Preventing execution of programs that are embedded in email messages

• US 10,225,281 B2
• Filed: 07/12/2016
• Issued: 03/05/2019
• Est. Priority Date: 10/08/2002
• Status: Expired due to Term

• Current Assignee: Uber Technologies, Inc.
• Original Assignee: Uber Technologies, Inc.
• Inventors: Daniell, W. Todd, Malik, Dale W.
• Primary Examiner(s): Hong, Stephens S
• Assistant Examiner(s): Ludwig, Matthew J
• Application Number:
  US15/207,661
• Publication Number:
  US 20160323296A1
• Time in Patent Office: 966 Days
• Field of Search: 715752, 715234, 715253, 715760, 726 22, 726 23, 726 24
• CPC Class Codes: G06F 3/04812 Interaction techniques based on cursor appearance or behaviour, e.g. being affected by the presence of displayed objects
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

Systems and methods are presented which generate modified email messages, which are largely devoid of embedded functions, from original email messages, which have embedded functions. The embedded functions are amenable to self-executing codes such as viruses, worms, and Trojan programs. Thus, the modified email message without these embedded functions, and any argument associated with these functions, provides a more secure email environment.

Claims

1. A system, comprising:

a memory that stores instructions; and

a processor that executes the instructions to perform operations, the operations comprising;

generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes;

identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;

identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;

comparing the start tag to a predefined list of tags to exclude; and

excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and

displaying the second email message in response to the indication to display the first email message.

2. The system of claim 1, wherein the embedded function includes self-executing code.

3. The system of claim 1, wherein the operations further comprise forwarding the first email message in response to receiving a selection to forward the second email message.

4. The system of claim 3, wherein the operations further comprise forwarding the first email message in response to receiving the selection to forward the second email message without altering contents of the first email message.

5. The system of claim 1, wherein the predefined list of tags to exclude includes tags that are amenable to self-executing code.

6. The system of claim 5, wherein the tags that are amenable to self-executing code include a tag indicating that the embedded function is in JavaScript.

7. The system of claim 1, wherein the operations further comprise receiving the indication to display the first email message based on a cursor being placed over the first email message.

8. The system of claim 1, wherein the operations further comprise preventing execution of the embedded function.

9. The system of claim 1, wherein the operations further comprise:

identifying a second start tag within the first email message, the second start tag indicating a beginning of tagged content within the first email message;

identifying a second end tag within the first email message, the second end tag corresponding to the second start tag and indicating an end of the tagged content;

comparing the second start tag to the predefined list of tags to exclude; and

including the second start tag, tagged content, and second end tag in the second email message if the second start tag is not included in the list of tags to exclude.

10. The system of claim 1, wherein generating the second email message further includes excluding an argument associated with the start tag.

11. The system of claim 1, wherein the operations further comprise opening an email read window.

12. The system of claim 11, wherein displaying the second email message comprises displaying the second email message in the email read window.

13. A method, comprising:

generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes;

identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;

identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;

comparing the start tag to a predefined list of tags to exclude; and

excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and

displaying the second email message in response to the indication to display the first email message.

14. The method of claim 13, wherein the embedded function includes self-executing code.

15. The method of claim 13, further comprising forwarding the first email message in response to receiving a selection to forward the second email message.

16. The method of claim 13, further comprising deleting the second email message responsive to user selection of a third email message.

17. The method of claim 13, wherein generating the second email message further includes excluding an argument associated with the start tag.

18. The method of claim 13, wherein displaying the second email message comprises providing an email preview pane in an email client.

19. The method of claim 13, further comprising preventing execution of the embedded function.

20. A non-transitory computer-readable medium comprising instructions, which when executed by a processor, cause the processor to perform operations comprising:

generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes;

identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;

identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;

comparing the start tag to a predefined list of tags to exclude; and

excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and

displaying the second email message in response to the indication to display the first email message.