Systems and methods for detecting, reporting and cleaning metadata from inbound attachments

• US 10,536,408 B2
• Filed: 09/16/2015
• Issued: 01/14/2020
• Est. Priority Date: 09/16/2015
• Status: Active Grant

• Current Assignee: Litera Technology LLC
• Original Assignee: Litera Technology LLC
• Inventors: Massand, Deepak
• Primary Examiner(s): Sison, June Y
• Application Number:
  US14/856,285
• Publication Number:
  US 20170078234A1
• Time in Patent Office: 1,581 Days
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

Systems and methods consistent with various disclosed embodiments provide for detecting, reporting, removing and cleaning metadata from inbound email attachments. In one embodiment, a system is disclosed that may be associated with a client device operated by an electronic message recipient. The system may include a memory storing instructions and one or more processors configured to execute the instructions to perform one or more operations. The operations may include intercepting an inbound electronic message sent to the recipient and determining that an electronic document attached to the inbound electronic message includes metadata. The operations may also include creating a modified electronic document by removing at least a portion of the metadata from the attached electronic document, generating a report describing metadata included in the attached electronic document, and generating information for sending the report and the inbound electronic message with the modified electronic document to the client device.

Claims

1. A computer-based system for cleaning metadata from inbound attachments, comprising:

an intermediate computer that is associated with a client device operated by an electronic message recipient, the intermediate computer comprising;

a memory storing instructions; and

one or more processors configured to execute the instructions to;

intercept an inbound electronic message sent to the recipient,

determine that an electronic document attached to the inbound electronic message includes metadata,

create a modified electronic document by removing at least a portion of the metadata from the attached electronic document,

generate a report describing metadata included in the attached electronic document, and

generate information for sending the report and the inbound electronic message with the modified electronic document to the client device.

2. The system of claim 1, wherein the one or more processors are further configured to execute the instructions to;

determine that at least a portion of the metadata from the attached electronic document cannot be removed, and

send the attached electronic document to a quarantine storage.

3. The system of claim 2, wherein the one or ore processors are further configured to execute the instructions to:

generate an entry in a log including an identification of the attached electronic document and an indication that at least a portion of the metadata from the attached electronic document could not be removed; and

provide the log to the client device.

4. The system of claim 1, wherein the one or more processors are further configured to execute the instructions to intercept the inbound electronic message from an intermediate email server associated with the client device.

5. The system of claim 1, wherein the one or more processors are further configured to execute the instructions to send the inbound electronic message with the modified electronic document to an intermediate email server associated with the client device.

6. The system of claim 1, wherein the removed portion of the metadata includes descriptive metadata or administrative metadata.

7. The system of claim 1, wherein the descriptive metadata includes author data, editing history, or an indication of modified content in the attached electronic document.

8. A computer-based method for cleaning metadata from inbound attachments, comprising:

intercepting, at an intermediate computer that is associated with a client device operated by an electronic message recipient, an inbound electronic message sent to the recipient,

determining that an electronic document attached to the inbound electronic message includes metadata,

creating a modified electronic document by removing at least a portion of the metadata from the attached electronic document,

generating a report describing metadata included in the attached electronic document, and

generating information for sending the report and the electronic inbound message with the modified electronic document to the client device.

9. The method of claim 8, further comprising:

determining that at least a portion of the metadata from the attached electronic document cannot be removed, and

sending the attached electronic document to a quarantine storage.

10. The method of claim 9, further comprising:

generating an entry in a log including an identification of the attached electronic document and an indication that at least a portion of the metadata from the attached electronic document could not be removed; and

providing the log to the client device.

11. The method of claim 8, further comprising intercepting the inbound electronic message from an intermediate email server associated with the client device.

12. The method of claim 8, further comprising sending the inbound electronic message with the modified electronic document to an intermediate email server associated with the client device.

13. The method of claim 8, wherein the removed portion of the metadata includes descriptive metadata or administrative metadata.

14. The method of claim 8, wherein the descriptive metadata includes author data, editing history, or an indication of modified content in the attached electronic document.

15. A non-transitory computer-readable storage medium storing instructions for cleaning metadata from inbound attachments, the instructions causing one or more computer processors to perform operations comprising:

intercepting, at an intermediate computer that is associated with a client device operated by an electronic message recipient, an inbound electronic message sent to the recipient,

determining that an electronic document attached to the inbound electronic message includes metadata,

creating a modified electronic document by removing at least a portion of the metadata from the attached electronic document,

generating a report describing metadata included in the attached electronic document, and

generating information for sending the report and the electronic inbound message with the modified electronic document to the client device.

16. The storage medium of claim 15, wherein the instructions cause the one or more processors to further perform the operations of:

determining that at least a portion of the metadata from the attached electronic document cannot be removed, and

sending the attached electronic document to a quarantine storage.

17. The storage medium of claim 16, wherein the instructions cause the one or more processors to further perform the operations of:

generating an entry in a log including an identification of the attached electronic document and an indication that at least a portion of the metadata from the attached electronic document could not be removed; and

providing the log to the client device.

18. The storage medium of claim 15, wherein the instructions cause the one or more processors to further perform the operations of intercepting the inbound electronic message from an intermediate email server associated with the client device.

19. The storage medium of claim 15, wherein the instructions cause the one or more processors to further perform the operations of sending the inbound electronic message with the modified electronic document to an intermediate email server associated with the client device.

20. The storage medium of claim 15, wherein the removed portion of the metadata includes descriptive metadata comprising author data, editing history, or an indication of modified content in the attached electronic document.