TWI531924B - E-mail protection method and mail protection server - Google Patents

Description

Email protection method and mail protection server

The invention relates to an email, in particular to an email protection method and a mail protection server.

E-mails sent by enterprise companies may contain confidential information. The current common method of processing is to add such as "This message is only for designated recipients" and "If you are not specifying the recipient" Persons, please inform the sender and delete the email, etc., in order to achieve confidentiality, or retain possible legal rights. However, technically, the foregoing method has no substantial protection mechanism for the content of the letter, and the recipient has substantially obtained the content of the letter. Therefore, how to have a layer of protection for the content of the letter becomes a subject worthy of study.

Accordingly, it is an object of the present invention to provide an email protection method that enhances protection of email.

Therefore, another object of the present invention is to provide a mail protection server that enhances protection of electronic mail.

Thus, the email protection method of the present invention is in some embodiments. In the sample, it is executed by a mail protection server, which includes the following steps:

(A) Receive an original message related to a sender wishing to transmit to a recipient.

(B) Generate a password and a hyperlink to the original mail.

(C) storing the original mail and the corresponding password in a manner that can be extracted according to the hyperlink.

(D) Generating a mail notification mail containing the hyperlink and a password notification mail containing the password.

(E) transmitting the incoming notification email to the recipient and transmitting the password notification email to the sender.

(F) When receiving a request to browse the hyperlink and the corresponding password, the original mail is provided in a webpage format.

In some embodiments, the following steps between steps (A) and (B) are also included: (G) Determine whether the original mail meets the conditions for protection.

(H) When the judgment of the step (G) is NO, the original mail is transmitted to the recipient.

Wherein step (B) is performed when the step (G) is judged to be YES.

In some implementations, the mail protection server includes a connected mail server and a web server, and the mail server performs steps (A), (B), (D), (E), (G) ) and (H), the web page The server performs steps (C) and (F).

In some implementations, the web server includes a storage unit, the original mail in the step (A) includes a mail unique identifier, and the hyperlink in the step (B) includes the mail unique identifier, step (C) In the storage unit, a new mail file containing the unique identifier of the mail is added, and the original mail and the corresponding password are stored in the mail data, and the step (F) is uniquely identified according to the mail of the hyperlink. The code extracts the corresponding mail data and the corresponding password in the storage unit, and prompts that the password is required to be input, and after determining that the input password meets the corresponding password, the original mail is provided in a webpage format.

In some implementations, the condition to be protected includes determining whether at least one of the following conforms to a corresponding rule: a sender, a recipient, a subject, a message content keyword, a message size, and an attachment number.

In some implementations, step (B) also records a current timestamp of the receipt of the original mail, and step (F) further determines whether the time difference between the time of receiving the request to browse the hyperlink and the timestamp exceeds A preset validity period, the original mail is provided if the validity period is not exceeded.

Thus, in some implementations, the mail protection server of the present invention performs the email protection method as described.

The effect of the present invention is that the original mail is changed to a hyperlink and the recipient is provided in the form of a webpage, and is provided with a password protection when the webpage is provided, so that the recipient can obtain the original only when the correct password is input. Mail to enhance the protection of the content of the original message.

1‧‧‧Mail protection server

11‧‧‧ mail server

12‧‧‧Web server

121‧‧‧ mail database

2‧‧‧Sender

3‧‧‧Recipients

S1 to S10‧‧‧ steps

Other features and effects of the present invention will be apparent from the detailed description of the embodiments of the present invention. FIG. 1 is a block diagram illustrating a mail protection servo terminal and a mailing piece thereof according to an embodiment of the present invention. Relationship between a person and a recipient; and FIG. 2 is a flow diagram illustrating an email protection method in accordance with an embodiment of the present invention.

Referring to FIG. 1 and FIG. 2, an embodiment of the email protection method of the present invention is executed by a mail protection server 1 that includes a mail server 11 and a web server 12 connected to each other. The server 12 includes a storage unit. In the embodiment, the storage unit is a mail database 121. The method comprises the following steps: Step S1 - The mail server 11 receives an original mail from a sender 2 intended to be transmitted to a recipient 3. For example, the mail server 11 is located in the internal network of a company enterprise, and is connected to the sender 2 through the internal network, and the recipient 3 is located on the external network, the mail server 11 needs to communicate with the recipient 3 via the Internet. The sender 2 and the recipient 3 are, for example, electronic devices such as a desktop computer, a smart phone, and a tablet computer.

Step S2 - The mail server 11 judges whether the original mail meets a protection condition. The condition for protection includes determining whether at least one of the following rules conforms to a corresponding rule: sender 2, recipient 3, subject matter, mail content keyword, mail size, number of attachments. For example, the protective strip should The piece is to determine whether the sender 2 is included in a predetermined group, whether the recipient 3 is included in another predetermined group, whether the subject or/and the mail content has a specific keyword, and the keyword is Included in a pre-stored set of keywords...etc. If not, proceed to step S3, otherwise proceed to step S4.

Step S3 - Transfer the original mail to the recipient 3. In this step, since the original mail has been judged not to meet the protection condition, that is, the original mail belongs to non-confidential content, it is directly transmitted to the recipient 3.

Step S4 - generating a corresponding password and hyperlink. In this embodiment, the password can be selected to be manually set or automatically generated. The hyperlink includes a mail unique identifier (mid, message ID) of the original mail. For example, the unique identifier of the mail is " Xxx", the format of the hyperlink is "http://system IP/?mid=xxx", where "system IP" is the internet protocol address where the web server 12 is located.

Step S5 - The web server 12 stores the original mail and the corresponding password in a manner that can be extracted according to the hyperlink. In detail, the web server 12 adds a mail item containing the unique identifier of the mail to the mail database 121, and stores the original mail and the corresponding password in the mail data.

In addition, in this embodiment, the hash value of the password is actually stored to increase security, because when the comparison password is correct, whether the hash value of the input password is the same as the hash value of the correct password is compared. It is safer to compare the passwords directly, because even if the hash value of the correct password is stolen by the hacker, it is still difficult for the hacker to reverse the correct password. This hacker still cannot enter the correct password into web server 12.

Step S6 - The mail server 11 generates a mail notification mail including a hyperlink and a password notification mail including the corresponding password.

Step S7 - The mail server 11 transmits a mail notification mail to the recipient 3.

Step S8 - The mail server 11 transmits a password notification mail to the sender 2.

Then, the person represented by the sender 2 informs the corresponding representative of the password to the person represented by the recipient 3 through the second pipe, such as a telephone, a newsletter, etc., and then proceeds to step S9.

Step S9 - The recipient 3 browses the hyperlink and enters the password.

Step S10 - The web server 12 provides the original mail in a web page format.

In detail, the person represented by the recipient 3 clicks on the hyperlink in the incoming mail notification email, and the recipient 3 connects to the web server 12 via the Internet and sends the request to browse the hyperlink. After receiving the request, the web server 12 extracts the corresponding mail data in the mail database 121 and the corresponding hash code according to the unique identifier of the mail in the hyperlink, and prompts the recipient 3 to Enter the password, and when it is judged that the password entered by the recipient 3 (the hash value obtained by substituting the hash function) matches the corresponding hash value of the password, it means that the entered password is correct, and the original is provided in the webpage format. mail. If the password is incorrect, the original email is refused and the process ends.

In the present embodiment, the original mail is provided by the web server 12 to convert the complete content of the original mail into a web page (html format). The webpage contains all the fields of the original mail, such as: sender, recipient, copy, secret copy, subject, text, attachment (can also directly click to download).

In order to further protect the security of the mail, in the embodiment, the mail server 11 records the current time stamp of the original mail in step S4, and after step S10, the web server 12 determines the correctness of the password. And determining whether the time difference between the time when the request for browsing the hyperlink is received (according to the system time of the web server 12) and the time stamp exceeds a preset validity period, and if the validity period is not exceeded, the original mail is provided, if If the validity period is exceeded, the original email will be refused and the process will be terminated.

In summary, the original mail is changed to a hyperlink by the mail server 11 and the web server 12, and the recipient is provided in the form of a webpage, and is also protected by a password when the webpage is provided, so that the recipient is The original mail can be obtained only when the correct password is input, and the content of the original mail is enhanced. Further, it is determined whether the hyperlink is within the validity period to further protect the security of the mail, so that the object of the present invention can be achieved.

However, the above is only the embodiment of the present invention, and the scope of the present invention is not limited thereto, that is, the simple equivalent changes and modifications made by the patent application scope and the patent specification of the present invention are still It is within the scope of the patent of the present invention.

1‧‧‧Mail protection server

11‧‧‧ mail server

12‧‧‧Web server

2‧‧‧Sender

3‧‧‧Recipients

S1 to S10‧‧‧ steps

Claims (6)

An email protection method is performed by a mail protection server, the method comprising the steps of: (A) receiving an original mail related to a sender to be transmitted to a recipient; and (B) generating an original mail corresponding to the original mail; (C) storing the original mail and the corresponding password in a manner that can be extracted according to the hyperlink; (D) generating a mailing notification mail including the hyperlink and a password including the password (E) transmitting the incoming mail notification email to the recipient and transmitting the password notification email to the sender; and (F) receiving a request to browse the hyperlink and the corresponding password to The original message is provided by the web page type. The email protection method according to claim 1, further comprising the following steps between steps (A) and (B): (G) determining whether the original mail meets a protection condition; (H) determining at step (G) If not, the original mail is transmitted to the recipient; wherein step (B) is performed when the step (G) is judged to be YES. The email protection method of claim 2, wherein the mail protection server comprises a connected mail server and a web server, and the mail server performs steps (A), (B), (D), (E), (G) And (H), the web server performs steps (C) and (F). The email protection method of claim 3, wherein the webpage server comprises a storage unit, the original email in the step (A) comprises a mail unique identification code, and the hyperlink in the step (B) comprises the unique identification of the email. a code, in step (C), a new mail file containing the unique identification code of the mail is added to the storage unit, and the original mail and the corresponding password are stored in the mail data, and the step (F) is based on the super The linked unique identifier of the mail extracts the corresponding mail data and the corresponding password in the storage unit, and prompts that the password is required, and after determining that the input password meets the corresponding password, the original mail is provided in a webpage format. The email protection method according to claim 2, wherein the condition for protecting includes determining whether at least one of the following matches a corresponding rule: a sender, a recipient, a subject, a message content keyword, a message size, and an attachment number. . The email protection method according to claim 1, wherein the step (B) further records a current time stamp of the original mail received, and the step (F) further determines the time when the request for browsing the hyperlink is received. Whether the time difference of the time stamp exceeds a preset validity period, and the original mail is provided if the validity period is not exceeded.