Adhoc secure document exchange

• US 20050182821A1
• Filed: 01/19/2004
• Published: 08/18/2005
• Est. Priority Date: 01/19/2004
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Minhazuddin, Muneyb, Chan, Kevin, Scholte, Alexander Martin, Schreuder, James D.
• Granted Patent: US 7,752,269 B2
• Time in Patent Office: Days
• US Class Current: 709/207
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases

Abstract

Embodiments of the present invention are directed to a system capable of enforcing document security and delivery policies. In particular, the present invention allows for the detection and removal of files attached to electronic messages. When an attached file is removed from an electronic message, the file may be placed in secure storage. A link to the stored file is inserted in the electronic communication prior to delivery of the message to the addressee of the communication. In order to access the stored file, the recipient of the message is required to select the provided link, which establishes a secure communication channel between the secure storage device and the receiving client computer. Optionally, the recipient may also be required to provide a password and/or digital certificate in order to access the stored file.

Claims

1. A computational component for performing a method, the method comprising:

detecting an attachment to a first electronic message;

removing said attachment from said first electronic message;

storing said attachment in a secure storage device;

inserting a link to said stored attachment in said first electronic message; and

delivering said first electronic message with said inserted link to a delivery address

2. The method of claim 1, further comprising:

receiving a request for said stored attachment from said delivery address; and

delivering said attachment to said delivery address.

3. The method of claim 2, wherein said delivering comprises delivering said attachment over a secure communication channel.

4. The method of claim 1, further comprising:

receiving a request for said stored attachment;

requesting a password; and

in response to receiving said password, delivering said attachment.

5. The method of claim 1, further comprising:

generating a second electronic message, wherein said second electronic message comprises a password required to access said stored attachment; and

delivering said second electronic message to said delivery address.

6. The method of claim 1, wherein said first electronic message is associated with said delivery address, and wherein said delivery address is outside of a domain from which said electronic message originates.

7. The method of claim 1, wherein said secure storage device comprises a hypertext transfer protocol secure server.

8. The method of claim 1, wherein said detecting comprises monitoring electronic message traffic at a firewall.

9. The method of claim 1, wherein said link to said stored attachment in said first electronic message comprises an HTTPS link.

10. The method of claim 1, wherein said computational component comprises a logic circuit.

11. The method of claim 1, wherein said computational component comprises a computer readable storage medium containing instructions for performing the method.

12. A method for enforcing security policies, comprising:

generating a first electronic message;

attaching a first file to said first electronic message;

initiating delivery of said first electronic message and said first file;

intercepting said first electronic message and said first file;

removing said first file from said first electronic message;

storing said first file;

inserting a first link to said stored first file in said first electronic message; and

delivering said first electronic message and said first link to a first delivery address.

13. The method of claim 12, further comprising:

receiving a request for said stored first file; and

delivering said stored first file.

14. The method of claim 12, further comprising:

receiving a request for said stored first file;

requesting a password; and

in response to receiving a valid password, delivering said stored first file.

15. The method of claim 12, further comprising:

detecting a security level associated with said first file, wherein said first file is determined to be associated with a first security level;

generating a second electronic message;

attaching a second file to said second electronic message;

initiating delivery of said second electronic message and said second file;

intercepting said second electronic and said second file; and

detecting a security level associated with said second file, wherein said second file is determined to be associated with a second security level.

16. The method of claim 15, further comprising:

removing said second file from said first electronic message;

storing said second file;

inserting a second link to said second file in said second electronic message;

delivering said second electronic message and said second link to a second delivery address;

generating a password notification message, wherein said password notification message includes a password; and

delivering said password notification message to at least one of said second delivery address and a third delivery address associated with said second delivery address.

17. The method of claim 16, wherein said password notification message comprises a third electronic message.

18. The method of claim 16, wherein said password notification message is delivered to a third delivery address, and wherein said third delivery address comprises a telephone number.

19. A document delivery security system, comprising:

a first client computer;

a first communication network;

at least a first server computer interconnected to said client computer by said first communication network;

a communication interface between said first server computer and a second communication network;

software running on said at least a first server computer operable to detect an electronic message having an attached file and marked for delivery over said second communication network, and operable to remove said file from said electronic message, wherein said electronic message is provided to said communication interface for delivery to a delivery address without said file; and

storage interconnected to said first server computer, wherein said file is stored in said storage.

20. The system of claim 19, wherein said at least a first server comprises a firewall.

21. The system of claim 19, wherein said second communication network comprises the Internet.

22. The system of claim 19, wherein said first communication network comprises a private intranet.

23. A communication system, comprising:

means for receiving a first communication from a first communication network;

means for detecting an attachment to said first communication;

means for removing said detected attachment from said first communication;

means for storing said removed attachment;

means for inserting a link to said stored attachment in said first communication; and

means for providing said first communication with said inserted link to a second communication network.

24. The system of claim 23, further comprising:

means for generating a password required for access to said stored attachment; and

means for communicating said password to a delivery address that is one of associated with and identical to a delivery address of said first communication.

25. The system of claim 23, further comprising means for securely delivering said stored attachment to said delivery address.