Electronic Message Threat Protection via Authorization Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic message security systems fail to effectively protect against threats such as phishing attacks and viruses, as they often provide incomplete protection and can be overwhelmed by widespread distribution of protected resource references, and lack user authorization to limit threat protection to intended users.
Innovation Solution
A system that incorporates user authorization by transforming message references into protected forms, using a message transformation subsystem, authorization subsystem, and secure resource access subsystem to ensure only authorized users access protected resources, with mechanisms like proxy servers, blacklists, whitelists, and access control lists to manage access and security checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security checks are performed on all resource references in electronic messages, then threat protection is improved, but system resources become overwhelmed due to widespread distribution of protected references
Solution Approach 1:
The patent introduces an intermediary authorization server that mediates between resource references and security checking systems. Protected resource references are redirected through this intermediary, which validates authorization tokens and determines whether security checks should be performed. This prevents overwhelming the security checking system with requests from unauthorized users while maintaining protection for authorized users.
Solution Approach 2:
The system performs preliminary authorization verification before initiating security checks. An authorization token is validated in advance to determine if the requesting user has permission to access the protected resource reference. Only after successful authorization does the system proceed to perform security checks, preventing waste of security resources on unauthorized access attempts.
2Adaptability or versatility
If protected resource references are distributed widely, then accessibility is improved, but security is worsened because unauthorized users can access protected resources
Solution Approach 1:
The authorization server acts as an intermediary that all protected resource references must pass through. Even when references are widely distributed, the intermediary validates each request against stored authorization tokens, ensuring that only users with proper authorization can access the underlying resources while maintaining broad accessibility for authorized users.
Solution Approach 2:
Authorization validation is performed in advance before granting access to protected resources. The system checks whether the requesting user possesses a valid authorization token that permits access to the specific protected resource reference. This preliminary check prevents unauthorized access while allowing widespread distribution of references among authorized users.
3Ease of operation
If user authorization is added to the security system, then access control is improved, but system complexity increases
Solution Approach 1:
The system is segmented into distinct functional components: an authorization server that handles token validation, a message transformation subsystem that generates protected references, and security checking systems that perform threat analysis. This segmentation allows each component to specialize in its function, simplifying the overall architecture despite the added authorization layer.
Solution Approach 2:
The authorization server performs multiple functions: it validates authorization tokens, determines whether security checks should be performed, and manages access control for distributed protected references. By consolidating these functions in a single universal component, the system avoids the complexity of separate mechanisms for each function.
Data Source
AI summary
An electronic message threat protection system that incorporates user authorization to ensure that only authorized users receive the benefits of the system's protection. The system protects against threats such as phishing attacks or malware embedded in attached files. References to resources in messages, such as links or attachments, are transformed into protected references that may for example insert a level of indirection between the user and the resource. Use of a protected reference triggers a user authorization check; if the user is an authorized user, the system provides access via a security mechanism that mitigates potential threats. Unauthorized users are denied access. A message recipient may deliberately or inadvertently distribute copies of the message or of the protected references; however, the authorization check ensures that recipients of the copies can only access resources via these copies if they are authorized users.