Identification of document access by a message scanning system
Information identifying a message scanning system is encoded into URLs. A document management system can decode the identifying information to verify that a document accessed via a URL was accessed by a trusted entity rather than by an unknown user. The document management system sends a message including a URL to access a document. When a message scanning system known to the document management system reviews the message for threats, it encodes its identity into a modified form of the URL in the message and uses the modified URL to access the resource. The document management system can decode the identity of the messaging system using a decoding key. Based on the identification, the document management system updates records associated with the document to include the document acce by the message scanning system.
1. A method comprising:
generating, by a document management system, a key pair comprising a private key and a public key;
providing, by the document management system, the private key to a message scanning system;
sending, by the document management system, a message to a user using a messaging system, the message including a first uniform resource locator (URL) that can be used to access a document;
receiving, by the document management system, an indication that the document associated with the first URL has been accessed, wherein the indication comprises a second URL generated by the message scanning system that has analyzed the message, the second URL including a coded value that is encoded using the private key and wherein the coded value is included in the second URL as a query string parameter such that the second URL identifies the same document as the first URL and further identifies the message scanning system;
determining, by the document management system and based on the coded value, that the message scanning system has accessed the document, wherein determining that the message scanning system has accessed the document comprises decoding the coded value using the public key and determining an identity of the message scanning system based on the decoded coded value; and
responsive to determining that the message scanning system has accessed the document, modifying, by the document management system, a record associated with the document to indicate that the message scanning system has accessed the document.
2. The method of claim 1 , wherein the messaging system comprises an email system.
3. The method of claim 1 , wherein the coded value comprises an encoded hash of the first URL.
4. The method of claim 1 , wherein the second URL comprises an encoded hash of the first URL appended to the first URL.
5. The method of claim 1 , wherein receiving the indication that the document associated with the first URL has been accessed comprises receiving the second URL.
6. Non-transitory computer-readable storage media storing executable instructions that, when executed, cause a computing system to:
generate a key pair comprising a private key and a public key;
provide the private key to a message scanning system;
send a message to a user using a messaging system, the message including a first uniform resource locator (URL) that can be used to access a document;
receive an indication that the document associated with the first URL has been accessed, wherein the indication comprises a second URL generated by the message scanning system that has analyzed the message, the second URL including a coded value that is encoded using the private key and wherein the coded value is included in the second URL as a query string parameter such that the second URL identifies the same document as the first URL and further identifies the message scanning system;
determine, based on the coded value, that the message scanning system has accessed the document, wherein to determine that the message scanning system has accessed the document, the instructions cause the computing system to decode the coded value using the public key and to determine an identity of the message scanning system based on the decoded coded value; and
responsive to a determination that the message scanning system has accessed the document, modify a record associated with the document to indicate that the message scanning system has accessed the document.
7. The non-transitory computer-readable storage media of claim 6 , wherein the messaging system comprises an email system.
8. The non-transitory computer-readable storage media of claim 6 , wherein the coded value comprises an encoded hash of the first URL.
9. The non-transitory computer-readable storage media of claim 6 , wherein the second URL comprises an encoded hash of the first URL appended to the first URL.
10. The non-transitory computer-readable storage media of claim 6 , wherein the instructions to receive the indication that the document associated with the first URL has been accessed cause the computing system to receive the second URL.
11. A computing system comprising one or more processors and non-transitory computer-readable storage media storing instructions that, when executed, cause the one or more processors to:
generate a key pair comprising a private key and a public key;
provide the private key to a message scanning system;
send a message to a user using a messaging system, the message including a first uniform resource locator (URL) that can be used to access a document;
receive an indication that the document associated with the first URL has been accessed, wherein the indication comprises a second URL generated by the message scanning system that has analyzed the message, the second URL including a coded value that is encoded using the private key and wherein the coded value is included in the second URL as a query string parameter such that the second URL identifies the same document as the first URL and further identifies the message scanning system;
determine, based on the coded value, that the message scanning system has accessed the document, wherein to determine that the message scanning system has accessed the document, the instructions cause the one or more processors to decode the coded value using the public key and to determine an identity of the message scanning system based on the decoded coded value; and
responsive to a determination that the message scanning system has accessed the document, modify a record associated with the document to indicate that the message scanning system has accessed the document.
12. The computing system of claim 11 , wherein the messaging system comprises an email system.
13. The computing system of claim 11 , wherein the coded value comprises an encoded hash of the first URL.
14. The computing system of claim 11 , wherein the second URL comprises an encoded hash of the first URL appended to the first URL.