2

I think this is a bit complicated and probably impossible, but it would be helpful to know if there is any way to do it...

Let's say I have a private teaching forum, where each user (paid account) has a username and an encrypted password, and there's a DOWNLOAD section where pdf files can be downloaded by users only.

Here's the question: When the file is downloaded, it will be protected by username and password/ password only that match with the username and password of the user himself... in other words, the password is taken from the user's account and added to the pdf file, then a download link is generated for that file.

This way, copying the pdf file to others would force the "copier" to give out his username and password...

EDIT: the password is for OPENING the file not editing or printing it, I want users to be able to highlight the text and add their own notes

Bruno Lowagie
  • 75,994
  • 9
  • 109
  • 165
Jassar
  • 306
  • 4
  • 17
  • http://www.adobe.com/uk/products/acrobat/pdf-file-password-permissions.html – Quentin May 01 '14 at 06:20
  • Thank you, but that isn't even close to what I am asking about =) I've edited the question... – Jassar May 01 '14 at 06:23
  • 1
    One of the security options **is** *Require a password to open the document* – Quentin May 01 '14 at 06:26
  • Thanks. I am not asking about the method of adding a password manually, I am looking for a method that takes the user's encrypted password and adds it to the PDF file automatically. – Jassar May 01 '14 at 06:29
  • 1
    If I had a complete solution, I'd have given an answer not a comment. The comment was supposed to point you in a useful direction. Read the document then apply a bit of thought. Adobe provide a way to password protect documents, so it is clearly not impossible. Adobe have a name for it, so that will help you use a search engine to find a programmatic implementation. Also, Adobe software is often drivable programmatically, so you might be able to use that software product and write a script that runs it to apply the password protection that way. – Quentin May 01 '14 at 06:34

1 Answers1

2

You can't achieve what you want with PDF.

There are two ways to encrypt a PDF document:

  1. Using passwords. You can define two passwords: a user password and an owner password. A document that is encrypted with an owner password can be opened by every one who receives the document. The owner password is there to define permissions (for instance: the document can be viewed, but not printed). Removing the restrictions without knowing the owner password is fairly easy. It used to be illegal when Adobe still owned the copyright on the PDF reference, but since PDF is now an ISO standard, it's not entirely clear if applying the spec to remove the owner password is allowed. If a document is encrypted using a user password, everybody who knows the user password can open the file. There is no username, only a user password.
  2. Using certificates. You could ask your users to create a public/private key pair. You could then ask them to keep their private key private and ask them to give you their public key. When you encrypt your PDF using their public certificate, you can then encrypt the document with their public key. From that moment on, only the owner of the corresponding private key can read the document. However: the owner of the corresponding private key can also decrypt the document so that it can be shared.

Neither of both cases serve your purpose (read ISO-32000-1 for the full details). The only alternative is to buy an expensive DRM solution.

Bruno Lowagie
  • 75,994
  • 9
  • 109
  • 165