EMBEDDING PROGRAMMING CODE IN AN ELECTRONIC MESSAGE
A method for a receiver device to process programming code contained in an electronic message. The electronic message is received. A security check is performed, including determining whether a sender of the electronic message is an authorized sender and determining whether the sender is authorized to access one or more workflows identified by an address of the electronic message. On a condition that the security check passes, the programming code is parsed and the one or more workflows identified by the address of the electronic message are performed at the receiver device based on the programming code.
1 . A method for a receiver device to process programming code contained in an electronic message, the method comprising:
receiving the electronic message;
performing a security check, including:
determining whether a sender of the electronic message is an authorized sender; and
determining whether the sender is authorized to access one or more workflows identified by an address of the electronic message; and
on a condition that the security check passes:
parsing the programming code; and
performing the one or more workflows identified by the address of the electronic message at the receiver device based on the programming code.
2 . The method of claim 1 , wherein:
the security check is based on a certificate-based trust mechanism; and
the sender is determined to be an authorized sender on a condition that the sender possesses a valid certificate.
3 . The method of claim 1 , further comprising:
rejecting the message on a condition that the sender is not determined to be an authorized sender.
4 . The method of claim 1 , wherein the sender is authorized to access the one or more identified workflows on a condition that the sender is on a pre-approved list.
5 . The method of claim 1 , further comprising:
storing message information in an audit trail on a condition that the sender is not determined to be authorized to access the one or more workflows.
6 . The method of claim 1 , wherein parsing the programming code includes invoking one or more application programming interfaces.
7 . The method of claim 1 , wherein the electronic message is encrypted and the method further comprises:
decrypting the electronic message before parsing the programming code.
8 . A receiver device for processing programming code contained in an electronic message, comprising:
a receiving component configured to receive the electronic message;
a security component configured to perform a security check, wherein the security component is configured to:
determine whether a sender of the electronic message is an authorized sender; and
determine whether the sender is authorized to access one or more workflows identified by an address of the electronic message; and
a parsing component configured to, on a condition that the security check passes:
parse the programming code; and
perform the one or more identified workflows based on the programming code.
9 . The receiver device of claim 8 , wherein the security component is further configured to:
use a certificate-based trust mechanism to determine whether the sender is authorized.
10 . The receiver device of claim 8 , wherein on a condition that the sender is not determined to be an authorized sender, the receiving component is further configured to:
reject the message.
11 . The receiver device of claim 8 , wherein the security component is further configured to:
determine the sender is authorized to access the identified workflow on a condition that the sender is on a pre-approved list.
12 . The receiver device of claim 8 , wherein the security component is further configured to:
store message information in an audit trail on a condition that the sender is not determined to be authorized to access the one or more workflows.
13 . The receiver device of claim 8 , wherein the parsing component is configured to parse the programming code by invoking one or more application programming interfaces.
14 . The receiver device of claim 8 , wherein the electronic message is encrypted and the receiver device further comprises:
a decryption component configured to decrypt the electronic message before the parsing component parses the programming code.
15 . A non-transitory computer-readable medium storing instructions for execution by one or more processors to perform operations for processing programming code contained in an electronic message by a receiver device, the operations comprising:
receiving the electronic message;
performing a security check, including:
determining whether a sender of the electronic message is an authorized sender; and
determining whether the sender is authorized to access one or more workflows identified by an address of the electronic message; and
on a condition that the security check passes:
parsing the programming code; and
performing the one or more workflows identified by the address of the electronic message at the receiver device based on the programming code.
16 . The non-transitory computer-readable medium of claim 15 , wherein:
the security check is based on a certificate-based trust mechanism; and
the sender is determined to be an authorized sender on a condition that the sender possesses a valid certificate.
17 . The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
rejecting the message on a condition that the sender is not determined to be an authorized sender.
18 . The non-transitory computer-readable medium of claim 15 , wherein the sender is authorized to access the one or more identified workflows on a condition that the sender is on a pre-approved list.
19 . The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
storing message information in an audit trail on a condition that the sender is not determined to be authorized to access the one or more workflows.
20 . The non-transitory computer-readable medium of claim 15 , wherein the electronic message is encrypted and the operations further comprise:
decrypting the electronic message before parsing the programming code.