Method and apparatus for modifying messages based on the presence of pre-selected data

• US 20060184549A1
• Filed: 02/14/2005
• Published: 08/17/2006
• Est. Priority Date: 02/14/2005
• Status: Abandoned Application

• Current Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Rowney, Kevin T., Bothwell, Eric, Fridman, Vitali
• Application Number:
  US11/058,551
• Publication Number:
  US 20060184549A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]

Abstract

A method and apparatus for modifying messages based on the presence of pre-selected data is described. In one embodiment, the method includes determining that a message transmitted to a recipient via a network includes pre-selected data. The pre-selected data contains information from at least one random row within the tabular structure of source data. The method further includes modifying the message to indicate the presence of the pre-selected data in the message, and sending the modified message to the recipient.

Claims

1. A method comprising:

determining that a message transmitted to a recipient via a network includes pre-selected data from at least one random row within a tabular structure of source data;

modifying the message to indicate a presence of the pre-selected data in the message; and

sending the modified message to the recipient.

2. The method of claim 1 wherein the message is any one of an email message, an instant messaging (IM) message, a message exchange during a telnet session, a message exchanged during a file transfer protocol (FTP) session, a message exchanged during a hypertext transfer protocol (HTTP) session, a message exchanged during a single object access protocol (SOAP) session, a message exchanged during a transmission control protocol/Intemet protocol (TCP/IP) session, a message exchanged during a user datagram protocol (UDP) session, a message exchanged during an Ethernet session, and a message exchanged during a 801.11 session.

3. The method of claim 1 wherein modifying the message comprises:

adding information indicative of the presence of the pre-selected data to a body of the message to warn the recipient.

5. The method of claim 1 wherein modifying the message comprises:

adding information indicative of the presence of the pre-selected data to a subject line of the message to warn the recipient.

6. The method of claim 1 wherein modifying the message comprises:

adding information indicative of the presence of the pre-selected data to a header of the message to notify a system responsible for subsequent processing of the message.

7. The method of claim 6 wherein adding the information indicative of the presence of the pre-selected data to the header of the message comprises:

modifying message header flags.

8. The method of claim 1 wherein modifying the message comprises:

determining that at least a portion of the pre-selected data needs to be hidden;

redacting the pre-selected data; and

transmitting the message with the redacted pre-selected data to the recipient.

9. The method of claim 8 wherein redacting the pre-selected data comprises:

removing an attachment including the pre-selected data from the message.

10. The method of claim 1 wherein modifying the message comprises:

storing the message including the pre-selected data;

creating a substitute message containing a secure link pointing to the stored message; and

sending the substitute message to the recipient.

11. The method of claim 1 further comprising:

determining that the message does not contain the pre-selected data; and

adding to the message information indicative of lack of the pre-selected data in the message.

12. The method of claim 1 wherein the message is modified in accordance with a message action policy identifying at least one modification to be applied to the message if one or more rules of the message action policy are satisfied.

13. The method of claim 12 wherein the one or more rules of the message action policy are selected from the group consisting of

one or more rules pertaining to the pre-selected data,

one or more rules pertaining to characteristics of the at least one modification,

a rule specifying an expression pattern,

a rule specifying a message attachment type,

a rule specifying a message attachment size,

a rule specifying a sender identifier pattern,

a rule specifying a recipient identifier pattern,

a rule specifying keywords,

a rule specifying a file attachment name pattern,

a rule specifying a protocol to carry the message, and

a rule specifying a newsgroup name.

14. The method of claim 12 wherein the message action policy comprises an exception clause identifying an exception to the one or more rules.

15. The method of claim 14 wherein the exception clause declares at least one of a sender and a recipient authorized to have access to the pre-selected data.

16. The method of claim 14 wherein the exception clause requires that a message containing a header identifying the message as marketing material be sent to the recipient without being searched for the pre-selected data.

17. The method of claim 12 wherein the message action policy specifies additional conditions for applying the at least one modification, the additional conditions pertaining to historical data associated with any one of a sender and the recipient.

4. The method of claim 4 wherein adding the information indicative of the presence of the pre-selected data to the body of the message comprises:

extracting the pre-selected data from the message;

reconstituting the extracted pre-selected data as an attachment; and

adding to the message body information indicating that the attachment contains sensitive data.

18. A method comprising:

determining that a message transmitted to a recipient via a network includes sensitive data;

modifying the message by redacting the sensitive data; and

transmitting the modified message to the recipient.

19. The method of claim 18 wherein the message is any one of an email message, an instant messaging (IM) message, a message exchange during a telnet session, a message exchanged during a file transfer protocol (FTP) session, a message exchanged during a hypertext transfer protocol (HTTP) session, a message exchanged during a single object access protocol (SOAP) session, a message exchanged during a transmission control protocol/Internet protocol (TCP/IP) session, a message exchanged during a user datagram protocol (UDP) session, a message exchanged during an Ethernet session, and a message exchanged during a 801.11 session.

20. The method of claim 18 further comprising:

sending a copy of the message prior to redaction to any one of a supervisor of a sender and an archiving server.

21. The method of claim 18 wherein redacting the pre-selected data comprises:

removing an attachment including the pre-selected data from the message.

22. The method of claim 18 wherein the pre-selected data is redacted in accordance with a message action policy requiring redaction if one or more rules of the message action policy are satisfied.

23. The method of claim 22 wherein the one or more rules of the message action policy are selected from the group consisting of

one or more rules pertaining to the pre-selected data,

a rule specifying an expression pattern,

a rule specifying a message attachment type,

a rule specifying a message attachment size,

a rule specifying a sender identifier pattern,

a rule specifying a recipient identifier pattern,

a rule specifying keywords,

a rule specifying a file attachment name pattern,

a rule specifying a protocol to carry the message, and

a rule specifying a newsgroup name.

24. An apparatus comprising:

means for determining that a message transmitted to a recipient via a network includes pre-selected data, the pre-selected data being from at least one random row within a tabular structure of source data;

means for modifying the message to indicate a presence of the pre-selected data in the message; and

means for sending the modified message to the recipient.

25. A system comprising:

a violation detector to determine that a message transmitted to a recipient via a network includes pre-selected data, the pre-selected data being from at least one random row within a tabular structure of source data;

a message modifier to modify the message to indicate a presence of the pre-selected data in the message; and

a message router to send the modified message to the recipient.

26. A computer readable medium that provides instructions, which when executed on a processing system cause the processing system to perform a method comprising:

determining that a message transmitted to a recipient via a network includes pre-selected data, the pre-selected data being from at least one random row within a tabular structure of source data;

modifying the message to indicate a presence of the pre-selected data in the message; and

sending the modified message to the recipient.

27. A computer readable medium that provides instructions, which when executed on a processing system cause the processing system to perform a method comprising:

determining that a message transmitted to a recipient via a network includes sensitive data;

redacting the sensitive data in real time; and

transmitting the message with the redacted data to the recipient.