The document describes an online document viewer security service that allows users to view documents in different formats without downloading files by accessing them through a web service, addressing issues with unauthorized copying, screenshots, and lack of authorization checks when documents are viewed locally on a user's computer. The service is platform independent and provides configurable options for printing, screenshots, data copying, and file downloading controlled by the calling user.
1. Online Document Viewer
Security Service
Architecture and Features
Ver 1.1
Packaged With Additional Features
2. Why do we need this?
What this service does ?
Additional Features ?
Who are the potential “END USERS” for this?
Interfacing with IBM Domino Server.
3. Problem Scenario
To view the document in different formats e.g. Portable Document
Format , PowerPoint Presentation , Word Processor , Spreadsheet
Documents etc., the process is as follows:
◦ File gets downloaded to the user’s machine
◦ The browser loads the associated software program to display that document.
If the associated software program is not available on the
client computer then the document is unable to open.
4. Opened document can be copied and saved locally.
Screenshots can be taken.
No Authorization checks performed on the request
initiated by the user.
Third parties can take remote access (via MSTSC)on
your system and take a screen shot of highly
secure data.
6. File on
Network
Service Port :8080
Network
Hosting
Server
Http Http
Request Response.
7. Screenshots will be disabled.
No external agent can take a screen shot of your
data even by remote access.
Service can be used on any platform and service
invokee can be located on any platform.
Copying of data is strictly prohibited.
10. Display Printer Option.
Configure Printscreen Option.
Controllability on DataCopying.
Configuring downloading of document.
11. Printer Option for Printing the document
without downloading it onto the client
computer can be configured as desired by the
calling party.
Blocking or Unblocking of PrintScreen Option
can be configured at run time as desired by
the calling party.
Blocking or Unblocking of Copying of data
can be configued at Runtime.
Downloading of document can be configured
at runtime by the client calling it.
