RE: Secure Documentation Management (Please Suggest SOlutions)

Have a look at Authentica (www.authentica.com) Excellent solution, does all that and lots more. Cheers,
Arjen de Landgraaf
New Zealand
www.e-secure-it.us

-----Original Message-----
From: Jack Hill [mailto:solvedconstant@yahoo.com] Sent: Thursday, 23 January 2003 5:55 p.m. To: security-basics@securityfocus.com
Subject: Secure Documentation Management (Please Suggest SOlutions)

Hi All,

One of my client ( a designing firm) has requirements to securely manage their design blue prints.

Their main concerns focus on making sure that their documents are stored securely and in addition have the following requirements.

1:- For example if a person is sending a document (attached ) with mail to another person,the other person should only be able view the document.In addition he should not be able to mail the same document to others.

2:-The same applies for taking printouts of documents too...that is the document should have read permission but no print rights.

3:-Extensive logging should be configured for all document access such as whether the document was copied onto a floppy,whether the document was printed and if so by whom .

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

I was thinking in lines of a dedicated server which will act as document repository , documents will be encrypted and signed by it's owner using PGP,and the authorized users can download it using SCP or encrypted mail.But I am not quite sure of assigning the kind of permissions which he require and configuring of the extensive logging which he requires.

Request you guys to give me your valuable suggestions.

Thanks,
Solved COnstant