Apparatus and method for analyzing and filtering email and for providing web related services
First Claim
1. A method for filtering a content of an email message, the method comprising:
- connecting an inventive network hardware appliance to an external network;
including a central processing unit (CPU) on the inventive network hardware appliance;
providing a memory for storing a set of computer-readable instructions executed by the central processing unit (CPU) on the inventive network hardware appliance;
connecting the inventive network hardware appliance to one or more user computers;
arranging the inventive network hardware appliance to intercept an email message;
implementing a remote scanning service at a remote site using a stand-alone server or a plurality of servers configured to communicate with the inventive network hardware appliance to provide information on detected threats;
intercepting the email message by the inventive network hardware appliance;
reading the email message;
checking a sender of the email message against a blacklist;
checking the sender of the email message against a whitelist;
checking the email message for phishing scam;
checking the email message for SPAM content;
generating results based on the checks performed by the inventive network hardware appliance;
submitting a service request to the remote scanning service from the inventive network hardware appliance;
determining if the email message contains an encrypted attachment before sending the service request to the remote scanning service;
sending the service request from the inventive network hardware appliance to the remote scanning service only if the email message does not contain an encrypted attachment allowing or denying the email message based on the results and a response from the remote scanning service indicating if any threats were detected;
modifying the email message to neutralize the detected threat and forwarding the modified email message to the user.
10 Assignments
0 Petitions
Accused Products
Abstract
The inventive methodology provides an integrated plug and play solution designed to protect home networks against spam, phishing emails, viruses, spyware as well as other similar threats. The described content filtering appliance can be used for processing of web and email traffic implemented and can be deployed as a stand-alone appliance. In one implementation, the content processing appliance utilizes backend content filtering provided by a remote scanning service accessed via a network. The system employs network level analysis and translation of content and executes various procedures to handle the network traffic. In an embodiment of the invention, the appliance is provided with an automatic remote updating capability, wherein the software and data used by the appliance can be updated remotely via a network. Finally, the appliance may also implement parental controls.
-
Citations
13 Claims
-
1. A method for filtering a content of an email message, the method comprising:
-
connecting an inventive network hardware appliance to an external network;
including a central processing unit (CPU) on the inventive network hardware appliance;
providing a memory for storing a set of computer-readable instructions executed by the central processing unit (CPU) on the inventive network hardware appliance;
connecting the inventive network hardware appliance to one or more user computers;
arranging the inventive network hardware appliance to intercept an email message;
implementing a remote scanning service at a remote site using a stand-alone server or a plurality of servers configured to communicate with the inventive network hardware appliance to provide information on detected threats;
intercepting the email message by the inventive network hardware appliance;reading the email message; checking a sender of the email message against a blacklist; checking the sender of the email message against a whitelist; checking the email message for phishing scam; checking the email message for SPAM content; generating results based on the checks performed by the inventive network hardware appliance;
submitting a service request to the remote scanning service from the inventive network hardware appliance;
determining if the email message contains an encrypted attachment before sending the service request to the remote scanning service;
sending the service request from the inventive network hardware appliance to the remote scanning service only if the email message does not contain an encrypted attachment allowing or denying the email message based on the results and a response from the remote scanning service indicating if any threats were detected;
modifying the email message to neutralize the detected threat and forwarding the modified email message to the user. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. An inventive network hardware appliance for filtering a content of an email message sent to a user, the inventive network appliance comprising:
-
a. A central processing unit (CPU); b. A remote scanning service; c. A first network interface connected to one or more user computers; d. A second network interface connected to the external network; e. A memory storing a set of computer-readable instructions, which, when executed by the CPU cause the CPU to; i. Read the email message; ii. Check a sender of the email message against a blacklist; iii. Check the sender of the email message against a whitelist; iv. Check the email message for phishing scam; v. Check the email message for SPAM content; vi. Performing at least one of (ii) through (v) by the remote scanning service pursuant to a request from the inventive network hardware appliance, the request being sent after receiving of the email and confirming an attachment to the email message; and vii. Allow or deny the email message based on the results of the (ii) through (vi) and a response from the remote scanning service to a service request, the service request being sent to the remote scanning service after the reading of the email message by the CPU, and wherein the remote scanning service performs anti-virus scanning operations on the email message, wherein the service request includes attachments to the email message and directs the remote scanning service to perform a threat check of the attachments wherein the inventive network appliance determines whether the email message contains an encrypted attachment before sending the service request to the remote scanning service, and wherein the inventive network hardware appliance sends the service request only if the email message does not contain an encrypted attachment, and in response to detection of at least one threat in the email message, modifying the email message to neutralize the detected threat and forwarding the modified email message to the user.
-
Specification