Email Confidentiality Detection via Sender Recipient Address Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Companies face challenges in monitoring and controlling the transfer of confidential information from corporate email accounts to personal email accounts, which can indicate potential misuse or data leakage.

Innovation Solution

A system and method that detect emails sent from corporate email accounts to personal email accounts by analyzing sender and recipient addresses, usernames, and domain names, flagging suspicious messages for further review.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a company monitors and controls email transfers from corporate to personal accounts, then intellectual property protection is improved, but system complexity and processing overhead increase

Engineering Contradiction:
Improveintellectual property protectionVSAvoidmonitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the email monitoring task into distinct functional modules: an extraction module that pulls sender/recipient information from emails, a comparison module that checks this information against stored company email patterns, and a flagging module that marks suspicious transfers. This segmentation allows each module to perform a specific function efficiently, reducing overall system complexity while maintaining comprehensive monitoring capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary database that stores company email patterns and sender/recipient information. This intermediary layer acts as a mediator between the email system and the monitoring logic, allowing the system to compare email transfers against stored patterns without requiring complex real-time analysis, thereby simplifying the monitoring architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If the system processes millions of emails to detect confidential information transfers, then detection accuracy is improved, but processing time and resource consumption increase

Engineering Contradiction:
Improvedetection accuracyVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs preliminary actions by extracting and storing company email patterns, sender information, and recipient information in advance in a database. This pre-processing allows the system to quickly compare incoming emails against stored patterns during actual monitoring, significantly reducing processing time while maintaining high detection accuracy across millions of emails.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts only the essential identifying information (sender/recipient email addresses and usernames) from emails for comparison purposes, rather than analyzing the entire email content. This selective extraction reduces the data volume that needs to be processed while maintaining detection accuracy, enabling efficient processing of large email volumes.

Inventive Principle:
Principle #2Taking out (Extraction)

3Difficulty of detecting and measuring

If the system analyzes sender and recipient addresses to identify personal email accounts, then detection capability is improved, but false positives may increase

Engineering Contradiction:
Improvedetection capabilityVSAvoidfalse positives
Core Design Contradiction:
Difficulty of detecting and measuringVSObject-affected harmful factors

Solution Approach 1:

The patent applies partial action by implementing a multi-stage comparison process: first comparing against company email patterns, then against stored sender/recipient information. This staged approach allows the system to filter out obvious legitimate emails early in the process, reducing false positives while maintaining high detection capability for actual confidential transfers.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11063896B2System and method for detecting confidential information emails
Publication Date: 2021.07.13 PALANTIR TECHNOLOGIES INC
  • US11063896B2 patent drawing
  • US11063896B2 patent drawing
  • US11063896B2 patent drawing

AI summary

Systems and methods are disclosed for detecting confidential information emails. In accordance with one implementation, a method is provided for detecting confidential information emails. The method includes obtaining a sender address of an electronic message, the sender address comprising a first username and a first domain name, and obtaining at least one recipient address of the electronic message, the recipient address comprising a second username and a second domain name. The method also includes determining whether the recipient address and the sender address are different addresses of a user, and based on the determination, flagging the electronic message.