An author creates one or more licenses to identify users and their rights. In turn, to open a protected file, a user acquires and uses a license which is stored in a protected file. A user must be authenticated in order to acquire a password or certificate-based license. Additional authentication checks can be set up via a server through an authentication URL. An author can also set the time when a license will expire or use the authentication URL to revoke access to the protected file.