Audit logging for a secure, scalable and flexible Internet fax architecture

• US 10,477,070 B2
• Filed: 03/14/2019
• Issued: 11/12/2019
• Est. Priority Date: 06/24/2014
• Status: Active Grant

• Current Assignee: EC Data Systems Incorporated
• Original Assignee: EC Data Systems Incorporated
• Inventors: Watts, Christian M., Shephard, Edward D.
• Primary Examiner(s): Pachol, Nicholas
• Application Number:
  US16/353,652
• Publication Number:
  US 20190222717A1
• Time in Patent Office: 243 Days
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 2203/657 Combination of voice and fax calls
• CPC Class Codes: H04M 7/0024 Services and arrangements where telephone services are combined with data services arrangements which combine a telephonic equipment and a computer H04M7/0012
• CPC Class Codes: H04N 1/001 specially adapted for transmission via digital wireline networks H04N1/00098 takes precedence
• CPC Class Codes: H04N 1/00209 Transmitting or receiving image data, e.g. facsimile data, via a computer, e.g. using e-mail, a computer network, the internet, I-fax
• CPC Class Codes: H04N 1/00212 Attaching image data to computer messages, e.g. to e-mails
• CPC Class Codes: H04N 1/0022 involving facsimile protocols or a combination of facsimile protocols and computer data transmission protocols
• CPC Class Codes: H04N 1/32411 Handling instructions for routing or relaying
• CPC Class Codes: H04N 1/32416 Storage of instructions or retrieval of prestored instructions
• CPC Class Codes: H04N 1/32422 Reprocessing messages, e.g. in case the intended destination is busy
• CPC Class Codes: H04N 1/4426 involving separate means, e.g. a server, a magnetic card
• CPC Class Codes: H04N 2201/0093 Facsimile machine H04N2201/0094 takes precedence
• CPC Class Codes: H04N 2201/3202 of communication or activity log or report
• CPC Class Codes: H04N 2201/3209 of a telephone number
• CPC Class Codes: H04N 2201/3221 of a job number or identification, e.g. communication number

Abstract

Methods and systems for an auditing infrastructure for an Internet fax service architecture are provided. According to one embodiment, a chronological record of a sequence of events associated with components of the Internet fax system is maintained by a central logging module in a form of an audit log for purposes of auditing security and compliance. A fax request is submitted. A work request is created, containing information identifying a selected imaging system. Source files to be included in the fax message are converted into a digital representation and associated with an outbound fax job, which is queued for sending by a fax server. The fax message is delivered and the user is notified regarding same. Audit log entries are stored within the audit log by providing by respective components the central logging module with a unique job identifier associated with the fax request and a result of the task.

Claims

1. A method comprising:

maintaining, by a central logging module associated with an Internet fax system, a chronological record of a sequence of events associated with a plurality of components of the Internet fax system in a form of an audit log, wherein the audit log stores a plurality of audit log entries for purposes of auditing security and compliance of the Internet fax system and wherein the plurality of components include an initial submission gateway device, a plurality of imaging systems, a plurality of fax processing resources and a notification server;

submitting a fax request within the Internet fax system, including;

receiving, at the initial submission gateway device, a request to deliver a fax message to one or more third parties; and

storing, by the initial submission gateway device, one or more source files associated with the request and representing at least a portion of content to be included as part of the fax message to a shared storage area of the Internet fax system accessible by the plurality of imaging systems and the plurality of fax processing resources of the Internet fax system;

creating a work request within the Internet fax system, including;

selecting, by the initial submission gateway device, an imaging system of the plurality of imaging systems to convert the one or more source files into a digital representation suitable for faxing; and

storing, by the initial submission gateway device, a work request on a centralized work queue within a database of the Internet fax system accessible by the plurality of imaging systems, the work request containing information identifying the selected imaging system;

converting, by the selected imaging system, the one or more source files into the digital representation and associating the digital representation with an outbound fax job;

queuing, by the selected imaging system, the outbound fax job for sending by submitting the outbound fax job to a fax server of the plurality of fax processing resources;

delivering, by the fax server, the fax message to the one or more third parties;

notifying, by the notification server, the user regarding delivery of the fax message; and

causing one or more audit log entries of the plurality of audit log entries, separate and distinct from a record of outbound fax calls to be presented to subscribers of the Internet fax system, to be created and stored within the audit log by one or more of;

providing, by the initial submission gateway device, the central logging module with information regarding a user of the Internet fax system associated with the request, an interface of the Internet fax system through which the request was received, a destination fax number, one or more filenames of the one or more source files and a result of said submitting a fax request;

providing, by the initial submission gateway device, the central logging module with a unique job identifier associated with the fax request and a result of said creating a work request;

providing, by the selected imaging system, the central logging module with the unique job identifier and a result of said converting;

providing, by the selected imaging system, the central logging module with the unique job identifier and a result of said queuing;

providing, the fax server, the central logging module with the unique job identifier and a result of said delivering; and

providing, by the notification server, the central logging module with the unique job identifier and a result of said notifying.

2. The method of claim 1, wherein the central logging module comprises a daemon running within the Internet fax system.

3. The method of claim 1, wherein the central logging module comprises a remote cloud-based service available to the Internet fax system.

4. The method of claim 1, wherein said providing, by the initial submission gateway device, the central logging module with information regarding a user of the Internet fax system associated with the request, an interface of the Internet fax system through which the request was received, a destination fax number, one or more filenames of the one or more source files and a result of said submitting a fax request comprises:

loading, by the initial submission gateway device, code representing an event logging routine of the central logging module, from a shared storage resource accessible to the initial submission gateway device, the plurality of imaging systems, the plurality of fax processing resources and the notification server; and

executing, by the initial submission gateway device, the code.

5. The method of claim 4, wherein responsive to receipt of the information regarding the user of the Internet fax system associated with the request, the interface of the Internet fax system through which the request was received and the result of said submitting the fax request:

creating, by the central logging module, a timestamp and a unique audit identifier for a first audit log entry of the plurality of audit log entries;

utilizing, by the central logging module, a calling website'"'"'s session data to determine one or more additional specific parameters within the Internet fax system to be logged;

creating, by the central logging module, the first audit log entry in a standardized format and including within the first audit log entry the timestamp, the unique audit identifier, a username of the user, the interface, the destination fax number, the filename, the one or more additional specific parameters and the result of said submitting the fax request; and

storing, by the central logging module, the first audit log entry within the audit log.

6. The method of claim 5, wherein the one or more specific parameters include an organization identifier (ID) of a subscribing entity of the Internet fax system and an internet protocol (IP) address of the user.

7. The method of claim 1, wherein the centralized logging module is tightly integrated with the Internet fax system and is aware of various sources of information, including objects, identifiers, data structures and databases used within the Internet fax system, thereby allowing the centralized logging module to offload from the plurality of components retrieval of additional information from the various sources of information to be stored within the plurality of audit log entries.

8. The method of claim 1, wherein the events include one or more of:

success or failure of receipt by the Internet fax system of an inbound fax call;

success of failure of notifying one or more users regarding receipt of the inbound fax call;

an account change responsive to a particular user of the Internet fax system making an administrative change to an account of a subscribing entity of the Internet fax system;

viewing of some portion of the audit log by a subscriber of the Internet fax system via web browser access through a website associated with the Internet fax system; and

viewing of some portion of the audit log by the subscriber of the Internet fax system responsive to a request initiated by an application of the subscriber via an Application Programming Interface (API) of the Internet fax system.

9. The method of claim 1, further comprising responsive to receiving, by the centralized audit logging module, a request for retrieval of a portion of the plurality of audit log entries initiated by a subscriber of the Internet fax system, returning those audit log entries of the plurality of audit log entries matching one or more optional criteria specified in the request for purposes of facilitating auditing of security or compliance of the Internet fax system by the subscriber.

10. The method of claim 9, wherein the request is initiated by the subscriber via web browser access through a website associated with the Internet fax system.

11. The method of claim 9, wherein the request is initiated by an application of the subscriber via an Application Programming Interface (API) of the Internet fax system.

12. The method of claim 11, wherein the one or more optional criteria specified in the request are provided in a form of Hypertext Transfer Protocol (HTTP) or HTTP Secure (HTTPS) POST variables.

13. The Internet fax system of claim 1, wherein the method further comprises responsive to receiving, by the centralized audit logging module, a request for retrieval of a portion of the plurality of audit log entries initiated by a subscriber of the Internet fax system, returning those audit log entries of the plurality of audit log entries matching one or more optional criteria specified in the request for purposes of facilitating auditing of security or compliance of the Internet fax system by the subscriber.

14. The Internet fax system of claim 13, wherein the request is initiated by the subscriber via web browser access through a website associated with the Internet fax system.

15. The Internet fax system of claim 13, wherein the request is initiated by an application of the subscriber via an Application Programming Interface (API) of the Internet fax system.

21. The Internet fax system of claim 15, wherein the one or more optional criteria specified in the request are provided in a form of Hypertext Transfer Protocol (HTTP) or HTTP Secure (HTTPS) POST variables.

16. An Internet fax system comprising:

a plurality of components, including;

an initial submission gateway device,

a plurality of imaging systems,

a plurality of fax processing resources, and

a notification server; and

a computer-readable storage medium, representing a shared storage resource accessible to the initial submission gateway device, the plurality of imaging systems, the plurality of fax processing resources and the notification server, embodying a set of instructions representing a central logging module, which when executed by one or more processors of a component of the plurality of components, causes the one or more processors to maintain, a chronological record of a sequence of events associated with the plurality of components in a form of an audit log, wherein the audit log stores a plurality of audit log entries for purposes of auditing security and compliance of the Internet fax system;

wherein the plurality of components are configured to perform a method comprising;

submitting a fax request within the Internet fax system, including;

receiving, at the initial submission gateway device, a request to deliver a fax message to one or more third parties; and

storing, by the initial submission gateway device, one or more source files associated with the request and representing at least a portion of content to be included as part of the fax message to a shared storage area of the Internet fax system accessible by the plurality of imaging systems and the plurality of fax processing resources of the Internet fax system;

creating a work request within the Internet fax system, including;

selecting, by the initial submission gateway device, an imaging system of the plurality of imaging systems to convert the one or more source files into a digital representation suitable for faxing; and

storing, by the initial submission gateway device, a work request on a centralized work queue within a database of the Internet fax system accessible by the plurality of imaging systems, the work request containing information identifying the selected imaging system;

converting, by the selected imaging system, the one or more source files into the digital representation and associating the digital representation with an outbound fax job;

queuing, by the selected imaging system, the outbound fax job for sending by submitting the outbound fax job to a fax server of the plurality of fax processing resources;

delivering, by the fax server, the fax message to the one or more third parties;

notifying, by the notification server, the user regarding delivery of the fax message; and

causing one or more audit log entries of the plurality of audit log entries, separate and distinct from a record of outbound fax calls to be presented to subscribers of the Internet fax system, to be created and stored within the audit log by one or more of;

providing, by the initial submission gateway device, the central logging module with information regarding a user of the Internet fax system associated with the request, an interface of the Internet fax system through which the request was received, a destination fax number, one or more filenames of the one or more source files and a result of said submitting a fax request;

providing, by the initial submission gateway device, the central logging module with a unique job identifier associated with the fax request and a result of said creating a work request;

providing, by the selected imaging system, the central logging module with the unique job identifier and a result of said converting;

providing, by the selected imaging system, the central logging module with the unique job identifier and a result of said queuing;

providing, the fax server, the central logging module with the unique job identifier and a result of said delivering; and

providing, by the notification server, the central logging module with the unique job identifier and a result of said notifying.

17. The Internet fax system of claim 16, wherein said providing, by the initial submission gateway device, the central logging module with information regarding a user of the Internet fax system associated with the request, an interface of the Internet fax system through which the request was received, a destination fax number, one or more filenames of the one or more source files and a result of said submitting a fax request comprises:

loading, by the initial submission gateway device, code representing an event logging routine of the central logging module, from a shared storage resource accessible to the initial submission gateway device, the plurality of imaging systems, the plurality of fax processing resources and the notification server; and

executing, by the initial submission gateway device, the code.

18. The Internet fax system of claim 17, wherein responsive to receipt of the information regarding the user of the Internet fax system associated with the request, the interface of the Internet fax system through which the request was received and the result of said submitting the fax request:

creating, by the central logging module, a timestamp and a unique audit identifier for a first audit log entry of the plurality of audit log entries;

utilizing, by the central logging module, a calling website'"'"'s session data to determine one or more additional specific parameters within the Internet fax system to be logged;

creating, by the central logging module, the first audit log entry in a standardized format and including within the first audit log entry the timestamp, the unique audit identifier, a username of the user, the interface, the destination fax number, the filename, the one or more additional specific parameters and the result of said submitting the fax request; and

storing, by the central logging module, the first audit log entry within the audit log.

19. The Internet fax system of claim 18, wherein the one or more specific parameters include an organization identifier (ID) of a subscribing entity of the Internet fax system and an internet protocol (IP) address of the user.

20. The Internet fax system of claim 16, wherein the centralized logging module is tightly integrated with the Internet fax system and is aware of various sources of information, including objects, identifiers, data structures and databases used within the Internet fax system, thereby allowing the centralized logging module to offload from the plurality of components retrieval of additional information from the various sources of information to be stored within the plurality of audit log entries.