System and method for secure use of messaging systems

Abstract

A system and method for secure use of messaging systems. A mediator may receive an original message, process the original message to produce a processed message, and may forward the processed message to a server or a messaging system. A mediator may receive a processed message from a server or a messaging system, process the received processed message to produce an unprocessed message that may be substantially identical to the original message and may forward the unprocessed message to a destination.

What is claimed is: 
     
         1 . A system for securing messages comprising a computing device of a restricted access network,
 the computing device configured to function as a forward mediator of a restricted access network to:
 receive an original plaintext message; 
 process the original message to provide a processed message, wherein the processing includes transforming at least a portion of the original message; and 
 forward the at least one processed message to a server of a messaging system of a public network; 
   the computing device being further figured to function as a reverse mediator of the restricted access network to:
 receive a processed message from the server, and 
 process the received processed message to provide an unprocessed plaintext message for forwarding to a recipient. 
   
     
     
         2 . The system of  claim 1 , wherein said transforming at least a portion of the original message includes encrypting the portion of the original message. 
     
     
         3 . The system of  claim 1 , wherein the portion is selected from the group consisting of: at least one recipient address, a sender address, a subject associated with the message, at least one attachment, at least one message header, and a body of the message. 
     
     
         4 . The system of  claim 1 , wherein processing the original message includes generating at least one recipient address and including the generated at least one recipient address in the processed message, wherein the generated recipient address is designed to cause the server to send the processed message to the reverse mediator. 
     
     
         5 . The system of  claim 1 , wherein said original message and said unprocessed message are email messages. 
     
     
         6 . The system of  claim 1 , wherein processing the original message includes classifying the original message to produce message classification information. 
     
     
         7 . The system of  claim 1 , wherein processing the original message to produce the processed message includes:
 generating at least one secured search term based on at least one original term included in the original message; and   including the generated at least one secured search term in the processed message.   
     
     
         8 . The system of  claim 1 , further comprising a search mediator, said search mediator to:
 receive a first request from a client;   generate a second request based on the first request;   generate at least one secured search term based on at least one original search term included in the first request;   include the at least one secured search term in the second request; and   forward the second request to the server.   
     
     
         9 . The system of  claim 1 , wherein the processing of the original message to produce the processed message includes changing a location of at least a portion of the original message. 
     
     
         10 . The system of claim of  claim 7 , wherein the processing of the original message to produce the processed message includes changing a location of an original term and said at least one secured search term. 
     
     
         11 . The system of  claim 1 , wherein the processing of the original message to produce the processed message is according to a sender of the message or a receiver of the message. 
     
     
         12 . The system of  claim 1 , wherein the forward mediator is configured to include a parameter in the processed message and, the reverse mediator is configured to validate the processed message based on the parameter. 
     
     
         13 . The system of  claim 12 , wherein validating the processed message is based on at least one of: an integrity parameter and a time the original message was received by the forward mediator. 
     
     
         14 . The system of  claim 1 , wherein the processing of the original message to produce the processed message includes normalizing at least one original term included in the original message and generating a secured search term based on the normalized at least one original term. 
     
     
         15 . The system of  claim 1 , wherein the processing of the original message to produce the processed message includes selecting at least one original search term based on at least one of: a length of an original search term, a presence of an original search term in a set of terms, and an absence of an original search term in a set of terms. 
     
     
         16 . The system of  claim 7 , wherein the processing of the original message to produce the processed message includes deterministically encrypting said at least one original search terms using a secret key or applying non-reversible keyed security transformation to at least one original search term. 
     
     
         17 . A method of securing messages, the method comprising:
 receiving, within a restricted access network, an original plaintext message destined for a recipient;   processing the original message to provide a processed message, wherein the processing includes transforming at least a portion of the original message;   forwarding the processed message to a server of a messaging system of a public network;   receiving, within a restricted access network, the processed message from the server;   processing the received processed message to provide an unprocessed plaintext message; and   forwarding the unprocessed message to the recipient.   
     
     
         18 . The method of  claim 17 , wherein processing the original message includes encrypting at least a portion of the original message. 
     
     
         19 . The method of  claim 17 , wherein processing the original message includes encrypting at least a portion of the original message, wherein the portion is selected from the group consisting of: at least one recipient address, a sender address, a subject associated with the message, at least one attachment, at least one message header, and a body of the message. 
     
     
         20 . The method of  claim 17 , wherein processing the original message includes generating at least one recipient address and including the generated at least one recipient address in the processed message, wherein the generated recipient address is designed to cause the server to send the processed message to the reverse mediator. 
     
     
         21 . The method of  claim 17 , wherein said original message and said unprocessed message are email messages. 
     
     
         22 . The method of  claim 17 , wherein processing the original message includes classifying the original message to produce message classification information. 
     
     
         23 . The method of  claim 17 , wherein processing the original message includes generating at least one secured search term corresponding to at least one original search terms included in the original message, wherein said generating includes at least one of: normalizing at least one original search terms, selecting at least one original search term according to a length of an original search term, selecting at least one original search term according to a presence in a set of terms, encrypting at least one original search term using a secret key and applying a one-way keyed security transformation to at least one original search term.