Patent ID: 7660999

Claim:
A computer implemented method for enforcing security restrictions on received data, comprising: identifying, by a computing device, a multipurpose internet mail exchange (MIME) type that is reported by the received data to provide a reported MIME type; evaluating, by the computing device, the received data to determine a sniffed MIME type; identifying, by the computing device, inconsistencies between the reported MIME type and the sniffed MIME type; reconciling, by the computing device, the reported MIME type with the sniffed MIME type to provide an updated cache file extension, wherein the updated cache file extension is determined responsive to the identified inconsistencies; determining, by the computing device, a class identifier that is associated with the updated cache file extension and the received data; building, by the computing device, a security matrix that is referenced by the class identifier, wherein the security matrix includes at least one of a doc-hosting field for creating an object associated with the received data, and a shell executing field for initiating an executable shell associated with the received data; and storing, by the computing device, the security matrix on a computer readable storage medium associated with the computing device.