IP Library Granted Patent US 8,997,183
Granted Patent B2
US 8,997,183 · App. 12/662,089 · Granted Mar 31, 2015

Outgoing email check system, check data providing apparatus, check data inspecting apparatus, and outgoing email check method

Inventors: Ryota Fukasawa (Kanagawa, JP); Aya Higashizono (Kanagawa, JP); Natsu Hashisaka (Kanagawa, JP); Masayoshi Okamoto (Kanagawa, JP); Kiyoshi Kurashige (Kanagawa, JP); Hiroshi Tsuda (Kawasaki, JP); Yoshinori Katayama (Kawasaki, JP); Fumihiko Kozakura (Kawasaki, JP); Shinichi Mochizuki (Kanagawa, JP)
Assignees: Fujitsu Limited; Fujitsu Social Science Laboratory Limited
G06Q10/107
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,997,183
App. No.
12/662,089
Granted
Mar 31, 2015
Kind
B2
Abstract

To allow inspecting whether a security check of a planned outgoing email is finished in an outgoing email check system, a check data providing apparatus 2 of an outgoing email check system 100 stores check information distributed from a check information management apparatus 1 , appends check data generated based on the check information to a header of a checked planned outgoing email, and transmits the email to an email transmitting apparatus 9 . A check data inspecting apparatus 3 stores the check information distributed from the check information management apparatus 1 , inspects the check data extracted from the planned outgoing email received from the email transmitting apparatus 9 based on the check information, determines that the transmission is permitted when the check data of the planned outgoing email matches the check information, and determines that the transmission is rejected when the check data does not match the check information. The email transmitting apparatus 9 executes a transmission process only for the planned outgoing email for which the transmission is permitted.

Claims (83)

1. An outgoing email check system to inspect the execution of a security check process for an outgoing email, the outgoing email check system comprising:

a security check executing apparatus; a check data providing apparatus; and a check data inspecting apparatus,

the security check executing apparatus acquiring a planned outgoing email to be transmitted to an email transmitting apparatus and executing the security check process based on a predetermined policy version of security management for the acquired planned outgoing email,

the check data providing apparatus including

a first memory that stores sender-by-sender check information, which is received from a check information management apparatus, including an arbitrary value allocated to a sender, and

a first processor to execute

receiving the planned outgoing email for which the security check process is executed,

generating check data including a check value generated from the arbitrary value allocated to the sender of the planned outgoing email based on the sender-by-sender check information,

appending the check data to a header of the received planned outgoing email, and

transmitting the planned outgoing email with the appended check data to the email transmitting apparatus,

the check data inspecting apparatus including:

a second memory that stores

the sender-by-sender check information,

inspection check information including policy version information indicating content of the security check process to be executed for the planned outgoing email, and

transmission rejection information indicating the planned outgoing email for which the transmission is rejected,

wherein the sender-by-sender check information and the inspection check information are received from the check information management apparatus,

and a second processor to execute

acquiring the planned outgoing email from the email transmitting apparatus,

extracting the check data from the header of the acquired planned outgoing email,

inspecting the extracted check data by evaluating the extracted check data in accordance with the sender-by-sender check information and the inspection check information, which are stored in the second memory,

determining a permission or rejection of transmission of the acquired planned outgoing email based on a result of the inspecting,

returning the acquired planned outgoing email to the email transmitting apparatus when a permission of the transmission of the acquired planned outgoing email is determined, and

generating transmission rejection information of the acquired planned outgoing email and recording the transmission rejection information in the second memory when a rejection of the transmission of the acquired planned outgoing email is determined.

2. The outgoing email check system according to claim 1 , comprising

a check information management apparatus including:

a third memory that stores the sender-by-sender check information and the inspection check information, and

a third processor to execute

distributing the sender-by-sender check information stored in the third memory to the check data providing apparatus and the check data inspecting apparatus and distributing the sender-by-sender check information and the inspection check information to the check data inspecting apparatus.

3. The outgoing email check system according to claim 1 , wherein

the first processor in the check data providing apparatus executes encoding the check data based on both information extracted from the header of the received planned outgoing email and the sender-by-sender check information stored in the first memory, and

the second processor in the check data inspecting apparatus executes decoding the encoded check data based on both the information extracted from the header of the received planned outgoing email and the sender-by-sender check information stored in the second memory.

4. The outgoing email check system according to claim 1 , wherein

the second processor of the check data inspecting apparatus executes

extracting sender information of the planned outgoing email transmitted to the email transmitting apparatus when the rejection of the transmission of the acquired planned outgoing email is determined and

providing, using the extracted sender information, notification of the transmission rejection of the planned outgoing email.

5. A check data inspecting apparatus included in an outgoing email check system including a security check executing apparatus that acquires a planned outgoing email to be transmitted to an email transmitting apparatus and executes a security check process for the acquired planned outgoing email, the check data inspecting apparatus comprising:

a memory that stores

sender-by-sender check information, which is received from a check information management apparatus, including an arbitrary value allocated to a sender,

inspection check information including policy version information indicating content of the security check process to be executed for the planned outgoing email, and

transmission rejection information indicating a planned outgoing email for which a transmission is rejected; and

a processor to execute

acquiring the planned outgoing email from the email transmitting apparatus, the planned outgoing email undergoing a security check process based on a predetermined policy version of security management, and including check data generated by a security check executing apparatus,

extracting the check data including a check value generated from the arbitrary value allocated to the sender of the planned outgoing email from a header of the acquired planned outgoing email,

inspecting the extracted check data by evaluating the extracted check data in accordance with both the sender-by-sender check information and the inspection check information,

determining permission or rejection of the transmission of the acquired planned outgoing email based on a result of the inspecting,

returning the acquired planned outgoing email to the email transmitting apparatus when a permission of the transmission of the acquired planned outgoing email is determined, and

generating transmission rejection information of the acquired planned outgoing email and recording the transmission rejection information in the memory when a rejection of the transmission of the acquired planned outgoing email is determined.

6. The check data inspecting apparatus according to claim 5 , wherein

when the check data appended to the planned outgoing email is encoded, the processor executes decoding the encoded check data based on both the information extracted from the header of the planned outgoing email and the sender-by-sender check information stored in the memory to inspect the decoded check data.

7. The check data inspecting apparatus according to claim 5 , wherein the processor executes

extracting sender information of the planned outgoing email transmitted to the email transmitting apparatus when the rejection of the transmission of the acquired planned outgoing email is determined, and

providing, using the extracted sender information, notification of the transmission rejection of the planned outgoing email.

8. An outgoing email check method to inspect the execution of a security check process for a planned outgoing email, the outgoing email check method executed by a first computer and a second computer,

the first computer including:

a memory that stores sender-by-sender check information, which is received from a check information management apparatus, including an arbitrary value allocated to a sender, and

the second computer including:

a memory that stores

the sender-by-sender check information received from the check information management apparatus, and

inspection check information including policy version information indicating content of the security check process to be executed for the planned outgoing email, the sender-by-sender check information and the inspection check information being received from the check information management apparatus; and

transmission rejection information indicating the planned outgoing email for which a transmission is rejected,

the outgoing email check method comprising:

acquiring, using the first computer, a planned outgoing email to be transmitted to an email transmitting apparatus,

executing, using the first computer, a security check process based on a predetermined policy version of security management for the acquired planned outgoing email;

generating, using the first computer, check data including a check value generated from the arbitrary value allocated to the sender of the planned outgoing email based on the sender-by-sender check information stored in the memory of the first computer;

appending, using the first computer, the generated check data to a header of the planned outgoing email for which the security check process is executed;

transmitting, using the first computer, the planned outgoing email with the appended check data to the email transmitting apparatus;

acquiring, using the second computer, the planned outgoing email from the email transmitting apparatus;

extracting, using the second computer, the check data from the header of the acquired planned outgoing email;

inspecting, using the second computer, the extracted check data based on the inspection check information stored in the memory of the second memory and determining permission or rejection of the transmission of the acquired planned outgoing email based on a result of the inspecting;

returning, using the second computer, the acquired planned outgoing email to the email transmitting apparatus when the permission of transmission of the acquired planned outgoing email is determined; and

generating, using the second computer, transmission rejection information of the acquired planned outgoing email and recording the transmission rejection information in the memory of the second computer when the rejection of the transmission of the acquired planned outgoing email is determined.

9. A non-transitory computer-readable medium storing a check data inspection program included in an outgoing email check system to inspect the execution of a security check process for an outgoing email, the check data inspecting program causing a computer including a memory to execute a process comprising:

acquiring a planned outgoing email from an email transmitting apparatus;

extracting check data from a header of an acquired planned outgoing email;

inspecting the extracted check data by evaluating the check data in accordance with both sender-by-sender check information and inspection check information;

determining permission or rejection of a transmission of the acquired planned outgoing email based on a result of the inspecting;

returning the acquired planned outgoing email to the email transmitting apparatus when the permission of the transmission of the acquired planned outgoing email is determined; and

generating transmission rejection information of the acquired planned outgoing email and recording the transmission rejection information in the memory when the rejection of the transmission of the acquired planned outgoing email is determined,

wherein the memory stores

the sender-by-sender check information, received from a check information management apparatus, including an arbitrary value allocated to the sender,

the inspection check information including policy version information indicating the content of the security check process to be executed for the planned outgoing email, and

the transmission rejection information indicating the planned outgoing email for which the transmission is rejected, and

wherein, upon generation, the check data includes a check value generated from the value allocated to the sender of the planned outgoing email.

Assignments (2)
MERGER Recorded Sep 27, 2021
From: FUJITSU SOCIAL SCIENCE LABORATORY LIMITED
To: FUJITSU LIMITED
Reel/Frame 057612/0356 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2010
From: FUKASAWA, RYOTA; HIGASHIZONO, AYA; HASHISAKA, NATSU; OKAMOTO, MASAYOSHI; KURASHIGE, KIYOSHI; TSUDA, HIROSHI; KATAYAMA, YOSHINORI; KOZAKURA, FUMIHIKO; MOCHIZUKI, SHINICHI
To: FUJITSU LIMITED; FUJITSU SOCIAL SCIENCE LABORATORY LIMITED
Reel/Frame 024574/0693 →
Priority Claims (1)
JP 2009-211008 · Sep 11, 2009 · national
Continuity (1)
Related Publication 20110067102A1 · Mar 17, 2011