# US 12,001,544 B2 · Systems and methods for attacks, countermeasures, archiving, data leak prevention, and other novel services for active messages > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,544 B2 - Document ID: US12001544B2 - Status: Granted - Kind: B2 - Application number: 17/554,788 - Filed: 2021-12-17 - Published: 2022-06-23 - Granted: 2024-06-04 - Earliest claimed: 2020-12-17 - Assignees: Mimecast Services Ltd. - Applicants: Mimecast Services Ltd. - Inventors: Simon Paul Tyler; Nathaniel S. Borenstein; Jackie Anne Maylor; Carlos da Silva; Kevin Slote; Herbert L. Roitblat; Florian P. Buetow; Chris Bamford - Web page: https://patentgrep.com/patent/US12001544B2 ## CPC - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - H04L 51/063: Content adaptation, e.g. replacement of unsuitable content - H04L 51/18: Commands or executable codes - H04L 51/214: using selective forwarding - H04L 51/23: Reliability checks, e.g. acknowledgments or fault reporting - H04L 63/0281: {Proxies} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks} - G06F 2221/033: Test or assess software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for attacks, countermeasures, archiving, data leak prevention, and other novel services relating to active messages are disclosed. Among other things, a system can replace active content with static content in a message, can replace static content with active content in a message, and can use active messaging to provide enhanced on-hold message functions. ## Claims ### Claim 1 A system for active message email security, the system comprising: a processor coupled to a memory containing instructions executable by the processor to cause the system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to static content; and forward the email message to the recipient with the active message content replaced by the static content, wherein executing the active message content on behalf of the recipient comprises interacting with the active message content as the recipient so that the active message content is customized for the recipient as if the recipient had interacted with the active message content themselves. ### Claim 2 (depends on 1) The system according to claim 1, wherein, if the email message is sent from the sender to a plurality of recipients, then, for each recipient, the system executes the active message content on behalf of the recipient, converts the executed active message content for recipient to static content for the recipient, and forwards the email message to the recipient with the active message content replaced by the static content for the recipient. ### Claim 3 (depends on 2) The system according to claim 2, wherein the system delivers different static content to different recipients by virtue of different interactions with the active message content. ### Claim 4 (depends on 2) The system of claim 2, wherein the system generates a notification if different recipients receive different static content. ### Claim 5 A system for active message email security, the system comprising: a processor coupled to a memory containing instructions executable by the processor to cause the system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to first static content; and forward the email message to the recipient with the active message content replaced by the first static content, wherein the system includes in the forwarded email message a user option to selectively re-enable at least some of the active content, wherein the system re-enables only active content deemed by the system to be safe, and wherein upon interaction with re-enabled active content by the recipient, the system re-executes the active message content on behalf of the recipient, converts the re-executed active message content for recipient to second static content for the recipient, and delivers the second static content associated with the re-executed active message content to the recipient. ### Claim 6 (depends on 5) The system of claim 5, wherein the system compares the second static content to the first static content and notifies the recipient if the content has changed. ### Claim 7 A computer-implemented method for active message email security by a system comprising a processor coupled to a non-transitory memory containing instructions executable by the processor to cause the system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to static content; and forward the email message to the recipient with the active message content replaced by the static content, wherein executing the active message content on behalf of the recipient comprises interacting with the active message content as the recipient so that the active message content is customized for the recipient as if the recipient had interacted with the active message content themselves. ### Claim 8 (depends on 7) The method according to claim 7, wherein, if the email message is sent from the sender to a plurality of recipients, then, for each recipient, the system executes the active message content on behalf of the recipient, converts the executed active message content for recipient to static content for the recipient, and forwards the email message to the recipient with the active message content replaced by the static content for the recipient. ### Claim 9 (depends on 8) The method according to claim 8, wherein the system delivers different static content to different recipients by virtue of different interactions with the active message content. ### Claim 10 (depends on 8) The method of claim 8, wherein the system generates a notification if different recipients receive different static content. ### Claim 11 A computer-implemented method for active message email security by a system comprising a processor coupled to a non-transitory memory containing instructions executable by the processor to cause the system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to first static content; and forward the email message to the recipient with the active message content replaced by the first static content, wherein the system includes in the forwarded email message a user option to selectively re-enable at least some of the active content, wherein the system re-enables only active content deemed by the system to be safe, and wherein upon interaction with re-enabled active content by the recipient, the system re-executes the active message content on behalf of the recipient, converts the re-executed active message content for recipient to second static content for the recipient, and delivers the second static content associated with the re-executed active message content to the recipient. ### Claim 12 (depends on 11) The method of claim 11, wherein the system compares the second static content to the first static content and notifies the recipient if the content has changed. ### Claim 13 A computer program product comprising a tangible, non-transitory computer readable medium having stored thereon instructions, which, when run on a computer system, causes the computer system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to static content; and forward the email message to the recipient with the active message content replaced by the static content, wherein executing the active message content on behalf of the recipient comprises interacting with the active message content as the recipient so that the active message content is customized for the recipient as if the recipient had interacted with the active message content themselves. ### Claim 14 (depends on 13) The computer program product according to claim 13, wherein, if the email message is sent from the sender to a plurality of recipients, then, for each recipient, the system executes the active message content on behalf of the recipient, converts the executed active message content for recipient to static content for the recipient, and forwards the email message to the recipient with the active message content replaced by the static content for the recipient. ### Claim 15 (depends on 14) The computer program product according to claim 14, wherein the system delivers different static content to different recipients by virtue of different interactions with the active message content. ### Claim 16 (depends on 14) The computer program product of claim 14, wherein the system generates a notification if different recipients receive different static content. ### Claim 17 A computer program product comprising a tangible, non-transitory computer readable medium having stored thereon instructions, which, when run on a computer system, causes the computer system to: receive an email message sent from a sender to a recipient containing active message content; execute the active message content on behalf of the recipient; convert the executed active message content to first static content; and forward the email message to the recipient with the active message content replaced by the first static content, wherein the system includes in the forwarded email message a user option to selectively re-enable at least some of the active content, wherein the system re-enables only active content deemed by the system to be safe, and wherein upon interaction with re-enabled active content by the recipient, the system re-executes the active message content on behalf of the recipient, converts the re-executed active message content for recipient to second static content for the recipient, and delivers the second static content associated with the re-executed active message content to the recipient. ### Claim 18 (depends on 17) The computer program product of claim 17, wherein the system compares the second static content to the first static content and notifies the recipient if the content has changed.