The invention provides for encrypting electronic information such as a
document so that only users with permission may access the document in
decrypted form. The process of encrypting the information includes
selecting a set of policies as to who may access the information and
under what conditions. A remote server stores a unique identifier for the
information and associates an encryption/decryption key pair and access
policies with the information. Software components residing on the
author's computer retrieve the encryption key from the remote server,
encrypt the information, and store the encrypted information at a
location chosen by the author. A user wishing to access the information
acquires the encrypted information electronically. Software components
residing on the viewing user's computer retrieve the associated
decryption key and policies, decrypt the information to the extent
authorized by the policies, and immediately delete the decryption key
from the viewing user's computer upon decrypting the information and
rendering the clear text to the viewing user's computer screen. The
software components are also capable of prohibiting functional operations
by the viewing user's computer while the clear text is being viewed.