Email Hyperlink Access Control via Sender Reputation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security systems are vulnerable to phishing attacks and unauthorized access to harmful web sites through email messages, as they cannot control access to hyperlinks or URLs based on their origin, leading to potential harm from malicious sites.
Innovation Solution
A method that involves modifying hyperlinks in email messages with identifier values, associating sender information with these identifiers, and using a network request to determine allowed actions for accessing the hyperlinks, allowing or blocking access based on sender reputation, thereby controlling access to network resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional HTTP proxy systems are used to control access to network resources, then access control based on Referer headers works for web-based content, but access control for hyperlinks in email messages fails because email clients do not populate the Referer field
Solution Approach 1:
The patent introduces an email server as an intermediary component between the email client and the HTTP proxy. The email server intercepts email messages, extracts hyperlinks, and modifies them by adding tracking parameters that enable the HTTP proxy to identify and control access to these links. This intermediary approach bridges the gap between email communication and web access control systems.
Solution Approach 2:
The system performs preliminary actions by modifying hyperlinks in email messages before they are accessed by users. The email server pre-processes outgoing emails, embedding unique identifiers and sender information into the hyperlink parameters. When users click these pre-modified links, the HTTP proxy can immediately identify the origin and apply access control policies without needing Referer header information.
2Object-affected harmful factors
If all hyperlinks in email messages are blocked to prevent phishing attacks, then network security against malicious sites improves, but legitimate business communications containing valid hyperlinks are also disrupted
Solution Approach 1:
The patent applies local quality by differentiating between various types of hyperlinks based on their origin and characteristics. Instead of uniformly blocking all email hyperlinks, the system modifies them with specific identifiers that allow the HTTP proxy to apply different access control policies. Legitimate hyperlinks from trusted senders are allowed while malicious ones are blocked, achieving selective control rather than blanket restrictions.
Solution Approach 2:
The system changes parameters of hyperlinks by adding tracking parameters and identifiers to modified links. These parameter changes enable the HTTP proxy to evaluate each hyperlink against access control policies based on sender reputation, recipient relationships, and other contextual factors. This dynamic parameter modification allows intelligent differentiation between legitimate and malicious links.
3Measurement precision
If sender reputation information is checked for every hyperlink in email messages, then access control accuracy against phishing improves, but system processing time and complexity increase
Solution Approach 1:
The email server performs preliminary actions by checking sender reputation and modifying hyperlinks before emails are delivered to users. Sender verification and hyperlink modification occur during the email transmission process rather than during user interaction. This preliminary processing distributes the time cost across email sending operations rather than concentrating it during hyperlink access, reducing perceived delays for users.
Solution Approach 2:
The system applies partial action by selectively checking sender reputation based on risk assessment. Not every hyperlink requires full sender verification - the system can apply simplified checks for trusted senders while performing comprehensive verification for unknown or suspicious sources. This selective approach balances security accuracy with processing efficiency.
Data Source
AI summary
A method and apparatus for controlling access to network resources referenced in electronic mail messages comprises the computer-implemented steps of receiving an electronic mail message that comprises one or more hyperlinks; determining sender information that identifies a sender of the electronic mail message; creating and storing a record that associates the sender information with each of the one or more hyperlinks; receiving a request to access a specified hyperlink among the one or more hyperlinks; retrieving, based on the specified hyperlink, the record; retrieving, based on the sender information associated with the specified hyperlink, sender reputation information associated with the sender; determining, based on the sender reputation information, a particular action among a plurality of allowed actions; and issuing a network request to access the specified hyperlink only when the particular action is allowing user access to the specified hyperlink.