Systems and methods for controlling email access
Embodiments of the disclosure relate to proxying at least one email resource from at least one email service to at least one client device, determining whether the email resources are accessible to the client devices via at least one unauthorized application on the client devices, and modifying the email resources to be inaccessible via the unauthorized applications on the client devices in response to a determination that the email resources are accessible via the unauthorized applications on the client devices.
1. A method for managing access to content associated with email by an access control server, comprising:
obtaining an email message for transmission to a client, the email message obtained from an email server, wherein the access control server is configured to proxy email messages from the email server to a client device;
determining that access to the email message should be restricted to an authorized email client installed on the client device;
generating a modified email message based upon the email message by encrypting the email message, wherein access to content of the modified email message is inaccessible by an unauthorized application installed on the client device; and
transmitting the modified email message to the client device, wherein access to the email message is restricted to the authorized email client installed on the client device.
2. The method of claim 1 , wherein generating the modified email message further comprises:
removing a portion of a body of the email message from the modified email message;
encrypting the portion of the body of the email message; and
including the encrypted portion of the body to the modified email message.
3. The method of claim 2 , further comprising transmitting at least one instruction to the client device, wherein the at least one instruction comprises an encryption key with which the modified email message can be decrypted by the authorized email client.
4. The method of claim 3 , wherein the encryption key is inaccessible to the unauthorized application installed on the client device.
5. The method of claim 1 , wherein determining that access to the email message should be restricted to the authorized email client comprises determining that a content-type resource rule specifies that a particular keyword appears in at least one of a body or an attachment of the email message.
6. The method of claim 1 , wherein determining that access to the email message should be restricted to the authorized email client comprises determining that a property of a sender of the email message is associated with a particular domain, a particular username, or a particular email address.
7. The method of claim 1 , wherein generating the modified email message further comprises:
removing an attachment from the email message;
generating a modified attachment by at least one of encrypting the attachment or modifying a file format of the attachment; and
including the modified attachment as an attachment to the modified email message.
8. A non-transitory computer-readable medium comprising a program which, when executed by a processor, manage access to content associated with email by an access control server and caused the processor to at least:
obtain an email message for transmission to a client, the email message obtained from an email server, wherein the access control server is configured to proxy email messages from the email server to a client device;
determine that access to the email message should be restricted to an authorized email client installed on the client device;
generate a modified email message based upon the email message by encrypting the email message, wherein access to content of the modified email message is inaccessible by an unauthorized application installed on the client device; and
transmit the modified email message to the client device, wherein access to the email message is restricted to the authorized email client installed on the client device.
9. The non-transitory computer-readable medium of claim 8 , wherein the modified email message is generated by:
removing a portion of a body of the email message from the modified email message;
encrypting the portion of the body of the email message; and
including the encrypted portion of the body to the modified email message.
10. The non-transitory computer-readable medium of claim 8 , wherein the program, when executed, transmits at least one instruction to the client device, wherein the at least one instruction comprises an encryption key with which the modified email message can be decrypted by the authorized email client.
11. The non-transitory computer-readable medium of claim 10 , wherein the encryption key is inaccessible to the unauthorized application installed on the client device.
12. The non-transitory computer-readable medium of claim 8 , wherein the program determines that access to the email message should be restricted to the authorized email client by determining that a content-type resource rule specifies that a particular keyword appears in at least one of a body or an attachment of the email message.
13. The non-transitory computer-readable medium of claim 8 , wherein the program determines that access to the email message should be restricted to the authorized email client by determining that a property of a sender of the email message is associated with a particular domain, a particular username, or a particular email address.
14. The non-transitory computer-readable medium of claim 8 , wherein the program generates the modified email message by:
removing an attachment from the email message;
generating a modified attachment by at least one of encrypting the attachment or modifying a file format of the attachment; and
including the modified attachment as an attachment to the modified email message.
15. An access control server that manages access to content associated with email by an access control server, the access control server executing an application that is configured to at least:
obtain an email message for transmission to a client, the email message obtained from an email server, wherein the access control server is configured to proxy email messages from the email server to a client device;
determine that access to the email message should be restricted to an authorized email client installed on the client device;
generate a modified email message based upon the email message by encrypting the email message, wherein access to content of the modified email message is inaccessible by an unauthorized application installed on the client device; and
transmit the modified email message to the client device, wherein access to the email message is restricted to the authorized email client installed on the client device.
16. The access control server of claim 15 , wherein the modified email message is generated by:
removing a portion of a body of the email message from the modified email message;
encrypting the portion of the body of the email message; and
including the encrypted portion of the body to the modified email message.
17. The access control server of claim 15 , wherein the application, when executed, transmits at least one instruction to the client device, wherein the at least one instruction comprises an encryption key with which the modified email message can be decrypted by the authorized email client.
18. The access control server of claim 17 , wherein the encryption key is inaccessible to the unauthorized application installed on the client device.
19. The access control server of claim 15 , wherein the program determines that access to the email message should be restricted to the authorized email client by determining that a content-type resource rule specifies that a particular keyword appears in at least one of a body or an attachment of the email message.
20. The access control server of claim 15 , wherein the program determines that access to the email message should be restricted to the authorized email client by determining that a property of a sender of the email message is associated with a particular domain, a particular username, or a particular email address.