US 12,111,941 B2
Dynamically controlling access to linked content in electronic communications
Conor Brian Hayes, Monte Sereno, CA (US); Michael Edward Jones, Fallbrook, CA (US); Alina V. Khayms, Sunnyvale, CA (US); Kenny Lee, Seattle, WA (US); David Jonathan Melnick, Los Angeles, CA (US); and Adrian Knox Roston, Las Vegas, NV (US)
Assigned to Proofpoint, Inc., Sunnyvale, CA (US)
Filed by Proofpoint, Inc., Sunnyvale, CA (US)
Filed on Aug. 30, 2022, as Appl. No. 17/898,539.
Application 17/898,539 is a continuation of application No. 16/875,216, filed on May 15, 2020, granted, now 11,468,185.
Claims priority of provisional application 62/863,991, filed on Jun. 20, 2019.
Prior Publication US 2023/0004664 A1, Jan. 5, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 21/53 (2013.01); G06F 21/56 (2013.01); G06F 21/62 (2013.01); G06N 20/00 (2019.01); H04L 9/40 (2022.01); H04L 51/08 (2022.01); H04L 51/212 (2022.01); H04L 51/42 (2022.01)
CPC G06F 21/62 (2013.01) [G06F 21/53 (2013.01); G06F 21/567 (2013.01); G06N 20/00 (2019.01); H04L 51/08 (2013.01); H04L 51/212 (2022.05); H04L 51/42 (2022.05); H04L 63/08 (2013.01); H04L 63/10 (2013.01); H04L 63/105 (2013.01); H04L 63/1416 (2013.01); H04L 63/1483 (2013.01); G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A protection computing platform, comprising:
at least one hardware processor;
a communication interface; and
memory storing computer-readable instructions that, when executed by the at least one hardware processor, cause the protection computing platform to:
receive, via the communication interface, a first email message from a first user computing device based on receiving user input, a first request for a first uniform resource locator associated with a first email message delivered to the first user computing device, wherein the first request includes a request for an embedded link rewritten to point to the protection computing platform instead of a first resource corresponding to the first uniform resource locator, the embedded link having been rewritten into the first email message prior to receiving the user input upon which the receiving of said first request is based for the first uniform resource locator;
evaluate the first request for the first uniform resource locator associated with the first email message using one or more isolation criteria;
based on evaluating the first request for the first uniform resource locator associated with the first email message using the one or more isolation criteria, identify that the first request meets at least one isolation condition associated with the one or more isolation criteria; and
in response to identifying that the first request meets the at least one isolation condition associated with the one or more isolation criteria, initiate a browser mirroring session with the first user computing device to provide the first user computing device with limited access to the first resource corresponding to the first uniform resource locator associated with the first email message.