DE102016209483A1 - Method and arrangement for localized access to electronic artifacts - Google Patents

Abstract

A method and arrangement for locally opening, viewing and / or editing an electronic artifact, wherein the electronic artifact is associated with a location information or a reference to a location information, wherein an electronic device, suitable for opening, viewing and / or editing of the artifact, to is arranged to determine the position of the electronic device, and wherein access to open, view and / or edit the electronic artifact is allowed for a user when the location information associated with the electronic artifact matches the position of the electronic device.

Description

The invention relates to methods and apparatus for locally opening, viewing and / or editing an electronic artifact.

A previously open information can not be subsequently subjected to secrecy. The secrecy must therefore be determined when the information arises. Confidential documents are provided with a corresponding identification by the creator so that i.a. the reader is informed that the document is subject to a certain duty of care. But then secret documents can unconsciously get to unauthorized person. The principle of secrecy is often violated.

An access control on marked documents serves above all the secrecy, thus the receipt of the confidentiality of information. This type of access restriction is common in the military and other state institutions, but is also used by many companies. Many companies have their own "policy for the protection of company information" and therefore require the labeling of such documents.

• 1. STRENG GEHEIM: die Kenntnisnahme durch Unbefugte kann den Bestand oder lebenswichtige Interessen des Herausgebers gefährden. Kennzeichnung: Auf Schriftstücken roter Stempelabdruck oder Druck in der Kopf- und Fusszeile.
• 2. GEHEIM: die Kenntnisnahme durch Unbefugte kann die Sicherheit des Herausgebers gefährden oder seinen Interessen schweren Schaden zufügen. Kennzeichnung: Auf Schriftstücken roter Stempelabdruck oder Druck In der Kopf- und Fusszeile.
• 3. VERSCHLUSSSACHE – VERTRAULICH: die Kenntnisnahme durch Unbefugte kann für die Interessen des Herausgebers schädlich sein. Kennzeichnung: Auf Schriftstücken blauer oder schwarzer Stempelabdruck oder Druck in der Kopfzeile.
• 4. VERSCHLUSSSACHE – NUR FÜR DEN DIENSTGEBRAUCH: die Kenntnisnahme durch Unbefugte kann für die Interessen des Herausgebers nachteilig sein. Kennzeichnung: Auf Schriftstücken blauer oder schwarzer Stempelabdruck oder Druck in der Kopfzeile.

For classified documents, German and European use typically defines the following levels of secrecy:

• 1. TOP SECRET: the knowledge of unauthorized persons may endanger the existence or vital interests of the publisher. Marking: On writings red stamp imprint or print in the header and footer.
• SECRET: the knowledge of unauthorized persons may jeopardize the security of the publisher or cause serious harm to his interests. Marking: On writings red stamp or print In the header and footer.
• 3. DISCLAIMER - CONFIDENTIAL: the knowledge of unauthorized persons may be detrimental to the interests of the publisher. Marking: On documents blue or black stamp imprint or print in the header.
• 4. DISCLAIMER - FOR SERVICE USE ONLY: knowledge of unauthorized persons may be detrimental to the interests of the publisher. Marking: On documents blue or black stamp imprint or print in the header.

Classified information shall be kept in locked filing cabinets or safes, depending on the classification. With electronic transmission they are to be coded. In Germany, cryptosystems released by the Federal Office for Information Security (BSI) are used.

In addition to the secrecy levels, the group of persons who are allowed to see the files can also be restricted by the assignment of a so-called protective word. The protection word is awarded by the publisher of the classified information in addition to the level of confidentiality and communicated to all persons who are allowed access to the classified information.

Furthermore, it is known that certain selected groups of people only have access to classified documents in certain premises. An example of this are certain TTIP documents on the Transatlantic Free Trade Agreement, which only give insight to selected parliamentarians in a given area. Another example is a chemical formula or the composition of a drink, which may only be viewed in the laboratory or in the production hall.

However, this method of selective localized access restriction of persons to classified documents is cumbersome, in today's IT world is not appropriate and realizable only by physical restrictions on persons.

It is therefore the object of the present invention to provide low-cost methods and a cost-effective arrangement for the selective localized access restriction of persons to classified electronic artifacts, in particular electronic documents.

The object is achieved by a method for the fixed opening, viewing and / or processing of an electronic artifact by an electronic device, wherein the electronic artifact is associated with a location information or a reference to a location information, wherein a user access to open, view and / or Editing the electronic artifact has, if the location associated with the electronic artifact location information matches the position of the electronic device.

The object is further achieved by a method for the localized opening, viewing and / or editing of an electronic artifact, wherein the electronic artifact is associated with a location information or a reference to a location information, wherein an electronic device, suitable for opening, viewing and / or Editing the artifact, is set up to determine the position of the electronic device, and wherein access to open, view, and / or edit the electronic artifact is permitted to a user when the location information associated with the electronic artifact matches the location of the electronic device.

With modern IT infrastructure paper documents are replaced by eg PDF, Word or Web documents, letters by emails and locked filing cabinets or safes by cloud or server solutions. Although these documents are encrypted in electronic transmission and may also be restricted in printing and saving, they can still be read or viewed anywhere with the associated password / key, which simplifies possible access by third parties.

An electronic artifact here is an electronic document, such as an electronic document. a Word or PDF document, an image file (eg in JPEG or TIFF), an audio file (eg MP3), a video file (eg MP4), a spreadsheet table, an email, a program, a web service, source code, an HTML document, a folder, a zip file, but also a reference (eg URL). In particular, an electronic artifact is for visualization to a user.

Such electronic artifacts, which are optionally marked with a secrecy level, are provided with one or more "location IDs" (location information), so that access to the content or opening is only possible at previously defined locations. For example, this may only be within an agency, in certain premises on a company premises or in the home office, etc. The "Location ID" (location information) can be a reference which defines locations ("locations") via position data or via a "mapping" (assignment, mapping) with a position server Artifact but also in the form of metadata or by an electronic signature (local signature), but also by an appropriate encryption associated.

For image files, e.g. the IPTC IIM standard (International Press Telecommunications Council) for storing or assigning location information to image files. In source code files, the assignment of location information e.g. done by annotations. In PDF documents, location information can be stored or assigned as metadata in a Document Information Directory or Metadata Streams. In principle, location information can also be assigned to an electronic artifact as a digital watermark, or encoded in a digital watermark. Advantageously, the location information associated with an electronic artifact is encrypted.

To determine the location, i. of the location of a device (for opening, viewing, editing the electronic artifact) may be e.g. BLE Beacon (Bluetooth Low Energy Beacon), RFID (Radio Frequency Identification), NFC (Near Field Communication), WLAN SSID (Service Set Identifier), GPS (or other satellite positioning systems, eg Galileo), IPS (Indoor Positioning System), or Other location or position determining systems can be used. The device or the reader (mobile phone, tablet, notebook, etc.) determined by the location or position determining systems, the position of the device, which is compared with the "Location ID" (associated location information). If these match, the content of the electronic artifact (eg electronic document or email) can be released or opened, otherwise the electronic artifact remains locked and the content protected The location- or position-determining systems can also send the device's position to the device The comparison between the position of the device and the "Location ID", ie the associated location information, then takes place on the device The comparison between the position of the device and the "Location ID", ie the associated location information, can also be based on an authentication Server, which communicates with the device and the position determination system via suitable communication mechanisms (eg WLAN, satellite radio).

A first advantageous embodiment of the invention is that an access to open, view and / or edit the electronic artifact for a user is allowed when the electronic artifact associated location information (OI) matches the position of the cell (radio cell) of a mobile network where the electronic device is located. Each radio cell of a mobile radio network has a Cell-Id (CID, Cell Identification), ie an associated radio cell identification. This is the case, for example, with GSM networks. With UMTS networks, a spatial sector is defined with the CID and a Location Area Code (LAC), ie the current location area of the mobile communication terminal (eg smartphone). Access to open, view and / or edit the electronic artifact is only allowed to a user if the current location area of the mobile communication terminal (ie the reader) matches the location information associated with the electronic artifact. The adjustment to this can be done on the communication terminal or via an authorization server for a positive Adjustment sends an authorization to the communication terminal.

A further advantageous embodiment of the invention is that the electronic device is adapted to the position of the electronic device independently, i. with on-board means and in connection with the appropriate infrastructure (WLAN, mobile networks, satellite-based positioning systems) to determine. The electronic device has e.g. a corresponding receiver for a GPS location. The data provided by the GPS satellites or other satellite positioning systems determines the position of the electronic device.

A further advantageous embodiment of the invention is that the determination of the position of the electronic device is carried out by a positioning system and the positioning system sends the position to the electronic device. The electronic device is provided with the position data by the position determining system. The electronic device requires only a corresponding receiving device for this purpose.

A further advantageous embodiment of the invention is that a comparison of the location information associated with the electronic artifact with the position of the electronic device in the electronic device. As a result, no external manipulation can be carried out during the comparison since the comparison is made autonomously on the device (reading device).

A further advantageous embodiment of the invention is that the determination of the position of the electronic device is performed by a positioning system and the positioning system sends the position to an authentication server, wherein the authentication server has a directory of electronic artifacts and / or access to a Directory of the electronic artifacts, wherein a comparison of the location information associated with the electronic artifact with the position of the electronic device in the authentication server, and wherein the authentication server provides authorization for opening, viewing and / or editing of the electronic artifact. The authentication server can thus log which persons, at which times and time periods had access to the electronic artifact.

A further advantageous embodiment of the invention is that the position of the electronic device takes place in each case by two independent positioning systems and access to the electronic artifact is only allowed if the two determined positions and the location information associated with the electronic artifact match. This increases access protection to the electronic artifact.

Advantageously, an access for opening, viewing and / or editing of the electronic artifact for a user is allowed if, in addition to the coincidence of the electronic artifact associated location information with the local position of the electronic device (reading device) further conditions are met. Thus, in addition to the location information the artifact further conditions can be assigned, which must be met for access to open, view and / or edit. Thus, the artifact can be e.g. a time window (eg Mo-Fr, 9-17 o'clock) and / or a time limit or a time period (eg 30 min, as "maximum access time") and / or a number of openings per time unit (twice a day) , This further increases access protection to the electronic artifact. These additional conditions can be assigned to the artifact through metadata.

A further advantageous embodiment of the invention lies in an arrangement for carrying out the inventive method. The arrangement can be realized by commercial means.

• – ein elektronisches Gerät, geeignet zum Öffnen, Betrachten und/oder zum Bearbeiten des Artefakts,
• – eine Positionsbestimmungsvorrichtung zur Bestimmung der Position des elektronischen Gerätes,
• – eine Autorisierungsvorrichtung zum Öffnen, Betrachten und/oder Bearbeiten des elektronischen Artefakts durch einen Benutzer, wobei ein Zugriff zum Öffnen, Betrachten und/oder das Bearbeiten des elektronischen Artefakts für einen Benutzer erlaubt ist, wenn die dem elektronischen Artefakt zugeordnete Ortsinformation mit der Position des elektronischen Gerätes übereinstimmt. Die Anordnung kann mit handelsüblichen Komponenten (COTS, Commercials Off The Shelf) und Software realisiert werden bzw. auch nachträglich errichtet werden.

The object is further achieved by an arrangement for the localized opening, viewing and / or processing of an electronic artifact, wherein the electronic artifact is associated with a location information or a reference to a location information, the arrangement comprising:

• - an electronic device suitable for opening, viewing and / or editing the artifact,
• A position determining device for determining the position of the electronic device,
• An authorization device for opening, viewing and / or editing the electronic artifact by a user, wherein access for opening, viewing and / or editing the electronic artifact is permitted for a user when the location information associated with the electronic artifact is aligned with the position of the electronic artifact electronic device matches. The arrangement can be realized with commercially available components (COTS, Commercials Off The Shelf) and software or can also be retrofitted.

A further advantageous embodiment of the invention is that the authorization device is integrated in the electronic device. The alignment between the electronic artifact associated location information and the position of the electronic device can thus on the electronic device (reader, eg tablet computer) yourself. This increases security, for example, against "man-in-the-middle-attacks".

A further advantageous embodiment of the invention is that the authorization device is integrated in an authentication server, which is connected to the electronic device via suitable communication mechanisms. If the authorization device is located in an authentication server or a cloud (cloud of computing), the authorization device (advantageously a processor with corresponding software) can be centrally provided with suitable protection mechanisms (for example firewall). The services of the authorization device may be used for the corresponding readers, e.g. as SaaS (Software as a Service).

A further advantageous embodiment of the invention is that the authentication server has a memory with a directory of electronic artifacts and / or has access to a database with the list of electronic artifacts, wherein comparing the location information associated with the electronic artifact with the position the electronic device in the authentication server, and wherein the authentication server provides authorization to open, view and / or edit the electronic artifact. The authentication server can thus log and track which people, at what times and time periods had access to the electronic artifact.

The invention and advantageous embodiments of the present invention will be explained using the example of the following figures. Showing:

1 an exemplary arrangement for the local opening, viewing and / or editing of an electronic artifact,

2 a first exemplary flowchart for a method for locally opening, viewing and / or editing an electronic artifact, and

3 a second exemplary flowchart for a method for locally opening, viewing and / or editing an electronic artifact.

• – ein elektronisches Gerät LG (mit Vorteil ein Lesegerät), geeignet zum Öffnen, Betrachten und/oder zum Bearbeiten des Artefakts EA;
• – eine Positionsbestimmungsvorrichtung IPS, SAT zur Bestimmung der Position POS des elektronischen Gerätes LG,
• – eine Autorisierungsvorrichtung AV zum Öffnen, Betrachten und/oder Bearbeiten des elektronischen Artefakts durch einen Benutzer P, wobei ein Zugriff zum Öffnen, Betrachten und/oder das Bearbeiten des elektronischen Artefakts EA für den Benutzer P erlaubt ist, wenn die dem elektronischen Artefakt EA zugeordnete Ortsinformation OI mit der Position POS des elektronischen Gerätes LG übereinstimmt. Beim elektronischen Gerät LG handelt es sich mit Vorteil um ein mobiles Kommunikationsendgerät (z.B. Smartphone, Tablet-Computer, Laptop) eines Benutzers. Beim elektronischen Gerät LG kann es sich aber auch um Infrastruktur (z.B. Computer mit Monitor, Smart TV) handeln, die an einem bestimmten Ort (z.B. Raum in einem Gebäude) installiert ist.

1 shows an exemplary arrangement for the fixed opening, viewing and / or editing of an electronic artifact EA, wherein the electronic artifact EA a location information OI or a reference (eg, by a web link or URL) is assigned to a location information OI comprising the arrangement :

• An electronic device LG (advantageously a reader) suitable for opening, viewing and / or editing the artifact EA;
• A position determining device IPS, SAT for determining the position POS of the electronic device LG,
• An authorization device AV for opening, viewing and / or editing the electronic artifact by a user P, wherein access for opening, viewing and / or editing the electronic artifact EA for the user P is permitted when the electronic artifact EA associated Location information OI coincides with the position POS of the electronic device LG. The electronic device LG is advantageously a mobile communication terminal (eg smartphone, tablet computer, laptop) of a user. The electronic device LG can also be infrastructure (eg computer with monitor, Smart TV) which is installed at a specific location (eg room in a building).

The electronic artifact EA is an electronic document, such as an electronic document. a Word or PDF document, an image file (eg in JPEG or TIFF), an audio file (eg MP3), a video file (eg MP4), a spreadsheet table, an email, a program, a web service, source code, an HTML document, a folder, a zip file, or a reference (eg URL). Such electronic artifacts EA, which are optionally identified with a secrecy level, are provided with a location information OI or with a plurality of location information OI, so that the access to the content or the opening only at predetermined locations POS (positions, eg fixed spaces or location coordinates The location information OI can be a reference which fixes locations POS via position data or via a mapping (assignment, mapping) with a position server, but the location information OI can also be used by an electronic artifact EA In principle, location information OI can also be assigned to an electronic artifact EA as a digital watermark, or be encoded in a digital watermark, with the benefit of metadata or by an electronic signature (location signature) the location information OI assigned to an electronic artifact EA is encrypted (by a suitable encryption method).

For determining the location POS of an electronic device LG (for opening, viewing, processing of the electronic artifact EA), an eg an indoor positioning system (location system) IPS, such as BLE Beacon (Bluetooth Low Energy Beacon), RFID (Radio Frequency Identification), NFC (Near Field Communication), WLAN SSID (Service Set Identifier) are used, or a Global Positioning System (GPS) SAT, which operates satellite-based. To determine the location POS, a combined system based on GPS and IPS can also be used. However, it is also possible for the indoor positioning system IPS and the global positioning system (GPS) SAT to operate independently of one another, ie to determine the position POS of the electronic device LG independently of one another.

The electronic device or the reader LG (mobile phone, tablet, notebook, etc.) determined by the location or position determining systems IPS, SAT the position POS of the device LG, which is compared with the electronic artifact EA associated location information OI. If they match, the content of the electronic artifact EA (e.g., electronic document or e-mail) may be released. Otherwise, the electronic artifact EA remains closed and the content is protected. The location or position determining systems IPS, SAT can also send the position POS of the device LG to the device LG. The comparison between the position POS of the device LG with the "Location ID", i. the assigned location information OI then takes place on the device LG.

The comparison between the position POS of the electronic device LG with the "Location ID", i. However, the assigned location information OI can also take place on an authentication server S which is in communication with the electronic device LG and the position determination system IPS or SAT (GPS) via suitable communication mechanisms KV1, KV2 (for example WLAN, satellite radio).

Optionally, the authorization device AV is integrated in the electronic device EG (e.g., communication terminal). The authorization device AV may be e.g. as an app (software program) through an Internet download on the communication terminal (for example, smartphone) are loaded and installed.

However, the authorization device AV can also be integrated in an authentication server S, which is connected to the electronic device LG via suitable communication mechanisms KV2 and communicates (for example through an internet connection or satellite radio). Advantageously, the authentication server S is implemented in a cloud (computer cloud). Advantageously, the authentication server S has a memory (for example flash memory) with a directory of the electronic artifacts EA and / or has access to a database DB with the directory of the electronic artifacts EA. In the authentication server S, the location information OI associated with the electronic artifact EA is compared with the position POS of the electronic device LG. Upon authorization, the authentication server S provides an access authorization (e.g., by appropriate credentials, passwords) to open, view, and / or edit the electronic artifact EA for a user. Advantageously, the validity of an access authorization is limited in time. Advantageously, the determination of the position POS of the electronic device LG takes place continuously or permanently. When leaving the position POS, the access authorization loses its validity and access to the electronic artifact EA is no longer possible after leaving the position POS. Advantageously, already opened artifacts are automatically closed when leaving the position POS, which is made possible by a regularly repeating position determination. Advantageously, the determination of the position POS of the electronic device LG takes place with a defined deviation (for example 3-5m).

Advantageously, the determination of the position POS of the electronic device LG takes place in each case by two independent positioning systems IPS, SAT and access to the electronic artifact EA is only permitted if the two determined positions POS and the location information OI assigned to the electronic artifact match.

Advantageously, the authorization device AV is implemented by a corresponding software program that can be executed on the authentication server S.

• (VS1) wobei dem elektronischen Artefakt eine Ortsinformation oder ein Verweis auf eine Ortsinformation zugeordnet ist,
• (VS2) wobei ein Benutzer Zugriff zum Öffnen, Betrachten und/oder Bearbeiten des elektronischen Artefakts hat, wenn die dem elektronischen Artefakt zugeordnete Ortsinformation mit der Position des elektronischen Gerätes übereinstimmt.

2 shows a first exemplary flowchart for a method for locally opening, viewing and / or editing an electronic artifact by an electronic device,

• (VS1) wherein the electronic artifact is associated with a location information or a reference to a location information,
• (VS2) wherein a user has access to open, view and / or edit the electronic artifact when the location information associated with the electronic artifact matches the location of the electronic device.

• (VS1‘) wobei dem elektronischen Artefakt eine Ortsinformation oder ein Verweis auf eine Ortsinformation zugeordnet ist,
• (VS2‘) wobei ein elektronisches Gerät, geeignet zum Öffnen, Betrachten und/oder zum Bearbeiten des Artefakts, dazu eingerichtet ist, die Position des elektronisches Gerätes zu bestimmen, und
• (VS3‘) wobei ein Zugriff zum Öffnen, Betrachten und/oder das Bearbeiten des elektronischen Artefakts für einen Benutzer erlaubt ist, wenn die dem elektronischen Artefakt zugeordnete Ortsinformation mit der Position des elektronischen Gerätes übereinstimmt.

3 shows a second exemplary flowchart for a method for locally opening, viewing and / or editing an electronic artifact,

• (VS1 ') wherein the electronic artifact is associated with a location information or a reference to a location information,
• (VS2 ') wherein an electronic device suitable for opening, viewing and / or editing the artifact is adapted to determine the position of the electronic device, and
• (VS3 ') wherein access to open, view and / or edit the electronic artifact is allowed for a user when the location information associated with the electronic artifact matches the location of the electronic device.

The methods according to the flowcharts of 2 respectively. 3 can be easily implemented with commercially available components (positioning systems (eg GPS), communication terminals (eg laptop, smartphone), servers, communication mechanisms) or by suitable software modules.

The invention provides additional security and thus extended protection against unauthorized access to secret documents. In addition to the personal authentication by pins, passwords, smart cards, RFID, chips, OTP (one-time password) via SMS, etc., it is also necessary to use the reader at a specific location (location). The accuracy of the position determination depends on the installed or available infrastructure.

With this invention, for example, it can also be prevented that stolen readers can detect secret contents by unauthorized persons even if they know the ID or the password. For example, also avoids a photographic spying by data thieves at the airport, if the airport is not released as a location. Furthermore, any opening can be logged with the location of viewing. Furthermore, the attempt of viewing outside the allowed location trigger an alarm, which allows, for example, the traceability of theft of the reader.

A method and arrangement for locally opening, viewing and / or editing an electronic artifact, wherein the electronic artifact is associated with a location information or a reference to a location information, wherein an electronic device, suitable for opening, viewing and / or editing of the artifact, to is arranged to determine the position of the electronic device, and wherein access to open, view and / or edit the electronic artifact is allowed for a user when the location information associated with the electronic artifact matches the position of the electronic device.

reference numeral

• SAT

  satellite

  LG

  reader

  EA

  Electronic artifact

  OI

  location information

  IPS

  Positioning System

  POS

  position

  C

  Cloud

  AS

  server

  AV

  authorization device

  DB

  Database

  P

  person

  KV1, KV2

  communication link

  VS1, VS2, VS1'-VS3 '

  step

Claims (13)

 Method for locally opening, viewing and / or processing an electronic artifact (EA) by means of an electronic device (LG), (VS1) wherein the electronic artifact (EA) is assigned a location information (OI) or a reference to a location information (OI), (VS2) wherein a user has access to open, view and / or edit the electronic artifact (EA) when the location information (OI) associated with the electronic artifact (EA) matches the position (POS) of the electronic device (LG).  Method for locally opening, viewing and / or editing an electronic artifact (EA), (VS1 ') wherein the electronic artifact (EA) is assigned a location information (OI) or a reference to a location information (OI), (VS2 ') wherein an electronic device (LG), suitable for opening, viewing and / or editing the artifact (EA), is adapted to determine the position of the electronic device (LG), and (VS3 ') wherein access for opening, viewing and / or editing of the electronic artifact (EA) for a user (P) is allowed when the location information (OI) associated with the electronic artifact (EA) coincides with the position of the electronic device (LG) matches. Method according to one of the preceding claims, wherein an access for opening, viewing and / or editing of the electronic artifact (EA) for a user (P) is allowed if the location information (OI) associated with the electronic artifact (EA) coincides with the position of the Cell of a mobile network matches in which the electronic device (LG) is located.  Method according to one of the preceding claims, wherein the electronic device is adapted to independently determine the position (POS) of the electronic device (LG).  Method according to one of the preceding claims, wherein the determination of the position (POS) of the electronic device (LG) by a positioning system (IPS, SAT) and the positioning system sends the position (POS) to the electronic device (LG).  Method according to one of the preceding claims, wherein a comparison of the electronic artifact (EA) associated location information (OI) with the position of the electronic device (LG) in the electronic device (LG) takes place.  Method according to one of the preceding claims, wherein the determination of the position (POS) of the electronic device (LG) by a position determining system (IPS, SAT) and the positioning system (IPS, SAT) the position (POS) to an authentication server (S ), wherein the authentication server (S) has a directory of the electronic artifacts (EA) and / or has access to a directory of the electronic artifacts (EA), wherein a comparison of the location information (OI) associated with the electronic artifact (EA) with the position (POS) of the electronic device (LG) in the authentication server (S), and wherein the authentication server (S) provides authorization to view and / or edit the electronic artifact (EA).  Method according to one of the preceding claims, wherein the position of the electronic device (LG) in each case by two independent positioning systems (IPS, SAT) and access to the electronic artifact (EA) is only allowed if the two determined positions (POS) and the location information (OI) associated with the electronic artifact (EA).  Arrangement for carrying out a method according to one of Claims 1 to 8.  Arrangement for the local opening, viewing and / or processing of an electronic artifact (EA), wherein the electronic artifact (EA) is assigned location information (OI) or a reference to location information (OI), the arrangement comprising: an electronic device (LG) suitable for opening, viewing and / or editing the artifact (EA), a position determining device (IPS, SAT) for determining the position (POS) of the electronic device (LG), an authorization device (AV) for opening, viewing and / or editing the electronic artifact (EA) by a user (P), wherein an access for opening, viewing and / or editing the electronic artifact (EA) for a user (P) is allowed when the electronic artifact (EA) associated location information (OI) with the position (POS) of the electronic device (LG) matches.  Arrangement according to claim 10, wherein the authorization device is integrated in the electronic device (LG).  Arrangement according to claim 10 or 11, wherein the authorization device (AV) is integrated in an authentication server (S), which is connected to the electronic device (LG) via suitable communication mechanisms (KV2).  Arrangement according to claim 12, wherein the authentication server (S) has a memory with a directory of the electronic artifacts (EA) and / or has access to a database (DB) with the directory of the electronic artifacts (EA), wherein a comparison of the the electronic artifact (EA) associated location information (OI) with the position of the electronic device (LG) in the authentication server (S), and wherein the authentication server (S) an authorization to open, view and / or edit the electronic Artifacts (EA).

Images