Secure electronic mail system

• US 9,647,977 B2
• Filed: 01/25/2016
• Issued: 05/09/2017
• Est. Priority Date: 07/01/2005
• Status: Active Grant

• Current Assignee: Appriver Canada, ULC (Open Text Corporation)
• Original Assignee: Cirius Messaging Inc. (Open Text Corporation)
• Inventors: LeVasseur, Thierry, Astudillo, Esteban, McLean, Matt
• Primary Examiner(s): Tiv, Backhean
• Application Number:
  US15/006,028
• Publication Number:
  US 20160142364A1
• Time in Patent Office: 470 Days
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/68 Special signature format, e.g. XML format
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/02 using automatic reactions or user delegation, e.g. automatic replies or chatbot-generated messages
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/234 for tracking messages
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/145 : the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/306 : intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/3213 : using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An e-mail system is disclosed that overcomes many deficiencies of, but is backward compatible with, existing e-mail systems. Embodiments of the system may include various features, including but not limited to: (1) secure transfer of e-mail messages, without the need for users to replace existing e-mail clients or to change e-mail addresses; (2) tracking of all actions performed in connection with an e-mail transmission; (3) the ability for a recipient to view information about an e-mail message, optionally including information about how other addressees have responded to it, before deciding whether to retrieve the e-mail message; (4) the aggregation of entire e-mail conversations into a single threaded view; (5) the ability to include both private and public messages in a single e-mail communication; (6) sender control over downstream actions performed in connection with an e-mail message; (7) flexible control over cryptographic methods used to encrypt emails messages for storage.

Claims

1. A computer-implemented method of securely communicating e-mail messages, comprising at a client device:

sending, to a server system, an e-mail message addressed to a recipient from a sender via a remote client executed on the client device;

receiving, from the server system, a substitute message based on the e-mail message, the substitute message lacking at least some message content of the e-mail message, and including a link to a component that provides functionality for the recipient to securely retrieve the e-mail message from the server system; and

sending the substitute message to the recipient,

wherein the substitute message includes a message access key containing non-secret information which describes the e-mail message, the server system from which the e-mail message is to be retrieved, and a unique message ID that identifies the e-mail message on the server system.

2. The method of claim 1, wherein the remote client comprises an e-mail client plug-in configured to run in conjunction with an e-mail client program on the client device.

3. The method of claim 1, wherein the client communicates with the server system via an HTTPS connection over a computer network.

4. The method of claim 1, wherein the substitute message is sent to the recipient via a SMTP server associated with an e-mail address of the sender.

5. The method of claim 1, wherein the component that provides functionality for the recipient to securely retrieve the e-mail message from the server system comprises a link to a network location for downloading an e-mail client plug-in that is capable of securely retrieving and displaying the e-mail message.

6. The method of claim 1, wherein the component that provides functionality for the recipient to securely retrieve the e-mail message from the server system comprises a link to a web-based interface that provides functionality for viewing the e-mail message.