C#を使用してDocker内でPDF APIをセキュリティ保護する方法

Docker Features

• Portability: Containers run on any platform without modification, from development machines to production environments.
• Isolation: Each container operates independently, preventing interference between applications and their dependencies.
• Efficiency: Sharing the host system's kernel, containers are lightweight compared to virtual machines.
• Easy Deployment: Docker speeds up application deployment with minimal setup, facilitating continuous integration and delivery (CI/CD).

Components of Docker

• Docker Engine: The backbone of Docker, managing container build, run, and management.
• Docker Images: Read-only templates for creating containers, including application code, runtime environments, and dependencies.
• Docker Container: A runtime instance of a Docker image.
• Docker Hub: Cloud-based storage for sharing and publishing Docker images.

Docker plays a key role in modern DevOps cycles by ensuring predictability and speed in application deployment.

IronSecureDoc as a PDF API

IronSecureDoc provides the following PDF API capabilities:

• PDF Generation: Create PDFs from raw data, text, or other file formats.
• PDF Encryption: Secure PDFs with strong encryption algorithms like AES.
• PDF Decryption: Decrypt encrypted PDFs using authorized credentials.
• Document Signing: Digitally sign PDFs to ensure authenticity and integrity.
• PDF Editing: Modify text, images, or metadata in processed PDFs.
• Document Sharing: Securely share PDFs with access controls.

Features of IronSecureDoc

Advanced Encryption:

• Use industry-standard encryption algorithms like AES-256 for document security.
• Set document open (user) and owner passwords.

Digital Signatures:

• Apply digital signatures to PDFs for authenticity.
• Ensure non-repudiation and tamper-proof PDFs.

Access Control:

• Permissions settings for user or group access to data.
• Control PDF permissions for viewing, editing, printing, and copying.

Audit Trail:

• Monitor all document actions and obtain detailed histories for compliance.

PDF Manipulation:

• Merge multiple PDFs or split large documents.
• Annotate with comments, highlights, or watermarks.
• Extract data using text extraction capabilities.

Cross-Platform Support:

• Integrate with .NET, Java, and more.
• Use across platforms as Docker containers.

Scalability and Performance:

• Optimize for high document volumes in enterprise environments.
• Fast processing for complex operations.

API Integration:

• Well-documented API for custom application integration.
• RESTful API for web-based implementations.

Installing and Running IronSecureDoc

Pull the IronSecureDoc Docker image from the GitHub repository using the following command:

# Pull the IronSecureDoc Docker image
docker pull ironsoftwareofficial/ironsecuredoc

# Pull the IronSecureDoc Docker image
docker pull ironsoftwareofficial/ironsecuredoc

After pulling the Docker image, start IronSecureDoc with this command:

# Run IronSecureDoc in a Docker container with specified environment variables
docker container run --rm -p 8080:8080 -e IronSecureDoc_LicenseKey=<IRONSECUREDOC_LICENSE_KEY> -e ENVIRONMENT=Development -e HTTP_PORTS=8080 ironsoftwareofficial/ironsecuredoc:latest

# Run IronSecureDoc in a Docker container with specified environment variables
docker container run --rm -p 8080:8080 -e IronSecureDoc_LicenseKey=<IRONSECUREDOC_LICENSE_KEY> -e ENVIRONMENT=Development -e HTTP_PORTS=8080 ironsoftwareofficial/ironsecuredoc:latest

Adding Password to a PDF Document

The REST API of IronSecureDoc is a modern, web-based interface enabling developers to safely interact with the software's document management and PDF processing features. Utilizing RESTful principles, this API offers a simple way to integrate IronSecureDoc functions into applications, regardless of technology stack.

For password encryption of a PDF document, you can post a request to the IronSecureDoc API as follows:

# Use curl to encrypt a PDF document with a user password
curl -X 'POST' \
  'http://localhost:8080/v1/document-services/pdfs/encrypt?user_password=demo' \
  -H 'accept: */*' \
  -H 'Content-Type: multipart/form-data' \
  -F 'pdf_file=@test.pdf;type=application/pdf'

# Use curl to encrypt a PDF document with a user password
curl -X 'POST' \
  'http://localhost:8080/v1/document-services/pdfs/encrypt?user_password=demo' \
  -H 'accept: */*' \
  -H 'Content-Type: multipart/form-data' \
  -F 'pdf_file=@test.pdf;type=application/pdf'

This command encrypts and securely stores the PDF document.

Signing a PDF Document

Here's a sample code to digitally sign a PDF using a certificate:

# Use curl to digitally certify a PDF document
curl -X POST 'http://localhost:8080/v1/document-services/pdfs/certify' \
  -H 'accept: */*' \
  -H 'Content-Type: multipart/form-data' \
  -F 'pdf_file=@Demo.pdf;type=application/pdf' \
  -F 'certificate_file=@DemoSign.pfx;type=application/x-pkcs12' \
  -F 'certificate_password="p4ssw0rd"' \
  -F 'certificate_permissions=1'

# Use curl to digitally certify a PDF document
curl -X POST 'http://localhost:8080/v1/document-services/pdfs/certify' \
  -H 'accept: */*' \
  -H 'Content-Type: multipart/form-data' \
  -F 'pdf_file=@Demo.pdf;type=application/pdf' \
  -F 'certificate_file=@DemoSign.pfx;type=application/x-pkcs12' \
  -F 'certificate_password="p4ssw0rd"' \
  -F 'certificate_permissions=1'

This command processes the PDF, uses the certificate to sign it, and saves the output as certify.pdf.