E-mail firewall

• US 7,380,274 B2
• Filed: 12/19/2006
• Issued: 05/27/2008
• Est. Priority Date: 07/23/1998
• Status: Expired due to Fees

• Current Assignee: Axway Incorporated (Axway Software SA)
• Original Assignee: Tumbleweed Communications Corporation (Axway Software SA)
• Inventors: Dickinson, III, Robert D., Krishnamurthy, Sathvik
• Primary Examiner(s): Moise, Emmanuel L
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US11/642,165
• Publication Number:
  US 20070214353A1
• Time in Patent Office: 525 Days
• Field of Search: 726/11, 726/13, 726/24, 726/14, 380/282, 380/30, 713/152, 713/154, 713/166, 713/156, 713/170
• US Class Current: 726/14
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it

Abstract

An e-mail firewall (105) applies policies to e-mail messages (204) between a first site and a plurality of second sites in accordance with a plurality of administrator selectable policies (216). The firewall comprises a simple mail transfer protocol (SMTP) relay (202) for causing the e-mail messages (204) to be transmitted between the first site and selected ones of the second sites. A plurality of policy managers (216) enforce-administrator selectable policies. The policies comprise at least a first source/destination policy (218), a first content policy (202) and a first virus policy (224). The policies are characterized by a plurality of administrator selectable criteria (310), and a plurality of administrator selectable exceptions (312) to the criteria.

Claims

1. A method for restricting transmission of e-mail messages between a first site and a plurality of second sites in accordance with a plurality of administrator selectable policies, said method comprising:

utilizing a simple mail transfer protocol (SMTP) relay in a transmission path for the e-mail messages between said first site and selected ones of said second sites;

applying a plurality of policy managers, responsive to said SMTP relay, for enforcing administrator selectable policies, said policies comprising at least a first source/destination policy, at least a first content policy and at least a first virus policy, said policies characterized by a plurality of administrator selectable criteria, and a plurality of administrator selectable exceptions to said criteria, said policy managers operative for;

managing access by restricting transmission of at least a first subset of the e-mail messages between said first site and said second sites in accordance with said source/destination policy;

managing content by restricting transmission of at least a second subset of the e-mail messages between said first site and said second sites in accordance with said content policy; and

managing viruses by restricting transmission of at least a third subset of the e-mail messages between said first site and said second sites in accordance with said virus policy,

wherein each of said e-mail messages includes at least one recipient address, and wherein at least one of the e-mail messages is transmitted to a respective recipient address in response to a predetermined policy result of a policy manager.

2. The method as set forth in claim 1 wherein said policy managers, responsive to said administrator selectable policies, are further operative for converting selected ones of said e-mail messages from a first format to a second format.

3. The method as set forth in claim 1 wherein said e-mail messages are formatted into a plurality of fields comprising a source field, a destination field, subject field, and a message field and wherein said access managing is responsive to said source/destination policy specified for each of said fields of said e-mail messages.

4. The method as set forth in claim 3 wherein said e-mail messages are further characterized by a size field and wherein said access managing is responsive to said source/destination policy specified for said size field.

5. The method as set forth in claim 3 wherein said e-mail messages are further characterized by a date and time field and wherein said access managing is responsive to said source/destination policy specified for said date and time field.

6. The method as set forth in claim 1 wherein said virus managing is responsive to e-mail messages containing compressed information for detecting viruses contained in said compressed information.

7. The method as set forth in claim 3 wherein said content managing is responsive, in accordance with said content policy, to information contained in said subject field and in said message field.

8. The method as set forth in claim 7 wherein said e-mail message further comprises an attachment field and wherein said content managing is responsive, in accordance with said content policy, to an attachment designated in said attachment field.