These forums are now Read Only. If you have an Acrobat question, ask questions and get help from one of our experts.

How to secure PDF in foolrpoof way?

anandabrata
Registered: May 4 2009
Posts: 6

Hi,
 
I am distributing a pdf, I want it to be view only how do i achieve that.
 
1. I DO NOT want to permit the following - print,copy,extraction, modification, changing security settings, etc. Only view and read.
 
2. I do not want to use password protection cause it is easily unprotected by softwares like PDF Unlocker.
 
Please suggest.
 
Thanks,
Anand

My Product Information:
Acrobat Pro 8.2.6, Windows
Dimitri
Expert
Registered: Nov 1 2005
Posts: 1389
Hi anandabrata,

I have yet to learn of anything in this world that is completely "foolproof." If you want the Best in Class security solution, then you should look at DRM (Digital Rights Management) solutions- but get ready to open your wallet because it is quite expensive.

Hope this helps,

Dimitri
WindJack Solutions
www.pdfsciprting.com
www.windjack.com
anandabrata
Registered: May 4 2009
Posts: 6
Hi Dimitri,

Thanks for the input. Actually I have heard a little about DRM, but it comes with its own share of problems other than being costly. The first being it creates machine specific files for encryption which can be a pain as viruses or non functionality of other software. Besides they cannot be easily decoded.Have you used any software that you would recommend?

The simpler things is life the adobe could do with acrobat is:

1. When we certify a document it can also give options to disable printing and copying. That would give it some strong security until of course that is cracked.

2. They could help sign the document with a digital signature and disable all other features but make it just view only.

Thanks
anandabrata
Registered: May 4 2009
Posts: 6
Looked for other suitable things that I could with the pdf itself. Lets say sign the pdf with a digital signature and send the public key to the viewer. The viewer in turn could use the public key to just unlock the pdf as view only. And the creator with his private key would be the only one with edit rights.

Is that possible?
smadwin
Expert
Registered: Jul 10 2009
Posts: 40
Hi anandabrata,

Although a digital signature can provide some protection, that functionality is really there to provide document integrity, that is, the contents of the signed document cannot be altered thus ensuring that the signed contents cannot be compromised. What you are looking to do is provide document security and that can be accomplished in using one of three encryption methods. The simplest way to play with this feature is to select the File > Properties (it might be File > Document Properties in version 8, I can recall the exact string). That will bring up the Document Properties dialog, from there select the Security tab and then choose an option from the Security Method drop-down menu.The simplest method is to use Password Security with a Permissions password that allows you to lock down the document (no printing, no copying, no editing). You'll see the options when you get to the Password Security dialog.

Certificate Security is also an option which is does provide a method to lock the document to given set of recipients based on their public-key certificates. Although Password Security does allow you to provide a Document Open password as well as the Permissions password, and you can control to whom you supply that password, Certificate Security is more secure in that that odds of someone sharing their private-key to unlock the document is much less than someone just blabbing the password.

Steve

Steven Madwin
Software QA Engineer
Adobe Systems Incorporated
345 Park Avenue, MS-W15
San Jose, CA 95110-2704 USA
408.536.4343 p, 408.537.4053 f
Steven [dot] Madwin [at] adobe [dot] com

anandabrata
Registered: May 4 2009
Posts: 6
Steve,

Thanks for the inputs. Both the methods are flawed.

i. Password protection can be cracked easily.
ii. Certificate security means ask for recipient for their public key. Which is not possible. Yes vice versa was possible where in the recipient would be able to open the document only with the public key that I am providing but not make any changes or print or any other functionality,then it would make sense.

Thanks,
Anand
olivera
Registered: Jul 16 2009
Posts: 26
Take a look at PDF DRM packages.
They're designed to handle the exact situations.

This link may be a good starting point for you:
www.amazines.com/article_detail.cfm/640058?articleid=640058
Merlin
Acrobat 9ExpertTeam
Registered: Mar 1 2006
Posts: 766
anandabrata wrote:
Password protection can be cracked
Yes.

anandabrata wrote:
easily.
No.