PDFZone Ziff-Davis Enterprise
Authoring | Utilities | Content Management | Document Management | Mobile | DRM | Other Formats | Tips
Home arrow Document Management arrow The Three Types of PDF Security
The Three Types of PDF Security
By John Bringardner

Rate This Article:
Add This Article To:
PDF security doesn't start and stop on the desktop. Several server and hosted solutions from Adobe and third-party vendors can help you protect your documents.

One of the major benefits of publishing in PDF format is the ability to maintain security and propriety over a document's content. But implementing security – especially the right type of security–can be a complex process. Not only does Acrobat and Adobe's LiveCycle suite offer security features, but there are also several third-party products that can help you keep your PDF documents secure.

Acrobat and LiveCycle

ADVERTISEMENT

When authoring a PDF document in Adobe Acrobat 7, basic security measures allow you a wide range of options. The major Adobe security breaches of years past have largely been solved in Adobe Acrobat 7 and Reader 7, though some new features introduced in this series are not backwards compatible with older versions.

Acrobat 7 affords the user several security options. Policies can be set not just for individuals, but for an entire company or user group to standardize document security protocols. Acrobat 7 allows the user to:

  • Limit printing
  • Limit selection and copying of text
  • Prevent users from signing a document
  • Prevent users from filling in forms electronically
  • Prohibit changes to the document
  • Prohibit document splicing and merging
  • Digitally sign a document
  • Implement real-time authentication when the document is opened
  • Prevent editing of only certain sections of a document.
  • And more

There are four basic settings when choosing security in an Adobe document (File > Document Properties > Security).

Use a batch tool to change PDF security settings. Click here to read more.

No security leaves the document unmanaged. This method is appropriate for general release documents and non-sensitive information.

Password security requires the reader to supply the appropriate password when opening a document.

Certificate security allows access by examining the certificates they hold. User certificates are assigned to a list that identifies who is authorized to view the document.

Policy Server is Adobe's server-based security that allows you to assign different permissions for different users or groups that can access the document.

PDF Shows Up on the Homeland Security Map. Click here to read more.

Adobe LiveCycle Policy Server

With Adobe LiveCycle Policy Server (ALPS), larger organizations can control access for large sets of users. Authors can create dynamic access permissions and audit a document's use throughout its lifecycle, meaning you can control and track how your intended recipients are using your documents.

LiveCycle applies security policies to a document. A security policy is an adjustable profile that defines security settings (such as Acrobat's, mentioned above). Security policies are reusable, and they remain unaltered no matter how many times the document is emailed or accessed.

Security policies can connect directly to ALPS, which will act as an authenticator for the policy. Recipients of the PDF documents must have an account on your ALPS in order to open and use the PDF documents that the server manages. The security policies for those server-managed documents can be changed dynamically. In a nutshell, this means you can use ALPS to change the security policies on remote documents that have already been published and may reside, quite literally, anywhere.

Adobe LiveCycle Policy Server can enable you to:

  • Manage the security access of former employees, or employees who have changed roles in your organization
  • Track a recipient's use of a document
  • Impose expiration dates for documents
  • And more

To learn more about LiveCycle, check out the Adobe Web site.

Next Page: Third Party PDF Security Solutions

Third Party Solutions

There are several popular third-party products that can help you keep track of a document, even after sending it outside of your organization. The ability to do this is called digital rights management, or in a B2B context, enterprise rights management. ERM software lets you control who views your PDF documents, whether they can be forwarded to unauthorized recipients, modified, copied or saved, and so on.

Authentica Secure Documents for Adobe PDF, from Authentica Inc., gives you the ability to prohibit printing of a document or portions of a document. It also lets you disable the recipient's ability to copy and paste, perform a screen capture, or watermark pages if printing privileges are granted. You can "expire" a document at any time, even after the document has been sent. This allows you to revoke document access permissions wherever the document is located, including sender or recipient desktops, Web servers or backup media.

This last bit is conducted via Authentica's integration with existing content management workflows. Using Authentica Secure Gateway and Authentica APIs, you can secure PDFs in products including Documentum eRoom, Filenet Content Manager, Hummingbird DM, Lotus Notes Domino, and Microsoft SharePoint.

Lizard Safeguard is another policy tool that provides encryption and DRM controls, controls who can view PDFs and for how long, print (including the number of times), copy and save documents. Lizard's is a fully hosted system, offering real-time web based licensing control and transparent customer authorization. This allows you to instantly revoke access to a document and control how long the recipient can view a document offline.

Vulnerabilities in Adobe Reader? Click here to read more.

Lizard Safeguard also claims it has the unique ability to assign PDF documents to publications for simpler document management. Customers who subscribe to a publication can instantly view any document assigned to it.

For an extra layer of encryption without the need to involve servers or a hosted system, PDF Password-X by Acrobotics encodes PDF files with a complex, 32-element password. You send your intended recipient the Password-X program along with the PDF itself. The software then automatically decodes the password.

For use within a network, PDF Password-X Network renders files useless once they leave your intranet. It also features a so-called "Chinese Wall" that can restrict file access to selected intranet users, as well as the amount of time they can view the files.


Discuss The Three Types of PDF Security
 
Useful article. But other softwares provide pdf security with DRM or ERM : I know...
>>> Post your comment now!
 

 
 
>>> More Document Management Articles          >>> More By John Bringardner
 



FREE ZIFF DAVIS ENTERPRISE ESEMINARS AT ESEMINARSLIVE.COM
  • Dec 5, 2 p.m. ET
    Case Studies in MSP Profitability: 10 Processes to Automate to Achieve 2008 Goals
    with Michael Krieger. Sponsored by Autotask
  • Dec 6, 12:30 p.m. ET
    The State of the Great Windows Vista Migration
    with Aaron Goldberg. Sponsored by Dell & Microsoft
  • Dec 6, 2 p.m. ET
    Three Best Practices for Securing Microsoft Exchange
    with Michael Krieger. Sponsored by Entrust
  • Dec 6, 3 p.m. ET
    Simplify Your World, part 2: A Virtual Desktops Case Study
    with Joel Shore. Sponsored by EqualLogic
  • 12-19 VTS LOGO for BotMod
    Join us on Dec. 19 for Discovering Value in Stored Data & Reducing Business Risk. Join this interactive day-long event to learn how your enterprise can cost-effectively manage stored data while keeping it secure, compliant and accessible. Disorganized storage can prevent your enterprise from extracting the maximum value from information assets. Learn how to organize enterprise data so vital information assets can help your business thrive. Explore policies, strategies and tactics from creation through deletion. Attend live or on-demand with complimentary registration!
    FEATURED CONTENT

    Sponsored by Ziff Davis Enterprise Group


    DOWNLOADABLE ROI CALCULATORS & TOOLS FROM BASELINE
      Calculate Cost and ROI of Spam, VOIP, RFID, Sarbanes-Oxley and more...


    Featured Calculators:

     



    See More Tools!
    By Category| Planners |Calculators | Quizzes

     

    Special Report


    PDFzone Special Report: Making the Perfect PDF
    The Perfect PDF
    PDFzone shows you how to shine and polish your PDF by adding the reader-friendly touches your audience desires.

    Special Report


    PDFzone Special Report: Microsoft's PDF Play
    Microsoft's PDF Play
    Microsoft planned to offer a "Save to PDF" function in Office 2007, but the threat of legal action from Adobe may have them reconsidering.

    Special Report


    PDF conversion
    PDF Conversion Central
    Convert anything and everything to PDf and back again. Word docs, RSS, AutoCAD and more.
    ADVERTISEMENT