Abstract:
A method for processing electronic communications is described. The method includes receiving electronic communications from a plurality of sources and processing the communications for delivery to intended addressees. The processing includes ensuring validity of sender, verifying operation of exchange mailbox corresponding to said addressee and routing the communication along a particular path based on the validation and verification.

Description:
FIELD OF INVENTION 
       [0001]    This invention relates generally to the availability of e-mail services for businesses in times of unexpected disaster. More particularly, this invention relates to a method and apparatus for businesses to outsource to a managed services provider the creation and management of a secured offsite/exchange mailbox storage infrastructure that stores emails for business continuity purposes by acting not only as an archive but also making the information readily accessible. 
       BACKGROUND 
       [0002]    Microsoft® Exchange® is widely used e-mail solution at present. In times of disaster (natural, manmade, etc.), e-mail is considered an extremely critical application required for businesses to maintain continuity and consistent communication with associates, customers and vendors. 
         [0003]    At present, there exist multiple approaches for improving not only the availability of an exchange gateway during a disaster but also aimed at maintaining continuity and consistent communication between an entity and its associates, customers and business partners. 
         [0004]    The most common approaches/examples include the following: 
         [0005]    a. Software solutions have been developed by ISVs that enable Microsoft Exchange mail stores and/or exchange server storage to be replicated to secondary/failover exchange mail stores and/or server(s). 
         [0006]    b. Hardware appliances providing highly available instances of Exchange have been created. During replication of Exchange stores from a production appliance to a standby appliance, the appliances can maintain a “clean” instance of Exchange and its mail store(s) by silencing the production instance of Exchange. This significantly reduces the risk of corrupting the mail store(s) for both the production and secondary appliance Exchange instance(s). 
         [0007]    c. Storage vendors have established block-level replication between homogeneous storage solutions that are connected to Exchange servers. The storage vendors can control both read and write functions to the drives, for both production and secondary servers. This allows the storage vendor to control when reads and writes are occurring to storage at the disk block level, minimizing risk of low level corruption of data. 
         [0008]    As with other database driven applications, Exchange data can be replicated as a whole by software solutions through granular low level data or by block level replication. However, resource contention issues with databases that are actively in use sometimes render low level replication ineffectiveness and can result in corrupted data store copies. 
         [0009]    Software replication solutions are based upon the premise of establishing a one-to-one copy from production, to a backup or a failover instance. Establishing a one-to-one relationship of production to backup instance makes it inherently difficult to implement a managed services approach to exchange replication that is both cost effective for smaller businesses and not overly complex. 
         [0010]    Hardware based storage replication solutions are tightly coupled to the selected storage vendor. These solutions are possible for large organizations, with sufficient staff and consistently implemented technical solutions/standards, but are costly to implement and maintain over longer time. These solutions are quite beneficial for the hardware vendors, but not to customers, as they result in continued lock-in of the customer through the establishment of a high cost barrier to entry for competitors. 
         [0011]    Existing software and hardware replication solutions for Microsoft Exchange include: (Neverfail™) Neverfail for Exchange, (NSI™) Doubletake, (XOSoft™) WanSync for Exchange, (Veritas™) Global Cluster Manager, (Mimosa Systems™) NearPoint, (Cemaphore™) MailShadow and (Azaleos™) OneServer “Exchange Appliance”. 
         [0012]    Certain other present technologies are discussed. EMC Legato EmailXtender™ provides customers with a solution for archiving emails from Exchange servers to improve production mail store performance and reduced storage costs. A related product from Legato called the EmailXaminer™, provides support for inspection of corporate e-mail to verify policies are being maintained for regulatory compliance purposes. 
         [0013]    MailShadow™, created by Cemaphore, replicates locally all MAPI transactions that occur to/from Exchange servers. Then, its proprietary formatting is used to compress the transactions and transmit them to a remote instance of Exchange, where the messages are uncompressed and consolidated into one Exchange data store instance for recovery purposes. This solution results in the consolidation of N server instances down to one instance, on a company&#39;s WAN that can be used for disaster recovery purposes. 
         [0014]    Azaleos™ has an offering in the form of an appliance type solution called the OneServer Exchange Appliance. Azaleos offers a managed service, called OneStop™, for outsourced 24×7 monitoring and a remote support of OneServer appliances. Azaleos™ also offers a configuration called Full Fidelity Disaster Recovery for Exchange that allows for replication between two OneServer appliances for disaster recovery purposes. 
         [0015]    U.S. Pat. No. 7,085,286 to Dias, et al. discloses a method for communication between two different and separate business entities which utilize a different communication protocol. 
         [0016]    U.S. Pat. No. 7,072,933 to Lamb, et al., focuses on achieving network access control by using a network address translation protocol. Lamb places a gateway between the LAN/computer and the internet, which allows for content filtering by a technology known as “proxy server” or “application level gateway”. 
         [0017]    U.S. Pat. No. 7,080,161 to Leddy, et al., describes routing of information, through an Exchange. Ledi focuses on the integration between network architectures and protocols for supporting enhancements in the decision making processes in context of standard routing protocols. 
         [0018]    U.S. Pat. No. 7,106,722 to Kuster, et al. discloses a system for address information exchange between media gateways. Kuster focuses on providing for a direct, per call address information exchange, between two distinct IP Media Exchange Gateways. 
         [0019]    U.S. Pat. No. 7,054,264 to Mor discloses a communication device for interconnection between two Networks. 
         [0020]    U.S. Pat. No. 6,034,963 to Minami, et al. discloses a multiple network protocol encoder/decoder and data processor. 
         [0021]    U.S. Pat. No. 6,751,677 to Ilnicki, et al. discloses a method and apparatus for allowing a secure and transparent communication between a user device and servers of a data access network system, via a firewall and a gateway. 
         [0022]    U.S. Pat. No. 6,700,967 to Kleinoder, et al. discloses a presence information method and system. 
         [0023]    U.S. Pat. No. 6,101,320 to Schuetze, et al. discloses an electronic mail communication method and system for exchanging e-mail between organizations having dissimilar electronic mail systems. 
         [0024]    EP Patent Application No. 1 509 033 A1 to Webel discloses methods and devices for connecting IP terminations and PSTN terminations. 
         [0025]    The prior art cited above has bulky designs and time consuming methods. These have a general, mandatory requirement for the installation of a third party software or require the usage of proprietary storage hardware, on the exchange server for the purposes of replication of mail and communication of message storage. 
         [0026]    Another notable drawback in the prior art is that the installation of a new hardware or software has an impact on the operation of the existing exchange solution which is available to an organization. 
         [0027]    Furthermore, the prior art does not address the issues of providing an effective, simple and easy to operate exchange solution or, providing storage, chronological archiving and/or retrieval of e-mail messages. All these form an integral parameter for a secured offsite e-mail storage system for use in the event of any disaster. 
         [0028]    Accordingly, there exists a need for providing a secure e-mail system for business continuity in the event of a disaster wherein the system is equipped to not only serve as an archiving source but also to ensure easy and prompt retrieval of archived information. 
         [0029]    In view of the foregoing disadvantages inherent in the above-mentioned prior art, the general purpose of the present invention is: to provide an improved combination of convenience and utility, to include all the advantages of the prior art, to overcome the disadvantages/drawbacks of the prior art and to provide a secure e-mail system for businesses which is specific, quicker and efficient. 
       SUMMARY 
       [0030]    The present invention provides an easy to use system and method for e-mail solution systems, providing for business continuity of email services in an event of unexpected disasters, which is simple to use and highly efficient in terms of time consumption, as well as, capable of being customized to an organization&#39;s needs and profile. 
         [0031]    It is an object of the present invention to create a business continuity solution for e-mail services, primarily focused towards the Microsoft Exchange marketplace. 
         [0032]    It is another objective of the present invention, to make available a method for providing business continuity of e-mail services, in the event of an unexpected disaster. 
         [0033]    It is a further object of the present invention to offer to customers an “always available” offsite-managed Microsoft Exchange solution, and thus, having no impact on their existing Microsoft Exchange solution and its day to day operation. 
         [0034]    It is yet another object of the present invention to provide the solution as a multi-tenancy hosted/managed services solution, such that its customers do not need implement any incremental obligation to manage as an addition in infrastructure within their enterprises. This means no additional software or hardware should be required to be implemented by customers in order to leverage the invention. 
         [0035]    It is yet further object of the present invention to provide for a solution that is secure, and only allows customers to have access to their e-mails/messages/mailboxes. 
         [0036]    It is yet another object of the present invention that the solution will allow a customer technical resource, to use tools provided as part of the invention, to export messages to a file that can be downloaded, with the intent of restoring the messages from the download, back to the customer&#39;s production Exchange environment. 
         [0037]    It is yet another object of the present invention to offer additional regulatory compliance services, including archiving storage for clients, reviewing for potential information leaks through repeated patterns of sending document attachments to personal e-mail addresses (or other external e-mail destinations), and, to look for improper usage of e-mail based upon customer&#39;s IT policies, etc. 
     
    
     
       BRIEF DESCRIPTION OF DRAWINGS 
         [0038]    For a better understanding of the nature of the present invention, reference should be made to the detailed description taken in conjunction with the accompanying drawings in which: 
           [0039]      FIG. 1  illustrates an exemplary secure e-mail system; 
           [0040]      FIG. 2  illustrates an exemplary information exchange in the e-mail system of  FIG. 1 ; 
           [0041]      FIG. 3  illustrates components of an exemplary exchange gateway of  FIGS. 1 and 2 ; 
           [0042]      FIG. 4  illustrates a message routing process according to exemplary embodiments; 
           [0043]      FIG. 5  illustrates a message screening process according to exemplary embodiments; 
           [0044]      FIG. 6  illustrates a message reviewing process according to exemplary embodiments; and 
           [0045]      FIG. 7  illustrates a message unwrapping process according to exemplary embodiments. 
       
    
    
     DETAILED DESCRIPTION 
       [0046]    Exemplary embodiments described herein for illustrative purposes are subject to numerous variations. It is understood that various omissions, substitutions or equivalents are contemplated as circumstances may suggest or render expedient. 
         [0047]      FIG. 1  illustrates an exemplary secure e-mail system  10 . E-mail system  10  includes an Exchange gateway  200  and a shared hosted Exchange mailbox  300 . Communication takes place between the Exchange gateway  200  and shared/hosted Exchange mailbox  300 . The Shared/hosted Exchange mailbox duplicates the functionality of a customer&#39;s own Exchange mailbox. Some or all of a customer&#39;s personnel may be permitted direct access to the shared/hosted Exchange mailbox in the event of a disaster or other business interruption that leads to the unavailability of the customer&#39;s own Exchange mail server or associated Exchange mailbox. 
         [0048]    Another circumstance when the shared/hosted Exchange mailbox may come into use is when a customer initiates a request for archived and/or queued e-mails—this could be responsive to a regulatory compliance request or when the customer&#39;s own Exchange server or mailbox has to be rebuilt due to data corruption or other software errors. E-mail data that is produced in response to such customer-initiated requests can be provided through direct access to the shared/hosted Exchange mailbox or on physical media such as CDs and DVDs. The-mail system is secure since in its routine mode of operation, it receives a duplicate copy of some or all internal and/or external e-mails from the customer&#39;s Exchange server/mailbox over a secure link. 
         [0049]      FIG. 2  illustrates information exchange in accordance with the secure e-mail system. Exchange gateway  200  processes inbound and outbound messages from/to public SMTP (simple mail transfer protocol) servers  110  on a public network such as the internet via the bidirectional path P 1  and from trusted sources  150  (typically, from customers of the shared/hosted mailbox services 0  via the unidirectional path P 2 . Exchange gateway  200  also communicates with shared hosted Exchange mailbox  300  as described in further detail herein below. 
         [0050]    As noted earlier, there are two modes of operation of the system and method of the present invention. In the first mode of operation, which is referred to herein as the routine mode of operation, a client subscribes to the shared/hosted Exchange mailbox service and specifies the queueing and archiving criteria to be used for various aspects of the business continuity e-mail services of the present invention (such as e-mail backup, disaster recovery, server maintenance, downtime, archival purposes etc.). Simultaneously, the customer programs his own Exchange server/mailbox to forward some or all of internal and/or external e-mail traffic (gated, if desired, by appropriate selection criteria, such as seniority, subject matter, corporate position etc.) to the shared/hosted Exchange mailbox of the present invention over a secure connection P 2 . 
         [0051]    In the second mode of operation, which is referred to herein as the Business Continuity (“BC”) mode of operation, the Internet Service Provider for the customer&#39;s e-mail services is requested to reroute all incoming and outgoing e-mail traffic for a specific customer from the customer&#39;s Exchange server/mailbox to the shared/hosted Exchange Mailbox. This mode of operation is typically invoked in situations when the customer&#39;s e-mail server/mailbox is unavailable due to either a disaster or other business continuity event or a hardware/software problem with the customer&#39;s Exchange server/mailbox. The rerouting of all of such customer&#39;s inbound and outbound e-mail traffic can also be effectuated by updating the appropriate routing tables and/or domain name records of the Internet. In this mode of operation, all incoming and outgoing e-mail pertaining to one or more specific customers are directed to the shared/hosted Exchange gateway  300  through the inbound and outbound public SMTP servers  110  on the Internet. 
         [0052]      FIG. 3  illustrates Exchange gateway  200 . Exchange gateway  200  includes SMTP gateways  290  and  210 . SMTP gateway  290  communicates bidirectionally with external entities such as public SMTP server  110  as well as shared/hosted Exchange mailbox  300 . Exchange gateway  200  also includes a message routing module  280  that communicates with SMTP server  290  and a message queuing module  295 . The message routing module  280  is described in further detail with reference to  FIG. 4 . 
         [0053]    SMTP gateway  210  receives inbound messages from trusted sources  150 . A trusted source may be accessible over a private network. A trusted source may also be accessible over a public network via a secure connection or via a virtual private network (VPN). A message screening module  220  communicates with SMTP gateway  210 , message queuing module  230  and message unwrapping module  260 . The message screening module  220  is described in further detail with reference to  FIG. 5 . The Exchange gateway  200  also includes a message reviewing module  240  that communicates with message queuing module  230  and message unwrapping module  260 . The message reviewing module  240  is described in further detail with reference to  FIG. 6 . The message unwrapping module  260  also communicates with shared hosted exchange  300 . The message unwrapping module  260  is described in further detail with reference to  FIG. 7 . 
         [0054]      FIG. 4  illustrates process  400  corresponding to the functioning of message routing module  280  of  FIG. 3 . Messages from public SMTP gateway  290  (of  FIG. 3 ) is received at  410 . The domain of the message is validated at  420 . For example, validation may take place by comparing the domain with list of valid domains pre-stored in database  25 . If the domain is not valid, the message is rejected at  425 . If the domain is found to be valid, status of the customer&#39;s Exchange server/mailbox is next determined at  430 . If the customer&#39;s Exchange server/mailbox is down (i.e. the Business Continuity status has been activated), the message is sent to the shared/hosted Exchange mailbox at  440 . If the customer&#39;s Exchange server/mailbox is up/functioning/operating (i.e. BC has not been activated), then the message is saved to a message queue (message queuing module  295  of  FIG. 3 ) at  435 . 
         [0055]      FIG. 5  illustrates process  500  corresponding to the functioning of message screening module  220  of  FIG. 3 . Inbound Messages from trusted SMTP gateway  210  ( FIG. 3 ) are received at  510 . The domain of the message (i.e. confirmation that the forwarding sender is a current customer) is validated at  520 . Validation may take place, for example, by comparing the originating domain of a message with list of valid domains pre-stored in database  25 . If the domain is not found to be valid, message are saved to message queuing module  230  at  535 . If the domain is found to be valid, then the e-mail address (of the recipient) is next validated at  530 . Validation may take place, for example, by comparing the e-mail address with list of valid (existing) e-mail addresses pre-stored in database  50 . A valid e-mail address in this context may refer to a list of addresses that need access during the emergency. That is, not everyone in an organization may be provided access to their messages during a crisis. Managers or certain employees/individuals may be pre-designated as requiring access during an emergency. If the e-mail address is not valid, then the messages are saved to queuing module  230  at  535 . If the e-mail address is found to be valid, the message is next sent to message unwrapping module  260  at  540 . The message unwrapping module inspects the header/envelope of the message forwarded from a customer&#39;s Exchange mailbox and reindexes so as to provide a user view that is consistent with the way the message would have appeared in the intended recipient&#39;s e-mail box on the customer&#39;s Exchange server/mailbox. 
         [0056]      FIG. 6  illustrates process  600  corresponding to the functioning of message reviewing module  240  of  FIG. 3 . The messages in message queuing module  230  are reviewed at  605 . The domain for a message from the message queuing module  230  is first validated at  610 . In contrast to process step  520  in  FIG. 5  which applies both when messages are being queued in message queuing module  230  as well as when they are not, the domain validation step  610  of  FIG. 6  is only invoked when messages have been queued in Message queuing module  230 . If the domain is determined to be not valid, the system tests to see if the database  25  of valid domains has been updated with new valid e-mail domains at  615 . If the database has not been updated with new valid domains, the process waits for a predetermined time period (“X” seconds) before checking again to see if the domain is a new valid domain at  620 . This process is periodically repeated until a new valid domain is determined. The e-mail queue is periodically culled of stale mail at step  635  as described later in this specification. 
         [0057]    If the validation of the message header at  610  results in message corresponding to a valid domain, the message is read from the message queuing module  230 . Similarly, if the validation of the message header at  615  results in the domain being a new valid domain, message may be read from the message queuing module  230 . E-mail address validation next takes place at  630  (analogous to the e-mail address validation in process step  530  of  FIG. 5 ). If the e-mail address is not found to be valid (as an existing or service-authorized e-mail address), the age of the message is determined at  635  based on a timestamp of the message. If the message timestamp indicates that the message is older than a predetermined period of time (e.g. “Y” days), the message is saved at  645  to an old mail folder in an exemplary embodiment. If the timestamp indicates that the message is not older the Y days, the message is returned to the message queuing module  230 . If the email address is validated at  630 , the message is next sent to the message unwrapping module  260  at  650 . 
         [0058]      FIG. 7  illustrates process  700  corresponding to the functioning of message unwrapping module  260  of  FIG. 3 . A message is received at  710  (from message screening module  220  or message reviewing module  240  of  FIG. 3 ). The message wrapper may be separated from message content at  720 . Message wrapper information may be saved to a log  75 . The message content is validated at  730 . If the message is considered to be invalid (junk e-mail, spam, etc.), the message is sent to a bad mail folder at  735 . If the message content is determined to be valid, it is sent to the shared hosted exchange  300  (of  FIG. 3 ) at  740 . As noted earlier, the message unwrapping module inspects the header/envelope of the message forwarded from a customer&#39;s Exchange mailbox and removes the outermost envelope of the message, and thus effectively reindexes the message so as to provide a user view that is consistent with the way the message would have appeared in the intended recipient&#39;s e-mail box on the customer&#39;s Exchange server/mailbox. 
         [0059]    Exemplary embodiments as described leverage features of Exchange for creating a copy of every e-mail at an off site location. This obviates the need for installation of third party software or proprietary storage hardware on Exchange server for purposes of replication. A cost effective and reliable solution for continuity of Exchange implementations may be provided. The system and methods as described may also be utilized during non-emergency situations such as during upgrade and maintenance periods for example. 
         [0060]    In some embodiments, the messages copies off site may also be maintained for regulatory or compliances purposes. Furthermore, these messages may be filtered for junk, spam, phishing, etc. E-mail messages as described above may be referred to as electronic communications. While the description above refers to Exchange server, it may be applicable similarly to other types of servers. 
         [0061]    Although, a particular exemplary embodiment of the invention has been disclosed in detail for illustrative purposes, it will be recognized to those skilled in the art that numerous variations or modifications of the disclosed invention, including the rearrangement in the configuration of the secured e-mail system of the present invention as well as its method of use being amenable to modifications on account of an organization&#39;s/customer&#39;s need, are possible.