Authorizing control for electronic communications

• US 20070005708A1
• Filed: 06/21/2005
• Published: 01/04/2007
• Est. Priority Date: 06/21/2005
• Status: Abandoned Application

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Juliano, Cornell
• Application Number:
  US11/157,590
• Publication Number:
  US 20070005708A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/00 Administration; Management

Abstract

An e-mail system includes an authorization control configurable to compare outgoing e-mail addresses with a list of authorized recipients. The authorization control aids in preventing transmission of e-mail to unintended recipients. The authorization control is configurable for use in a range of security environments.

Claims

1. In an e-mail messaging system that provides users of an e-mail capable system with e-mail service, said e-mail capable system handling one or more types of sensitive information, a method for authorizing distribution of e-mail comprising:

assembling an authorization list including e-mail addresses of persons or entities authorized to receive each type of sensitive information;

associating each outgoing e-mail with at least one authorization list;

comparing an e-mail address of each said outgoing e-mail to said at least one authorization list;

sending said e-mail to said addressee if the e-mail address is included in said at least one authorization list;

or

producing an alert if said e-mail address is not included in said at least one authorization list; and

requiring a further action before sending said e-mail.

2. The method of claim 1, wherein said associating comprises:

generating a request to designate said at least one authorization list.

3. The method of claim 2, wherein said request to designate is mandatory.

4. The method of claim 1, wherein said associating comprises:

evaluating said e-mail message to detect each type of sensitive information; and

associating said e-mail message with an authorization list for each type of sensitive information detected.

5. The method of claim 1, wherein said e-mail capable system includes a plurality of networked computers and said associating comprises:

designating an authorization list for each of said networked computers; and

said comparing comprises;

comparing each outgoing e-mail from each said networked computer to the authorization list for said networked computer.

6. The method of claim 1, wherein said assembling comprises:

limiting said assembling for one or more types of sensitive information to designated personnel.

7. The method of claim 1, wherein said assembling comprises:

allowing a user of said e-mail capable system to assemble or modify the authorization list for one or more types of sensitive information.

8. The method of claim 1, wherein said requiring a further action comprises:

requiring that said e-mail address is added to said authorization list.

9. The method of claim 1, wherein said requiring a further action comprises:

requiring an explicit override to authorize sending said e-mail.

10. An e-mail capable system providing e-mail service, said e-mail capable system comprising:

a memory;

a user interface including a display and input devices;

a processor functionally connected to said memory and said user interface;

an e-mail program resident in said memory for handling incoming and outgoing e-mails and responsive to said input devices to generate an e-mail form on said display, said e-mail form including at least an address field and a content field, said e-mail program including an authorization module configurable to compare an e-mail address of each outgoing e-mail to an authorization list of e-mail addresses authorized to receive e-mail from said e-mail capable system;

said e-mail program configured to instruct said processor to perform operations including;

sending said outgoing e-mail if the e-mail address is included in said authorization list;

or

producing an alert if said e-mail address is not included in said authorization list; and

requiring a further action before sending said outgoing e-mail.

11. The e-mail capable system of claim 10, wherein said authorization module compares the e-mail address of each outgoing e-mail to a plurality of authorization lists, and said operations include:

associating each outgoing e-mail with at least one of said authorization lists.

12. The e-mail capable system of claim 10, wherein said e-mail capable system handles sensitive information and said authorization module includes e-mail addresses of persons or entities authorized to receive said sensitive information, and said authorization module includes an algorithm to evaluate each outgoing e-mail message to detect sensitive information and compares said e-mail address to said authorization list only upon detection of said sensitive information.

13. The e-mail capable system of claim 10, wherein said authorization module includes a plurality of authorization lists and said e-mail form includes a field requiring the designation of at least one authorization list to which the address of an outgoing e-mail message input into said e-mail form will be compared.

14. The e-mail capable system of claim 10, wherein said authorization module allows unrestricted modification of said authorization list.

15. The e-mail capable system of claim 10, wherein said authorization module includes security measures restricting modification of said authorization list.

16. A computer program product for use in a computer-implemented process for authorizing the distribution of e-mail containing one or more types of sensitive information from an e-mail capable system, the computer program product comprising:

a medium readable by a computer, the computer readable medium having computer program code adapted for;

assembling an authorization list including e-mail addresses of persons or entities authorized to receive each type of sensitive information;

associating each outgoing e-mail with at least one authorization list;

comparing an e-mail address of each said outgoing e-mail to said at least one authorization list;

sending said outgoing e-mail to said addressee if the e-mail address is included in said at least one authorization list;

or producing an alert if said e-mail address is not included in said at least one authorization list; and

requiring a further action before sending said outgoing e-mail.

17. The computer program product of claim 16, wherein said associating includes:

generating a request to designate at least one authorization list for each outgoing email.

18. The computer program product of claim 16, wherein said associating includes:

evaluating said outgoing e-mail message to detect sensitive information; and

associating said e-mail with an authorization list for the detected sensitive information.

19. The computer program product of claim 16, wherein said program code comprises:

restricting access to said assembling.

20. The computer program product of claim 16, wherein said further action comprises:

permitting said e-mail address to be added to said authorization list.

21. The computer program product of claim 16, wherein said further action comprises:

requiring an explicit override to authorize sending said outgoing e-mail.