System and method for secure use of messaging systems

Abstract

A system and method for secure use of messaging systems. A mediator may receive an original message, process the original message to produce a processed message, and may forward the processed message to a server or a messaging system. A mediator may receive a processed message from a server or a messaging system, process the received processed message to produce an unprocessed message that may be substantially identical to the original message and may forward the unprocessed message to a destination.

1 . A system for securing messages comprising a forward mediator and a reverse mediator, the forward mediator to:
 receive an original message;   process the original message to provide a at least one processed message, wherein the processing includes transforming at least one portion of the original message;   forward the at least one processed message to a at least one server; and   the reverse mediator to:   receive a processed message from a server, and   process the received processed message to provide an unprocessed message.   
     
     
         2 . The system of  claim 1 , wherein processing the original message includes encrypting at least a portion of the original message. 
     
     
         3 . The system of  claim 1 , wherein processing the original message includes encrypting at least a portion of the original message, wherein the portion is selected from the group consisting of: at least one recipient address, a sender address, a subject associated with the message, at least one attachment, at least one message header, and a body of the message. 
     
     
         4 . The system of  claim 1 , wherein processing the original message includes generating at least one recipient address and including the generated at least one recipient address in the processed message, wherein the generated recipient address is designed to cause the server to send the processed message to the reverse mediator. 
     
     
         5 . The system of  claim 1 , wherein said original message and said unprocessed message are email messages. 
     
     
         6 . The system of  claim 1 , wherein processing the original message includes classifying the original message to produce message classification information. 
     
     
         7 . The system of  claim 1 , wherein:
 processing an original message to produce a processed message includes:
 generating at least one secured search term based on at least one original term included in the original message; and 
 including the generated at least one secured search term in the processed message. 
   
     
     
         8 . The system of  claim 1 , further comprising a search mediator, said search mediator to:
 receive a first request from a client;   generate a second request based on the first request;   generate at least one secured search term based on at least one original search term included in the first request;   include the at least one secured search term in the second request; and   forward the second request to the server.   
     
     
         9 . The system of  claim 1 , wherein processing an original message to produce a processed message includes changing a location of at least a portion of the original message. 
     
     
         10 . The system of claim of  claim 7 , wherein processing an original message to produce a processed message includes changing a location of at least one of: said at least one original term and said at least one secured search term. 
     
     
         11 . The system of  claim 1 , wherein processing an original message to produce a processed message is according to one of: a sender of the message and a receiver of the message. 
     
     
         12 . The system of  claim 1 , wherein the forward mediator is to include a parameter in the processed message and, the reverse mediator is to validate the processed message based on the parameter. 
     
     
         13 . The system of  claim 12 , wherein validating the processed message is based on at least one of: an integrity parameter and a time the original message was received by the forward mediator. 
     
     
         14 . The system of  claim 7 , wherein processing an original message to produce a processed message includes normalizing at least one original term included in the original message and generating a secured search term based on the normalized at least one original terms. 
     
     
         15 . The system of  claim 7 , wherein processing an original message to produce a processed message includes selecting at least one original search term based on at least one of: a length of an original search term, a presence of an original search term in a set of terms and an absence of an original search term in a set of terms. 
     
     
         16 . The system of  claim 7 , wherein processing an original message to produce a processed message includes at least one of: deterministically encrypting said at least one original search terms using a secret key and applying non-reversible keyed security transformation to at least one original search term. 
     
     
         17 . A method of securing messages, the method comprising:
 receiving an original message destined to a client;   processing the original message to provide a at least one processed message, wherein the processing includes transforming at least one portion of the original message;   forwarding the at least one processed message to a at least one server; and   receiving a processed message from a server;   processing the received processed message to provide an unprocessed message; and   forwarding the unprocessed message to a client.   
     
     
         18 . The method of  claim 17 , wherein processing the original message includes encrypting at least a portion of the original message. 
     
     
         19 . The method of  claim 17 , wherein processing the original message includes encrypting at least a portion of the original message, wherein the portion is selected from the group consisting of: at least one recipient address, a sender address, a subject associated with the message, at least one attachment, at least one message header, and a body of the message. 
     
     
         20 . The method of  claim 17 , wherein processing the original message includes generating at least one recipient address and including the generated at least one recipient address in the processed message, wherein the generated recipient address is designed to cause the server to send the processed message to the reverse mediator. 
     
     
         21 . The method of  claim 17 , wherein said original message and said unprocessed message are email messages. 
     
     
         22 . The method of  claim 17 , wherein processing the original message includes classifying the original message to produce message classification information. 
     
     
         23 . The method of  claim 17 , wherein processing the original message includes generating at least one secured search term corresponding to at least one original search terms included in the original message, wherein said generating includes at least one of: normalizing at least one original search terms, selecting at least one original search term according to a length of an original search term, selecting at least one original search term according to a presence in a set of terms, encrypting at least one original search term using a secret key and applying a one-way keyed security transformation to at least one original search term.