Securing outbound mail
View Patent ↗Methods, systems, and machine-readable media are disclosed for client-based filtering of email content. According to one embodiment, a method for providing client-based filtering of email content can comprise detecting an outbound email with a filter implemented on an email client application. A determination can be made with the filter whether the outbound email is addressed to a recipient outside of an organization. In response to determining the outbound email is addressed to a recipient outside of the organization, a determination can be made with the filter whether to allow the email to be sent. Determining whether to allow the email to be sent can comprise scanning the content of the email, and/or any attachments, and determining whether the content of the email contains protected information.
1. A method of providing client-based filtering of outgoing email content, the method comprising:
detecting, by a computer system, an outbound email with a filter implemented on an email client application;
determining, by the computer system, with the filter whether the outbound email is addressed to a recipient outside of an organization;
in response to determining the outbound email is addressed to an internal recipient within the organization, allowing the email to be sent without scanning content of the email; and
in response to determining the outbound email is addressed to an external recipient outside of the organization, determining, by the computer system, using the filter whether to allow the email to be sent, wherein:
the filter is used to determine:
whether a length of a string of digits within the content of the email relates to protected information;
whether one or more formatting characters within the string of digits relate to protected information;
whether the string of digits comprises specific beginning digits; and
whether the string of digits is a routing transit number that corresponds to a stored routing transit number in a database accessible by the computer system.
2. The method of claim 1 , wherein determining whether to allow the email to be sent comprises:
scanning the content of the email; and
determining whether the content of the email contains protected information.
3. The method of claim 2 , wherein scanning the content of the email further comprises scanning one or more attachments to the email.
4. The method of claim 2 , further comprising, in response to determining the email contains protected information, determining whether the recipient is eligible to receive the protected information.
5. The method of claim 4 , further comprising, in response to determining the recipient is not eligible to receive the protected information, blocking the email with the filter.
6. The method of claim 4 , further comprising, in response to determining the recipient is eligible to receive the protected information, determining whether encryption of the protected information is required.
7. The method of claim 6 , further comprising, in response to determining encryption of the protected information is required, determining whether the protected information is encrypted.
8. The method of claim 7 , further comprising, in response to determining the protected information is not encrypted, blocking the email with the filter.
9. The method of claim 1 , further comprising, in response to determining to not allow the email to be sent, providing a notification that the email cannot be sent, the notification explaining reasons for determining to not allow the email to be sent.
10. The method of claim 1 , further comprising, in response to determining to not allow the email to be sent, logging information related to the email.
11. The method of claim 1 , further comprising, in response to determining to not allow the email to be sent, reporting information related to the email.
12. The method of claim 1 , wherein the filter is further used to determine:
whether a personal account number is present within the content of the email that corresponds to a stored personal account number in a database accessible by the computer system.
13. The method of claim 1 , wherein the filter is further used to determine:
whether the string of digits passes a base 10 check digit routine.
14. The method of claim 1 , wherein the filter that is used to determine whether the length of the string of digits within the content of the email relates to protected information comprises: the filter being used to determine whether the string of digits is at least a minimum number of digits and is at most a maximum number of digits.
15. A system comprising:
a processor executing an email client application; and
a non-transitory memory coupled with and readable by the processor, the memory having stored therein instructions comprising an email filter which, when executed by the processor, cause the processor to:
detect an outbound email of the email client application, the email client application having a filter implemented;
determine whether the outbound email is addressed to a recipient outside of an organization;
in response to determining the outbound email is addressed to an internal recipient within the organization, allowing the email to be sent without scanning content of the email; and
in response to determining the outbound email is addressed to an external recipient outside of the organization, determine, using the email filter, whether to allow the email to be sent, wherein the email filter is used to determine whether to allow the email to be sent, wherein the filter is used to determine:
whether one or more formatting characters within the string of digits relate to protected information;
whether the string of digits is a routing transit number that corresponds to a stored routing transit number in a database accessible by the computer system;
whether a length of a string of digits within the content of the email relates to protected information; and
whether the string of digits comprises specific beginning digits.
16. The system of claim 15 , wherein determining whether to allow the email to be sent comprises:
scanning the content of the email; and
determining whether the content of the email contains protected information.
17. The system of claim 16 , wherein scanning the content of the email further comprises scanning one or more attachments to the email.
18. The system of claim 16 , further comprising, in response to determining the email contains protected information, determining whether the recipient is eligible to receive the protected information.
19. The system of claim 18 , further comprising, in response to determining the recipient is not eligible to receive the protected information, blocking the email with the filter.
20. The system of claim 18 , further comprising, in response to determining the recipient is eligible to receive the protected information, determining whether encryption of the protected information is required.
21. The system of claim 20 , further comprising, in response to determining encryption of the protected information is required, determining whether the protected information is encrypted.
22. The system of claim 15 , further comprising, in response to determining to not allow the email to be sent, providing a notification that the email cannot be sent, the notification explaining reasons for determining to not allow the email to be sent.
23. A non-transitory machine-readable medium having stored thereon a series of instructions which, when executed by a processor, cause the processor to provide client-based filtering of outgoing email content by:
detecting an outbound email with a filter implemented on an email client application;
determining with the filter whether the outbound email is addressed to a recipient outside of an organization;
in response to determining the outbound email is addressed to an internal recipient within the organization, allowing the email to be sent without scanning content of the email; and
in response to determining the outbound email is addressed to a recipient outside of the organization, determining with the filter whether to allow the email to be sent, wherein the filter determines:
whether the string of digits comprises specific beginning digits;
whether one or more formatting characters within the string of digits relate to protected information;
whether a length of a string of digits within the content of the email relates to protected information; and
whether the string of digits is a routing transit number that corresponds to a stored routing transit number in a database accessible by the computer system.