Secure message forwarding system detecting user's preferences including security preferences

• US 6,732,101 B1
• Filed: 06/15/2000
• Issued: 05/04/2004
• Est. Priority Date: 06/15/2000
• Status: Expired due to Term

• Current Assignee: ZixCorp Systems, Inc. (Open Text Corporation)
• Original Assignee: Zix Corporation (Open Text Corporation)
• Inventors: Cook, David P.
• Primary Examiner(s): LE, UYEN T
• Application Number:
  US09/595,416
• Time in Patent Office: 1,419 Days
• Field of Search: 707/9, 707/10, 707/104.1, 709/206, 709/203, 709/202, 709/217, 713/150, 713/200, 713/201, 713/168, 713/170, 713/171, 380/255
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system and method for providing secure E-mail services. The system includes a forwarding service to receive an E-mail message for delivery to a recipient. The system checks for recipient preferences for delivery of the E-mail message content including encryption preferences and notifies the recipient or delivers the message according to the encryption preferences. The system also includes an interoperability engine to determine delivery preferences of the sender including security preferences, the security preferences indicating a security protocol by which the E-mail message can be securely delivered to the recipient.

Claims

1. A computing system for providing secure E-mail services comprising:

a forwarding engine executing on a computer operable to

receive an E-mail message for delivery to a recipient;

store the message at least temporarily in a storage means;

check for recipient preferences for delivery of the E-mail message content including security preferences, the security preferences specifying an encryption preference;

if no preference for delivery is specified or if Web-based delivery is specified, provide an E-mail notification to the recipient including a secure link to the message; and

if a preference for delivery other than Web-based is specified, deliver the message in accordance with the recipient'"'"'s delivery preference including encrypting the message in accordance with the encryption preference.

2. The system of claim 1 wherein the forwarding engine includes a web front end operable to receive and process message requests.

3. The system of claim 1 wherein the forwarding engine includes a filter operable to produce a standard format message.

4. The system of claim 1 wherein the forwarding engine includes a forward engine operable to construct an E-mail to be transmitted to an intended recipient.

5. The system of claim 1 wherein the forwarding engine includes an encryption service operable to encrypt a message in accordance with the preferences of a recipient.

6. The system of claim 1 wherein the forwarding engine includes a queue structure operable to store a standard format message.

7. The system of claim 1 wherein the forwarding engine includes an access list including user preference data including delivery preference.

8. The system of claim 1 wherein the forwarding engine includes:

an origination layer operable to receive messages of various forms that are to be processed by the forwarding engine,

a filter layer operable to decrypt, authenticate and parse a message in accordance with the designated format of the message,

a standard message format layer operable to produce a standard format message for each received message processed by the filter layer,

an interoperability layer operable to decide how to forward a message to a recipient.

9. The system of claim 1 wherein the forwarding engine includes a notify and store layer that is invoked when web delivery of a message is required, the notify and store layer is operable to store securely a standard format message in a queue structure and operable to notify the recipient by E-mail, facsimile, pager or other means as specified in a preference data for the recipient or in accordance with a default specification.

10. The system of claim 1 wherein the forwarding engine includes a delivery layer operable to deliver a message to a recipient.

11. A computer implemented method for providing secure E-mail services using a forwarding engine executing on a computer comprising:

receiving an E-mail message for delivery to a recipient;

storing the message at least temporarily in a storage means;

checking for recipient preferences for delivery of the E-mail message content including a security preference where the security preference includes an encryption preference;

if no preference for delivery is specified or if Web-based delivery is specified, providing an E-mail notification to the recipient including a secure link to the stored message; and

if a preference for delivery other than Web-based is specified, delivering the message in accordance with the recipient'"'"'s delivery preference including encrypting the message in accordance with the encryption preference.

12. The method of claim 11 further comprising receiving and processing message requests.

13. The method of claim 11 further comprising producing a standard format message.

14. The method of claim 11 further comprising constructing an E-mail to be transmitted to an intended recipient.

15. The method of claim 11 further comprising encrypting a message in accordance with a delivery preference of a recipient.

16. The method of claim 11 further comprising storing a standard format message in a queue structure.

17. The method of claim 11 further comprising listing user preference data in an access list.

18. The method of claim 11 further comprising:

providing an original layer operable to receive messages of various forms that are to be processed by the forwarding engine;

providing a filter layer operable to decrypt, authenticate and parse a message in accordance with the designated format of the message;

providing a standard message format layer operable to produce a standard format message for each received message processed by the filter layer, and

providing an interoperability layer operable to decide how to forward a message to a recipient.

19. The method of claim 11 further comprising:

invoking a notify and store layer when web delivery of a message is required, the notify and store layer is operable to store securely a standard format message in a queue structure and operable to notify the recipient by E-mail, facsimile, pager or other means as specified in a preference data for the recipient or in accordance with a default specification.

20. The method of claim 11 further comprising providing a delivery layer operable to delivery a message to a recipient.

21. A system executing on a computer for securely processing messages for delivery from a sender to a recipient comprising:

a front end for receiving messages from a sender for delivery to a recipient;

a filter engine for processing received messages for producing standard form messages for all messages received from the sender;

an interoperability engine for determining delivery preferences of the sender including security preferences;

a storage means for storing standard form messages that are to be temporarily stored in the system; and

a forwarding engine for forwarding a notification to the recipient if required by the determined delivery preferences, the notification indicating to the user that a message is available to be retrieved;

wherein the interoperability engine is operable to bypass storing the standard form of a message in the storage means and forwarding of a notification by the forwarding engine if

the determined preferences indicate direct delivery to the recipient is requested, and

where the security preferences indicate a security protocol by which the message can be securely delivered.

22. The system of claim 21 wherein the standard form message includes an authentication block, a message block and attachments if any.

23. The system of claim 22 wherein the filter engine is operable to determine an authentication of the sender to use the system.

24. The system of claim 23 wherein the filter engine is operable to determine an authentication of the sender including determining a sender authorization pass phrase for the sender, compare the determined sender authorization pass phrase for the sender with a pass phrased provided by the sender with the message and not forward messages from unauthenticated senders.

25. The system of claim 21 wherein the filter engine includes plural filter layers for processing different types of received messages, each filter layer providing output of the standard form.

26. The system of claim 21 wherein the a interoperability engine is operable to determine security preferences for the recipient including locating keys associated with the recipient for use in encrypting messages, determining if the keys can be used in accordance with determined security protocol and sending the message directly to the recipient in accordance with the determined security protocol and using the located keys.

27. A computer implemented method for providing secure E-mail services using a forwarding engine executing on a computer comprising:

receiving an E-mail message for delivery to a recipient;

checking for recipient preferences for delivery of the E-mail message content including security preferences;

if no delivery preference is specified or if Web-based delivery is specified,

providing an E-mail notification to the recipient including a secure link to the message,

if a preference for delivery other than Web-based is specified, delivering the message in accordance with the recipient'"'"'s preference including securing the message in accordance with the determined security preferences.

28. The method of claim 27 wherein the step of determining security preferences includes determining a security protocol for use in sending the message to the recipient and where the method further includes searching for keys associated with the recipient to be used in encrypting the message to be sent to the recipient.

29. The method of claim 28 further comprising determining if the located keys can be used in accordance with the determined security protocol, and if so, then securing the message in accordance with the determined security protocol and using the located keys.

30. A computer program product embodied on an information carrier for providing secure E-mail services using a forwarding engine, the computer program product comprising instructions operable to cause a computer system to:

receive an E-mail message for delivery to a recipient;

store the message at least temporarily in a storage means;

check for recipient preferences for delivery of the E-mail message content including a security preference where the security preference includes an encryption preference;

if no preference for delivery is specified or if Web-based delivery is specified, provide an E-mail notification to the recipient including a secure link to the stored message; and

if a preference for delivery other than Web-based is specified, deliver the message in accordance with the recipient'"'"'s delivery preference where the message is encrypted in accordance with the encryption preference.

31. The computer program product of claim 30 further comprising instructions operable to cause a computer system to receive and process message requests.

32. The computer program product of claim 30 further comprising instructions operable to cause a computer system to produce a standard format message.

33. The computer program product of claim 30 further comprising instructions operable to cause a computer system to construct an E-mail to be transmitted to an intended recipient.

34. The computer program product of claim 30 further comprising instructions operable to cause a computer system to encrypt a message in accordance with a delivery preference of a recipient.

35. The computer program product of claim 30 further comprising instructions operable to cause a computer system to store a standard format message in a queue structure.

36. The computer program product of claim 30 further comprising instructions operable to cause a computer system to list user preference data in an access list.

37. The computer program product of claim 30 further comprising instructions operable to cause a computer system to:

provide an original layer operable to receive messages of various forms that are to be processed by the forwarding engine;

provide a filter layer operable to decrypt, authenticate and parse a message in accordance with the designated format of the message;

provide a standard message format layer operable to produce a standard format message for each received message processed by the filter layer; and

provide an interoperability layer operable to decide how to forward a message to a recipient.

38. The computer program product of claim 30 further comprising instructions operable to cause a computer system to:

invoke a notify and store layer when web delivery of a message is required, the notify and store layer is operable to store securely a standard format message in a queue structure and operable to notify the recipient by E-mail, facsimile, pager or other means as specified in a preference data for the recipient or in accordance with a default specification.

39. The computer program product of claim 30 further comprising instructions operable to cause a computer system to provide a delivery layer operable to delivery a message to a recipient.

40. A computer program product embodied on an information carrier for providing secure E-mail services using a forwarding engine, the computer program product comprising instructions operable to cause a computer system to:

receive an E-mail message for delivery to a recipient;

check for recipient preferences for delivery of the E-mail message content including security preferences;

if no delivery preference is specified or if Web-based delivery is specified,

provide an E-mail notification to the recipient including a secure link to the message,

if a preference for delivery other than Web-based is specified, deliver the message in accordance with the recipient'"'"'s preference where the message is secured in accordance with the determined security preferences.