Method and system for electronic communication risk management

• US 20060174111A1
• Filed: 09/06/2005
• Published: 08/03/2006
• Est. Priority Date: 09/08/2004
• Status: Abandoned Application

• Current Assignee: Paul Edward Burns
• Original Assignee: Paul Edward Burns
• Inventors: Burns, Paul Edward
• Application Number:
  US11/220,366
• Publication Number:
  US 20060174111A1
• Time in Patent Office: Days
• US Class Current: 713/166
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A method and system for electronic communication risk management through implementation of rule sets that impose electronic communication limitation options on electronic communications that meet the criteria for inclusion in an electronic communication risk level category. One such electronic communication limitation option gives an electronic communication a temporal life span after which it is automatically deleted from memory locations in which a copy of it is electronically stored. A second limitation option precludes an intended recipient from forwarding, copying, and/or printing the received EC. A third limitation option blocks electronic communications from being sent to certain recipients until prior authorization is obtained. The invention reduces the risks associated with electronic communication proliferation and inadequately managed electronic communications.

Claims

1-28. -28. (canceled)

29. A method for electronic communication risk management, comprising the steps of:

establishing an electronic communication risk level category with a risk level rule set providing for saving of one or a plurality of copies of electronic communications satisfying one or a plurality of saving criteria until expiration of a predetermined temporal life span; and

precluding the deletion of one or a plurality of copies of electronic communications stored in one or a plurality of electronic storage locations satisfying such saving criteria until such predetermined temporal life span expires.

30. A method for electronic communication risk management, comprising the steps of:

assigning a temporal life span to an electronic communication; and

precluding the deletion of one or a plurality of copies of such electronic communication stored in one or a plurality of electronic storage locations until such predetermined temporal life span expires.

31. A method for electronic communication risk management, comprising the steps of:

establishing an electronic communication risk level category with a risk level rule set providing for saving of one or a plurality of copies of electronic communications satisfying one or a plurality of saving criteria until expiration of a predetermined temporal life span and subsequent deletion thereof;

precluding the deletion of one or a plurality of copies of electronic communications stored in one or a plurality of electronic storage locations satisfying such saving criteria until Such predetermined temporal life span expires; and

deleting automatically one or a plurality of copies of such electronic communications stored in one or a plurality of electronic storage locations after such predetermined temporal life span expires.

32. The method of claim 31, wherein the step of deleting applies to all copies of such electronic communications in all such electronic storage locations in which copies of such electronic communications are stored.

33. The method of claim 31, further comprising:

after the step of deleting, the step of overwriting such one or a plurality of copies of such electronic communications in such electronic storage locations that were deleted to preclude recovery of such electronic communications.

34. The method of claim 32, further comprising:

after the step of deleting, the step of overwriting such one or a plurality of copies of such electronic communications in such electronic storage locations that were deleted to preclude recovery of such electronic communications.

35. A method for electronic communication risk management, comprising the steps of:

assigning a temporal life span to an electronic communication;

precluding the deletion of one or a plurality of copies of such electronic communication stored in one or a plurality of electronic storage locations until such predetermined temporal life span expires; and

deleting automatically one or a plurality of copies of such electronic communication stored in one or a plurality of electronic storage locations after such predetermined temporal life span expires.

36. The method of claim 35, wherein the step of deleting applies to all copies of such electronic communication in all such electronic storage locations in which copies of such electronic communication are stored.

37. The method of claim 35, further comprising:

after the step of deleting, the step of overwriting such one or a plurality of copies of such electronic communication in such electronic storage locations that were deleted to preclude recovery of such electronic communication.

38. The method of claim 36, further comprising:

after the step of deleting, the step of overwriting such one or a plurality of copies of such electronic communication in such electronic storage locations that were deleted to preclude recovery of such electronic communication.

39. A method for electronic communication risk management, comprising the steps of:

establishing a plurality of electronic communication risk level categories, wherein one of said electronic communication risk level categories comprises a risk level rule set providing for one or a plurality of electronic communication limitation options to be applicable to one or a plurality of electronic communications satisfying one or a plurality of limitation criteria; and

applying such one or a plurality of electronic communication limitation options to such one or a plurality of electronic communications.

87. The method of claim 39,

wherein such one or a plurality of limitation criteria comprise electronic communications originating from one or any of a plurality of predetermined authors or senders;

and

wherein such one or a plurality of electronic communication limitation options comprise precluding an intended electronic communication satisfying such limitation criteria from being delivered to potential recipients who are members of a predefined group without prior authorization.

88. The method of claim 87, further comprising the steps of:

requesting, by any of such authors or senders, an authority to authorize delivery of such intended electronic communication to one or more intended recipients who are within such predefined group certain of such potential recipients;

forwarding an electronic copy of such request and such intended electronic communication to such authority;

communicating electronically such authority'"'"'s response to such author or sender;

delivering such intended electronic communication to such intended recipients if such authority grants such request; and

blocking delivery of such intended electronic communication to such intended recipients if such authority denies such request.

89. The method of claim 87, further comprising the steps of:

requesting electronically, by any of such authors or senders, an authority to give authorization to enable delivery of such intended electronic communications to such intended recipients;

forwarding an electronic copy of such request and such intended electronic communication to such authority;

enabling such authority to modify such intended electronic communication before granting such request;

communicating such authority'"'"'s response to such author or sender and such authority'"'"'s modified version of such intended electronic communication to such author or sender;

delivering such intended electronic communication, as modified by such authority, to such intended recipients if such authority grants such request and if such author or sender does not cancel delivery of such intended electronic communication; and

blocking delivery of such intended electronic communication to such intended recipients if such authority denies such request or such author or sender does not cancel delivery of such intended electronic communication.

90. The method of claim 88, further comprising the step of storing a copy of such intended electronic communication delivered to such intended recipients in one or more predetermined storage locations.

91. The method of claim 89, further comprising the step of storing a copy of such intended electronic communication delivered to such intended recipients in one or more predetermined storage locations.

92. The method of claim 90, further comprising the step of forwarding a copy of such intended electronic communication delivered to such intended recipients to predetermined authorized persons.

93. The method of claim 91, further comprising the step of forwarding a copy of such intended electronic communication delivered to such intended recipients to predetermined authorized persons.

94. The method of claim 87, wherein such predefined group contains potential recipients who are outside of such author or sender'"'"'s organization.

95. The method of claim 87, wherein such predefined group contains potential recipients who are not authorized to receive confidential information of such authors'"'"' or senders'"'"' organization.

96. The method of claim 87, wherein such predefined group contains potential recipients who are not authorized to receive information from such authors or senders.

97. The method of claim 87, wherein such predefined group contains potential recipients who are not within the department, division or other sub-group of such authors or senders within such authors'"'"' or senders'"'"' organization.

40. A method for electronic communication risk management, comprising the steps of:

establishing an electronic communication risk level category with a risk level rule set providing for one or a plurality of electronic communication limitation options to be applicable to one or a plurality of electronic communications satisfying one or a plurality of limitation criteria;

identifying one or a plurality of exclusionary criteria for such one or a plurality of such electronic communications satisfying one or a plurality of limitation criteria; and

applying such one or a plurality of electronic communication limitation options to such one or a plurality of electronic communications that do not satisfy such one or a plurality of exclusionary criteria.

41. The method of claim 40, further comprising the steps of:

enabling a recipient of any of such electronic communications to electronically send a request to eliminate certain of such electronic communication limitation options; and

eliminating such certain of such electronic communication limitation options in response to such request.

42. The method of claim 40, further comprising the steps of:

enabling a recipient of any of such electronic communications or another person to electronically send a request to the sender or other authority to eliminate one or more of such electronic communication limitation options; and

eliminating such certain of such electronic communication limitation options in response to such request.

43-86. -86. (canceled)

98-105. -105. (canceled)

106. A method for managing electronic communications comprising:

establishing a plurality of risk level categories for electronic communications;

establishing a risk level rule set for each of said risk level categories, said risk level rule set comprising at least one rule;

generating at least one electronic communication assigned to one of said risk level categories; and

executing at least one rule on said electronic communication in accordance with said risk level rule set associated with said risk level category for said electronic communication.

107. The method as set forth in claim 106, wherein said risk level category for said electronic communications comprises informal electronic communications.

108. The method as set forth in claim 106, wherein said risk level category for said electronic communications comprises a category of electronic communications to be saved for a set period of time.

109. The method as set forth in claim 108, wherein said set period of time corresponds to an audit period.

110. The method as set forth in claim 108, wherein said set period of time corresponds to a litigation hold period.

111. The method as set forth in claim 106, wherein said risk level category for said electronic communications comprises a category of electronic communications that includes confidential communications.

112. The method as set forth in claim 106, wherein said risk level category for said electronic communications comprises a category of electronic communications that identifies a group of individual electronic communication users that have insufficient authority to send electronic communications.

113. The method as set forth in claim 106, wherein said rule for a risk level rule set comprises deleting said electronic communication after a predetermined amount of time.

114. The method as set forth in claim 106, wherein said rule for a risk level rule set comprises saving said electronic communication a predetermined amount of time.

115. The method as set forth in claim 114, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.

116. The method as set forth in claim 106, wherein said rule for a risk level rule set comprises limiting further operation on said electronic communications.

117. The method as set forth in claim 116, wherein said rule for limiting further operation on said electronic communications comprises prohibiting forwarding of said electronic communications.

118. The method as set forth in claim 116, wherein said rule for limiting further operation on said electronic communications comprises prohibiting copying of said electronic communications.

119. The method as set forth in claim 116, wherein said rule for limiting further operation on said electronic communication comprises prohibiting printing of said electronic communications.

120. The method as set forth in claim 116, wherein said rule for limiting further operation on said electronic communication comprises prohibiting saving of said electronic communications.

121. The method as set forth in claim 106, wherein said rule for a risk level rule set comprises excluding one or more electronic communications in said risk level category from operation of said rule based on one or more attributes.

122. The method as set forth in claim 106, wherein said rule for a risk level rule set comprises blocking said electronic communication from exiting a network prior to authorization.

123. A method for managing electronic communications comprising:

establishing a risk level rule set for electronic communications comprising at least one rule;

generating at least one electronic communication assigned to said risk level rule set; and

excluding at least one electronic communications in said risk level category from operation of said rule based on at least one attribute.

124. A method for managing electronic communications comprising:

establishing a risk level rule set for electronic communications comprising at least one rule;

generating at least one electronic communication assigned to said risk level rule set; and

preventing said electronic communication assigned to said risk level rule set from being deleted for a predetermined amount of time in accordance with said rule.

125. The method as set forth in claim 124, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.

126. A computer readable medium comprising a plurality of instructions, which when executed on a computer, causes the computer to perform the steps of:

establishing a plurality of risk level categories for electronic communications;

establishing a risk level rule set for each of said risk level categories, said risk level rule set comprising at least one rule;

generating at least one electronic communication assigned to one of said risk level categories; and

executing at least one rule on said electronic communication in accordance with said risk level rule set associated with said risk level category for said electronic communication.

127. The computer readable medium as set forth in claim 126, wherein said risk level category for said electronic communications comprises informal electronic communications.

128. The computer readable medium as set forth in claim 126, wherein said risk level category for said electronic communications comprises a category of electronic communications to be saved for a set period of time.

129. The computer readable medium as set forth in claim 128, wherein said set period of time corresponds to an audit period.

130. The computer readable medium as set forth in claim 128, wherein said set period of time corresponds to a litigation hold period.

131. The computer readable medium as set forth in claim 126, wherein said risk level category for said electronic communications comprises a category of electronic communications that includes confidential communications.

132. The computer readable medium as set forth in claim 126, wherein said risk level category for said electronic communications comprises a category of electronic communications that identifies a group of individual electronic communication users that have insufficient authority to send electronic communications.

133. The computer readable medium as set forth in claim 126, wherein said rule for a risk level rule set comprises deleting said electronic communication after a predetermined amount of time.

134. The computer readable medium as set forth in claim 133, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.

135. The computer readable medium as set forth in claim 126, wherein said rule for a risk level rule set comprises limiting further operation on said electronic communications.

136. The computer readable medium as set forth in claim 135, wherein said rule for limiting further operation on said electronic communications comprises prohibiting forwarding of said electronic communications.

137. The computer readable medium as set forth in claim 135, wherein said rule for limiting further operation on said electronic communications comprises prohibiting copying of said electronic communications.

138. The computer readable medium as set forth in claim 135, wherein said rule for limiting further operation on said electronic communication comprises prohibiting printing of said electronic communications.

139. The computer readable medium as set forth in claim 135, wherein said rule for limiting further operation on said electronic communication comprises prohibiting saving of said electronic communications.

140. The computer readable medium as set forth in claim 126, wherein said rule for a risk level rule set comprises excluding one or more electronic communications in said risk level category from operation of said rule based on one or more attributes.

141. The computer readable medium as set forth in claim 126, wherein said rule for a risk level rule set comprises blocking said electronic communication from exiting a network prior to authorization.

133-1. The computer readable medium as set forth in claim 126, wherein said rule for a risk level rule set comprises saving said electronic communication a predetermined amount of time.

142. A computer readable medium comprising a plurality of instructions, which when executed on a computer, causes the computer to perform the steps of:

establishing a risk level rule set for electronic communications comprising at least one rule;

generating at least one electronic communication assigned to said risk level rule set; and

excluding at least one electronic communications in said risk level category from operation of said rule based on at least one attribute.

143. A computer readable medium comprising a plurality of instructions, which when executed on a computer, causes the computer to perform the steps of:

establishing a risk level rule set for electronic communications comprising at least one rule;

generating at least one electronic communication assigned to said risk level rule set; and

preventing said electronic communication assigned to said risk level rule set from being deleted for a predetermined amount of time in accordance with said rule.

144. The computer readable medium as set forth in claim 143, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.

145. A system for managing electronic communications comprising:

network; and

at least one computer, coupled to said network, for establishing a plurality of risk level categories for electronic communications, and for establishing a risk level rule set for each of said risk level categories, said risk level rule set comprising at least one rule, said computer further for generating at least one electronic communication assigned to one of said risk level categories, and for executing at least one rule on said electronic communication in accordance with said risk level rule set associated with said risk level category for said electronic communication.

146. The system as set forth in claim 145, wherein said risk level category for said electronic communications comprises informal electronic communications.

147. The system as set forth in claim 145, wherein said risk level category for said electronic communications comprises a category of electronic communications to be saved for a set period of time.

148. The system as set forth in claim 147, wherein said set period of time corresponds to an audit period.

149. The system as set forth in claim 147, wherein said set period of time corresponds to a litigation hold period.

150. The system as set forth in claim 145, wherein said risk level category for said electronic communications comprises a category of electronic communications that includes confidential communications.

151. The system as set forth in claim 145, wherein said risk level category for said electronic communications comprises a category of electronic communications that identifies a group of individual electronic communication users that have insufficient authority to send electronic communications.

152. The system as set forth in claim 145, wherein said rule for a risk level rule set comprises deleting said electronic communication after a predetermined amount of time.

153. The system as set forth in claim 145, wherein said rule for a risk level rule set comprises saving said electronic communication a predetermined amount of time.

154. The system as set forth in claim 153, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.

155. The system as set forth in claim 145, wherein said rule for a risk level rule set comprises limiting further operation on said electronic communications.

156. The system as set forth in claim 155, wherein said rule for limiting further operation on said electronic communications comprises prohibiting forwarding of said electronic communications.

157. The system as set forth in claim 155, wherein said rule for limiting further operation on said electronic communications comprises prohibiting copying of said electronic communications.

158. The system as set forth in claim 155, wherein said rule for limiting further operation on said electronic communication comprises prohibiting printing of said electronic communications.

159. The system as set forth in claim 155, wherein said rule for limiting further operation on said electronic communication comprises prohibiting saving of said electronic communications.

160. The system as set forth in claim 145, wherein said rule for a risk level rule set comprises excluding one or more electronic communications in said risk level category from operation of said rule based on one or more attributes.

161. The system as set forth in claim 145, wherein said rule for a risk level rule set comprises blocking said electronic communication from exiting a network prior to authorization.

162. A system for managing electronic communications comprising:

network; and

at least one computer, coupled to said network, for establishing a risk level rule set for electronic communications comprising at least one rule, for generating at least one electronic communication assigned to said risk level rule set, and for excluding at least one electronic communications in said risk level category from operation of said rule based on at least one attribute.

163. A system for managing electronic communications comprising:

network; and

at least one computer, coupled to said network, for establishing a risk level rule set for electronic communications comprising at least one rule, for generating at least one electronic communication assigned to said risk level rule set, and for preventing said electronic communication assigned to said risk level rule set from being deleted for a predetermined amount of time in accordance with said rule.

164. The system as set forth in claim 163, wherein said rule for a risk level rule set further comprises deleting said electronic communication after a predetermined amount of time.