1. A method for managing access to an encrypted file, comprising the steps of:
(a) in response to a request to encrypt a file that includes information intended to be protected against unauthorized access, encrypting the file with a file encryption key, producing an encrypted file;
(b) providing the file encryption key and an indication of one or more entities having a right to access the file encryption key to rights management services that are included in an operating system;
(c) using the rights management services for cryptographically securing the file encryption key, producing a secured file encryption key;
(d) including the secured file encryption key in a file structure of the encrypted file;
(e) responding to an entity trying to access the information in the encrypted file, by determining if the entity is included in the one or more entities that have a right to access the file encryption key, and if so:
(i) extracting the file encryption key from the secured file encryption key; and
(ii) providing the file encryption key to enable the entity trying to access the information to do so; and
(f) if the entity is not authorized to access the file encryption key, denying the entity access to the information by not providing the file encryption key to enable the entity to access the information.
2. The method of claim 1, wherein an encrypting file system carries out the steps of generating the file encryption key and encrypting the file with the file encryption key.
3 . The method of claim 1, wherein the step of providing the rights management services with the indication of the one or more entities having the right to access the file encryption key comprises the step of providing that indication to the rights management services as part of a file security descriptor.
4. The method of claim 1, wherein the step of providing the indication of the one or more entities having the right to access the file encryption key comprises the step of providing the rights management services with an access control list that identifies each entity having the right to access the file encryption key.
5. The method of claim 1, wherein the step of including the secured file encryption key in a file structure of the encrypted file comprises the step of including the secured file encryption key as part of metadata information for the encrypted file.
6. The method of claim 1, wherein an application provides the request to encrypt the information.
7. The method of claim 1, further comprising the step of employing a protected key service for providing the file encryption key to the rights management services to produce the secured file encryption key.
8. The method of claim 1, further comprising the step of caching the file encryption key for the entity attempting to access the information, after the entity has been determined to be allowed access to the information by the rights management services, so that the entity can subsequently access the information in the encrypted file.
9. The method of claim 1, wherein the step of responding to the entity trying to access the information comprises the step of intercepting an open file request by the entity, to open the encrypted file.
10. The method of claim 1, further comprising the steps of:
(a) writing the file encryption key into a memory buffer; and
(b) protecting the memory buffer with the rights management services using a file security descriptor.
11. The method of claim 1, wherein the secured file encryption key is included in the encrypted file as an extended attribute.
12. The method of claim 1, wherein the secured file encryption key is included in the encrypted file as a special data stream provided by the rights management services.
13. A system for managing access to an encrypted file, comprising:
(a) a memory in which are stored machine executable instructions; and
(b) a processor that is coupled to the memory, the processor executing the machine instructions to carry out a plurality of functions, including:
(i) encrypting a file that includes information intended to be protected against unauthorized access, using a file encryption key to produce an encrypted file;
(ii) implementing rights managements services included in an operating system defined by the machine executable instructions;
(iii) providing the file encryption key and an indication of one or more entities having a right to access the file encryption key, to the rights management services;
(iv) using the rights management services for cryptographically securing the file encryption key, producing a secured file encryption key;
(v) including the secured file encryption key in a file structure of the encrypted file;
(vi) responding to an entity trying to access the information in the encrypted file, by determining if the entity is included in the one or more entities that have a right to access the file encryption key, and if so:
(1) extracting the file encryption key from the secured file encryption key; and
(2) providing the file encryption key to enable the entity trying to access the information in the encrypted file, to do so; and
(vii) if the entity is not authorized to access the file encryption key, denying the entity access to the information by not providing the file encryption key to the entity.
14. The system of claim 13, wherein execution of the machine executable instructions further causes the processor to generate the file encryption key.
15. The system of claim 13, wherein the machine executable instructions cause the processor to employ a file security descriptor for determining the one or more entities having the right to access the file encryption key.
16. The system of claim 13, wherein the machine executable instructions cause the processor to employ an access control list for determining the one or more entities having the right to access the file encryption key.
17. The system of claim 13, wherein the machine executable instructions cause the processor to include the secured file encryption key as part of metadata information included in the encrypted file.
18. The system of claim 13, wherein a portion of the machine executable instructions executed by the processor comprise an application program that requests the information be protected in the encrypted file.
19. The system of claim 13, wherein the machine executable instructions cause the processor to implement a protected key service for providing the file encryption key.
20. The system of claim 13, wherein the machine executable instructions cause the processor to cache the file encryption key in a protected portion of the memory, for use by the entity attempting to access the information, after determining that the entity is allowed access to the file encryption key, so that the entity can subsequently access the file encryption key that was cached.
21. The system of claim 13, wherein the machine executable instructions cause the processor to intercept an open file request by the entity attempting to access the file encryption key.
22. The system of claim 13, wherein the machine executable instructions, when executed by the processor, further carry out the functions of:
(a) writing the file encryption key into a buffer of the memory after it has been generated for use in encrypting the information; and
(b) protecting the buffer using a file security descriptor.
23. The system of claim 13, wherein the machine executable instructions cause the process to include the secured file encryption key in the encrypted file as an extended attribute.
24. The system of claim 13, wherein the machine executable instructions cause the process to include the secured file encryption key in the encrypted file as a special data stream provided by the rights management services.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A thermoplastic elastomer resin composition comprising 100 parts by weight of a base resin containing from 60 to 80 wt % of an acid-modified styrene-based elastomer and from 40 to 20 wt % of a syndiotactic polystyrene, from 0 to 20 parts by weight of a hydrogenated dicyclopentadiene, from 0.5 to 1.5 parts by weight of a phenolic antioxidant and from 1.0 to 3.0 parts by weight of a phosphorous acid ester-based antioxidant.
2. A connector, wherein at least a part of the members are formed of the thermoplastic elastomer resin composition according to claim 1.
3. A connector comprising a terminal fitting having an electric contact part put into connection to a terminal fitting of the other-party connector and an electric wire connection part continuing from the electric contact part and being connected to the end of an electric wire, at least a part of the electric contact part being disposed in a first mold resin, the portion between the electric contact part and the first mold resin being sealed with an annular seal member, the electric wire connection part being embedded in the first mold resin, and the electric wire and the electric wire lead-out port of the first mold resin being sealed with a second mold resin, wherein the second mold resin is formed of the thermoplastic elastomer resin composition according to claim 1.
4. The connector as claimed in claim 3, wherein said first mold resin is formed of a resin composition containing at least one resin selected from the group consisting of a polystyrene-based resin, a polyamide-based resin, a polyester-based resin, a modified polyphenylene ether and a polyphenylene sulfide.