Delivering secure content in an unsecure environment

• US 10,521,610 B1
• Filed: 06/07/2017
• Issued: 12/31/2019
• Est. Priority Date: 06/08/2016
• Status: Active Grant

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Ledet, David Gerard
• Primary Examiner(s): Shepperd, Eric W
• Application Number:
  US15/615,967
• Time in Patent Office: 937 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/222 using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04N 21/2402 Monitoring of the downstream path of the transmission network, e.g. bandwidth available traffic monitoring in data switching networks H04L43/00; monitoring data switching networks utilization H04L43/0876
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/647 Control signaling between network components and server or clients; Network processes for video distribution between server and clients, e.g. controlling the quality of the video stream, by dropping packets, protecting content from unauthorised alteration within the network, monitoring of network load, bridging between two different networks, e.g. between IP and wireless real-time session protocols H04L65/1101
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application

Abstract

The example embodiments are directed to an application and a system capable of identifying levels of secure data within electronic message content. In one example, the method includes at least one of: receiving an electronic message from a user device, the electronic message including message content and at least one recipient, determining that the message content includes a plurality of different levels of secure content corresponding to a plurality of different authentication levels, shielding each portion of the secure content, and providing an indicator indicating a level of authentication associated with each respective shielded portion of secure content from among the plurality of different levels of authentication, and transmitting the electronic message to the at least one recipient including the shielded secure content and the indications of the plurality of different levels of authentication.

Claims

1. A method comprising:

receiving an electronic message from a user device, the electronic message comprising message content and at least one recipient;

identifying, in the electronic message, a plurality of message portions as secure content;

identifying an authentication level, of one or more of a plurality of different authentication levels, corresponding to each message portion, of the plurality of message portions;

shielding the secure content by obscuring information contained in the secure content based on a corresponding authentication level;

associating an indicator indicating an authentication level associated with each respective shielded portion of secure content; and

transmitting the electronic message, including the shielded secure content and the indicators of the plurality of different levels of authentication, to a device associated with the at least one recipient to display, on a display of the device, the shielded content and the indicators.

2. The method of claim 1, wherein the shielding comprises:

overlaying a graphical user interface (GUI) object on each portion of secure content; and

generating the indicator by;

adding textual content within each GUI object indicating a level of authentication from among the different levels of authentication associated with the respective GUI object.

3. The method of claim 1, wherein the identifying the plurality of message portions as secure content comprises:

breaking a body of text included in the electronic message into a plurality of tokens,

identifying a subject matter associated with each token, and

ranking a level of security of each token based on the subject matter thereof.

4. The method of claim 1, wherein a first level of authentication of secure content comprises:

a password authentication and a second level of authentication of secure content requires a biometric authentication.

5. The method of claim 1, wherein the transmitting comprises:

transmitting the secure content associated with a first authentication level to the user device, and

transmitting the secure content associated with a second authentication level to a second device that is associated with the user device.

6. The method of claim 5, further comprising, prior to the transmitting:

identifying the second device based on network movement of the user device.

7. The method of claim 6, further comprising, prior to the transmitting:

identifying the second device based on a proximity of the user device and the second device with respect to each other.

8. A computing device comprising:

a network interface configured to receive an electronic message from a user device, the electronic message comprising message content and at least one recipient; and

a processor configured to;

identify, in the electronic message, a plurality of message portions as secure content;

identify an authentication level, of one or more of a plurality of different authentication levels, corresponding to each message portion, of the plurality of message portions, and

associate an indicator indicating an authentication level associated with each respective shielded portion of secure content,

wherein the processor is further configured to control the network interface to transmit the electronic message, including the shielded secure content and the indicators of the plurality of different levels of authentication, to a device associated with the at least one recipient to display, on a display of the device, the shielded content and the indicators.

9. The computing device of claim 8, wherein the processor is configured to:

overlay a graphical user interface (GUI) object on each portion of secure content, and

generate the indicator by adding textual content within each GUI object indicating a level of authentication from among the different levels of authentication associated with the respective GUI object.

10. The computing device of claim 8, wherein, when the processor is configured to identify the plurality of message portions as secure content, the processor is configured to:

break a body of text included in the electronic message into a plurality of tokens,

identify a subject matter associated with each token, and

rank a level of security of each token based on the subject matter thereof.

11. The computing device of claim 8, wherein a first level of authentication of secure content comprises:

a password authentication and a second level of authentication of secure content requires a biometric authentication.

12. The computing device of claim 8, wherein

the processor is configured to control the network interface to:

transmit the secure content associated with a first authentication level to the user device, and

transmit the secure content associated with a second authentication level to a second device that is associated with the user device.

13. The computing device of claim 12, wherein the processor is further configured to:

identify the second device based on network movement of the user device and the second device being similar.

14. The computing device of claim 12, wherein the processor is further configured to:

identify the second device based on a proximity of the user device and the second device with respect to each other.

15. A non-transitory computer readable medium storing instructions that when executed by a processor causes the processor to perform a method comprising:

receiving an electronic message from a user device, the electronic message comprising message content and at least one recipient;

identifying, in the electronic message, a plurality of message portions as secure content;

identifying an authentication level, of one or more of a plurality of different authentication levels, corresponding to each message portion, of the plurality of message portions;

shielding the secure content by obscuring information contained in the secure content based on a corresponding authentication level;

associating an indicator indicating an authentication level associated with each respective shielded portion of secure content; and

transmitting the electronic message, including the shielded secure content and the indicators of the plurality of different levels of authentication, to a device associated with the at least one recipient to display, on a display of the device, the shielded content and the indicators.

16. The non-transitory computer readable medium of claim 15, wherein the shielding comprises:

overlaying a graphical user interface (GUI) object on each portion of secure content; and

generating the indicator by;

adding textual content within each GUI object indicating a level of authentication from among the different levels of authentication associated with the respective GUI object.

17. The non-transitory computer readable medium of claim 15, wherein the

identifying the plurality of message portions as secure content comprises:

breaking a body of text included in the electronic message into a plurality of tokens,

identifying a subject matter associated with each token, and

ranking a level of security of each token based on the subject matter thereof.