# Flow of Security Operations

This topic illustrates a sample operational flow for protecting documents using the security features and managing the protected documents.

## Password-protected security

If you want, for instance, a particular document to be published only to members in your group, you would set a password to secure the file, and then notify that password to the members.
As an example, this section describes what can be done by each of the following user types: user who manages protected documents, users who use the documents, and other users.

- User who manages protected documents
  A user who configures security settings.
  - Configure new settings
    For individual documents, this user sets a password to open the document, a full access password, and restriction of operations for the document.
    He/she notifies the "password to open the document" to users the document will be published to.
  - Change settings
    He/she can configure settings so that users can view protected documents in thumbnail with the "password to open the document," or change the security settings with the full access password.
  - Manage passwords
    He/she can configure settings so that the "password to open the document" entered correctly will be stored temporarily. This eliminates the need for entering the password for a certain period of time.
- Users who use protected documents
  Users who are notified of the "password to open the document" from the administrator. Some of the operations are restricted.
  - Work with documents
    These users enter the "password to open the document" to open the protected document. They can utilize protected documents in the range of operations allowed.
    They cannot change the security settings or perform forbidden operations.
  - Display thumbnail view
    These users can display a thumbnail view of the protected document by entering the "password to open the document".
- Other users
  These users do not know the "password to open the document" and therefore cannot open the protected document or display a thumbnail view of it.
  They can check the security settings in the document properties.

## Electronic Signature-protected security

Mechanism of the Electronic Signature-protected security
The Electronic Signatures for configuring the security can be prepared using the Electronic Signature Case Tool.
The user who configures the security specifies an Electronic Signature stored in an Electronic Signature Case as the Electronic Signature to open a document or as the Electronic Signature that grants full access. Only the users who have the specified Electronic Signature can open the protected document or manipulate it in full access mode.
Electronic Signatures of other users can be added as "Trusted Electronic Signatures" using their Electronic Signature "Proof Information".
Operational flow of the Electronic Signature-protected security
The operations for the user managing the protected document, users who can use that document, and other users are described in the following example.

- User who manages protected documents
  A user who configures security settings. He/she has an Electronic Signature (seal) that is allowed to open the protected document and one that is assigned full access permission.
  - Configure new settings
    This user obtains information on the seals of users the document will be published to, and register them as trusted seals.
    He/she uses own Electronic Signature to configure securities for the document.
    He/she distributes the secured document to users having a trusted seal.
  - Change settings
    This user registers the seal that is allowed to access the protected document, as "my seal." He/she enters the password to open the Electronic Signature case.
    He/she can display a thumbnail view of the protected document or change the security settings.
- Users who use protected documents
  Users who have a seal that is allowed to open the protected document. These users do not have a seal that is assigned full access permission. They can utilize protected documents in the range of operations allowed.
  - Create seal information
    They create a seal case. They open the seal case, and pass information on the Electronic Signature to the administrator.
  - Work with documents
    They where the seal allowed to open the protected document is registered.
    They can utilize protected documents in the range of operations allowed, or display a thumbnail view of the protected document.
    They cannot change the security settings or perform forbidden operations.
- Other users
  These users do not have a seal, and therefore cannot open the protected document or display a thumbnail view of it.
  They can check the security settings in the document properties.