Audit logging for a secure, scalable and flexible internet fax architecture

• US 10,277,778 B2
• Filed: 02/15/2017
• Issued: 04/30/2019
• Est. Priority Date: 06/24/2014
• Status: Active Grant

• Current Assignee: EC Data Systems Incorporated
• Original Assignee: EC Data Systems Incorporated
• Inventors: Watts, Christian M., Shephard, Edward D.
• Primary Examiner(s): Pachol, Nicholas
• Application Number:
  US15/433,171
• Publication Number:
  US 20170230544A1
• Time in Patent Office: 804 Days
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 2203/657 Combination of voice and fax calls
• CPC Class Codes: H04M 7/0024 Services and arrangements where telephone services are combined with data services arrangements which combine a telephonic equipment and a computer H04M7/0012
• CPC Class Codes: H04N 1/001 specially adapted for transmission via digital wireline networks H04N1/00098 takes precedence
• CPC Class Codes: H04N 1/00209 Transmitting or receiving image data, e.g. facsimile data, via a computer, e.g. using e-mail, a computer network, the internet, I-fax
• CPC Class Codes: H04N 1/00212 Attaching image data to computer messages, e.g. to e-mails
• CPC Class Codes: H04N 1/0022 involving facsimile protocols or a combination of facsimile protocols and computer data transmission protocols
• CPC Class Codes: H04N 1/32411 Handling instructions for routing or relaying
• CPC Class Codes: H04N 1/32416 Storage of instructions or retrieval of prestored instructions
• CPC Class Codes: H04N 1/32422 Reprocessing messages, e.g. in case the intended destination is busy
• CPC Class Codes: H04N 1/4426 involving separate means, e.g. a server, a magnetic card
• CPC Class Codes: H04N 2201/0093 Facsimile machine H04N2201/0094 takes precedence
• CPC Class Codes: H04N 2201/3202 of communication or activity log or report
• CPC Class Codes: H04N 2201/3209 of a telephone number
• CPC Class Codes: H04N 2201/3221 of a job number or identification, e.g. communication number

Abstract

Methods and systems for an auditing infrastructure for an Internet fax service architecture are provided. According to one embodiment, information regarding an event, associated with a component of the Internet fax service architecture, that is to be logged, is received by a centralized audit logging module of the Internet fax service architecture. The component may be a web server, an email server, a fax server, a notification server or an imaging system. The information is utilized by the centralized audit logging module to determine specific parameters within the Internet fax service architecture to be logged. Finally, the event, including the information and the specific parameters, is recorded by the centralized audit logging module to an audit log associated with the Internet fax service architecture in a standardized format.

Claims

1. A method comprising:

maintaining, by a central logging module associated with an Internet fax system, a chronological record of a sequence of events associated with a plurality of components of the Internet fax system in a form of an audit log, wherein the audit log stores a plurality of audit log entries for purposes of auditing security and compliance of the Internet fax system and wherein the plurality of components include a plurality of fax processing resources and an email server;

receiving an inbound fax call by an Internet fax system, including;

receiving, at a telecommunications system of the Internet fax system, the inbound fax call, wherein the inbound fax call has associated therewith a source address, a destination address and a fax signal, wherein the destination address corresponds to a particular subscriber of the Internet fax system;

switching, by the telecommunications system, the inbound fax call to a call mediation system of a plurality of call mediation systems within the Internet fax system;

selecting, by the call mediation system, a fax processing resource of the plurality of fax processing resources to handle the inbound fax call; and

switching, by the call mediation system, the inbound fax call to the selected fax processing resource;

translating, by the selected fax processing resource, the fax signal into a digital representation;

causing a first audit log entry of the plurality of audit log entries, separate and distinct from a record of the inbound fax call to be presented to the particular subscriber, to be created and stored within the audit log, by the selected fax processing resource, by providing the central logging module with information regarding the source address, the destination address, a number of pages of the digital representation and a result of said receiving an inbound fax call;

causing the digital representation to be delivered or otherwise made available to one or more users associated with the particular subscriber;

notifying, by the email server, the one or more users regarding receipt of an inbound fax; and

causing a second audit log entry of the plurality of audit log entries, separate and distinct from notification settings associated with the particular subscriber at a time of receipt of the inbound fax call, to be created and stored within the audit log, by the email server, by providing the central logging module with information regarding the one or more users and a result of said notifying.

2. The method of claim 1, wherein the central logging module comprises a daemon running within the Internet fax system.

3. The method of claim 1, wherein the central logging module comprises a remote cloud-based service available to the Internet fax system.

4. The method of claim 1, wherein said causing a first audit log entry of the plurality of audit log entries, separate and distinct from a record of the inbound fax call to be presented to the particular subscriber, to be created and stored within the audit log comprises:

loading, by the selected fax processing resource, code representing an event logging routine of the central logging module, from a shared storage resource accessible to the plurality of fax processing resources and the email server; and

executing, by the selected fax processing resource, the code.

5. The method of claim 4, further comprising responsive to receipt of the information regarding the source address, the destination address, the number of pages of the digital representation and the result of said receiving the inbound fax call:

creating, by the central logging module, a timestamp and a unique audit identifier for the first audit log entry;

utilizing, by the central logging module, the information regarding the destination address to determine one or more specific parameters within the Internet fax system to be logged;

creating, by the central logging module, the first audit log entry in a standardized format and including within the first audit log entry the timestamp, the unique audit identifier, the source address, the destination address, the number of pages of the digital representation, the result of said receiving the inbound fax call and the one or more specific parameters; and

storing, by the central logging module, the first audit log entry within the audit log.

6. The method of claim 5, wherein the one or more specific parameters include one or more of an organization identifier (ID) of a subscribing entity of the Internet fax system and a user ID of a user of the subscribing entity associated with the destination address.

7. The method of claim 1, wherein said causing a second audit log entry of the plurality of audit log entries, separate and distinct from a notification configuration associated with the particular subscriber at a time of receipt of the inbound fax call, to be created and stored within the audit log comprises:

loading, by the email server, code representing an event logging routine of the central logging module, from a shared storage resource accessible to the plurality of fax processing resources and the email server; and

executing, by the email server, the code.

8. The method of claim 7, wherein the information regarding the one or more users comprises an email address to which an email was sent by the email server.

9. The method of claim 8, further comprising responsive to receipt of the information regarding the one or more users the result of said notifying:

creating, by the central logging module, a timestamp and a unique audit identifier for the second audit log entry;

utilizing, by the central logging module, the email address to determine one or more specific parameters within the Internet fax system to be logged;

creating, by the central logging module, the second audit log entry in a standardized format and including within the second audit log entry the timestamp, the unique audit identifier, the email address, the result of said notifying and the one or more specific parameters; and

storing, by the central logging module, the second audit log entry within the audit log.

10. The method of claim 9, wherein the one or more specific parameters include one or more of an organization identifier (ID) of a subscribing entity of the Internet fax system and a user ID of a user of the subscribing entity associated with the email address.

11. The method of claim 1, further comprising:

receiving, by an Application Programming Interface (API) of the Internet fax system, a request from an application of a subscriber for audit log entries from the audit log, wherein the request specifies one or more criteria according to which the audit log entries are to be evaluated; and

returning, by the API, to the application one or more audit log entries from the audit log satisfying the one or more specified criteria.

12. The method of claim 11, wherein the one or more specified criteria are provided in a form of Hypertext Transfer Protocol (HTTP) or HTTP Secure (HTTPS) POST variables.

13. The method of claim 1, wherein the centralized logging module is tightly integrated with the Internet fax system and is aware of various sources of information, including objects, identifiers, data structures and databases used within the Internet fax system, thereby allowing the centralized logging module to offload from the plurality of components retrieval of additional information from the various sources of information to be stored within the plurality of audit log entries.

14. The method of claim 1, wherein the events include:

receipt by the Internet fax system of a request to send an outgoing fax via email, a web interface of the Internet fax service or an Application Programming Interface of the Internet fax service;

creation of a fax job within the Internet fax service corresponding to the request;

success or failure of a fax conversion operation to convert a source document or documents associated with the request to a fax-able format;

the outgoing fax has been queued for sending;

success or failure of sending of the outgoing fax; and

notification of a recipient or recipients of the outgoing fax has been completed.

15. The method of claim 1, wherein:

said causing a first audit log entry of the plurality of audit log entries, separate and distinct from a record of the inbound fax call to be presented to the particular subscriber, to be created and stored within the audit log comprises;

loading, by the selected fax processing resource, code representing an event logging routine of the central logging module, from a shared storage resource accessible to the plurality of fax processing resources and the email server; and

executing, by the selected fax processing resource, the code; and

said causing a second audit log entry of the plurality of audit log entries, separate and distinct from a notification configuration associated with the particular subscriber at a time of receipt of the inbound fax call, to be created and stored within the audit log comprises;

loading, by the email server, the code representing the event logging routine from the shared storage resource; and

executing, by the email server, the code.