Securing selected data within a message

• US 7,529,940 B1
• Filed: 11/22/2002
• Issued: 05/05/2009
• Est. Priority Date: 11/22/2002
• Status: Expired due to Fees

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Winkel, Jerry Curtis, Davis, Eugene Kenneth
• Primary Examiner(s): Moazzami, Nasser G
• Assistant Examiner(s): YALEW, FIKREMARIAM A
• Application Number:
  US10/301,977
• Time in Patent Office: 2,356 Days
• Field of Search: 713/170, 713/176, 709/206
• US Class Current: 713/170
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/214 using selective forwarding

Abstract

Methods, systems, and data structures are provided for selectively securing data within a message. A single message includes data. The data can be text data, attachment data, audio data, image data, or video data. Portions of the data are selectively identified with intended recipients. Multiple versions of the message are produced using the selective portions of the data. Each appropriate version of the message is delivered to the intended recipients. In one embodiment, the selective portions of the data are presented as links in the versions of the message, such that when an intended recipient accesses the link, the accessing recipient is first authenticated before being granted access to the selective portions of the data.

Claims

1. A method implemented in a computer-readable storage medium and to process on a computer to selectively secure data within a message, comprising:

receiving the message from a sender where the message includes selective identifications for portions of the data that are associated with selective security for one or more recipients of the message;

packaging the data into one or more versions of the message based on the selective identifications, and wherein at least one of the versions is packaged as a link that a particular recipient receives, and wherein the particular recipient has to activate the link to remotely acquire a corresponding portion of the data that the link replaced within that version of the message designated for the particular recipient, and an identity for that particular recipient is authenticated unbeknownst to the particular recipient before the corresponding portion of the data is acquired, and wherein reuse of the corresponding portion is restricted in response to the authentication and the corresponding portion is available to the particular recipient via a Secure Sockets Layer (SSL) connection established between the recipient'"'"'s message receiving application and a remote server application, and wherein the remote server application has the corresponding portion of the data that the link replaced and the corresponding portion of the data replaces the link in the particular recipient'"'"'s version of the message when the link is activated by the recipient and when the identity of the recipient has been authenticated; and

forwarding the one or more versions of the message to one or more of the recipients.

2. The method of claim 1 wherein in receiving the message, the message is an email message and is received by a processing post office application.

3. The method of claim 2 wherein in receiving the message, the post office application is an application processing on a gateway.

4. The method of claim 1 wherein in receiving the message, the selective identifications are data tags that identify portions of the data, and wherein the tags also identify one or more of the recipients.

5. The method of claim 1 wherein in receiving the message, the data includes at least one of text data, attachment data, image data, audio data, and video data.

6. The method of claim 1 wherein in packaging the data, the one or more versions of the message selectively include or exclude portions of the data in a number of the versions of the message based on the selective identifications and the one or more recipients.

7. The method of claim 1 wherein in packaging the data, a number of the versions of the message are generated by including links to portions of the data having selective identifications, and the links can be activated by a number of the recipients.

8. A system to selectively secure data within a message, the system implemented in a computer-readable storage medium and processed on one or more computers of a network, comprising:

a message including data, wherein portions of the data selectively identify one or more recipients that are permissibly allowed to access the portions of the data; and

a message processing application that generates one or more versions of the message based on the portions of the data that selectively identify the one or more recipients, and wherein the message processing application forwards the one or more versions to appropriate recipients, and wherein at least one version of the message is replaced by a link that a particular recipient activates in order to acquire a corresponding portion of data that the link replaced and when the particular recipient activates the link an identity for that particular recipient is authenticated unbeknownst to the particular recipient and before the corresponding portion of data that the link replaced is presented to the particular recipient, and wherein reuse of the corresponding portion is restricted in response to the authentication and the corresponding portion is available to the particular recipient via a Secure Sockets Layer (SSL) connection established between the recipient'"'"'s message receiving application and a remote server application, and wherein the remote server application has the corresponding portion of the data that the link replaced and the corresponding portion of the data replaces the link in the particular recipient'"'"'s version of the message when the link is activated by the recipient and when the identity of the recipient has been authenticated.

9. The system of claim 8 further comprising:

a message generating application that generates the data and the portions of the data that selectively identify one or more of the recipients, and wherein the message generating application forwards the message to the message processing application; and

a message receiving application that is used by the one or more recipients to consume one or more of the versions of the message forwarded by the message generating application.

10. The system of claim 9 wherein the message generating application and the message processing application are part of a single integrated email system, an alarm system, chat room system, or discussion group system.

11. The system of claim 8 wherein the one or more versions of the message selectively include or exclude the portions of the data that selectively identify one or more of the recipients.

12. The system of claim 8 wherein the one or more versions of the message selectively include links to the portions of the data that selectively identify one or more of the recipients.