Systems and methods to secure restricted information in electronic mail messages

• US 9,363,216 B2
• Filed: 07/25/2014
• Issued: 06/07/2016
• Est. Priority Date: 05/18/2007
• Status: Active Grant

• Current Assignee: Goldman Sachs & Co. LLC (Goldman Sachs Group Incorporated)
• Original Assignee: Goldman Sachs & Company (Goldman Sachs Group Incorporated)
• Inventors: Marman, Timothy, Kukreja, Rajiv
• Primary Examiner(s): Hoffman, Brandon
• Application Number:
  US14/340,754
• Publication Number:
  US 20150013012A1
• Time in Patent Office: 683 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

Systems and methods are provided to secure restricted information in electronic mail messages. According to some embodiments, it is determined at a client device that an email message is being generated by a user. A security classification may be associated with the email message, and the email message may be sent toward a destination along with an indication of the security classification, wherein the email message is routed based, at least in part, on the security classification.

Claims

1. A method comprising:

determining at a client device that an email message is being generated by a user;

associating a security classification with the email message;

determining whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment;

in response to determining that the destination is external, determining whether an intended recipient is able to access information provided via a Web site in accordance with the security classification; and

in response to determining that the intended recipient is not able to access the information via the Web site, notifying the user via the client device.

2. The method of claim 1, wherein associating the security classification with the email message is performed using a plug-in application executing at the client device.

3. The method of claim 2, wherein the plug-in application compares the intended recipient with a list of potential recipients based, at least in part, on the security classification.

4. The method of claim 3, wherein the list is a white list stored locally at the client device.

5. The method of claim 4, wherein the white list is periodically updated by a remote device.

6. The method of claim 1, wherein associating the security classification with the email message comprises:

automatically associating the security classification with the email message.

7. The method of claim 6, wherein automatically associating the security classification with the email message is based, at least in part, on at least one of:

information included in the email message,

an attachment associated with the email message,

information associated with the user, or

information associated with the destination.

8. The method of claim 1, further comprising:

receiving an indication of the security classification from the user.

9. The method of claim 8, wherein receiving the indication of the security classification from the user includes:

providing a default security classification; and

receiving from the user an adjustment to the default security classification.

10. The method of claim 9, further comprising:

logging information associated with the adjustment.

11. The method of claim 1, further comprising:

enforcing a rule associated with the security classification.

12. The method of claim 11, wherein enforcing the rule associated with the security classification is at the client device.

13. The method of claim 11, wherein enforcing the rule associated with the security classification is performed at a server remote from the client device.

14. The method of claim 13, wherein the server is associated with at least one of:

a secure mail service,

message managing system, or

an integrated messaging exchange.

15. The method of claim 1, further comprising:

automatically modifying the email message in accordance with the security classification.

16. The method of claim 1, further comprising:

preventing the email message from reaching the destination in accordance with the security classification.

17. The method of claim 1, wherein the client device comprises at least one of:

a personal computer,

a personal digital assistant,

a mobile computer, or

a wireless device.

18. The method of claim 1, wherein multiple security classification categories are associated with the email message.

19. An apparatus comprising:

a client device configured to determine that an email message is being generated by a user;

an input device configured to;

receive a security classification associated with the email message;

determine whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment;

in response to determining that the destination is external, determine whether an intended recipient is able to access information provided via a Web site in accordance with the security classification; and

in response to determining that the intended recipient is not able to access the information via the Web site, notify the user via the client device; and

a transmitting device configured to at least one of;

send the email message or provide the information via the Web site.

20. A method comprising:

receiving, from a remote server, first information associated with a white list;

storing the first information locally at a client device;

determining at the client device that an email message is being generated by a user;

associating a security classification with the email message using a plug-in application executing at the client device;

comparing an intended recipient of the email message with the locally stored white list based, at least in part, on the security classification;

in response to determining that the intended recipient is not on the white list, confirming with the user that the intended recipient should receive the email message;

determining whether a destination associated with the email message is (i) within a local environment or (ii) external to the local environment; and

in response to determining that the destination is external, arranging for second information to be provided via a Web site in accordance with the security classification.