Method for blocking dereferencing elements in messages

• US 7,219,299 B2
• Filed: 11/19/2003
• Issued: 05/15/2007
• Est. Priority Date: 11/19/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Pereira, Jorge, Batthish, Karim Michel, Fields, Brendan Clarke, Inglikov, Yuriy Mikhailovich
• Primary Examiner(s): HUTTON JR, WILLIAM D
• Application Number:
  US10/717,004
• Publication Number:
  US 20050108639A1
• Time in Patent Office: 1,273 Days
• Field of Search: 715/531
• US Class Current: 715/205
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

Disclosed is a policy based method for blocking the automatic dereferencing of web beacon links in an e-mail message sent in HTML format with a minimum sacrifice in the HTML body rendering quality. HTML content that potentially contains web beacons is replaced with non-dereferencing elements prior to HTML rendering by the e-mail browser so that the remaining HTML can be rendered as complete as possible without rendering the potential web beacons. Additionally, the present invention also provides a method for removing the HTTP Referer header from referenced external links and activated images. An HTTP redirector service is implemented as a server-based link redirection evaluator application which serves to eliminate the Referer header for the URL requested. Embodiments of the present invention provide for blocking web beacons and removing HTTP Referer headers in both a “down-level” e-mail client and a client which can make programmatic use of an HTML rendering engine.

Claims

1. A method for blocking dereferencing elements in a message, the method comprising:

accepting a source file for the message;

rendering the file in a first message display output;

grouping one or more elements within the rendered message into security level groups;

rewriting the elements to be processed through a protocol handler, wherein the processing of the elements by the protocol handler comprises redirecting to an alternate source file;

passing the message source to a second message display output; and

rendering the message in the second message display.

2. The method of claim 1 wherein the alternate source file is a transparent image file.

3. The method of claim 1 wherein the message source file is an HTML document.

4. The method of claim 1 wherein the first and second message displays are HTML rendering displays.

5. The method of claim 1 further comprising specifying a security policy setting, wherein the processing of the elements by the protocol handler is in accordance with the security policy setting.

6. A method for blocking dereferencing elements in a message, the method comprising:

accepting a source file for the message;

rendering the file in a first message display output;

grouping one or more elements within the rendered message into security level groups;

rewriting the elements to be processed through a protocol handler, wherein the processing of the elements by the protocol handler comprises returning information indicating that a target destination is not available;

passing the message source to a second message display output; and

rendering the message in the second message display.

7. The method of claim 6 wherein the first and second message displays are HTML rendering displays.

8. The method of claim 6 wherein the message source file is an HTML document.

9. The method of claim 6 further comprising specifying a security policy setting, wherein the processing of the elements by the protocol handler is in accordance with the security policy setting.

10. A method for blocking dereferencing elements in a message, the method comprising:

accepting a source file for the message;

identifying one or more elements within the message source file, wherein the elements specify references to sources of content to be dereferenced upon rendering of the message;

rewriting the references to the sources of content of the elements identified in the message source, wherein the rewriting of the references to the sources of content comprises replacing the reference to the source of content with a reference to an alternate source file;

passing the message source to a message display output; and

rendering the message in the message display.

11. The method of claim 10 wherein the alternate source file is a transparent image file.

12. The method of claim 10 wherein the message source file is a Hypertext Mark-up Language (HTML) document.

13. The method of claim 10 wherein the message display is an HTML rendering display.

14. The method of claim 10 further comprising specifying a security policy setting, wherein the rewriting of the references to the sources of content is in accordance with the security policy setting.

15. A method for blocking dereferencing elements in a message, the method comprising:

accepting a source file for the message;

rendering the file in a first message display output;

grouping one or more elements within the rendered message into security level groups;

rewriting the elements to be processed through a protocol handler, wherein the processing of the elements by the protocol handler comprises returning information indicating that a target destination is not available;

passing the message source to a second message display output;

rendering the message in the second message display;

combining a base Uniform Resource Locator (URL) and a relative URL into a full URL;

passing the full URL to be processed to a protocol handler; and

specifying a security policy setting, wherein the processing of the elements by the protocol handler is in accordance with the security policy setting.

16. The method of claim 15 wherein the processing of the elements by the protocol handler comprises redirecting to an alternate source file.

17. The method of claim 16 wherein the alternate source file is a transparent image file.

18. The method of claim 15 wherein the message source file is an HTML document.

19. The method of claim 15 wherein the first and second message displays are HTML rendering displays.