Selective presence notification

• US 7,984,102 B1
• Filed: 07/22/2008
• Issued: 07/19/2011
• Est. Priority Date: 07/22/2008
• Status: Active Grant

• Current Assignee: Zscaler Incorporated
• Original Assignee: Zscaler Incorporated
• Inventors: Nataraja, Narasimha Datta, Bayar, Balakrishna Bhat, Kailash, Kailash, Schekochikhin, Arcady V., Chaudhry, Jay, Raphel, Jose
• Primary Examiner(s): BOUTAH, ALINA A
• Application Number:
  US12/177,570
• Time in Patent Office: 1,092 Days
• Field of Search: 709/206, 709/205, 715/752
• US Class Current: 709/206
• CPC Class Codes: H04L 51/043 using or handling presence information

Abstract

Methods, systems, and apparatus, including computer program products, for selective presence notification are provided. In one general aspect, a plurality of presence notification messages are monitored. Each presence notification message may include address information identifying at least one of a recipient or a sender of the presence notification message. Based on the address information a determination is made as to whether a presence notification message is allowable. If it is determined that the presence notification message is allowable, the transmission of the presence notification message is allowed.

Claims

1. A method comprising:

monitoring, by a computer, a plurality of presence notification messages, each presence notification message including address information;

determining, by a computer, if a presence notification message is allowable based on the address information included in the presence notification message, wherein the address information identifies at least one of a recipient or a sender of the presence notification message, and wherein determining if a presence notification message is allowable comprises;

determining if a sender of the presence notification message and a recipient of the presence notification message are an approved sender and recipient pair; and

determining the presence notification is allowable if the sender of the presence notification message and the recipient of the presence notification message are an approved sender and recipient pair; and

if the presence notification message is allowable, allowing, by a computer, transmission of the presence notification message.

2. The method of claim 1, further comprising:

if the presence notification message is not allowable, modifying the address information of presence notification to make the presence notification message allowable; and

allowing transmission of the modified presence notification message.

3. The method of claim 1, wherein the presence notification messages are messages in an instant messaging application.

4. The method of claim 1, wherein the presence notification messages are XMPP protocol messages.

5. The method of claim 1, wherein determining if the sender of the presence notification message and the recipient of the presence notification message are an approved sender and recipient pair comprises:

matching the sender of the presence notification message and the recipient of the presence notification message against a list of approved sender and recipient pairs; and

determining the sender of the presence notification message and the recipient of the presence notification message are an approved sender and recipient pair if sender of the presence notification message and the recipient of the presence notification message match an approved sender and recipient pair.

6. The method of claim 1, wherein determining if a sender of the presence notification message and a recipient of the presence notification message are an approved sender and recipient pair comprises determining whether the recipient and the sender belong to a same user group.

7. The method of claim 2, wherein modifying the address information comprises:

identifying a particular sender and recipient pair that is not an allowable sender and recipient pair; and

removing, from the address information, a recipient address for a recipient that is in the particular sender and recipient pair.

8. A system comprising:

a plurality of processing nodes external to network edges of a plurality of external systems, each processing node comprising;

at least one microprocessor;

a processing node data store storing instant messaging allowance data for each of the external systems, the instant messaging allowance data specifying allowable sender and recipient pairs;

an instant messaging data inspection engine configured to;

determine if presence notification messages are allowable using address information included in the presence notification messages and the stored instant messaging allowance data, the address information specifying at least one sender and a plurality of recipients; and

determine if a presence notification messages is allowable by determining if all possible pairs formed from the least one sender and each of the plurality of recipients of the address information match an allowable sender and recipient pair from the instant messaging allowance data; and

a processing node manager in data communication with the instant messaging data inspection engine and configured to access the instant messaging allowance data stored in the processing node data store and to manage the presence notification messages according to the determination of the instant messaging inspection engine so that instant messaging policies for a plurality of external systems in data communication with the processing nodes are implemented external to the network edges for each of the external systems; and

an authority node in data communication with the processing nodes, the authority node including an authority node data store storing instance messaging allowance data for each of the plurality of external systems, and including an authority node manager configured to provide the instant messaging allowance data to each of the processing node data stores.

9. The system of claim 8, wherein the allowable sender and recipient pairs identify users in a same user group.

10. The system of claim 8, wherein the allowable sender and recipient pairs identify users in a same domain.

11. The system of claim 8, wherein the processing node manager is configured to manage the presence notification messages according to the determination of the instant messaging inspection engine by being configured to perform operations comprising:

if the instant messaging data inspection engine determines that a presence notification message is allowable, allowing the presence notification message to be transmitted; and

if the if the instant messaging data inspection engine determines that a presence notification message is not allowable, not allowing the presence notification message to be transmitted.

12. The system of claim 8, wherein the instant messaging allowance data comprises a set of allowable phrases, the phrases being generated from one or more allowable sender and recipient pairs, and the instant messaging data inspection engine is configured to determine if a presence notification message is allowable by:

identifying one or more phrases in the presence notification message;

phrase matching the identified one or more phrases in the presence notification message with one or more phrases from the set of allowable phrases; and

determining that the presence notification is allowable if the identified one or more phrases match phrases from the set of allowable phrases.

13. The system of claim 8, wherein the authority node manager is further configured to receive instant messaging preference data from each of the plurality of systems, and generate the instant messaging allowance data from the received instant messaging preferences data.

14. The system of claim 13, wherein the generated instant messaging allowance data comprises a set of allowable phrases.

15. The system of claim 8, wherein the presence notification messages are XMPP protocol messages.

16. The system of claim 11, wherein:

the instant messaging data inspection engine is further configured to identify a particular sender and recipient pair that is not an allowable sender and recipient pair; and

the processing node manager is further configured to remove, from presence notification messages, a recipient address for a recipient that is in the particular sender and recipient pair.