Message content modification devices and methods

• US 10,425,422 B1
• Filed: 06/07/2017
• Issued: 09/24/2019
• Est. Priority Date: 06/08/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Open Invention Network LLC
• Inventors: Ledet, David Gerard
• Primary Examiner(s): Shayanfar, Ali
• Application Number:
  US15/615,958
• Time in Patent Office: 839 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/222 using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04N 21/2402 Monitoring of the downstream path of the transmission network, e.g. bandwidth available traffic monitoring in data switching networks H04L43/00; monitoring data switching networks utilization H04L43/0876
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/647 Control signaling between network components and server or clients; Network processes for video distribution between server and clients, e.g. controlling the quality of the video stream, by dropping packets, protecting content from unauthorised alteration within the network, monitoring of network load, bridging between two different networks, e.g. between IP and wireless real-time session protocols H04L65/1101
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application

Abstract

The example embodiments are directed to an application and a system capable of securely delivering message content to an unintended recipient to enhance the security of message delivery. In an example, the method includes at least one of: receiving an electronic message from a user device, the electronic message including secure content and one or more recipients, determining that a recipient of the electronic message is a member of a project group associated with an organization, and in response, identifying an unintended recipient who is associated with the organization but who is not a member of the project group, and transmitting a notification to a device of the recipient indicating that the secure content is accessible via a device of the unintended recipient instead of transmitting the secure content directly to the device of the recipient.

Claims

1. A method comprising:

receiving an electronic message from a user device, the electronic message comprising secure content and one or more recipients;

determining that a recipient of the electronic message is a member of a project group associated with an organization, and in response, identifying an unintended recipient who is associated with the organization but who is not a member of the project group; and

transmitting a notification to a device of the recipient indicating that the secure content is accessible via a device of the unintended recipient instead of transmitting the secure content directly to the device of the recipient;

wherein the transmitting comprises transmitting a notification indicating that the secure content is stored at a remote network location and is accessible to the recipient via secure login through the device of the unintended recipient;

wherein the secure content is provided to the recipient via the device of the unintended recipient in response to a biometric security identification of the recipient via the device of the unintended recipient.

2. The method of claim 1, wherein the project group comprises a group of users within the organization that are participating in a work-related project, and the electronic message comprises at least one of a document and a message body including secure textual content intended for members of the work-related project.

3. The method of claim 1, wherein the transmitting comprises transmitting the secure content with the notification and enabling the secure content to be stored locally on the device of the unintended recipient and accessed locally through secure login by the recipient.

4. The method of claim 1, wherein the method further comprises extracting project information from an application programming interface (API) of project manager software that is associated with the organization, and the determining that the recipient is a member of the project group is determined based on the extracted project information.

5. The method of claim 1, wherein the unintended recipient is selected from a group of possible unintended recipients based on a geographical location of the device of the unintended recipient with respect to the device of the message recipient.

6. The method of claim 1, wherein the method further comprises transmitting a notification to the device of the unintended recipient indicating that the secure content is accessible via the device of the unintended recipient.

7. A computing system comprising:

a network interface configured to receive an electronic message from a user device, the electronic message comprising secure content and one or more recipients; and

a processor configured to determine that a recipient of the electronic message is a member of a project group associated with an organization, and in response, identify an unintended recipient who is associated with the organization but who is not a member of the project group, wherein

the processor is further configured to control the network interface to transmit a notification to a device of the recipient indicating that access to the secure content is accessible via a device of the unintended recipient instead of a transmission of the secure content directly to the device of the recipient;

wherein the transmission comprises transmission of a notification that indicates the secure content is stored at a remote network location and is accessible to the recipient via secure login through the device of the unintended recipient;

wherein the secure content is provided to the recipient via the device of the unintended recipient in response to a biometric security identification of the recipient via the device of the unintended recipient.

8. The computing system of claim 7, wherein the project group comprises a group of users within the organization that are participating in a work-related project, and the electronic message comprises at least one of a document and a message body including secure textual content intended for members of the work-related project.

9. The computing system of claim 7, wherein the processor controls the network interface to further transmit the secure content along with the notification and enable the secure content to be stored locally on the device of the unintended recipient and accessed locally through secure login by the recipient.

10. The computing system of claim 7, wherein the processor is further configured to extract project information from an application programming interface (API) of a project manager software associated with the organization, and determine that the recipient is a member of the project group based on the extracted project information.

11. The computing system of claim 7, wherein the processor selects the unintended recipient from a group of possible unintended recipients based on a geographical location of the device of the unintended recipient with respect to the device of the message recipient.

12. The computing system of claim 7, wherein the processor is further configured to control the network interface to transmit a notification to the device of the unintended recipient indicating that the secure content is accessible via the device of the unintended recipient.

13. A non-transitory computer readable medium storing instructions that when executed by a processor causes the processor to perform a method comprising:

receiving an electronic message from a user device, the electronic message comprising secure content and one or more recipients;

determining that a recipient of the electronic message is a member of a project group associated with an organization, and in response, identifying an unintended recipient who is not a member of the project group and is associated with the organization; and

transmitting a notification to a device of the recipient indicating that access to the secure content is accessible via a device of the unintended recipient instead of transmitting the secure content directly to the device of the recipient;

wherein the transmitting comprises transmitting a notification indicating that the secure content is stored at a remote network location and is accessible to the recipient via secure login through the device of the unintended recipient;

wherein the secure content is provided to the recipient via the device of the unintended recipient in response to a biometric security identification of the recipient via the device of the unintended recipient.

14. The non-transitory computer readable medium of claim 13, wherein the project group comprises a group of users within the organization that are participating in a work-related project, and the electronic message comprises at least one of a document and a message body including secure textual content intended for members of the work-related project.

15. The non-transitory computer readable medium of claim 13, wherein the transmitting comprises transmitting the secure content with the notification and enabling the secure content to be stored locally on the device of the unintended recipient and accessed locally through secure login by the recipient.