1. Review of Microsoft Information Rights Management v1.0 J. Garden, “ A Report for the E-government Unit of the State Services Commission ”, 87 pp., December 2003 Presented by: Hong Zhou

2. Summary Presented Information Rights Management (IRM) infrastructure (6 pp.) Demonstrated how to operate the IRM process based on three scenarios (12 pp.) Illustrated how the IRM implement public key infrastructure technologies for encrypting information resources (10 pp.) Discussed MS IRM v1.0 from three type of user ’ s perspective (5 pp.) Administrator, End-User and Organization

3. Why do we use public key infrastructure in IRM? One purpose of IRM is for multi-user to remote access the sensitive documents through network Symmetric cryptography has practical difficulties in this approach to distribute keys Different keys used for encryption and decryption Public key is distributed to sender to encode message Private key is kept by receiver to decode message. It is not be feasible to deduce the private key of a pair given the public key

4. Appreciative Comment Provides a broad view of the system Not only a description of the implementation, but also the behind scenes Structure is well-organized Clear illustrate the process of file protection lockbox Function Encrypting, Digital signing, Hashing Contains Public key of Microsoft RM Root Certification Authority Public key and Private key yourself

5. Critical Comments 1 Accessibility and Reliability RMS Certification Server or RMS Incensing Server is too busy to serve many requests One of the server is offline Key Management Efficiency Time to encrypt large file File size grows dramatically

6. Critical Comments 2 It didn ’ t write in academic style Not enough feasibility study and risk analysis

7. Question Why did the E-government Unit issue advice to agencies to not enable Digital Rights Management (DRM) features? After we know the public key, is it possible that we can fake original document?