Audit logging for a secure, scalable and flexible internet fax architecture

• US 10,477,069 B2
• Filed: 03/13/2019
• Issued: 11/12/2019
• Est. Priority Date: 06/24/2014
• Status: Active Grant

• Current Assignee: EC Data Systems Incorporated
• Original Assignee: EC Data Systems Incorporated
• Inventors: Watts, Christian M., Shephard, Edward D.
• Primary Examiner(s): Pachol, Nicholas
• Application Number:
  US16/352,330
• Publication Number:
  US 20190281189A1
• Time in Patent Office: 244 Days
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 2203/657 Combination of voice and fax calls
• CPC Class Codes: H04M 7/0024 Services and arrangements where telephone services are combined with data services arrangements which combine a telephonic equipment and a computer H04M7/0012
• CPC Class Codes: H04N 1/001 specially adapted for transmission via digital wireline networks H04N1/00098 takes precedence
• CPC Class Codes: H04N 1/00209 Transmitting or receiving image data, e.g. facsimile data, via a computer, e.g. using e-mail, a computer network, the internet, I-fax
• CPC Class Codes: H04N 1/00212 Attaching image data to computer messages, e.g. to e-mails
• CPC Class Codes: H04N 1/0022 involving facsimile protocols or a combination of facsimile protocols and computer data transmission protocols
• CPC Class Codes: H04N 1/32411 Handling instructions for routing or relaying
• CPC Class Codes: H04N 1/32416 Storage of instructions or retrieval of prestored instructions
• CPC Class Codes: H04N 1/32422 Reprocessing messages, e.g. in case the intended destination is busy
• CPC Class Codes: H04N 1/4426 involving separate means, e.g. a server, a magnetic card
• CPC Class Codes: H04N 2201/0093 Facsimile machine H04N2201/0094 takes precedence
• CPC Class Codes: H04N 2201/3202 of communication or activity log or report
• CPC Class Codes: H04N 2201/3209 of a telephone number
• CPC Class Codes: H04N 2201/3221 of a job number or identification, e.g. communication number

Abstract

Methods and systems for an auditing infrastructure for an Internet fax service architecture are provided. According to one embodiment, information regarding an event, associated with a component of the Internet fax service architecture, that is to be logged, is received by a centralized audit logging module of the Internet fax service architecture. The component may be a web server, an email server, a fax server, a notification server or an imaging system. The information is utilized by the centralized audit logging module to determine specific parameters within the Internet fax service architecture to be logged. Finally, the event, including the information and the specific parameters, is recorded by the centralized audit logging module to an audit log associated with the Internet fax service architecture in a standardized format.

Claims

1. A method comprising:

maintaining, by a central logging module associated with an Internet fax system, a chronological record of a sequence of events associated with a plurality of components of the Internet fax system in a form of an audit log, wherein the audit log stores a plurality of audit log entries and wherein the centralized logging module is tightly integrated with the Internet fax system and is aware of various sources of information, including objects, identifiers, data structures and databases used within the Internet fax system, thereby allowing the centralized logging module to offload from the plurality of components retrieval of specific parameters from the various sources of information to be stored within the plurality of audit log entries;

receiving, by the centralized audit logging module, from a component of the plurality of components of the Internet fax system, information regarding an event associated with the component, that is to be logged in a form of an audit log entry of the plurality of audit log entries separate and distinct from a record of inbound or outbound fax calls available for presentation to subscribers of the Internet fax system, wherein the component comprises a web server, an email server, a fax server, a notification server or an imaging system;

utilizing, by the centralized audit logging module, the information to determine and retrieve the specific parameters within the Internet fax system to be logged;

recording, by the centralized audit logging module, the event to the audit log in a standardized format by creating the audit log entry, incorporating the information and the specific parameters within the audit log entry and storing the audit log entry within the audit log; and

responsive to receiving, by the centralized audit logging module, a request for retrieval of a portion of the plurality of audit log entries initiated by a subscriber of the Internet fax system, returning those audit log entries of the plurality of audit log entries matching one or more optional criteria specified in the request for purposes of facilitating auditing of security or compliance of the Internet fax system by the subscriber.

2. The method of claim 1, wherein the request is initiated by a subscriber of the Internet fax system via web browser access through a website associated with the Internet fax system.

3. The method of claim 1, wherein the request is initiated by an application of a subscriber of the Internet fax system via an Application Programming Interface (API) of the Internet fax system.

4. The method of claim 3, wherein the one or more optional criteria specified in the request are provided in a form of Hypertext Transfer Protocol (HTTP) or HTTP Secure (HTTPS) POST variables.

5. The method of claim 1, wherein the event comprises submission of an outbound fax request and is responsive to the web server or the email server receiving a request from a user of the Internet fax system to deliver a fax message to one or more third parties and storing one or more source files associated with the request that represent at least a portion of content to be included as part of the fax message to a shared storage area of the Internet fax system accessible by the imaging system.

6. The method of claim 1, wherein the event comprises creation of a fax job and is responsive to the web server or the email server attempting to store a work request on a work queue associated with the imaging system, wherein the work request directs the imaging system to convert one or more source files, associated with a request by a user of the Internet fax system to deliver a fax message to one or more third parties, into a digital representation suitable for faxing.

7. The method of claim 1, wherein the event comprises a fax conversion and is responsive to the imaging system attempting to create an outbound fax job including converting one or more source files, associated with a request to deliver a fax message to one or more third parties, into a digital representation suitable for faxing.

8. The method of claim 1, wherein the event comprises queuing of a fax message for delivery and is responsive to successful creation of an outbound fax job, including converting one or more source files, associated with a request by a user of the Internet fax system to deliver a fax message to one or more third parties, into a digital representation suitable for faxing, and attempting to queue the outbound fax job for sending by submitting the outbound fax job to the fax server.

9. The method of claim 1, wherein the event comprises notification regarding a sent fax and is responsive to an attempt by the notification server to notify a user of the Internet fax system that a request by the user to deliver a fax message to one or more third parties has been completed by the fax server.

10. The method of claim 1, wherein the event comprises receipt of an incoming fax and is responsive to an inbound fax call being received at a telecommunications system of the Internet fax system, switched, by the telecommunications system, to a call mediation system within the Internet fax system and switched, by the call mediation system, to the fax server.

11. The method of claim 1, wherein the event comprises notification regarding a received fax and is responsive to receipt of an inbound fax by the fax server and making available of a digital representation of the inbound fax to one or more users of the Internet fax system.

12. The method of claim 11, wherein said notification regarding a received fax is further responsive to an attempt by the email server to notify the one or more users regarding the inbound fax.

13. The method of claim 1, wherein the event comprises an account change and is responsive to a user of the Internet fax system making an administrative change to an account of a subscribing entity of the Internet fax system.

14. The method of claim 1, wherein the event comprises viewing of the audit log and is responsive to receipt, by the web server, from a user of the Internet fax system a request for one or more audit log entries of the audit log.

15. The method of claim 1, wherein the specific parameters include one or more of an organization identifier (ID) of a subscribing entity of the Internet fax system, a user ID of a user of the subscribing entity associated with the event, an Internet Protocol address associated with the event and a web session ID of a web session associated with the event.

16. A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of a component of a plurality of components of an Internet fax system, causes the one or more processors to perform a method comprising:

maintaining, by a central logging module associated with an Internet fax system, a chronological record of a sequence of events associated with the plurality of components in a form of an audit log, wherein the audit log stores a plurality of audit log entries and wherein the centralized logging module is tightly integrated with the Internet fax system and is aware of various sources of information, including objects, identifiers, data structures and databases used within the Internet fax system, thereby allowing the centralized logging module to offload from the plurality of components retrieval of specific parameters from the various sources of information to be stored within the plurality of audit log entries;

receiving, by the centralized audit logging module, from the component, information regarding an event associated with the component, that is to be logged in a form of an audit log entry of the plurality of audit log entries separate and distinct from a record of inbound or outbound fax calls available for presentation to subscribers of the Internet fax system, wherein the component comprises a web server, an email server, a fax server, a notification server or an imaging system;

utilizing, by the centralized audit logging module, the information to determine and retrieve the specific parameters within the Internet fax system to be logged;

recording, by the centralized audit logging module, the event to the audit log in a standardized format by creating the audit log entry, incorporating the information and the specific parameters within the audit log entry and storing the audit log entry within the audit log; and

responsive to receiving, by the centralized audit logging module, a request for retrieval of a portion of the plurality of audit log entries initiated by a subscriber of the Internet fax system, returning those audit log entries of the plurality of audit log entries matching one or more optional criteria specified in the request for purposes of facilitating auditing of security or compliance of the Internet fax system by the subscriber.

17. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises submission of an outbound fax request and is responsive to the web server or the email server receiving a request from a user of the Internet fax system to deliver a fax message to one or more third parties and storing one or more source files associated with the request that represent at least a portion of content to be included as part of the fax message to a shared storage area of the Internet fax system accessible by the imaging system.

18. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises creation of a fax job and is responsive to the web server or the email server attempting to store a work request on a work queue associated with the imaging system, wherein the work request directs the imaging system to convert one or more source files, associated with a request by a user of the Internet fax system to deliver a fax message to one or more third parties, into a digital representation suitable for faxing.

19. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises a fax conversion and is responsive to the imaging system attempting to create an outbound fax job including converting one or more source files, associated with a request to deliver a fax message to one or more third parties, into a digital representation suitable for faxing.

20. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises queuing of a fax message for delivery and is responsive to successful creation of an outbound fax job, including converting one or more source files, associated with a request by a user of the Internet fax system to deliver a fax message to one or more third parties, into a digital representation suitable for faxing, and attempting to queue the outbound fax job for sending by submitting the outbound fax job to the fax server.

21. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises notification regarding a sent fax and is responsive to an attempt by the notification server to notify a user of the Internet fax system that a request by the user to deliver a fax message to one or more third parties has been completed by the fax server.

22. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises receipt of an incoming fax and is responsive to an inbound fax call being received at a telecommunications system of the Internet fax system, switched, by the telecommunications system, to a call mediation system within the Internet fax system and switched, by the call mediation system, to the fax server.

23. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises notification regarding a received fax and is responsive to receipt of an inbound fax by the fax server and making available of a digital representation of the inbound fax to one or more users of the Internet fax system.

24. The non-transitory computer-readable storage medium of claim 16, wherein said notification regarding a received fax is further responsive to an attempt by the email server to notify the one or more users regarding the inbound fax.

25. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises an account change and is responsive to a user of the Internet fax system making an administrative change to an account of a subscribing entity of the Internet fax system.

26. The non-transitory computer-readable storage medium of claim 16, wherein the event comprises viewing of the audit log and is responsive to receipt, by the web server, from a user of the Internet fax system a request for one or more audit log entries of the audit log.

27. The non-transitory computer-readable storage medium of claim 16, wherein the specific parameters include one or more of an organization identifier (ID) of a subscribing entity of the Internet fax system, a user ID of a user of the subscribing entity associated with the event, an Internet Protocol address associated with the event and a web session ID of a web session associated with the event.