IronOxide Advanced Document Operations

Key Terms

• EDEKs - Encrypted document encryption keys produced by unmanaged document encryption and required for unmanaged document decryption.

IronOxide Document Operations

Key Terms

• ID - The ID representing a document. It must be unique within the document’s segment and will not be encrypted.
• Name - The human-readable name of a document. It does not need to be unique and will not be encrypted.

IronOxide Group Operations

Key Terms

• ID - The ID representing a group. It must be unique within the group’s segment and will not be encrypted.
• Name - The human-readable name of a group. It does not need to be unique and will not be encrypted.
• Member - A user who is able to encrypt and decrypt data using the group.
• Admin - A user who is able to manage the group’s member and admin lists. An admin cannot encrypt or decrypt data using the group unless they first add themselves as group members or are added by another admin.
• Owner - The user who owns the group. The owner has the same permissions as a group admin, but is protected from being removed as a group admin.
• Rotation - Changing a group’s private key while leaving its public key unchanged. This can be accomplished by calling SDK.group.rotatePrivateKey.

IronOxide Search Operations

IronOxide User Operations

Key Terms

• Device - The only entity in the Data Control Platform that can decrypt data. A device is authorized using a user’s private key, therefore a device is tightly bound to a user.
• ID - The ID representing a user or device. It must be unique within its segment and will not be encrypted.
• Password - The string used to encrypt and escrow a user’s private key.
• Rotation - Changing a user’s private key while leaving their public key unchanged. This can be accomplished by calling SDK.user.rotatePrivateKey.