Granted Patent B1

US 8,561,206 · App. 12/166,187 · Granted Oct 15, 2013

Abstract

Claims (32)

1. A non-transitory computer readable medium comprising instructions stored thereon to cause one or more processors to:

receive data including a header at a device of a recipient, the header including a list of two or more identifiers of intended recipients;

identify a request to access the data by the recipient, the recipient identified by an identifier, wherein the request is authenticated based on a determination of whether the identifier of the recipient matches any of the intended recipients included with the list;

allow access to the data, avoiding the authentication, when it is determined that the data has previously been accessed by the device and a security level of the device is not high;

allow access to the data, avoiding the authentication, when it is determined that a protection level associated with the data is low and the security level of the device is low; and

allow access to the data, based on the authentication, when it is determined that the identifier of the recipient is included within the list.

2. The non-transitory computer readable medium of claim 1 , wherein the data includes an electronic mail message.

3. The non-transitory computer readable medium of claim 1 , wherein the data includes confidential data.

4. The non-transitory computer readable medium of claim 1 , wherein the identifier of the recipient includes a directory identifier of the recipient.

5. The non-transitory computer readable medium of claim 1 , wherein the identifier of the recipient includes a lightweight directory access protocol (LDAP) identifier of the recipient.

6. The non-transitory computer readable medium of claim 1 , wherein the identifier of the recipient includes a digital certificate associated with the recipient.

7. The non-transitory computer readable medium of claim 1 , wherein the identifier of the recipient includes biometric data that identifies the recipient.

8. The non-transitory computer readable medium of claim 1 , further comprising instructions to cause one or more processors to unpack the data to determine whether the identifier of the recipient is included within the header of the data.

9. The non-transitory computer readable medium of claim 1 , further comprising instructions to cause one or more processors to decode the header.

10. The non-transitory computer readable medium of claim 1 , wherein the instructions to cause one or more processors to determine whether the identifier of the recipient is included within the list of two or more identifiers of the intended recipients are performed by a data leakage prevention agent of the device.

11. The non-transitory computer readable medium of claim 1 , wherein the instructions to cause one or more processors to determine whether the identifier of the recipient is included within the list of two or more identifiers of the intended recipients are performed by a plug-in of the device.

12. The non-transitory computer readable medium of claim 1 , wherein the instructions to cause one or more processors to determine whether the identifier of the recipient is included within the list of two or more identifiers of the intended recipients include instructions to cause one or more processors to determine the identifier of the recipient by using login data used by the recipient to login to the device.

13. The non-transitory computer readable medium of claim 1 , wherein the instructions to cause one or more processors to allow access to the data by the device of the recipient include instructions to cause one or more processors to prevent access if it is determined that the identifier of the recipient is not included within the list of two or more identifiers of intended recipients.

14. A method, comprising:

receiving, utilizing a processor, data including a header at a device of a recipient, the header including a list of two or more identifiers of intended recipients;

identifying, utilizing the processor, a request to access the data by the recipient, the recipient identified by an identifier, wherein the request is authenticated based on a determination of whether the identifier of the recipient matches any of the intended recipients included with the list;

allowing access to the data, avoiding the authentication, when it is determined that the data has previously been accessed by the device and a security level of the device is not high;

allowing access to the data, avoiding the authentication, when it is determined that a protection level associated with the data is low and the security level of the device is low; and

allowing access to the data, based on the authentication, when it is determined that the identifier of the recipient is included within the list.

15. A system, comprising:

a memory; and

a processor operatively coupled to the memory, the processor adapted to execute program code stored in the memory to:

receive data including a header, the header including a list of two or more identifiers of intended recipients,

identify a request to access the data by a recipient, the recipient identified by an identifier, wherein the request is authenticated based on a determination of whether the identifier of the recipient matches any of the intended recipients included with the list,

allow access to the data, avoiding the authentication, when it is determined that the data has previously been accessed by the system and a security level of the system is not high;

allow access to the data, avoiding the authentication, when it is determined that a protection level associated with the data is low and the security level of the device is low; and

allow access to the data, based on the authentication, when it is determined that the identifier of the recipient is included within the list.

Assignments (10)