Axway Inc.

Voltage Security, Inc.

Tumbleweed Communications Corp.

Sathvik Krishnamurthy

Robert D Dickinson, Iii

Terence Spies

Matthew J Pauker

Guido Appenzeller

Rishi R Kacker

Lucas C Ryan

David S Thompson

Robert D Dickenson

An e-mail firewall applies policies to e-mail messages between a first site and second sites in accordance with administrator selectable policies. The firewall includes a simple mail transfer protocol relay for causing the e-mail messages to be transmitted between the first site and selected ones of the second sites. Policy managers enforce-administrator selectable policies relative to one or more of encryption and decryption, signature, source/destination, content and viruses.

E-mail firewall with policy-based cryptosecurity

A user who is browsing the web may use a web site verification service to ascertain whether a web site that appears to be associated with a trusted entity is actually associated with that entity. The web site verification service retains the URL of an unauthenticated web site. The user types a text string naming the entity that the user believes should be associated with the web site into a text box. A database such as an internet search engine database or a database containing a list of trusted entities and their URLs may be queried using the user-supplied text string. The retained URL may be compared to the resulting list of URLs. If the retained URL does not match one of the URLs in the query results, the user may be warned that the web site does not appear to be associated with the trusted entity.

Web site verification service

Policy-based messaging firewall

An e-mail firewall applies policies to messages between a first site and a plurality of second sites in accordance with administrator selectable policies. The firewall includes an SMTP relay and policy managers to enforce administrator selectable policies, such as encryption and decryption policies, a source/destination policy, a content policy and a first virus policy. Some policies are characterized by administrator selectable criteria, administrator selectable exceptions to the criteria and administrator selectable actions associated with the criteria and exceptions. Policy managers can include an access manager for restricting transmission of messages between the first and second sites in accordance with the source/destination policy, a content manager for restricting transmission of messages between the first and second sites in accordance with the content policy, and a virus manager for restricting transmission of messages between the first and second sites in accordance with the virus policy.

E-mail firewall with stored key encryption/decryption

An e-mail firewall () applies policies to e-mail messages () between a first site and a plurality of second sites in accordance with a plurality of administrator selectable policies (). The firewall comprises a simple mail transfer protocol (SMTP) relay () for causing the e-mail messages () to be transmitted between the first site and selected ones of the second sites. A plurality of policy managers () enforce administrator selectable policies. The policies, such as encryption and decryption policies, comprise at least a first source/destination policy (), at least a first content policy () and at least a first virus policy (). The policies are characterized by a plurality of administrator selectable criteria (), a plurality of administrator selectable exceptions () to the criteria and a plurality of administrator selectable actions () associated with the criteria and exceptions. The policy managers comprise an access manager () for restricting transmission of e-mail messages () between the first site and the second sites in accordance with the source/destination policy (). The policy managers () further comprise a content manager () for restricting transmission of e-mail messages () between the first site and the second sites in accordance with the content policy (), and a virus manager () for restriction transmission of e-mail messages () between the first site and the second sites in accordance with the virus policy ().

A URL verification service is provided that is used to evaluate the trustworthiness of universal resource locators (URLs). As a user browses the world wide web, the URL for a web page to which the user is browsing is evaluated. A brand and a second level domain portion may be extracted from the URL and used as search engine inputs in evaluating the trustworthiness of the URL. The content of the web page can also be analyzed. Page elements may be extracted from the web page and compared to page elements in a brand indicator table to identify page brands associated with the web page. The brand extracted from the URL is compared to the page brands to detect cross-branding. If cross-branding is detected, the URL verification service helps to prevent the user from submitting sensitive information over the internet.

Universal resource locator verification service with cross-branding detection

A URL verification service is provided that is used to evaluate the trustworthiness of universal resource locators (URLs). As a user browses the world wide web, the URL for a web page to which the user is browsing is captured by the service. The URL has a second level domain corresponding to a web site. The URL verification service identifies a proposed brand that should be associated with the URL if the URL is trustworthy. The proposed brand and the second level domain are used as database queries to query a database such as a search engine database. The results of the database query are processed to determine whether the URL is legitimately associated with the URL. To ensure that the proposed brand is identified accurately, the URL verification service gathers brand information using web page content, secure sockets layer certificate content, or other web site attributes.

Universal resource locator verification services using web site attributes

A URL verification service is provided that is used to evaluate the trustworthiness of universal resource locators (URLs). As a user browses the world wide web, a URL verification client captures a URL associated with a web page of unknown authenticity. The URL verification client transmits the captured URL to a URL verification server. The URL verification server compares the URL to actively maintained whitelist and blacklist information. The server also uses the URL and a user-supplied or automatically-extracted brand to query a search engine. The URL verification server processes the response of the search engine to the search engine queries and the results of cache and whitelist and blacklist comparisons to determine whether the captured URL is legitimately associated with the brand. The results of the URL evaluation process are transmitted from the URL verification server to the URL verification client, which notifies user.

Server-based universal resource locator verification service

An e-mail firewall () applies policies to e-mail messages () between a first site and a plurality of second sites in accordance with a plurality of administrator selectable policies (). The firewall comprises a simple mail transfer protocol (SMTP) relay () for causing the e-mail messages () to be transmitted between the first site and selected ones of the second sites. A plurality of policy managers () enforce-administrator selectable policies. The policies comprise at least a first source/destination policy (), a first content policy () and a first virus policy (). The policies are characterized by a plurality of administrator selectable criteria (), and a plurality of administrator selectable exceptions () to the criteria.

E-mail firewall

An e-mail firewall ( ) applies policies to e-mail messages ( ) between a first site and a plurality of second sites in accordance with a plurality of administrator selectable policies ( ). The firewall comprises a simple mail transfer protocol (SMTP) relay ( ) for causing the e-mail messages ( ) to be transmitted between the first site and selected ones of the second sites. A plurality of policy managers ( ) enforce administrator selectable policies. The policies, such as encryption and decryption policies, comprise at least a first source/destination policy ( ), at least a first content policy ( ) and at least a first virus policy ( ). The policies are characterized by a plurality of administrator selectable criteria ( ), a plurality of administrator selectable exceptions ( ) to the criteria and a plurality of administrator selectable actions ( ) associated with the criteria and exceptions. The policy managers comprise an access manager ( ) for restricting transmission of e-mail messages ( ) between the first site and the second sites in accordance with the source/destination policy ( ). The policy managers ( ) further comprise a content manager ( ) for restricting transmission of e-mail messages ( ) between the first site and the second sites in accordance with the content policy ( ), and a virus manager ( ) for restriction transmission of e-mail messages ( ) between the first site and the second sites in accordance with the virus policy ( ).

Growing community of inventors

San Jose, CA, United States of America

Sathvik Krishnamurthy