Systems And Methods To Secure Restricted Information In Electronic Mail Messages

• US 20150013012A1
• Filed: 07/25/2014
• Published: 01/08/2015
• Est. Priority Date: 05/18/2007
• Status: Active Grant

• Current Assignee: Goldman Sachs & Co. LLC (Goldman Sachs Group Incorporated)
• Original Assignee: Goldman Sachs & Company (Goldman Sachs Group Incorporated)
• Inventors: Marman, Timothy, Kukreja, Rajiv
• Granted Patent: US 9,363,216 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

Systems and methods are provided to secure restricted information in electronic mail messages. According to some embodiments, it is determined at a client device that an email message is being generated by a user. A security classification may be associated with the email message, and the email message may be sent toward a destination along with an indication of the security classification, wherein the email message is routed based, at least in part, on the security classification.

Claims

1. A method of facilitating a secure distribution of information, comprising:

determining at a client device that an email message is being generated by a user;

associating a security classification with the email message; and

sending the email message toward a destination along with an indication of the security classification, wherein the email message is routed based, at least in part, on the security classification;

determining whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment;

if it is determined that the destination is external, arranging for information to be provided via a Web site in accordance with the security classification;

determining whether a recipient is able to access information via the Web site; and

if it is determined that the recipient is not able to access information via the Web site, notifying the user via the client device.

2. The method of claim 1, wherein said associating is performed using a plug-in application executing at the client device.

3. The method of claim 2, wherein the plug-in application compares a recipient of the email message with a list of potential recipients based at least in part on the security classification.

4. The method of claim 3, wherein the list is a white list stored locally at the client device.

5. The method of claim 4, wherein the white list is periodically updated by a remote device.

6. The method of claim 1, further comprising:

automatically associating the security classification with the email message.

7. The method of claim 6, wherein the associating is based at least in part on at least one of:

(i) information included in the email message, (ii) an attachment associated with the email message, (iii) information associated with a user, or (iv) information associated with a destination of the email message.

8. The method of claim 1, further comprising:

receiving an indication of the security classification from the user.

9. The method of claim 8, wherein said receiving includes:

providing a default security classification; and

receiving from the user an adjustment to the default security classification.

10. The method of claim 9, further comprising:

logging information associated with the adjustment

11. The method of claim 1, further comprising:

enforcing a rule associated with the security classification.

12. The method of claim 11, wherein said enforcing is performed at the client device.

13. The method of claim 11, wherein said enforcing is performed at a server remote from the client device.

14. The method of claim 13, wherein the server is associated with at least one of:

(i) a secure mail service, (ii) a message managing system, or (iii) an integrated messaging exchange.

15. The method of claim 1, further comprising:

automatically modifying the email message in accordance with the security classification.

16. The method of claim 1, further comprising:

preventing the email message from reaching a destination in accordance with the security classification.

20. The method of claim 1, wherein the client device comprises at least one of:

(i) a personal computer, (ii) a personal digital assistant, (iii) a mobile computer, or (iv) a wireless device.

21. The method of claim 1, wherein a plurality of security classification categories are associated with the email message.

17. (canceled)

18. (canceled)

19. (canceled)

22. An apparatus to facilitate a secure distribution of information, comprising:

a client device to determine that an email message is being generated by a user;

an input device to;

receive information associated with a security classification for the email message;

determining whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment;

if it is determined that the destination is external, arranging for information to be provided via a Web site in accordance with the security classification;

determining whether a recipient is able to access information via the Web site; and

if it is determined that the recipient is not able to access information via the Web site, notifying the user via the client device; and

a transmitting device to send the email message toward a destination along with an indication of the security classification, wherein the email message is routed based, at least in part, on the security classification.

23. A method of facilitating a secure distribution of information, comprising:

receiving from a remote server information associated with a white list;

storing the information locally at a client device;

determining at the client device that an email message is being generated by a user;

associating a security classification with the email message, wherein said associating is performed using a plug-in application executing at the client device;

comparing a recipient of the email message with the locally stored white list based at least in part on the security classification;

if the recipient is not on the white list, confirming with the user that the recipient should receive the email message;

determining whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment; and

if the destination is external, arranging for information to be provided via a Web site in accordance with the security classification.