Preventing execution of programs that are embedded in email messages

• US 9,432,216 B2
• Filed: 10/01/2012
• Issued: 08/30/2016
• Est. Priority Date: 10/08/2002
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Daniell, W. Todd, Malik, Dale W.
• Primary Examiner(s): Hong, Stephen
• Assistant Examiner(s): Ludwig, Matthew
• Application Number:
  US13/632,610
• Publication Number:
  US 20130031195A1
• Time in Patent Office: 1,429 Days
• Field of Search: 715/234, 715/752, 717/115, 717/127
• US Class Current: 1/1
• CPC Class Codes: G06F 3/04812 Interaction techniques based on cursor appearance or behaviour, e.g. being affected by the presence of displayed objects
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

Systems and methods are presented which generate modified email messages, which are largely devoid of embedded functions, from original email messages, which have embedded functions. The embedded functions are amenable to self-executing codes such as viruses, worms, and Trojan programs Thus, the modified email message without these embedded functions, and any argument associated with these functions, provides a more secure email environment.

Claims

1. A system for preventing execution of embedded functions in email messages, comprising:

a memory that stores instructions; and

a processor that executes the instructions to perform operations, the operations comprising;

determining, based on an indication to display a first email message, if the first email message includes an embedded function that includes self-executing code;

generating a second email message in response to the indication to display the first email message, wherein the second email message is generated from the first email message and does not include the embedded function if the first email message is determined to include the embedded function that includes self-executing code;

displaying the second email message in response to the indication to display the first email message;

forwarding the first email message in response to receiving a selection to forward the second email message, wherein contents of the first email message are unaltered; and

removing the second email message from the memory when a cursor is placed on a third email message.

2. The system of claim 1, wherein the operations further comprise receiving the indication to display the first email message.

3. The system of claim 1, wherein the operations further comprise removing the embedded function.

4. The system of claim 1, wherein the operations further comprise displaying the second email message in an email read window.

5. The system of claim 1, wherein the operations further comprise comparing the embedded function found in the first email message to a list of predetermined embedded functions to determine if the embedded function is in the list.

6. The system of claim 1, wherein the embedded function comprises one of a hypertext markup language tag, a script element, an object element, an applet element, or a combination thereof.

7. The system of claim 1, wherein the operations further comprise determining if the first email message includes the embedded function by executing a search on the first email message.

8. The system of claim 1, wherein the first email message is a hypertext markup language formatted email message.

9. The system of claim 1, wherein the operations further comprise removing an argument associated with the embedded function if the embedded function is determined to be in the first email message and if the embedded function is in a list of predetermined embedded functions.

10. The system of claim 1, wherein the operations further comprise including the embedded function in the second email message if the embedded function is not in a list of predetermined embedded functions.

11. A method for preventing execution of embedded functions in email messages, comprising:

determining, based on an indication to display a first email message and by utilizing instructions from a memory that are executed by a processor, if the first email message includes an embedded function that includes self-executing code;

generating a second email message in response to the indication to display the first email message, wherein the second email message is generated from the first email message and does not include the embedded function if the first email message is determined to include the embedded function that includes self-executing code;

displaying the second email message in response to the indication to display the first email message;

forwarding the first email message in response to receiving a selection to forward the second email message, wherein contents of the first email message are unaltered; and

removing the second email message from the memory when a cursor is placed on a third email message.

12. The method of claim 11, further comprising removing an argument associated with the embedded function if the embedded function is determined to be in the first email message and if the embedded function is in a list of predetermined embedded functions.

13. The method of claim 11, further comprising determining if the first email message includes the embedded function by executing a search on the first email message.

14. The method of claim 11, further comprising removing the embedded function if the embedded function is determined to be in the first email message.

15. The method of claim 11, further comprising comparing the embedded function in the first email message to a list of predetermined embedded functions to determine if the embedded function is in the list.

16. The method of claim 11, further comprising receiving the indication to display the first email message based on highlighting the first email message from a list of email messages.

17. The method of claim 11, further comprising displaying the second email message in an email read window.

18. A non-transitory computer-readable medium comprising instructions, which when executed by a processor, cause the processor to perform operations comprising:

determining, based on an indication to display a first email message, if the first email message includes an embedded function that includes self-executing code;

generating a second email message in response to the indication to display the first email message, wherein the second email message is generated from the first email message and does not include the embedded function if the first email message is determined to include the embedded function that includes self-executing code;

displaying the second email message in response to the indication to display the first email message;

forwarding the first email message in response to receiving a selection to forward the second email message, wherein contents of the first email message are unaltered; and

removing the second email message from a memory when a cursor is placed on a third email message.

19. The non-transitory computer-readable medium of claim 18, wherein the operations further comprise comparing the embedded function in the first email message to a list of predetermined embedded functions to determine if the embedded function is in the list.

20. The non-transitory computer-readable medium of claim 18, wherein the operations further comprise determining if the first email message includes the embedded function by executing a search on the first email message.