to perform an action on a digital asset, a first workflow is performed for completing the action on the digital asset. If the request is to perform an action on a non-digital asset, a second workflow is performed for completing the requested action on the non-digital asset.

Abstract: A method and computer-readable medium are provided for storing files in an official file repository. According to the method, a generic interface is exposed that includes a first method for requesting that a file be stored in a file vault. A record series is maintained that identifies one or more document types that may be stored in the file vault along with a location for each file type within the file vault where files of the type should be stored. A call may be made to the first method including the file to be stored in the file vault. In response to the call, a location for storing the file in the file vault may be identified based on the contents of the record series. Once the location has been identified, the file is stored in the identified location if the file type is in the record series. If the file type is not in the record series or the necessary property values are not received with the call, the file is placed in a holding zone portion of the file vault.

Abstract: A method and computer-readable medium are provided for formula-based document retention. According to the method, a retention formula and a retention action are defined for one or more items. The retention formula is utilized to calculate a retention date for each item. The retention action specifies the action that should be taken on or after the retention date. The retention date for one or more items is initially calculated using the retention formula for the items. A retention service may be periodically executed to identify any items having a retention date earlier than the current date. If any items are identified that have a retention date earlier than the current date, the retention service recalculates the retention date for these items utilizing the corresponding retention formula. If the recalculated retention date for any item is still prior to the current date, the retention action for the item is executed.

Abstract: Methods, systems, and computer program products digitally sign an electronic entity, such as an electronic document, with a user-entered signature image. The method involves rendering the document and rendering a sign dialog. Rendering the sign dialog includes prompting the signer to write a signature to sign the document. The method also involves receiving and inking the signature from the signer, creating a digital representation incorporating an image of the signature; creating a unique value of the image of the signature and of the document, and saving the unique value in association with the document thereby digitally signing the document. The unique value saved in association with the document is verifiable for authenticity by users of the document. Additionally, the method may also involve automatically selecting a signing certificate appropriate for the signer based on selection criteria.

Abstract: A method and computer-readable medium are provided for accessing policy information associated with e-mail folders. According to the method, a user interface is provided that allows a user to navigate between one or more folders for storing data, such as e-mail folders. A selection of one of the e-mail folders may be received through the user interface. In response to the selection, a determination is made as to whether the selected folder is an organizational folder. If the selected folder is an organizational folder, an organizational policy statement associated with the selected folder is displayed within the user interface. The organizational policy statement may comprise data identifying a retention period for e-mail messages stored in the e-mail folder, data identifying the e-mail folder, data identifying an intended use for the e-mail folder, and a selectable link that may be utilized to access additional information regarding the organizational policy statement.