Online Exam File Distribution: Secure Delivery

Secure online exam distribution means encrypting the question file with AES-256-GCM, releasing the decryption key only at exam start time via a server-side timer, watermarking each student's PDF with their ID, and closing the window the moment the clock expires. The exam file itself stays encrypted at rest until the scheduled minute. Students authenticate via SSO, the server verifies their enrollment, it issues a short-lived signed URL to a per-student watermarked copy, and logs every access with timestamp and IP. Any leak traces back to a specific student in minutes, not days.

Why the Timer Has to Live on the Server

Client-side countdowns get tampered with. A student opens DevTools, intercepts the JavaScript timer, freezes it, and gets an extra hour. The real exam release needs to be: file encrypted with a key held server-side, the server refuses to deliver the key before the scheduled UTC time, and refuses to deliver it after the window closes. NTP-synced servers drift less than 50 ms; student laptops drift by seconds or minutes. Write the exam policy as "access granted between 2026-10-26T14:00:00Z and 2026-10-26T16:00:00Z" and enforce it in middleware, not UI.

Watermarking for Leak Attribution

Every downloaded exam PDF should carry a footer with the student's name, email, and a random 8-character token — "jsmith — jsmith@uni.edu — 7F2K9B3L" on each page. When the exam shows up on Chegg 20 minutes after release, you search the token and know within seconds which student posted it. Tools like pypdf or PDFKit (Node.js) stamp watermarks in under 200 ms per file. For a 500-student class, parallelize the stamping and the whole batch finishes in 30 seconds. Pair the visible watermark with an invisible one in the document metadata — some screenshotters crop the footer but don't scrub the XMP metadata.

Browser Lockdown vs Honor Code

Respondus LockDown Browser, ProctorU, and Honorlock use screen recording, webcam monitoring, and keyboard/clipboard blocking to prevent cheating. LockDown Browser runs a hardened Chromium fork, disables alt-tab, blocks virtual machines via hypervisor detection, and monitors running processes. These tools cost $2 to $8 per student per exam. They also trigger ADA accommodations and privacy complaints (the Illinois BIPA lawsuits against Proctorio are ongoing). A honor-code approach with strong watermarking and post-hoc leak tracing is lighter-weight, less invasive, and works for most assessments outside high-stakes professional licensing. Pick the regime that matches your academic integrity policy.

Preventing Early Access to Encrypted Exams

Even if the exam file is published a day early on a CDN for performance, the key must stay gated. Envelope encryption solves this: the exam file is encrypted once with a random content key, and the content key is encrypted with a KMS-held master key. At release time, the server decrypts the content key and hands it to the student client. AWS KMS, Google Cloud KMS, and HashiCorp Vault all support this pattern. For an extra layer, split the content key with Shamir's Secret Sharing (3-of-5 or similar) so no single admin can release the exam solo — useful for high-stakes proctored exams like bar prep or CPA reviews.

Student Authentication and Session Binding

SSO through Shibboleth or Microsoft Entra ID confirms the student's identity; a WebAuthn or TOTP second factor confirms they're physically present with their security key or phone. Bind the exam session to the authenticated device — store the device fingerprint at exam start, refuse further requests from a different fingerprint. Issue a short-lived JWT (5-minute expiry, refreshed every 2 minutes) so a stolen session cookie expires fast. The exam client sends heartbeats every 15 seconds; three missed heartbeats closes the session and flags a review.

Disability Accommodations Without Breaking Security

DRC-approved time extensions (typically 1.5x or 2x the standard duration) need to integrate with the timer service, not hack around it. Generate a per-student policy: student A gets 90 minutes from 14:00 to 15:30, student B with 1.5x gets 135 minutes from 14:00 to 16:15. The key-release logic reads the policy per request. For students in separate testing centers, coordinate the start time with the DRC proctor. Large-print or screen-reader-compatible exam versions need the same encryption and watermarking pipeline, just with the accessible source document.

Archiving Completed Exams and Solutions

After the exam closes, archive the encrypted question file, each student's submitted responses with SHA-256 hashes, and the access log for the statute of limitations on academic integrity disputes — typically 1 to 7 years depending on institutional policy. Under FERPA, student responses are education records and require access controls. Store in a WORM-compliant bucket (S3 Object Lock in compliance mode, Azure Immutable Storage) if accreditation (AACSB, ABET) demands tamper-evidence. Release answer keys only after the last student in the last time zone finishes — students on international rotations often take exams days later with approval.

Ad-Hoc Distribution to Remote Proctors

A proctored exam at a Kaplan or Prometric testing center or with an online proctor sometimes needs the exam PDF delivered to the proctor's secure environment minutes before start. Email attachments are out — inboxes leak. An encrypted transfer with a 30-minute expiry, delivered to a verified proctor address, handles it. The proctor downloads once, decrypts in-browser, prints or displays for the student, and the link dies. For international proctors across time zones, a single UTC-based expiry beats trying to calculate local release times. WeTransfer, SwissTransfer, and HexaTransfer all support short-expiry links.

Try it at hexatransfer.com — free, no account, 10 GB max. For the last-minute encrypted exam PDF your remote proctor needs at 2 PM UTC, an end-to-end encrypted link with 1-hour expiry beats emailing an attachment that outlives the exam window.