E-mail firewall with stored key encryption/decryption
First Claim
1. A method for filtering e-mail messages transmitted from an external site to an internal site associated with a first policy, comprising:
- i. intercepting an e-mail message having a sender address associated with an external site;
ii. detecting whether the message includes a digital signature;
iii. applying at least one policy condition to said e-mail message, said policy condition applied by reference to said digital signature, said applying providing a policy application result;
iv. applying at least a second policy condition to said e-mail message in response to a predetermined condition of the digital signature, the second policy condition selected by reference to an identity associated with the valid digital signature;
v. detecting that the digital signature is a valid digital signature; and
vi. processing said e-mail message in accordance with said applying of the second policy.
3 Assignments
0 Petitions
Accused Products
Abstract
An e-mail firewall (105) applies policies to e-mail messages (204) between a first 5 site and a plurality of second sites in accordance with a plurality of administrator selectable policies (216). The firewall comprises a simple mail transfer protocol (SMTP) relay (202) for causing the e-mail messages (204) to be transmitted between the first site and selected ones of the second sites. A plurality of policy managers (216) enforce-administrator selectable policies. The policies, such as encryption and decryption policies, comprise at least a first source/destination policy (218), at least a first content policy (202) and at least a first virus policy (224). The policies are characterized by a plurality of administrator selectable criteria (310), a plurality of administrator selectable exceptions (312) to the criteria and a plurality of administrator selectable actions (314, 316, 322) associated with the criteria and exceptions. The policy managers comprise an access manager (218) for restricting transmission of e-mail messages (204) between the first site and the second sites in accordance with the source/destination policy (218). The policy managers (216) further comprise a content manager (220) for restricting transmission of e-mail messages (204) between the first site and the second sites in accordance with the content policy (220), and a virus manager (224) for restriction transmission of e-mail messages (204) between the first site and the second sites in accordance with the virus policy (224).
55 Citations
2 Claims
-
1. A method for filtering e-mail messages transmitted from an external site to an internal site associated with a first policy, comprising:
-
i. intercepting an e-mail message having a sender address associated with an external site;
ii. detecting whether the message includes a digital signature;
iii. applying at least one policy condition to said e-mail message, said policy condition applied by reference to said digital signature, said applying providing a policy application result;
iv. applying at least a second policy condition to said e-mail message in response to a predetermined condition of the digital signature, the second policy condition selected by reference to an identity associated with the valid digital signature;
v. detecting that the digital signature is a valid digital signature; and
vi. processing said e-mail message in accordance with said applying of the second policy.
-
-
2. A method for filtering e-mail messages transmitted from an external site to an internal site associated with a first policy, comprising:
-
i. intercepting an e-mail message having a sender address associated with an external site;
ii. detecting whether the message includes a digital signature;
iii. applying at least one policy condition to said e-mail message, said policy condition applied by reference to said digital signature, said applying providing a policy application result;
iv. applying a second policy for detecting whether the signature is associated with a domain which is included in a stored list of trusted domains; and
vi. processing said application level e-mail message in accordance with said applying of the second policy.
-
Specification