Secure mail proxy system, method of managing security, and recording medium

BACKGROUND OF THE INVENTION

[0001] 1. Field of the Invention

[0002] The present invention relates to a secure mail proxy system and a method of managing security for ensuring the security of electronic-mail, and to a recording medium in which a program is recorded.

[0003] 2. Description of the Related Art

[0004] As systems for ensuring the security of electronic-mail, mail clients are widely used that are equipped with security capabilities such as: S/MIME (Secure Multipurpose Internet Mail Extension; Developed by RSA Data Security Inc.) for transmitting encrypted mail messages in MIME format; and PGP (Pretty Good Privacy; an encryption program developed by PGP Inc. in which the mail content is encrypted using a public key of the transmission partner and then transmitted).

[0005] One method typically used to realize effective functioning of security involves installing beforehand one's own secret key as well as the transmission partner's digital identification in the terminal that one is using.

[0006] However, systems of the prior art for ensuring the security of electronic-mail have the following problems:

[0007] The range of terminals that receive mail has increased from PC (personal computer) terminals of the prior art to terminals such as portable telephones, portable information terminals, and FAX (facsimile), and this range has further been augmented by terminals not having mail clients equipped with security functions, and as a result, mail security could not be ensured on the Internet.

[0008] In addition, the incorporation of security functions on the terminal side has been problematic in portable telephones, which have quickly become popular, and this weakness has been an important factor in preventing the use of the portable telephones for business.

SUMMARY OF THE INVENTION

[0009] The present invention was achieved in view of the above-described problems, and has as an object the provision of a system and method, as well as a recording medium, that can ensure the security of electronic-mail on the Internet regardless of whether security functions are incorporated on the client side.

[0010] In the present invention for realizing the above-described object, a proxy server is arranged between a mail server and the Internet for carrying out processing relating to security of electronic-mail. This proxy server is provided with a means for encrypting and decrypting electronic-mail, attaching signatures, and detecting falsification, and thus can ensure security of electronic-mail on the Internet regardless of the type of mail server, mail client or user terminal that is used by the user and regardless of whether mail security functions are incorporated in the mail server, mail client, or user terminal.

[0011] In the present invention, a proxy server is arranged between a mail server and the Internet for carrying out processing relating to the security of electronic-mail. Ordinary-text mail that has not been encrypted or not bearing a signature is transmitted to a mail server from a mail client that is connected to a LAN, this mail server detects whether or not the address of this mail is in the LAN, and sends only mail having an address outside the LAN to a proxy server as ordinary text without alteration. The proxy server includes means for encrypting ordinary-text mail that has been received from a mail server such that only the mail recipient can decrypt the mail; and means for attaching the signature of the mail originator to the mail and transmitting the encrypted mail with attached signature to the Internet.

[0012] The proxy server further includes: means for, when encrypted mail with attached signature has been transmitted in by way of the Internet addressed to a mail server, checking whether or not the mail has been subjected to falsification, and if the mail has not been subjected to falsification, decrypting the encrypted mail to ordinary text and transmitting to the mail server; and means for, if mail has been subjected to falsification, rejecting the reception of the mail to prevent entry of the mail into the LAN.

[0013] The user uses the mail client to request the mail server for mail that has been received, and receives ordinary text mail from the mail server.

[0014] The above and other objects, features, and advantages of the present invention will become apparent from the following description based on the accompanying drawings which illustrate examples of preferred embodiments of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS

[0015]FIG. 1 is a block diagram showing the system configuration of the first embodiment of the present invention.

[0016]FIG. 2 is a block diagram showing an example of the construction of a proxy server in the first embodiment of the present invention.

[0017]FIG. 3 is a flow chart for explaining operations when sending mail from a mail client in the first embodiment of the present invention.

[0018]FIG. 4 is a flow chart for explaining operations when encrypted mail with attached signature has been received from the Internet in the first embodiment of the present invention.

[0019]FIG. 5 is a schematic view of an example of combinations of electronic-mail addresses and secret keys that are stored in the secret key storage unit in the first embodiment of the present invention.

[0020]FIG. 6 is a schematic view of an example of combinations of electronic-mail addresses and public keys that are stored in the public key storage unit in the first embodiment of the present invention.

[0021]FIG. 7 is a block diagram showing the system configuration of the second embodiment of the present invention.

[0022]FIG. 8 is a block diagram showing the system configuration of the third embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] Next, regarding an embodiment of the present invention, a proxy server for carrying out processing relating to the security of electronic-mail is arranged between the Internet and a mail server on a LAN (Local Area Network). This proxy server ensures the security of electronic-mail on the Internet regardless of the type of mail server, mail client or user terminal that is used by the user and regardless of whether security functions are incorporated in the mail server, mail client, or user terminal by performing encryption and decryption of electronic-mail as well as by attaching signatures and detecting falsification.

[0024] In FIG. 1, a user uses mail client <b>3</b> that is connected to LAN <b>1</b> to transmit ordinary-text mail that has not been encrypted or provided with a signature to mail server <b>2</b>.

[0025] Mail server <b>2</b> checks whether or not the address of electronic-mail (hereinafter referred to as simply “mail”) is within LAN <b>1</b>, and sends only mail addressed to destinations outside LAN <b>1</b> to proxy server <b>4</b> as ordinary text without alteration.

[0026] Proxy server <b>4</b> encrypts the ordinary-text mail that is received from mail server <b>2</b> such that only the mail recipient can decrypt the mail, attaches the signature of the mail sender, and sends the encrypted mail with attached signature to Internet <b>5</b>.

[0027] When encrypted mail with attached signature addressed to mail server <b>2</b> is transmitted in from Internet <b>5</b>, proxy server <b>4</b> checks whether or not the mail has been falsified.

[0028] If the mail has not been falsified, proxy server <b>4</b> decrypts the encrypted mail, and after converting it to ordinary-text mail, sends it to mail server <b>2</b>.

[0029] If the mail has been subjected to falsification, proxy server <b>4</b> rejects the reception of the mail to prevent the entry of the falsified mail into LAN <b>1</b>.

[0030] The user uses mail client <b>3</b> to request the mail that has been received at mail server <b>2</b> and receives the ordinary-text mail from mail server <b>2</b>.

[0031] Next regarding a more detailed explanation of this embodiment with reference to the accompanying drawings, FIG. 1 is a block diagram showing the system architecture of the secure mail proxy system of the first embodiment of the present invention. Referring to FIG. 1, the first embodiment of the present invention is provided with: LAN <b>1</b>, which is a local area network such as Ethernet; mail server <b>2</b>, which is an information processor that is connected to LAN <b>1</b>; mail client <b>3</b>, which operates on a device such as a personal computer, portable telephone, portable information terminal, or FAX; proxy server, which is an information processor that intermediates between mail server <b>2</b> and Internet <b>5</b>; and Internet <b>5</b>.

[0032]FIG. 2 is a block diagram showing an example of the construction of proxy server <b>4</b> in the first embodiment of the present invention. Referring now to FIG. 2, proxy server <b>4</b> includes data processor <b>41</b> that operates under program control, and storage device <b>42</b> that stores information.

[0033] Storage device <b>42</b> is provided with secret key storage section <b>421</b> and public key storage section <b>422</b>.

[0034] Secret key storage section <b>421</b> stores combinations of electronic-mail addresses (hereinafter referred to as simply “mail addresses”) and corresponding secret keys. The secret keys are used when attaching a sender's signature to electronic-mail, and when decrypting encrypted mail that has been transmitted to a mail address in LAN <b>1</b>.

[0035] Public key storage section <b>422</b> stores combinations of electronic-mail addresses and corresponding public keys. Public keys are used when encrypting electronic-mail such that the mail can be read only by the user of the electronic-mail address that is designated in the address of the electronic-mail, and when checking whether or not electronic-mail has been falsified.

[0036] Data processor <b>41</b> is provided with: mail encryption means <b>411</b>, mail decryption means <b>412</b>, mail signature attaching means <b>413</b>, mail signature checking means <b>414</b>, and data communication means <b>415</b>.

[0037] Mail encryption means <b>411</b> obtains the public key that corresponds to the electronic-mail address of an electronic-mail destination from public key storage section <b>422</b>, and encrypts ordinary-text mail using the public key.

[0038] Mail decryption means <b>412</b> obtains the secret key that corresponds to the electronic-mail address of the electronic-mail destination from secret key storage section <b>421</b> and decrypts the encrypted electronic-mail using the secret key.

[0039] Mail signature attaching means <b>413</b> obtains the secret key that corresponds to the electronic-mail address of the electronic-mail originator from secret key storage section <b>421</b>, calculates the electronic-mail message digest (hash value) and, after encrypting these values with the secret key, attaches them to the electronic-mail as the sender's signature.

[0040] Mail signature checking means <b>414</b> obtains, from public key storage section <b>422</b>, the public key that corresponds to the electronic-mail address of the originator of received electronic-mail, uses the public key to decrypt the signature that is attached to the electronic-mail, and checks whether or not the electronic-mail has been falsified by comparing the values of the signature with the electronic-mail message digest (hash values).

[0041] Data communication means <b>415</b> receives ordinary-text mail from mail server <b>2</b> and transmits encrypted mail with attached signature to Internet <b>5</b>, and further, receives encrypted mail with attached signature from Internet <b>5</b> and transmits ordinary-text mail to mail server <b>2</b>.

[0042] In the first embodiment of the present invention, the processing and functions of mail encryption means <b>411</b>, mail decryption means <b>412</b>, mail signature attaching means <b>413</b>, mail signature checking means <b>414</b>, and data communication means <b>415</b> are realized by a program that is executed by data processor <b>41</b>. In this case, the proxy server according to the present invention can be operated by reading the program from a recording medium (magnetic disk, magnetic tape, optical disk, or semiconductor memory) that stores the program to data processor <b>41</b> and then executing the program.

[0043] Referring now to FIGS. <b>1</b> to <b>6</b>, a detailed explanation is next presented regarding the operation of the first embodiment of the present invention.

[0044]FIG. 3 is a flow chart for explaining operations when sending electronic-mail from mail client <b>3</b> in the first embodiment of the present invention. Explanation will begin with the transmission of electronic-mail from mail client <b>3</b>.

[0045] The user creates electronic-mail using mail client <b>3</b> and sends the mail to mail server <b>2</b> as ordinary text (Step A<b>1</b>).

[0046] Mail server <b>2</b> checks whether or not the destination of the mail transmitted from mail client <b>3</b> is within LAN <b>1</b> (Step A<b>2</b>), sends the ordinary-text mail to proxy server <b>4</b> if addressed to a destination outside LAN <b>1</b> (Step A<b>3</b>), and if addressed to a destination within LAN <b>1</b>, sends the electronic-mail as ordinary text without alteration to mail server <b>2</b> that is connected to LAN <b>1</b> (Step A<b>4</b>).

[0047] Proxy server <b>4</b> receives the ordinary-text mail from mail server <b>2</b> by means of data communication means <b>415</b>, and by means of mail encryption means <b>411</b>, obtains the public key that corresponds to the mail address of the destination of the electronic-mail from public key storage section <b>422</b>, and encrypts the ordinary-text mail using the public key (Step A<b>5</b>).

[0048]FIG. 6 schematically shows an example of combinations of electronic-mail addresses and public keys that are stored in public key storage section <b>422</b>.

[0049] If the mail address of the mail destination is “usuzuki@abc.com”, “111 . . . 001” is used as the corresponding public key in encryption.

[0050] By means of mail signature attaching means <b>413</b>, proxy server <b>4</b> next obtains the secret key that corresponds to the electronic-mail address of the mail originator from secret key storage section <b>421</b>, calculates the message digest (hash values) of the electronic-mail, and, after encrypting these values using the secret key, attaches them as the signature of the mail sender (Step A<b>6</b>).

[0051]FIG. 5 shows an example of the combinations of electronic-mail addresses and secret keys that are stored in secret key storage section <b>421</b>. If the electronic-mail address of the mail sender is “t-azuma@nec.co.jp”, “101 . . . 001” is used as the corresponding secret key in the signature.

[0052] Finally, proxy server <b>4</b> sends the encrypted mail with attached signature to Internet <b>5</b> by means of data communication means <b>415</b> (Step A<b>7</b>).

[0053]FIG. 4 is a flow chart for explaining the operation when receiving encrypted mail with attached signature from Internet <b>5</b> in the first embodiment of the present invention. The operations when receiving encrypted mail with attached signature from Internet <b>5</b> are next explained.

[0054] Proxy server <b>4</b> receives encrypted mail with attached signature from Internet <b>5</b> by means of data communication means <b>415</b> (Step B<b>1</b>).

[0055] By means of mail signature checking means <b>414</b>, proxy server <b>4</b> obtains the public key that corresponds to the mail address of the mail originator from public key storage section <b>422</b>, decrypts the signature that is attached to the electronic-mail using the public key (Step B<b>2</b>), and detects whether or not the electronic-mail has been falsified by comparing the values of the signature and the electronic-mail message digest (hash values) (Step B<b>3</b>).

[0056] In the example of FIG. 6, when the mail address of the mail originator is “u-suzuki@abc.com”, “111 . . . 001” is used as the corresponding public key for decrypting the signature.

[0057] If the electronic-mail has not been falsified, proxy server <b>4</b> uses mail decryption means <b>412</b> to obtain the secret key that corresponds to the mail address of the electronic-mail destination and decrypts the encrypted electronic-mail using the secret key (Step B<b>4</b>).

[0058] In the example shown in FIG. 5, if the mail address of the mail recipient is “t-azuma@nec.co.jp”, “101 . . . 001” is used as the corresponding secret key in the decryption of the encrypted message.

[0059] The message that has been decrypted to ordinary text is then sent to mail server <b>2</b> in LAN <b>1</b> by data communication means <b>415</b> (Step B<b>5</b>).

[0060] In a case in which the electronic-mail has been falsified, however, proxy server <b>4</b> rejects the reception of the mail to prevent the falsified mail from entering LAN <b>1</b> (Step B<b>6</b>).

[0061] Mail server <b>2</b> receives the ordinary-text mail from proxy server <b>4</b> (Step B<b>7</b>), and returns the ordinary-text mail to mail client [<b>3</b>] when there is a request from mail client <b>3</b> (Step B<b>9</b>).

[0062] The user uses mail client <b>3</b> to request mail server <b>2</b> for mail that has been received (Step B<b>8</b>), and receives ordinary-text mail from mail server <b>2</b> (Step B<b>10</b>).

[0063] Explanation next regards another embodiment of the present invention.

[0064]FIG. 7 is a block diagram showing the construction of the second embodiment of the present invention. Referring to FIG. 7, the second embodiment of the present invention may use any one or all of, for example, public line network <b>61</b>, radio communication network <b>62</b>, and CATV network <b>63</b> as a means for connecting mail client <b>3</b> to LAN <b>1</b> rather than connecting mail client <b>3</b> directly to LAN <b>1</b> as in the above-described embodiment.

[0065] A dial-up connection form is one example in which mail client <b>3</b> is connected to LAN <b>1</b> by way of public line network <b>61</b> using an Internet connection service provider (ISP).

[0066] As an example of connection to LAN <b>1</b> by way of radio communication network <b>62</b>, connection is realized from a portable telephone by way of a portable telephone dealer that offers an Internet connection service.

[0067] As an example of a connection to LAN <b>1</b> by way of CATV (cable TV), connection is realized by way of a CATV company that offers an Internet connection service.

[0068] Next, regarding the third embodiment of the present invention, we refer to FIG. 8, which is a block diagram showing the construction of the third embodiment of the present invention. Referring to FIG. 8, the present embodiment includes key management server <b>7</b> and directory server <b>8</b>, and proxy server <b>4</b> is not provided with private key storage section <b>421</b> and public key storage section <b>422</b>.

[0069] Key management server <b>7</b> is a server provided exclusively for managing combinations of electronic-mail addresses and secret keys as shown in FIG. 5, and directory server <b>8</b> is provided exclusively for managing combinations of electronic-mail addresses and public keys, as shown in FIG. 6.

[0070] In this embodiment, mail encryption means <b>411</b> and mail signature checking means <b>414</b> of proxy server <b>4</b> acquire public keys from directory server <b>8</b>.

[0071] In addition, mail decryption means <b>412</b> and mail signature attaching means <b>413</b> acquire secret keys from key management server <b>7</b>.

[0072] Other than the acquisition of public keys and secret keys from directory server <b>8</b> and key management server <b>7</b>, respectively, the processing procedure of proxy server <b>4</b> in the third embodiment of the present invention is similar to the procedures shown in FIG. 3 and FIG. 4.

[0073] As described in the foregoing explanation, the following effects can be obtained by the present invention:

[0074] As the first effect, the present invention can ensure mail security on the Internet without incorporating special software or devices in a terminal that transmits and receives mail.

[0075] The effect of the present invention to ensure security is particularly notable in systems that employ, as mail client terminals, the portable telephones and portable information terminals that have rapidly come into wide use. The present invention is effective both because of the great variety of devices to be treated and because of the huge number of units already in use.

[0076] The invention is effective because processing that is necessary for ensuring mail security in the present invention is allotted not to user-side terminals, but rather, to a proxy server that is arranged at the connection point with the Internet. The effect of the present invention is also notable because threats to security are far less serious inside the point at which an in-house LAN connects to the Internet than on the Internet itself, and security functions can be concentrated at the point of connection with the Internet.

[0077] The second effect of the present invention is a great reduction in management costs for ensuring security. This effect is particularly notable for a user that employs a plurality of terminals because security need not be established at each terminal.

[0078] The invention is effective because, in the present invention, the management of secret keys and public keys that are necessary for ensuring security is centralized at the proxy server and security settings are not required for each client.

[0079] It is to be understood, however, that although the characteristics and advantages of the present invention have been set forth in the foregoing description, the disclosure is illustrative only, and changes may be made in the arrangement of the parts within the scope of the appended claims.