METHOD AND SYSTEM FOR E-MAIL MANAGEMENT OF E-MAIL HAVING EMBEDDED CLASSIFICATION METADATA

• US 20090030884A1
• Filed: 06/06/2008
• Published: 01/29/2009
• Est. Priority Date: 06/08/2007
• Status: Active Grant

• Current Assignee: TITUS Inc.
• Original Assignee: TITUS Inc.
• Inventors: Warrington, Connor, Pulfer, Charles E.
• Granted Patent: US 8,171,540 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/35 Clustering; Classification
• CPC Class Codes: G06F 16/353 into predefined classes
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04N 1/00212 Attaching image data to computer messages, e.g. to e-mails
• CPC Class Codes: H04N 1/00244 with a server, e.g. an internet server fax-servers or the like for store and forward H04N1/324
• CPC Class Codes: H04N 1/4406 Restricting access, e.g. according to user identity mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof

Abstract

A method and system method for e-mail management of e-mails having embedded classification metadata. A query from an end user to access an e-mail account by an e-mail client is received. It is then determined whether the query has come from an insecure e-mail client, such as a web e-mail client. Access rules for defining classification access restrictions for the e-mail client to access e-mail in the e-mail account are retrieved when the e-mail client is determined to be insecure. The e-mail query can then be modified before sending to an e-mail server storing the email account. The query is modified based on the retrieved access rules to exclude retrieval of e-mails based upon the e-mail classification metadata.

Claims

1. A method for e-mail management of e-mails having embedded classification metadata, the method comprising the steps of:

receiving a query from an end user to access an e-mail account by an e-mail client;

determining whether the query has come from an insecure e-mail client;

retrieving access rules for defining classification access restrictions for the e-mail client to access e-mail in the e-mail account, when the e-mail client is determined to be insecure; and

modifying the received query, before sending to an e-mail server storing the email account, the query being modified based on the retrieved access rules to exclude retrieval of e-mails based upon the e-mail classification metadata.

2. The method of claim 1 further comprising the steps of:

sending the query to the e-mail server;

retrieving e-mail from the e-mail server based upon the query; and

sending the retrieved e-mail to the e-mail client.

3. The method of claim 2 wherein the step of sending the retrieved e-mail to the e-mail client further comprises sending only message header information for the restricted e-mails.

4. The method of claim 1, wherein the step of retrieving e-mails comprises the step of determining the sensitivity of the e-mail message by inspecting classification metadata embedded in each e-mail in the e-mail account.

5. The method of claim 1 wherein the e-mail client is a web mail client using HTML web access.

6. The method of claim 4 wherein the e-mail client is an Outlook Web Access client.

7. The method of claim 1 wherein the query is an structured query language (SQL) query.

8. The method of claim 1 wherein said further comprising the steps:

determining whether the e-mail client is entitled to view an e-mails with attachments; and

modifying the query to exclude e-mails with attachments.

9. The method of claim 1 wherein the step of determining whether the query has come from an insecure e-mail client further comprises determining an encryption level associated with the access client.

10. The method of claim 1 wherein the step of determining whether the query has come from an insecure e-mail client further comprises identifying an originating location of the e-mail client.

11. The method of claim 1 wherein the access rules define classification metadata to be excluded in the query.

12. The method of claim 1 wherein the classification restrictions are defined as PERSONAL, UNCLASSIFIED, CONFIDENTIAL, SECRET.

13. The method of claim 1 wherein the query is modified to exclude the viewing of any web based e-mail messages in the user'"'"'s e-mail account Inbox that have not been classified.

14. The method of claim 1 wherein the pre-defined access rules are provide in a javascript file.

15. The method of claim 1 wherein the access rules define classification metadata to be included in the query.

16. The method of claim 1 further comprising an initial step of receiving an user identifier and password associated with the e-mail account.

17. A system for e-mail management of e-mails having embedded classification metadata, the system comprising:

a memory; and

a processor for executing the steps of;

receiving a query from an end user to access an e-mail account by an e-mail client;

determining whether the query has come from an insecure e-mail client;

retrieving access rules for defining classification access restrictions for the e-mail client to access e-mail in the e-mail account, when the e-mail client is determined to be insecure; and

modifying the received query, before sending to an e-mail server storing the email account, the query being modified based on the retrieved access rules to exclude retrieval of e-mails based upon the e-mail classification metadata.

18. A computer readable medium containing instructions for providing e-mail management of e-mails having embedded classification metadata, the instructions which when executed by a processor perform the steps of:

receiving a query from an end user to access an e-mail account by an e-mail client;

determining whether the query has come from an insecure e-mail client;

retrieving access rules for defining classification access restrictions for the e-mail client to access e-mail in the e-mail account, when the e-mail client is determined to be insecure; and

modifying the received query, before sending to an e-mail server storing the email account, the query being modified based on the retrieved access rules to exclude retrieval of e-mails based upon the e-mail classification metadata.