Systems and Methods for Controlling Email Access

• US 20140165213A1
• Filed: 01/25/2013
• Published: 06/12/2014
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich
• Granted Patent: US 9,021,037 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Embodiments of the disclosure relate to proxying at least one email resource from at least one email service to at least one client device, determining whether the email resources are accessible to the client devices via at least one unauthorized application on the client devices, and modifying the email resources to be inaccessible via the unauthorized applications on the client devices in response to a determination that the email resources are accessible via the unauthorized applications on the client devices.

Claims

1. A system, comprising:

at least one client device;

at least one email service; and

,

at least one memory device for storing computer-executable instructions that, when executed by at least one processor, configures the processors to perform operations comprising;

proxying at least one email resource from the email services to the client devices;

determining whether the email resources are accessible to the client devices via at least one unauthorized application on the client devices; and

,

responsive to a determination that the email resources are accessible via the unauthorized applications on the client devices, modifying the email resources to be inaccessible via the unauthorized applications on the client devices.

2. The system of claim 1, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

3. The system of claim 1, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises changing the file format of the email resources.

4. The system of claim 1, wherein the memory devices for storing computer-executable instructions, when executed by the processors, further configure the processors to perform operations comprising:

responsive to a determination that the email resources are accessible via native applications on the client devices, modifying the email resources to be exclusively accessible via at least one authorized application on the client devices.

5. The system of claim 4, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

6. The system of claim 4, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises transmitting at least one cryptographic key used to encrypt the email resources to the authorized applications on the client devices.

7. The system of claim 4, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises changing the file format of the email resources.

8. The system of claim 4, wherein the authorized applications on the client devices comprise client side applications configured to restrict at least one of cutting, copying, pasting, transmitting, screen capturing, or printing the email resources.

9. The system of claim 1, wherein the memory devices for storing computer-executable instructions, when executed by the processors, further configure the processors to perform operations comprising:

transmitting the email resources to the client devices.

10. A method, comprising the steps of:

identifying at least one email resource on at least one client device;

determining whether the email resources are accessible via at least one unauthorized application on the client devices; and

,

responsive to a determination that the email resources are accessible via the unauthorized applications on the client devices, modifying the email resources to be inaccessible via the unauthorized applications on the client devices.

11. The method of claim 10, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

12. The method of claim 10, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises changing the file format of the email resources.

13. The method of claim 10, wherein the memory devices for storing computer-executable instructions, when executed by the processors, further configure the processors to perform operations comprising:

responsive to a determination that the email resources are accessible via at least one authorized application on the client devices, modifying the email resources to be exclusively accessible via at least one authorized application on the client devices.

14. The method of claim 13, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

15. The method of claim 13, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises transmitting at least one cryptographic key used to encrypt the email resources to the authorized applications on the client devices.

16. The method of claim 13, wherein modifying the email resources to be exclusively accessible via the authorized application on the client devices comprises changing the file formatting of the email resources.

17. The method of claim 13, wherein the authorized applications on the client devices comprise client side applications configured to restrict at least one of cutting, copying, pasting, transmitting, screen capturing, or printing the email resources.

18. The method of claim 10, further comprising the step of:

authorizing the client devices to access the email resources.

19. A non-transitory computer-readable medium embodying a program executable in a computing device, the program comprising code, which when executed, causes the computing device to perform a method comprising the steps of:

identifying at least one email resource;

determining whether the email resources are accessible via at least one unauthorized application on at least one client device; and

,

responsive to a determination that the email resources are accessible via the unauthorized applications on the client devices, modifying the email resources to be inaccessible via the unauthorized applications on the client devices.

20. The non-transitory computer-readable medium of claim 19, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

21. The non-transitory computer-readable medium of claim 19, wherein modifying the email resources to be inaccessible via the unauthorized applications on the client devices comprises changing the file format of the email resources.

22. The non-transitory computer-readable medium of claim 19, wherein the unauthorized applications comprise client side applications that are not associated with the operator of the computer-readable medium.

23. The non-transitory computer-readable medium of claim 19, wherein the memory devices for storing computer-executable instructions, when executed by the processors, further configure the processors to perform operations comprising:

responsive to a determination that the email resources are accessible via the unauthorized applications on the client devices, modifying the email resources to be exclusively accessible via at least one authorized application on the client devices.

24. The non-transitory computer-readable medium of claim 22, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises encrypting the email resources based at least in part on at least one cryptographic key.

25. The non-transitory computer-readable medium of claim 22, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises transmitting at least one cryptographic key used to encrypt the email resources to the authorized applications on the client devices.

26. The non-transitory computer-readable medium of claim 22, wherein modifying the email resources to be exclusively accessible via the authorized applications on the client devices comprises changing the file format of the email resources.

27. The non-transitory computer-readable medium of claim 22, wherein the authorized applications on the client devices comprise client side applications configured to restrict at least one of cutting, copying, pasting, transmitting, screen capturing, or printing the email resources.

28. The non-transitory computer-readable medium of claim 22, wherein the authorized applications on the client devices comprise client side applications that are associated with the operator of the computer-readable medium.

29. The non-transitory computer-readable medium of claim 21, wherein the memory devices for storing computer-executable instructions, when executed by the processors, further configure the processors to perform operations comprising:

transmitting the email resources to the client devices.

30. The non-transitory computer-readable medium of claim 21, wherein the memory device for storing computer-executable instructions, when executed by the processor, further configures the processor to perform operations comprising:

authorizing the client devices to access the email resources.