# US 9,882,850 B2 · Systems and methods for controlling email access

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,882,850 B2
- Document ID: US9882850B2
- Status: Granted
- Kind: B2
- Application number: 14/687,394
- Filed: 2015-04-15
- Published: 2015-08-06
- Granted: 2018-01-30
- Earliest claimed: 2012-12-06
- Assignees: AirWatch LLC
- Applicants: AirWatch LLC
- Inventors: Erich Stuntebeck
- Web page: https://patentgrep.com/patent/US9882850B2

## CPC

- H04L 51/212: using filtering or selective blocking
- G06Q 10/107: Computer-aided management of electronic mailing [e-mailing]
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/101: {Access control lists [ACL]}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Embodiments of the disclosure relate to proxying at least one email resource from at least one email service to at least one client device, determining whether the email resources are accessible to the client devices via at least one unauthorized application on the client devices, and modifying the email resources to be inaccessible via the unauthorized applications on the client devices in response to a determination that the email resources are accessible via the unauthorized applications on the client devices.

## Claims

### Claim 1

A method for managing access to content by an access control server that determines whether a client can access e-mail provided by an email server, comprising:
obtaining content for transmission to a client, the content comprising an e-mail message and an attachment to the e-mail message;
determining that access to the content should be restricted to an authorized email client installed on the client;
encrypting the attachment to the e-mail message;
transmitting the attachment to the client; and
transmitting at least one instruction to the authorized email client installed on the client, the at least one instruction including a key for decrypting the attachment, wherein the key for decrypting the attachment is inaccessible to a native email client installed on the client.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
removing a portion of a body of the e-mail message;
encrypting the portion of the body of the e-mail message; and
attaching the encrypted portion of the body to the e-mail message.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
receiving the content and the key at a client application;
receiving a request to access the content; and
restricting, by the client application, access to the content to one or more authorized applications.

### Claim 4 (depends on 1)

The method of claim 1, further comprising generating the key at a client application, wherein transmitting the at least one instruction including the key comprises transmitting the key from the client application to one or more authorized applications.

### Claim 5 (depends on 1)

The method of claim 1, further comprising generating the key at a server application, wherein transmitting the at least one instruction including the key comprises transmitting the key from the server application to the authorized e-mail client.

### Claim 6

A non-transitory computer-readable medium comprising instructions which, when executed by a processor:
obtain content for transmission to a client, the content comprising an e-mail message and an attachment to the e-mail message;
determine that access to the content should be restricted to an authorized email client installed on the client;
encrypt the attachment to the e-mail message;
transmit the attachment to the client; and
transmit at least one instruction to the authorized email client installed on the client, the at least one instruction including a key for decrypting the attachment, wherein the key for decrypting the attachment is inaccessible to a native email client installed on the client.

### Claim 7 (depends on 6)

The non-transitory computer-readable medium of claim 6, wherein the content comprises an e-mail, and the non-transitory computer-readable medium further comprises instructions which, when executed by the processor:
remove a portion of a body of the e-mail;
encrypt the portion of the body of the e-mail; and
attach the encrypted portion of the body to the e-mail.

### Claim 8 (depends on 6)

The non-transitory computer-readable medium of claim 6, further comprising instructions which, when executed by the processor:
receive the content and the key at a client application;
receive a request to access the content; and
restrict, by the client application, access to the content to one or more authorized applications.

### Claim 9 (depends on 6)

The non-transitory computer-readable medium of claim 6, further comprising instructions which, when executed by the processor, generate the key at a client application and transmit the key from the client application to the authorized e-mail client.

### Claim 10 (depends on 6)

The non-transitory computer-readable medium of claim 6, further comprising instructions which, when executed by the processor, generate the key at a server application and transmit the key from the server application to the authorized e-mail client.

### Claim 11

An access control server that manages access to content, the access control server executing an application that is configured to at least:
obtain content for transmission to a client, the content comprising an e-mail message and an attachment to the e-mail message;
determine that access to the content should be restricted to an authorized email client installed on the client;
encrypt the attachment to the e-mail message;
transmit the attachment to the client; and
transmit at least one instruction to the authorized email client installed on the client, the at least one instruction including a key for decrypting the attachment, wherein the key for decrypting the attachment is inaccessible to a native email client installed on the client.

### Claim 12 (depends on 11)

The access control server of claim 11, wherein the content comprises an e-mail, and the access control server is further configured to:
remove a portion of a body of the e-mail;
encrypt the portion of the body of the e-mail; and
attach the encrypted portion of the body to the e-mail.

### Claim 13 (depends on 11)

The access control server of claim 11, wherein the server is further configured to transmit the key from a server application to the authorized e-mail client.