Abstract: The present disclosure includes systems and techniques relating to document access auditing. According to an aspect, the invention involves receiving a request relating to an electronic document associated with a document tracking system; retrieving actions-taken information associated with the electronic document and maintained by the document tracking system; combining and signing the electronic document and the actions-taken information to form a signed document that includes the actions-taken information; and providing the signed document to enable access to the actions-taken information independent of the document tracking system.

Abstract: Systems and techniques to provide distributed document version control. In general, in one implementation, the technique includes: receiving information, in a distributed document control system, specifying a locally saved copy of a first electronic document; determining, in response to the received information, whether the first electronic document should supersede a second electronic document in the distributed document control system; and storing, based on an outcome of the determining, information in the distributed document control system that links the first electronic document with the second electronic document in a superior-subordinate relationship such that when an action is requested with respect to the second, subordinate electronic document, the distributed document control system forces an action to be taken with respect to the first, superior electronic document. Various implementations include those in computer program products and client-server systems.

Abstract: Various embodiments described herein provide systems, methods, software, and data structures to allow or prevent viewing of users and groups of users by other users and groups of users. Some such embodiments include retrieving a listing of members from a member database, defining a first subset of one or more members selected from the retrieved member listing, and designating the first member subset as visible to a second subset of one or more members when a member of the second member subset retrieves a member listing.

Abstract: Various embodiments described herein provide systems, methods, software, and data structures to allow or prevent viewing of users and groups of users by other users and groups of users. Some such embodiments include retrieving a listing of members from a member database, defining a first subset of one or more members selected from the retrieved member listing, and designating the first member subset as visible to a second subset of one or more members when a member of the second member subset retrieves a member listing.

Abstract: Systems and techniques to provide transparent authentication integration. In general, in one implementation, the technique includes: receiving a request from a client to take an action with respect to an electronic document, in response to the request, obtaining an authentication process, and sending the authentication process to the client for use in identifying a current user and controlling the action with respect to the electronic document based on the current user and document-permissions information associated with the electronic document. Obtaining the authentication process can involve requesting and receiving the authentication process from a second server. The authentication process can use an existing interface provided by the client to communicate authentication information to the server.

Abstract: Systems and techniques to provide distributed document version control. In general, in one implementation, the technique includes: receiving a request to take an action with respect to a distributed electronic document, identifying, in response to the request, information associated with the distributed electronic document, the associated information indicating a second electronic document different from the distributed electronic document, and imparting information concerning the second electronic document to force the action to be taken with respect to the second electronic document. Receiving the request can occur at a server, and the request can be from a client to take the action with respect to the distributed electronic document, retained locally at the client. The associated information can be retained at the server, and imparting the second document information can involve relating the second document information (e.g., the second document or a link to it) from the server to the client.

Abstract: In one embodiment, a data file and policy are generated. The policy is then associated with the data file, wherein the policy includes one or more unassigned accounts and an access control definition that defines an access permission associated with each of the one or more unassigned accounts.

Abstract: The present disclosure includes systems and techniques relating to document access auditing. According to an aspect, the invention involves receiving a request relating to an electronic document associated with a document tracking system; retrieving actions-taken information associated with the electronic document and maintained by the document tracking system; combining and signing the electronic document and the actions-taken information to form a signed document that includes the actions-taken information; and providing the signed document to enable access to the actions-taken information independent of the document tracking system.

Abstract: Systems and techniques to provide a document control system. In general, in one implementation, the technique includes: receiving, at a permissions-broker server, a request from a client to take an action with respect to an electronic document, identifying, at the permissions-broker server and in response to the request, first document-permissions information associated with the electronic document, the first document-permissions information being in a first permissions-definition format, translating, at the permissions-broker server, the identified first document-permissions information into second document-permissions information in a second permissions-definition format, and sending the second document-permissions information to the client to govern the action with respect to the electronic document at the client.

Abstract: Systems and techniques to provide distributed document version control. In general, in one implementation, the technique includes: receiving information, in a distributed document control system, specifying a locally saved copy of a first electronic document; determining, in response to the received information, whether the first electronic document should supersede a second electronic document in the distributed document control system; and storing, based on an outcome of the determining, information in the distributed document control system that links the first electronic document with the second electronic document in a superior-subordinate relationship such that when an action is requested with respect to the second, subordinate electronic document, the distributed document control system forces an action to be taken with respect to the first, superior electronic document. Various implementations include those in computer program products and client-server systems.

Abstract: Systems and techniques to provide transparent authentication integration. In general, in one implementation, the technique includes: receiving a request from a client to take an action with respect to an electronic document, in response to the request, obtaining an authentication process, and sending the authentication process to the client for use in identifying a current user and controlling the action with respect to the electronic document based on the current user and document-permissions information associated with the electronic document. Obtaining the authentication process can involve requesting and receiving the authentication process from a second server. The authentication process can use an existing interface provided by the client to communicate authentication information to the server.

Abstract: Systems and techniques to provide offline access in a document control system. In general, in one implementation, the technique includes: receiving a request from a client, and pre-authorizing the client, in response to the request, to allow actions by a user as a member of a group of users by sending to the client offline access information including a first key associated with the group, the first key being useable at the client to access an electronic document by decrypting a second key in the electronic document. Receiving a request can involve receiving a request from the client to take an action with respect to a second document. The technique can also include verifying the user at the client as an authenticated user, and the offline access information can include user-specific keys, group-specific keys, a policy, and a document revocation list.

Abstract: The present disclosure includes systems and techniques relating to document access auditing. According to an aspect, the invention involves receiving a request relating to an electronic document associated with a document tracking system; retrieving actions-taken information associated with the electronic document and maintained by the document tracking system; combining and signing the electronic document and the actions-taken information to form a signed document that includes the actions-taken information; and providing the signed document to enable access to the actions-taken information independent of the document tracking system.

Abstract: Various embodiments described herein provide systems, methods, software, and data structures to allow or prevent viewing of users and groups of users by other users and groups of users. Some such embodiments include retrieving a listing of members from a member database, defining a first subset of one or more members selected from the retrieved member listing, and designating the first member subset as visible to a second subset of one or more members when a member of the second member subset retrieves a member listing.

Abstract: Systems and techniques to provide transparent authentication integration. In general, in one implementation, the technique includes: receiving a request from a client to take an action with respect to an electronic document, in response to the request, obtaining an authentication process, and sending the authentication process to the client for use in identifying a current user and controlling the action with respect to the electronic document based on the current user and document-permissions information associated with the electronic document. Obtaining the authentication process can involve requesting and receiving the authentication process from a second server. The authentication process can use an existing interface provided by the client to communicate authentication information to the server.

Abstract: Systems and techniques to provide offline access in a document control system. In general, in one implementation, the technique includes: receiving a request from a client, and pre-authorizing the client, in response to the request, to allow actions by a user as a member of a group of users by sending to the client offline access information including a first key associated with the group, the first key being useable at the client to access an electronic document by decrypting a second key in the electronic document. Receiving a request can involve receiving a request from the client to take an action with respect to a second document. The technique can also include verifying the user at the client as an authenticated user, and the offline access information can include user-specific keys, group-specific keys, a policy, and a document revocation list.

Abstract: Systems and techniques to provide offline access in a document control system. In general, in one implementation, the technique includes: receiving a request from a client, and pre-authorizing the client, in response to the request, to allow actions by a user as a member of a group of users by sending to the client offline access information including a first key associated with the group, the first key being useable at the client to access an electronic document by decrypting a second key in the electronic document. Receiving a request can involve receiving a request from the client to take an action with respect to a second document. The technique can also include verifying the user at the client as an authenticated user, and the offline access information can include user-specific keys, group-specific keys, a policy, and a document revocation list.

Abstract: Methods and apparatus, including computer program products, implement techniques for repurposing digital information. One or more repurposing constraints are associated with information in an electronic document. A digital signature is associated with the repurposable information and the repurposing constraints. The repurposable information can be repurposed and represented as signed information subject to the repurposing constraints.

Abstract: The present disclosure includes systems and techniques relating to document access auditing. According to an aspect, the invention involves receiving a request relating to an electronic document associated with a document tracking system; retrieving actions-taken information associated with the electronic document and maintained by the document tracking system; combining and signing the electronic document and the actions-taken information to form a signed document that includes the actions-taken information; and providing the signed document to enable access to the actions-taken information independent of the document tracking system.

Abstract: In one embodiment, a data file and policy are generated. The policy is then associated with the data file, wherein the policy includes one or more unassigned accounts and an access control definition that defines an access permission associated with each of the one or more unassigned accounts.