Title: General Study 05 – Keeping and Preserving E-

Status: )LQDO SXEOLF   Version:  Submission Date: 6HSWHPEHU  Last Revised: 0D\  Release Date: -XQH  Author: 7KH,QWHU3$5(63URMHFW7($0,WDO\  Writer(s): *LDQIUDQFR3RQWHYROSH &HQWUR1D]LRQDOHSHUO ,QIRUPDWLFDQHOOD3XEEOLFD $PPLQLVWUD]LRQH &1,3$  6LOYLR6DO]D   'LSDUWLPHQWRGL,QIRUPDWLFDH6LVWHPLVWLFD 8QLYHUVLWjGHJOL6WXGLGL5RPD³/D6DSLHQ]D´ Project Component: 5HVHDUFK URL: KWWSZZZLQWHUSDUHVRUJLSGLVSOD\BILOHFIP"GRF  LSBLWDO\BJVDBILQDOBUHSRUWSGI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Document Control

Version history

Version Date By Version notes

1.0 2008-09-23 G. Pontevolpe, Discussion draft prepared following identification S. Salza of general study at the first InterPARES 3 Project, International Summit, Rome, Italy, 1-3 October 2007.

2.0 2008-12-30 G. Pontevolpe, Draft version prepared following incorporation of S. Salza draft 1.0 feedback received during the third InterPARES 3 Project, International Summit, Mexico City, Mexico, 1-3 October 2008.

2.1 2009-01-03 R. Preston Minor content and copy editing to sections 1-4.

3.0 2009-02-18 R. Preston Major content editing to sections 5-7.

4.0 2009-05-29 G. Pontevolpe, Final public version prepared by the authors, with S. Salza major editing, and taking into account some of the comments and editing suggestions in v. 2.1 and 3.0.

4.1 2009-05-23 R. Preston Minor copy editing; addition of Lists of Figures and Tables.

,QWHU3$5(63URMHFW7($0,WDO\ L *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Keeping and preserving e-mail

*,$1)5$1&23217(92/3(‚$1'6,/9,26$/=$‚Á

 [email protected] [email protected]

       This report was produced by CNIPA (Centro Nazionale per l’Informatica nella Pubblica Amministrazione), the Agency of the Italian Government for ICT infrastructures in the Italian Public Administration, in cooperation with the InterPARES 3 Project, and is part of an activity aimed at proposing guidelines for the management and preservation of e-mail messages as records in the Italian Public Administration.                ‚&1,3$&HQWUR1D]LRQDOHSHUO¶,QIRUPDWLFDQHOOD3XEEOLFD$PPLQLVWUD]LRQH5RPH,WDO\ www.cnipa.gov.it Á8QLYHUVLWjGHJOL6WXGLGL5RPD³/D6DSLHQ]D´'LSDUWLPHQWRGL,QIRUPDWLFDH6LVWHPLVWLFD5RPH ,WDO\http://www.dis.uniroma1.it/~salza/

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Table of Contents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³HPDLODUFKLYLQJ´  6WDWHRIWKHDUWDQGWUHQGV $FNQRZOHGJHPHQWV $SSHQGL[$5HTXLUHPHQWVIRUV\VWHPVWRPDQDJHDQGSUHVHUYHHPDLOUHFRUGV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

List of Figures

)LJXUH%DVLFHPDLOLQIUDVWUXFWXUH ...... 9 )LJXUH:HEPDLO )LJXUH&RUSRUDWHHPDLOZLWKLQWHJUDWHGV\VWHP )LJXUH6WUXFWXUHRIDVLQJOHSDUWPHVVDJH )LJXUH0XOWLSDUWPHVVDJHLQWH[WDQGKWPO

List of Tables

7DEOH0RVWFRPPRQKHDGHUOLQHV 7DEOH0HVVDJHPHWDGDWD

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D



Note to the reader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³HPDLO DUFKLYLQJ´V\VWHPVDQGWKHUHTXLUHPHQWVH[SUHVVHGLQVHYHUDO LPSRUWDQW UHIHUHQFH GRFXPHQWV 'HYLVLQJ SUHFLVH DQG V\VWHPDWLF SURFHGXUHV IRU HPDLO UHFRUGV PDQDJHPHQW DQGRU SHUPDQHQW SUHVHUYDWLRQ LV QRW DJRDO  RI WKLV GRFXPHQW DQG LQGHHG FDQQRW EH GRQH LQ D VXIILFLHQWO\ JHQHUDO FDVH VLQFH WKHVHSURFHGXUHVPD\KHDYLO\GHSHQGRQWKHFKDUDFWHULVWLFVRI WKH RUJDQL]DWLRQ ZKHUH WKH SURFHVV LV WDNLQJ SODFH )RU WKLV UHDVRQ WKH GHILQLWLRQ RI DP RUH GHWDLOHG HPDLO UHFRUGV PDQDJHPHQW DQG SHUPDQHQW SUHVHUYDWLRQ PRGHO VKRXOG EH FDUULHGRXWDVDVHSDUDWHWDVNZLWKLQWKH,QWHU3$5(63URMHFW DQG GHVHUYHV D PRUH WKRURXJK GLVFXVVLRQ LQYROYLQJ UHFRUGV PDQDJHPHQWDUFKLYDODQG,7FRPSHWHQFHV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

 It soon became obvious that the ARPANET was becoming a human-communication medium with very important advantages over normal U.S. mail and over telephone calls. One of the advantages of the message systems over letter mail was that, in an ARPANET message, one could write tersely and type imperfectly, even to an older person in a superior position and even to a person one did not know very well, and the recipient took no offense. The formality and perfection that most expect in a typed letter did not become associated with network messages, probably because the network was so much faster, so much more like the telephone  -&5/LFNOLGHU  

1 Introduction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only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

3HWHU*HUU  ³,QWHOOL5HVHDUFKORRNVWRVKDNHXSDFURZGHG(QWHUSULVH0HVVDJH$UFKLYLQJ (0$ PDUNHW´(QWHUSULVH6WUDWHJ\ *URXS$YDLODEOHDWKWWSZZZHQWHUSULVHVWUDWHJ\JURXSFRP/RJLQDVS"IURPSDJH %X\,QVLJKWDVS 5HSRUW,' 

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$ PRUH GHWDLOHG DQDO\VLV UHYHDOV VHYHUDO NH\ PRWLYDWLRQV GULYLQJ HPDLO DUFKLYLQJ DFWLYLWLHV Storage concerns 7KHYROXPHRIHPDLOPHVVDJHVWKDWFRUSRUDWLRQVDQGODUJHRUJDQL]DWLRQVPXVWKDQGOH LV YHU\ ODUJH DQG JURZLQJ IDVW 2Q WKH RWKHU KDQGH PDLO VHUYHUV KDYH QRW EHHQ GHVLJQHGWRVWRUHDQGPDQDJHDODUJHDPRXQWRIPHVVDJHVDQGDWWDFKPHQWVIRUORQJ SHULRGVRIWLPH $V D FRQVHTXHQFH PRVW RUJDQL]DWLRQV HQIRUFH VL]H OLPLWV WR WKHLU HPSOR\HHV¶ PDLOER[HV 7KLV RIWHQ OHDGV XVHUV WR URXWLQHO\ EDFNXS WKH PHVVDJHV they FRQVLGHU relevantRQWKHLURZQ3&VEHIRUHWKHPHVVDJHVGLVDSSHDUIURPWKHVHUYHUV7KHZKROH SURFHGXUHLVRIFRXUVHLQIRUPDOXQFRQWUROOHGDQGXQUHOLDEOH0RUHRYHUWKHEDFNHGXS PHVVDJHVFDQRQO\EHDFFHVVHGE\WKHLQGLYLGXDOXVHUVZKRKDYHVWRUHGWKHP LIWKH\ DUHVWLOODEOHWRILQGWKHP  8SWRQRZRYHUFRPLQJVWRUDJHFRQFHUQVLVVWLOOWKHPDLQPRWLYDWLRQWRHPDLODUFKLYLQJ DQGKHQFHWKHVWURQJHVWPDUNHWGULYHU Strategic relevance (PDLOPHVVDJHVKDYHEHFRPHDQLQFUHDVLQJO\LPSRUWDQWDQGVWUDWHJLFUHVRXUFHIRUWKH RUJDQL]DWLRQVDQGKHQFHVKRXOGEHFHQWUDOO\PDQDJHGDQGVHOHFWHGIRUPDLQWHQDQFH DQGSUHVHUYDWLRQDFFRUGLQJWRSUHFLVHDQGZHOOGHILQHGFULWHULD7KLVKHOSVWRDXWRPDWH DQGDFFHOHUDWHEXVLQHVVSURFHVVHVDQGPD\SURGXFHVXEVWDQWLDOVDYLQJVE\FXWWLQJWKH WLPHVSHQWLQORFDWLQJDQGUHWULHYLQJPHVVDJHV 0RUHRYHU ZKHQ DQ DUFKLYDO VROXWLRQ LV GHSOR\HG HPDLO PHVVDJHV FDQ EH LQWHJUDWHG ZLWKRWKHURUJDQL]DWLRQGDWDDQGDQDO\]HGWRPRQLWRUEXVLQHVVSURFHVVHVDQGWRH[WUDFW NQRZOHGJHWKDWFDQKHOSVXSSRUWEXVLQHVVVWUDWHJLHV Regulatory compliance 0RVWFRPSDQLHVKDYHEHHQUHFHQWO\ILQHGODUJHDPRXQWVRIPRQH\IRUIDLOLQJWRPDLQWDLQ FRUSRUDWHHPDLOUHFRUGV,QWKHPRVWHYLGHQWFDVH0RUJDQ6WDQOH\ZDVILQHGLQ  ELOOLRQ LQ DFD VH GXEEHG E\ VRPH DV µOHJDO &KHUQRE\O¶ IRU EHLQJ XQDEOH WR SURGXFHFRUSRUDWHHPDLOUHFRUGV²LHIRUIDLOLQJWRUHSURGXFHHPDLOUHTXHVWHGXQGHU LQYHVWLJDWLRQ EDFNXSWDSHVORVWRUXQUHFRYHUDEOH 6PDOOHUDPRXQWVRIPRQH\KDYH EHHQ DZDUGHG LQ RWKHU FDVHV EXW WKH RYHUDOO ILJXUH KDV WRWDOHG LQ WKH ODVW IHZ \HDUV VHYHUDOELOOLRQVRIGROODUV ,QWKH8QLWHG6WDWHVDFFRUGLQJWRQHZ)HGHUDO5XOHVRI&LYLO3URFHGXUH$PHQGPHQWV WKH SURGXFWLRQ RI HOHFWURQLF LQIRUPDWLRQ LV QR ORQJHU RSWLRQDO $PHULFDQ FRPSDQLHV VKRXOGWKHUHIRUHEHSUHSDUHGWRVXSSRUWHOHFWURQLFGLVFRYHU\DQGEHDEOHWRH[KLELWLQD YHU\VKRUWWLPHDOOUHFRUGVUHTXHVWHGE\D&RXUW²FKLHIO\HPDLOV ZKLFKKDYHSOD\HGD FHQWUDO UROH LQ PDQ\ UHFHQW FDVHV  $OWKRXJK WKH PRVW HYLGHQW FDVHV FRQFHUQ SULYDWH RUJDQL]DWLRQVJRYHUQPHQWDJHQFLHVKDYHWRFRPSO\DVZHOO

/DQGRQ7KRPDV-U³-XU\7DOOLHV0RUJDQ¶V7RWDODW%LOOLRQ´The New York Times0D\$YDLODEOHDW KWWSZZZQ\WLPHVFRPEXVLQHVVSHUHOPDQKWPO"BU  WK HPF WK 6HHKWWSZZZXVFRXUWVJRYUXOHVFLYLOSGI

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

5HJXODWRU\FRPSOLDQFHKDVWULJJHUHGLQWKHODVWIHZ\HDUVPDQ\RUJDQL]DWLRQVWRVHW XSHPDLODUFKLYLQJV\VWHPVDQGLWLVLQWKH8QLWHG6WDWHVDYHU\VWURQJPDUNHWGULYHU Historical preservation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²LHWKHYXOQHUDELOLWLHVWKDWDULVHLQUHODWLRQWR WKH ,QWHUQHWWKURXJK ZKLFK PHVVDJHV DUH GHOLYHUHG LQ DQ XQFRQWUROOHG HQYLURQPHQW— WKH FRQVHTXHQW SUREOHPV LQ DVVHVVLQJ PHVVDJH DXWKHQWLFLW\ DQGW KH SULYDF\ DQG FRQILGHQWLDOLW\LVVXHV 6HFWLRQGHDOVZLWKWKHKHDUWRIWKHSUREOHPLHPDQDJLQJDQGSUHVHUYLQJHPDLOD FRPSOH[ SURFHVV ZKLFK PD\ JR IURP MXVW PDLQWDLQLQJ HPDLOV DV WUDQVLWRU\ UHFRUGV ZLWKLQDWUDQVLHQWVWRUDJHV\VWHPWRFODVVLI\LQJUHJLVWHULQJDQGPDLQWDLQLQJFRUSRUDWH HPDLOUHFRUGVDQGWKHLUPHWDGDWDLQDGHGLFDWHGFRUSRUDWHUHFRUGNHHSLQJV\VWHP HJ HOHFWURQLFUHFRUGVPDQDJHPHQWV\VWHPRU(506 6HFWLRQGLVFXVVHVWKHGLIIHUHQW VWUDWHJLHVWKDWFDQEHXVHGWRFDSWXUHHPDLOPHVVDJHVZKLFKFDQEHHLWKHUEDVHGRQ

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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³DUFKLYLQJ´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

2 The Internet e-mail infrastructure

2.1 How does e-mail work? (PDLO LV D VWRUHDQGIRUZDUG PHWKRG RI H[FKDQJLQJ PHVVDJHV RQ WKH ,QWHUQHW 7KLV PHDQV WKDW D PHVVDJH VHQW E\ D XVHU JRHV WKURXJK DQ DV\QFKURQRXV SURFHVV RI GHOLYHU\W\SLFDOO\LQYROYLQJDVHULHVRIVWHSV,QHDFKVWHSWKHPHVVDJHLVVWRUHGE\DQ LQWHUPHGLDWH VHUYHU RQ WKH QHWZRUN WR EHI RUZDUGHG DW D ODWHU WLPH XQWLO LW ILQDOO\ UHDFKHV LWV GHVWLQDWLRQ 7LPLQJ GHSHQGV RQ WKH DYDLODELOLW\ RI FRQQHFWLRQV RQ WKH QHWZRUN $VFKHPDRIWKHGHOLYHU\SURFHVVLVVKRZQLQ)LJXUH7KHSURFHVVLQYROYHVDsender VD\ $OLFH DQG D destination VD\ %RE %RWK $OLFH DQG %RE XVH VSHFLILF DSSOLFDWLRQV FDOOHG e-mail clients UXQQLQJ RQ WKHLU 3& WR VHQG DQG UHFHLYH HPDLO &OLHQWV GR QRW FRPPXQLFDWH GLUHFWO\ EXW KDYH WR FRQQHFW WR e-mail servers LH VSHFLDO DSSOLFDWLRQV UXQE\$OLFH¶VDQG%RE¶VRUJDQL]DWLRQVRU,63V WKDWDFWXDOO\WDNHFDUHRIFDUU\LQJRQWKH PHVVDJHGHOLYHU\ 7KHSURFHVVJRHVWKURXJKWKHIROORZLQJVWHSV x $OLFHFRPSRVHVWKHPHVVDJHXVLQJKHUe-mail  x WKH PHVVDJH LV IRUPDWWHG E\ $OLFH¶V e-mail client LQ DVS HFLILF internet e-mail formatDQGWKHQLVVHQWWRKHUORFDOe-mail server

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Bob’s e-mail Alice’s e-mail client client

THE INTERNET

Bob’s e-mail Alice’s e-mail server server Intermediate servers

%RE¶V DNS server PDLOER[

Figure 1. %DVLFHPDLOLQIUDVWUXFWXUH

 x $OLFH¶V e-mail serveU ORFDWHV WKH DGGUHVV RI %RE¶V e-mail server H[SORLWLQJ WKH Domain Name System (DNS) LHWKHGLVWULEXWHGGLUHFWRU\RIWKH,QWHUQHW  x WKHWZRe-mail serversH[FKDQJHWKHPHVVDJHZKLFKPD\JRWKURXJKDVHULHVRI LQWHUPHGLDWHVHUYHUVRQWKHQHWZRUNDQGLVILQDOO\VWRUHGE\%RE¶Ve-mail server LQ%RE¶VSHUVRQDODQG x WKHPHVVDJHLVNHSWLQ%RE¶VPDLOER[XQWLOKHUHDGVLWDQGRUGRZQORDGVLWXVLQJ KLVe-mail client 7KLVSURFHGXUHLVSUHWW\PXFKWKHVDPHDVWKHRQHWKDW$OLFHDQG%REIROORZZKHQWKH\ H[FKDQJHOHWWHUV7KHLUORFDOSRVWRIILFHVSOD\WKHVDPHUROHDVORFDOHPDLOVHUYHUVDQG WKHOHWWHUGHOLYHU\PD\JRWKURXJKDGGLWLRQDOSRVWRIILFHV LQWHUPHGLDWHVHUYHUV ,QERWK FDVHVWKHGHOLYHU\WLPHDQGGHOLYHU\LWVHOIDUHQRWJXDUDQWHHG 7KH ,QWHUQHW LV D best-effort network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

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

JDLQ HYLGHQFH WKDW WKH PHVVDJH KDV EHHQ GHOLYHUHG DQGRU WKDW WKH UHFLSLHQW KDV DFWXDOO\UHDGLW

2.2 End-user access to e-mail (QGXVHUVPD\DFFHVVWKHHPDLOV\VWHPLQVHYHUDOGLIIHUHQWZD\V E-mail client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¶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ntegrated systems 7KLV LV WKH W\SLFDO VROXWLRQ XVHG E\ PRVW FRUSRUDWLRQV DQGO DUJH RUJDQL]DWLRQV DQGL V EDVHGRQWKHLGHDRILQWHJUDWLQJHPDLODFFHVVLQDEURDGHUµFROODERUDWLYH¶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¶VLQWUDQHW$OWKRXJKQRWYHU\JHQHUDODQGDIIHFWHGE\SURSULHWDU\HOHPHQWV WKLVVFKHPDQHHGVWREHFDUHIXOO\FRQVLGHUHGVLQFHLWDFFRXQWVIRUDODUJHVKDUHRIWKH PDUNHWDQGVLQFHFRUSRUDWLRQVDQGODUJHRUJDQL]DWLRQVDUHDYHU\VLJQLILFDQWFDVHIRUH PDLODUFKLYLQJ

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Web browser

Web THE INTERNET browser

Web E-mail server server

8VHU¶V PDLOER[

Figure 2. :HEPDLO

Proprietary Web client browser

INTRANET THE INTERNET

Web server

8VHU¶V E-mail server Corporate PDLOER[ server

Figure 3. &RUSRUDWHHPDLOZLWKLQWHJUDWHGV\VWHP WKLVVFKHPDQHHGVWREHFDUHIXOO\FRQVLGHUHGVLQFHLWDFFRXQWVIRUDODUJHVKDUHRIWKH ,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

2.3 Interoperability of e-mail systems $V ZH KDYH VHHQ LQ WKH SUHYLRXV VHFWLRQV H[FKDQJLQJ D PHVVDJH LQYROYHV DQ LQWHUDFWLRQ DPRQJ VHYHUDO agents HPDLO FOLHQWV DQG VHUYHUV  ZKLFK DUH LQ JHQHUDO heterogeneous V\VWHPV²LH EDVHG RQG LIIHUHQW KDUGZDUH DQG VRIWZDUH SODWIRUPV 0RUHRYHU WKHVH V\VWHPV DUH LQGHSHQGHQWO\ GHVLJQHG DQGL PSOHPHQWHG E\ GLIIHUHQW SDUWLHVSRWHQWLDOO\ZLWKRXWDQ\IRUPRIGLUHFWFRRUGLQDWLRQ $PDLQFKDOOHQJHIRUWKH,QWHUQHWHPDLOV\VWHPLVWKHUHIRUHWRHQVXUHinteroperability² LH FRUUHFW DQG UHOLDEOH FRPPXQLFDWLRQ DPRQJ WKHVH KHWHURJHQHRXV V\VWHPV ,QWHURSHUDELOLW\LVEDVHGRQWZRPDLQHOHPHQWV x communication protocols²LH VHWV RI UXOHV JRYHUQLQJ WKH FRPPXQLFDWLRQ EHWZHHQDJHQWVZKLFKHQVXUHWKDWDJHQWVPD\UHOLDEO\DQGFRUUHFWO\LQWHUDFWE\ PHDQVRIDFRPPRQODQJXDJHDQGRIVWDQGDUGSURFHGXUHVDQG x message format²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

2.4 Internet standards 7KH VWDQGDUGL]DWLRQ SURFHVV RI WKH ,QWHUQHW LV VRPHZKDW GLIIHUHQW IURP WKH XVXDO ,62,(&WUDFNWKHUHIRUHLWLVZRUWKLQWURGXFLQJKRZWKHVHVWDQGDUGVDUHSURGXFHGDQG DOORZHGWRHYROYH ,QWHUQHWVWDQGDUGVDUHGHYHORSHGDQGSURPRWHGE\WKHInternet Engineering Task Force IETF) ZKLFK FRRSHUDWHV FORVHO\ ZLWK WKH PDMRU LQWHUQDWLRQDO VWDQGDUGV ERGLHV LQFOXGLQJ WKH International Organization for Standardization (ISO) WKH International Electrotechnical Commission (IEC)DQGWKH Consortium (W3C)WKH PDLQLQWHUQDWLRQDOVWDQGDUGVRUJDQL]DWLRQ IRUWKH:RUOG:LGH:HE 7KH VWDQGDUGL]DWLRQ SURFHVV ZKLFK GDWHV EDFN WR WKH HDUO\ GD\V RI WKH $53$QHW SURMHFW LV KLJKO\ FRRSHUDWLYH DQG LV EDVHG RQ VSHFLDO GRFXPHQWV FDOOHG Request for Comments (RFC)5)&VDUHGUDIWGRFXPHQWVPRVWO\SURSRVDOVRIVWDQGDUGVSXEOLVKHG E\,(7)DQGSRVWHGRQWKHQHWZRUNDVDµUHTXHVWIRUFRPPHQWV¶(DFK5)&LVDVVLJQHG

6HHKWWSZZZLHWIRUJ 6HHKWWSZZZLVRRUJLVRKRPHKWP 6HHKWWSZZZLHFFK 6HHKWWSZZZZRUJ

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

DXQLTXHQXPEHUDQGLVQHYHUUHVFLQGHGRUPRGLILHG,IDPHQGPHQWVDUHQHHGHGDQHZ 5)&LVLVVXHGZLWKDGLIIHUHQWQXPEHUZKLFKVXSHUVHGHVWKHROGRQH $V HVWDEOLVKHG E\ 5)&  ZKLFK GLVFXVVHV WKH VWDQGDUGL]DWLRQ SURFHVV ³QRW DOO 5)&V DUH VWDQGDUGV´ 6RPH DUH MXVW PHPRUDQGD UHPDUNV WKDW SHRSOH OLNH WR VKDUH UHVHDUFK SDSHUV RU SUHOLPLQDU\ SURSRVDOV RQ DQ\ PDWWHU FRQFHUQLQJ WKH ,QWHUQHW DQG ,QWHUQHWEDVHG V\VWHPV 7KHUHIRUH WKH ,(7) DVVLJQV WR HDFK 5)&Drating FDOOHG status µ0DWXUH¶ 5)&V DUH UDWHG Standard Track DQG DUH IXUWKHU GLYLGHG LQWR Proposed StandardDraft StandardDQGInternet Standard,QWHUQHW6WDQGDUGV 67' UHIHUHDFKWR DQ5)& RUDVHWRI5)&V DQGDUHJLYHQDXQLTXHQXPEHUDVIRUWKH5)&VKRZHYHU XQOLNHWKH5)&QXPEHUZKHQWKHVWDQGDUGHYROYHVWKH67'QXPEHUGRHVQRWFKDQJH EXWVLPSO\UHIHUVWRDQHZ5)&WKDWVXSHUVHGHVWKHRULJLQDORQH

2.5 Standardization of e-mail transmission 6HUYHUWRVHUYHUDQGFOLHQWWRVHUYHULQWHURSHUDELOLW\DUHHQVXUHGE\SMTP, Simple Mail Transfer ProtocolZKLFKLV,QWHUQHW6WDQGDUG67'6073GDWHVEDFNWR$XJXVW DQGLWLVEDVHGRQ5)&DQGPRVWUHFHQWO\XSGDWHGE\5)&+RZHYHUWKH SURWRFRO FXUUHQWO\ XVHG E\ WKH PDMRULW\ RI HPDLO DSSOLFDWLRQV LV WKH RQH NQRZQ DV ESMTP IRUExtended SMTP DQGGHILQHGLQ5)&SXEOLVKHGRQ$SULO +RZHYHUIRUPDOO\WKHVWDWXVRI5)&LVVWLOODProposed StandardDQGWKHRIILFLDO VWDQGDUGLVVWLOOWKHRQHGHILQHGE\5)&7KLVVLWXDWLRQRIµJRLQJDKHDGWKHRIILFLDO VWDQGDUG¶LVW\SLFDORIWKH,QWHUQHWZRUOGDQGLWLVRIQRXVHWRDUJXHLIWKLVLVULJKWRU ZURQJZHPXVWMXVWFRSHZLWKLW 6073VSHFLILHVWKHZD\WKHHPDLOFOLHQWLQWHUDFWVZLWKHPDLOVHUYHUVDQGGHOLYHUVWKH PHVVDJHV WR WKHP DQGKRZ  WKH HPDLO VHUYHUV WKDW KHQFH DUH RIWHQ FDOOHG SMTP- servers  LQWHUDFW DPRQJ WKHPVHOYHV LQ VXFK DZ D\ WKDW WKH PHVVDJH JRHV WKURXJK VHYHUDODJHQWVDQGILQDOO\UHDFKHVLWVGHVWLQDWLRQ8VHRI6073SURWRFROLQWKHPHVVDJH GHOLYHU\SURFHVVLVFOHDUO\VKRZQLQILJXUHVDQG $VIDUDVWKHSUREOHPRIHPDLODUFKLYLQJLVFRQFHUQHGWKLVVWDQGDUGLVLPSRUWDQWVLQFHLW GHILQHVWKHEDVLFIRUPDWRIPHVVDJHVWKDWFDQEHKDQGOHGE\6073VHUYHUVDQGWKDWJR WKURXJKWKHGHOLYHU\SURFHVV7KLVLVLQGHHGDYHU\EDVLFIRUPDWVLQFHRQO\VLPSOHWH[W PHVVDJHV LQ plain ASCII DOVR FDOOHG ELW $6&,, RU 86$6&,,  FKDUDFWHUV DUH VXSSRUWHGZKLFKLVDGHTXDWHRQO\IRU(QJOLVKDQGDIHZRWKHUODQJXDJHV7KLVOLPLWDWLRQ LV RYHUFRPH E\ GHILQLQJ DVS HFLDO ZD\ WR HQFRGH DQ\ ULFKHU FRQWHQW LQ SODLQ $6&,, FKDUDFWHUVWRDOORZWKHXVHRIDPRUHJHQHUDOVHWRIFKDUDFWHUVLQWKHPHVVDJHWH[W DQGWRLQFOXGHLQHPDLOPHVVDJHVIRUPDWWHGWH[WDQGPXOWLPHGLDFRQWHQWVDVZHVKDOO GLVFXVVLQVHFWLRQ

6HHKWWSZZZDSSVLHWIRUJUIFUIFKWPO 6HHKWWSWRROVLHWIRUJKWPOUIF 6HHKWWSWRROVLHWIRUJKWPOUIF 6HHKWWSZZZDSSVLHWIRUJUIFUIFKWPO

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

2.6 Standardization of client-server communication (PDLOFOLHQWVPD\UHWULHYHHPDLOIURPVHUYHUVLQVHYHUDOGLIIHUHQWZD\VVXSSRUWHGERWK E\ VWDQGDUG DQGSU RSULHWDU\ SURWRFROV 7KLV LV UHOHYDQW IRU HPDLO DUFKLYLQJ VLQFH DFFRUGLQJWRWKHGLIIHUHQWRSWLRQVPHVVDJHVPD\HLWKHUEHGRZQORDGHGIURPWKHVHUYHU DQGVWRUHGRQWKHHQGXVHU¶V3&RUPD\EHNHSWRQWKHVHUYHUZKLFKWDNHVWKHPLQ FKDUJHDQGDOORZVWKHXVHUWRDFFHVVWKHPDWDQ\WLPH7KLVKDVDVXEVWDQWLDOLPSDFW DV ZH VKDOO VHH ODWHU VHH VHFWLRQ   RQW KH RUJDQL]DWLRQ RI WKH PHVVDJH FDSWXUH SURFHVV 7ZRPDLQSURWRFROVDUHXVHGWRUHDGDQGUHWULHYHHPDLO x version 3 (POP3).7KLVSURWRFRO 5)&67' ZDV RULJLQDOO\GHVLJQHGWRVXSSRUWXVHUVZLWKVSRUDGLFQHWZRUNFRQQHFWLRQ LHGLDO XS FRQQHFWLRQ  :KHQ WKH HQGXVHU FRQQHFWV KH GRZQORDGV RQ KLV 3&DOOWKH QHZPHVVDJHVWRFRQYHQLHQWO\UHDGWKHPRIIOLQH0HVVDJHVDUHWKHQ XVXDOO\  GHOHWHGE\WKHVHUYHU$QRSWLRQH[LVWVWROHDYHDFRS\RIWKHPHVVDJHVRQWKH VHUYHU EXW LW LV VHOGRP XVHG VLQFH PDQ\ LPSOHPHQWDWLRQV FDQQRW WHOO SURSHUO\ EHWZHHQWKHQHZPHVVDJHVDQGWKHRQHVWKDWKDYHEHHQDOUHDG\GRZQORDGHG x Internet Message Access Protocol (IMAP) ,0$3 5)&  Proposed Standard ZDVVSHFLILFDOO\GHVLJQHGWRPHHWWKHQHHGVRIQRPDGLFXVHUV²LH EHLQJDEOHWRDFFHVVWKHLUHPDLOIURPVHYHUDOGLIIHUHQWFRPSXWHUV,WDOORZVORFDO FOLHQWVWRDFFHVVPDLORQDUHPRWHVHUYHU$OOPHVVDJHVDUHVWRUHGRQWKHVHUYHU ZKHUHWKH\DUHNHSWWREHDFFHVVHGDWDQ\WLPHXQWLOWKHXVHUH[SOLFLWO\GHFLGHVWR GHOHWH WKHP 0RUHRYHU WKH XVHU PD\ FUHDWH IROGHUV LQVLGH KLV PDLOER[ RQ WKH VHUYHU WR RUJDQL]H DQG DUFKLYH KLV PHVVDJHV +DYLQJ DOO WKH PHVVDJHV RQ WKH VHUYHULVGHILQLWHO\DSRVLWLYHIHDWXUHIRUHPDLODUFKLYLQJ %HVLGHVGLUHFWFOLHQWVHUYHUFRQQHFWLRQ323DQG,0$3DUHDOVRXVHGDVSDUWRIWKH RWKHUHPDLODFFHVVVFKHPHVWKDWZHKDYHGLVFXVVHGLQVHFWLRQ,QZHEPDLOWKHZHE VHUYHUXVHV323RU,0$3WRUHWULHYHPHVVDJHVIURPWKHHPDLOVHUYHUDQG6073WR VHQG PHVVDJHV 6LPLODUO\ LQ LQWHJUDWHG V\VWHPV WKH FRUSRUDWH VHUYHU XVHV VWDQGDUG SURWRFROVWRFRQQHFWWRWKHHPDLOVHUYHU 6073VHUYHU EXWSURSULHWDU\SURWRFROVDUH XVHG LQ WKH FRPPXQLFDWLRQ ZLWK WKH HQGXVHU FOLHQW ,Q ERWK VFKHPHV PHVVDJHV DUH NHSWRQWKHVHUYHUDJDLQDSRVLWLYHIHDWXUHIRUHPDLODUFKLYLQJ

2.7 Standardization of message format 7KH EDVLF IRUPDW RI HPDLO PHVVDJHV LV GHILQHG E\ 5)&  Format of the Internet Arpa messages ZKLFKLV,QWHUQHW6WDQGDUG67'5)&GDWHVEDFNWR EXWPRVWDSSOLFDWLRQVFDQQRZKDQGOHWKHXSGDWHGYHUVLRQRIPHVVDJHIRUPDWGHILQHGLQ 5)&ZKLFKLVVWLOOIRUPDOO\DDraft Standard %RWK5)&DQG5)&VSHFLI\WKDWHPDLOPHVVDJHVVKRXOGFRQWDLQRQO\plain ASCII text DOVR FDOOHG ELW $6&,, RU 86$6&,,  FKDUDFWHUV²LH FKDUDFWHUV IURP WKH RULJLQDOFKDUDFWHU$6&,,VWDQGDUGFRGHZKLFKGDWHVEDFNWRDQGZDVGHYLVHG

$YDLODEOHDWKWWSWRROVLHWIRUJKWPOUIF $YDLODEOHDWKWWSWRROVLHWIRUJKWPOUIF $YDLODEOHDWKWWSWRROVLHWIRUJKWPOUIF $YDLODEOHDWKWWSWRROVLHWIRUJKWPOUIF

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

IRUSODLQWH[W(QJOLVK,QIDFWDVZHKDYHVHHQ6073VHUYHUVFDQRQO\KDQGOHWKLVW\SH RI PHVVDJH 7KLV UHVWULFWLRQ LQ SULQFLSOH UXOHV RXW XVLQJ LQ HPDLO PHVVDJHV RWKHU FKDUDFWHU FRGHV VXFK DV ,62  DQG 8QLFRGH +HQFH IRU LQVWDQFH PHVVDJHV VKRXOGQRWFRQWDLQFKDUDFWHUVZLWKWKHGLDFULWLFPDUNV DFFHQWV XVHGLQ/DWLQDQGQRUWK (XURSHDQODQJXDJHV 7RRYHUFRPHWKLVOLPLWDWLRQWKHPHVVDJH IRUPDWKDVVXEVHTXHQWO\EHHQ H[WHQGHG E\ WKHMultipurpose Internet Mail Extension (MIME)VWDQGDUGWRVXSSRUW x WH[WDQGKHDGHUVLQFKDUDFWHUVHWVRWKHUWKDQSODLQ$6&,,WH[W x PHVVDJHVVWUXFWXUHGLQPXOWLSOHSDUWVDQG x QRQWH[WDWWDFKPHQWVLQFOXGLQJDODUJHYDULHW\RIPXOWLPHGLDILOHV $OWKRXJKXQLYHUVDOO\XVHGDQGDFNQRZOHGJHGE\HYHU\RQH0,0(LVQRW \HW IRUPDOO\ DQ ,QWHUQHW VWDQGDUG ,W LV GHILQHG E\ D VHULHV RI OLQNHG GRFXPHQWV 5)&  5)& 5)&5)&5)& HDFKRIZKRVHVWDWXVLVVWLOODraft Standard WKHODVWVWHSEHORZInternet Standard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register QHZ GDWD W\SHV FDOOHG Internet media types RU 0,0( W\SHV ZKHQ WKH QHHG DULVHV 5HJLVWUDWLRQ RI QHZ GDWD W\SHV LV PDQDJHG E\ WKH LQGHSHQGHQW Internet Assigned Numbers Authority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ecureMultipurpose Internet Mail Extension (S/MIME) ZKLFK GHILQHV D VWDQGDUG IRU SXEOLF NH\ HQFU\SWLRQ DQGVLJQL QJ RI HPDLO HQFDSVXODWHGLQ0,0( VHHVHFWLRQ 

$YDLODEOHDWKWWSZZZPKRQDUFRUJaHKRRG0,0( 6HHKWWSZZZLDQDRUJ $YDLODEOHDWKWWSZZZLHWIRUJUIFUIFW[W

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

3 Format and structure of Internet e-mail messages 0HVVDJH IRUPDW DQGHQFR GLQJ LV RI FUXFLDO LPSRUWDQFH LQ HPDLO PDQDJHPHQW DQG SHUPDQHQWSUHVHUYDWLRQIRUVHYHUDOUHDVRQV )LUVWWRDUFKLYHDPHVVDJHZHILUVWQHHGWRGHWHUPLQHWKHPHVVDJHVWUXFWXUHDQGWR LGHQWLI\DOOWKHHOHPHQWVWKDWFRPSRVHLW x message dataWKHVHQGHUWKHUHFLSLHQWVHWF x delivery information HPDLO VHUYHUV WKDW KDQGOHG WKH PHVVDJH GDWH VHQW GDWH UHWULHYHGHWF x message textDQG x attachments 1H[WDOOWKHVHHOHPHQWVVKRXOGEHH[WUDFWHGIURPWKHPHVVDJHWRKHOSGHFLGHWKURXJK D GHOLFDWH DQG FRPSOH[ SURFHVV LI WKH PHVVDJH LV JRLQJ WR EH DUFKLYHG DQG KRZ LW VKRXOGEHFODVVLILHG VHHVHFWLRQ  )LQDOO\ZHPXVWGHFLGHLQZKLFKIRUPDWWKHPHVVDJHDQGRULWVFRPSRQHQWVVKRXOGEH PDLQWDLQHG VHHVHFWLRQ 

3.1 Message structure $Q,QWHUQHWHPDLOPHVVDJHFRQVLVWVRIWZRPDMRUVHFWLRQV x headerDVHTXHQFHRIOLQHVDWWKHEHJLQQLQJRIWKHPHVVDJHJHQHUDWHGE\WKH VHQGHUHPDLOFOLHQWDQGE\WKHHPDLOVHUYHUVLQYROYHGLQWKHGHOLYHU\SURFHVV DQG x bodyWKHUHVWRIWKHPHVVDJHZKLFKFRQWDLQVWKHPHVVDJHWH[WLQSODLQ$6&,, FKDUDFWHUV DQGRU D WH[W FRQWDLQLQJ QRQ$6&,, FKDUDFWHUV DQG ELQDU\ GDWD LQ SODLQ$6&,,HQFRGLQJ ,Q WKH VLPSOHVW FDVH²LH WKH RULJLQDO PHVVDJH IRUPDW GHILQHG LQ 5)& ²WKH PHVVDJH ERG\ FRQWDLQV RQO\ SODLQ $6&,, FKDUDFWHUV 6XFK PHVVDJHV DUH VWUDLJKWIRUZDUGWRKDQGOHDQGFDQMXVWEHDUFKLYHGLQWKHLUQDWLYHIRUPDWDQGWKHQUHDG DJDLQZLWKQRQHHGIRUDQ\IRUPRIGHFRGLQJ 8QIRUWXQDWHO\ PRVW PHVVDJHV XVH H[WHQGHG $6&,, RU 8QLFRGH FKDUDFWHUV DQG KDYH DWWDFKPHQWVDQGRUDUHLQKWPOIRUPDW,QDOOWKHVHFDVHVWKHPHVVDJHPXVWEHLQ0,0( IRUPDW $FFRUGLQJO\ ZH VKDOO FRQFHQWUDWH LQ WKH IROORZLQJ VHFWLRQV RQ WKH VWUXFWXUHRI 0,0(PHVVDJHV



3.2 Message header 7KH PHVVDJH KHDGHU LV D VHTXHQFH RI OLQHV FDOOHG KHDGHU OLQHV RU VLPSO\ KHDGHUV ZKLFKDUHSURGXFHGE\WKHVHQGHUHPDLOFOLHQWDQGE\WKHHPDLOVHUYHUVRQWKHGHOLYHU\ SDWK7KHKHDGHULVWHUPLQDWHGE\DEODQNOLQH$OOWKDWIROORZVLVWKHPHVVDJHERG\ 2QO\DPLQRUSDUWRIWKHLQIRUPDWLRQLQWKHPHVVDJHKHDGHULVGLVSOD\HGE\PRVWHPDLO FOLHQWV7KLVLVUDWKHUUHDVRQDEOHVLQFHWKHUHLVDYHU\ODUJHYDULHW\RIKHDGHUVPDQ\RI

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

WKHPRSWLRQDODQGPRVWXVHUVZRXOGMXVWEHFRQIXVHGE\WRRPXFKGHWDLO+RZHYHUH PDLO FOLHQWV JHQHUDOO\ DOORZ XVHUV WR LQVSHFW WKH FRPSOHWH KHDGHU LI WKH\ OLNH WR LQYHVWLJDWHWKHPHVVDJHRULJLQDQGWKHGHOLYHU\SURFHVV 7KH PRVW FRPPRQ KHDGHUV DUH VKRZQ LQ 7DEOH  :H PD\ GLYLGH WKHP LQ IRXU PDLQ FDWHJRULHVEDVHGRQWKHHPDLOPDQDJHPHQWSURFHVVHVWRZKLFKGDWDUHIHUDVIROORZV x Identity. 7KHVH KHDGHUV VSHFLI\ WKH VHQGHU DQG WKH UHFLSLHQWV RI WKH PHVVDJH DQGDGGWRWKHEDVLFHOHPHQWVVRPHPRUHGHWDLOV)RULQVWDQFHWKHPHVVDJHLV DOPRVW DOZD\VJLYHQE\WKHVHQGHUHPDLOVHUYHUDMessage-IDZKLFKLVDQ LGHQWLILHUWKDWVKRXOGEHXQLTXH DWOHDVWIRUWKDWVHUYHU DQGWKDWFDQWKHUHIRUHEH XVHGWRUHIHUHQFHWKHPHVVDJH HJLQRWKHUPHVVDJHV 0RUHRYHUDReturn- Path FDQ EH VSHFLILHG LI GLIIHUHQW IURP WKH VHQGHU DGGUHVV DV DQ DGGUHVV WR ZKLFK DOO bounce messages LH QRWLILFDWLRQV DQG DQVZHUV JHQHUDWHG E\ WKH PHVVDJH  VKRXOG EH VHQW )LQDOO\ Sender VSHFLILHV WKH KXPDQ RU DXWRPDWHG DJHQWWKDWLVDFWXDOO\VHQGLQJWKHPHVVDJHRQEHKDOIRIWKHofficialVHQGHU LH WKHRQHPHQWLRQHGLQWKHFromKHDGHU  x Delivery. 7KHVH KHDGHUV FROOHFW WKH GHWDLOV DERXW WKH GHOLYHU\ SURFHVV $ ReceivedUHFRUGLVDGGHGWRWKHPHVVDJHHDFKWLPHWKHPHVVDJHLVKDQGOHGE\ DVHUYHURQWKHGHOLYHU\SDWKWKHILUVWRQHEHLQJWKHVHQGHU¶VHPDLOVHUYHUDQG WKHODVWRQHWKHUHFLSLHQW¶V$WLPHVWDPSLVDVVRFLDWHGZLWKHDFKVWHSVSHFLI\LQJ WKHORFDOGDWHWLPHWKHPHVVDJHDUULYHGWRWKHUHFHLYLQJVHUYHUH[SUHVVHGLQWKH VWDQGDUG IRUPDW LQ ZKLFK WKH *07 DQG WKH WLPH VKLIW DUH JLYHQ $GGLWLRQDO KHDGHUVVSHFLI\LIWKHVHQGHUUHTXHVWHGDUHFHLSWDQGWRZKLFKDGGUHVVLWVKRXOG EH VHQW +RZHYHU GLIIHUHQW HPDLO FOLHQWV PD\ EHKDYH LQ GLIIHUHQW ZD\V LQ KDQGOLQJWKHUHFHLSWLQIRUPDWLRQ7KHUHIRUHFDUHVKRXOGEHWDNHQLQFRQVLGHULQJ WKHODFNRIDUHWXUQUHFHLSWDVHYLGHQFHWKDWWKHPHVVDJHKDVQRWEHHQGHOLYHUHG RUUHDG x Thread. 7KHVH KHDGHUV DUH XVHG LQ PHVVDJHV WKDW DUH VHQW LQ UHSO\ WR RWKHU PHVVDJHVDYHU\FRPPRQFDVHDQGLQPHVVDJHVWKDWDUHXVHGWRIRUZDUGRWKHU PHVVDJHV7KHVHJURXSVRIPHVVDJHVIRUPWKHUHIRUHDthreadDQGVRPHRIWKH KHDGHU LQIRUPDWLRQ RI WKH PHVVDJH LQLWLDWLQJ WKH WKUHDG LV LQFOXGHG LQ WKH QHZ PHVVDJH QRWDEO\ WKH message identifier +HDGHUV UHIHUULQJ WR WKUHDGV DUH RI VSHFLDOLQWHUHVWLQHPDLODUFKLYLQJVLQFHWKH\DOORZIRUWKHH[WUDFWLRQRIPHWDGDWD WKDWFRQQHFWDPHVVDJHWRRWKHUPHVVDJHV x MIME. 7KHVHKHDGHUVVSHFLI\WKHVWUXFWXUHRIWKHPHVVDJHERG\DQGWKH0,0( YHUVLRQZKLFKGHVSLWHWKHHYROXWLRQRIWKHVWDQGDUGLVVWLOO7KHContent- TypeKHDGHUVSHFLILHVLIWKHPHVVDJHFRQWDLQVRQHRUVHYHUDOSDUWVLQWKHODWWHU FDVHDboundaryLVDOVRVSHFLILHG LHDVWULQJWKDWVHSDUDWHVWKHPXOWLSOHSDUWV RIWKHPHVVDJHLQWKHPHVVDJHERG\ ,ILQVWHDGWKHPHVVDJHFRQWDLQVDVLQJOH SDUWWKHContent-TypeDQGWKHContent-Transfer-EncodingDUHGLUHFWO\ VSHFLILHGLQWKHKHDGHU x Miscellaneous $GGLWLRQDO KHDGHUV PD\ EH DGGHG WKDW UHIHU WR VHFXULW\ DSSOLFDWLRQVVSDPILOWHULQJDQGRWKHUHPDLOPDQDJHPHQWSURFHVVHV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Table 1. 0RVWFRPPRQKHDGHUOLQHV $PHDQVDOZD\VSUHVHQW)IUHTXHQW2RSWLRQDO

Identity

+($'(5'(6&5,37,2125,*,1 35(6(17

Date: Date/time sent 6HQGHUFOLHQW $ From: Address of sender 6HQGHUFOLHQW $ Sender: Address of sender’s assistant 6HQGHUFOLHQW 2 Organization: Organization of author 6HQGHUFOLHQW 2 To: Address of recipients (may be a list) 6HQGHUFOLHQW 2 Cc: Address of recipients in carbon copy 6HQGHUFOLHQW ) Bcc: Address of recipients in blind carbon copy 6HQGHUFOLHQW ) Subject: Message summary 6HQGHUFOLHQW $ Message-ID: Unique identifier assigned by the sender 6HQGHUVHUYHU ) Return-Path: Address for ‘bounce messages’  6HQGHUFOLHQW 2

Delivery

+($'(5'(6&5,37,2125,*,1 35(6(17

User-Agent: Sender e-mail client  6HQGHUFOLHQW $ 5HFLSLHQW Delivered-To Recipient mailbox (may be a list) $ VHUYHU Received:  One for each step in the delivery path 6HUYHU $ from Server which sent the message 6HUYHU $ by Server which received the message 6HUYHU $ with Server ESMTP identifier 6HUYHU $ date Date/time received 6HUYHU $ Return-Receipt-To: Address to send a read receipt 6HQGHUFOLHQW 2 Disposition-Notification-To: Address to send a read receipt 6HQGHUFOLHQW 2

Thread

+($'(5'(6&5,37,2125,*,1 35(6(17 In-Reply-To: Message ID to which the message replies 6HQGHUFOLHQW 2 References: Message ID to which the message refers 6HQGHUFOLHQW 2 Resent-From: Address of sender forwarding the message 6HQGHUFOLHQW 2 Resent-To: Address of the recipient forwarded message 6HQGHUFOLHQW 2 Resent-Subject Subject of the forwarding message 6HQGHUFOLHQW 2

MIME

+($'(5'(6&5,37,2125,*,1 35(6(17 MIME-Version: Always 1.0 6HQGHUFOLHQW $ Content-Type: Specifies content and structure of the body 6HQGHUFOLHQW 2 boundary Separator in a multipart messages 6HQGHUFOLHQW 2 Content-Transfer-Encoding Encoding scheme 

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$OWRJHWKHUWKHPHVVDJHKHDGHUFRQWDLQVFUXFLDOLQIRUPDWLRQIRUHPDLODUFKLYLQJ$VZH VKDOOGLVFXVVLQVHFWLRQPRVWRIWKHPHVVDJHPHWDGDWDFDQEHH[WUDFWHGIURPWKH KHDGHU +RZHYHU WKLV LV QRW DV WUDLJKWIRUZDUG WDVN VLQFH DV ZH DOUHDG\ PHQWLRQHG RQO\DIHZKHDGHUVDUHPDQGDWRU\VRPHDUHXVHGLQWHUFKDQJHDEO\DQGWKHLURUGHUDQG V\QWD[DUHTXLWHIOH[LEOH 0RUHRYHU WKH UHOLDELOLW\ RI WKLV LQIRUPDWLRQ GHSHQGV RQ WKH FRUUHFWQHVV RI WKH LPSOHPHQWDWLRQRIHPDLOFOLHQWVDQGVHUYHUVLQYROYHGLQWKHGHOLYHU\SURFHVVDQGWKHVH DSSOLFDWLRQV DUH SRWHQWLDOO\ LPSOHPHQWHG DQGP DUNHWHG ZLWKRXW DQ\ FRQWURO DQG FHUWLILFDWLRQ+RZHYHUWKLVOHDGVWRDPRUHJHQHUDOSUREOHPFRQFHUQLQJWKH,QWHUQHWH PDLOV\VWHPDVDZKROHZKLFKPDNHVDVZHVKDOOGLVFXVVLQVHFWLRQWKHIRUJLQJRIDQ HPDLODUDWKHUHDV\WDVNDQGDYRLGLQJLWDTXLWHFRPSOH[RQH

3.3 Message body $PHVVDJHLQ0,0(IRUPDWPD\FRQWDLQRQHRUVHYHUDOSDUWV $VLQJOHSDUWPHVVDJHLVDSODLQWH[WPHVVDJHZLWKQRDWWDFKPHQWV7KHFRUUHVSRQGLQJ Content-TypeLQWKHKHDGHULVtext/plainDQGLWDOVRVSHFLILHVFKDUDFWHUHQFRGLQJ )RU PHVVDJHV FRQWDLQLQJ RQO\ SODLQ $6&,, FKDUDFWHUV WKH Content-Transfer- Encoding LV 7-bit 2WKHUZLVH LI WKH FKDUDFWHU VHW LV RWKHU WKDQ SODLQ $6&,, D GLIIHUHQWHQFRGLQJLVXVHGYHU\IUHTXHQWO\quoted-printableDQHQFRGLQJVFKHPH WKDW UHSUHVHQWV GLUHFWO\ SODLQ $6&,, FKDUDFWHUV DQGHQFR GHV ,62  H[WHQGHG $6&,, RU8QLFRGHFKDUDFWHUVZLWKWKUHHSODLQ$6&,,FKDUDFWHUVHDFK$OWKRXJKWKLVDQG RWKHUHQFRGLQJVDUHYHU\FRPPRQPLVLQWHUSUHWDWLRQRIFKDUDFWHUVZLWKGLDFULWLFPDUNV ZKHQUHDGLQJDPHVVDJHLVDUDWKHUFRPPRQHPDLOFOLHQWIDLOXUH $ VLPLODU HQFRGLQJ VFKHPH FDOOHG Encoded-Word LV XVHG IRU WH[WXDO KHDGHU LQIRUPDWLRQLQFKDUDFWHUVHWVRWKHUWKDQSODLQ$6&,, 7KHVWUXFWXUHRIDVLQJOHSDUWPHVVDJHLVUHSUHVHQWHGLQ)LJXUH7KLVPHVVDJHXVHV WKH,62 :HVWHUQ(XURSH HQFRGLQJDQGFRQWDLQVDFFHQWHGFKDUDFWHUVERWKLQ WKHSubjectKHDGHUDQGLQWKHWH[W

3.4 Multipart messages $PXOWLSDUW0,0(PHVVDJHLVFRPSRVHGRIVHYHUDOSDUWVVHSDUDWHGE\Dboundary²LH E\WKHVWULQJGHILQHGLQWKHWRSOHYHO Content-TypeKHDGHU VHHVHFWLRQ ²WKDWLV SODFHGEHWZHHQDQ\WZRSDUWV7KHVWUXFWXUHFDQEHQHVWHG²LHDQ\RIWKHSDUWPD\ KDYHDPXOWLSDUWVWUXFWXUHLWVHOI 0XOWLSDUW PHVVDJHV FDQ EHRI  VHYHUDO W\SHV ZKLFK DUH VSHFLILHGDVsubtypesLQWKH Content-TypeKHDGHU)RURXUSXUSRVHVWKHUHOHYDQWVXEW\SHVDUH

x Multipart/mixed 7KLV VXEW\SH LV LQWHQGHG IRU SDFNLQJ LQ D VLQJOH PHVVDJH VHYHUDO ILOHV ZLWK GLIIHUHQW GDWD W\SHV ZKLFK DUH VSHFLILHG E\ WKH Content-Type KHDGHUV 7KH GHIDXOW FRQWHQW W\SH LV text/plain $FFRUGLQJ WR XVHU RSWLRQ VHWWLQJV HPDLO FOLHQWV PD\ GLVSOD\ VRPH RI WKHVH ILOHV RQOLQH HJ SLFWXUHV  DQGRU DV DWWDFKPHQWV7KLVVXEW\SHLVJHQHUDOO\XVHGWRVHQGPHVVDJHVZLWKDWWDFKPHQWV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Message-ID: <006401c91467$186fb1d0$6602a8c0> From: "Silvio Salza" To: "Silvio Salza" Subject: Sample single part message Date: Fri, 12 Sep 2008 01:35:37 +0200 Organization: =?iso-8859-1?Q?Universit=E0_di_Roma?= MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Message from the University of Rome Messaggio dall'Universit=E0 di Roma

Figure 4. 6WUXFWXUHRIDVLQJOHSDUWPHVVDJH

7KH RUGHU RI SDUWV LV PHDQLQJIXO DQGV KRXOG EH XVHG E\ WKH HPDLO FOLHQWV LQ GLVSOD\LQJWKHP

x Multipart/mixed 7KLV VXEW\SH LV LQWHQGHG IRU SDFNLQJ LQ D VLQJOH PHVVDJH VHYHUDO ILOHV ZLWK GLIIHUHQW GDWD W\SHV ZKLFK DUH VSHFLILHG E\ WKH Content-Type KHDGHUV 7KH GHIDXOW FRQWHQW W\SH LV text/plain $FFRUGLQJ WR XVHU RSWLRQ VHWWLQJV HPDLO FOLHQWV PD\ GLVSOD\ VRPH RI WKHVH ILOHV RQOLQH HJ SLFWXUHV  DQGRU DV DWWDFKPHQWV7KLVVXEW\SHLVJHQHUDOO\XVHGWRVHQGPHVVDJHVZLWKDWWDFKPHQWV 7KH RUGHU RI SDUWV LV PHDQLQJIXO DQGV KRXOG EH XVHG E\ WKH HPDLO FOLHQWV LQ GLVSOD\LQJWKHP

x Multipart/alternative 7KLVVXEW\SHLVXVHGWRVHQGVHYHUDODOWHUQDWLYHYHUVLRQVRIWKHVDPHFRQWHQW² LHRIWKHVDPHPHVVDJH²WKHIRUPDWRIHDFKYHUVLRQEHLQJVSHFLILHGE\LWVRZQ Content-Type KHDGHU 7KHDO WHUQDWLYH SDUWV DSSHDU LQ DQ RUGHU RI LQFUHDVLQJ µIDLWKIXOQHVV¶ WR WKH RULJLQDO FRQWHQW ZLWK WKH EHVW FKRLFH EHLQJ WKH ODVW (PDLO FOLHQWV VKRXOG UHFRJQL]H WKDW WKH FRQWHQW RI WKH YDULRXV SDUWV DUH LQWHUFKDQJHDEOHDQGGLVSOD\WKHµEHVW¶W\SHEDVHGRQWKHLUFDSDELOLW\DQGRURQ XVHURSWLRQVHWWLQJV $YHU\FRPPRQLQVWDQFHRIMultipart/alternativeDUHPHVVDJHVWKDWDUH VHQW ERWK LQ SODLQ WH[W Content-Type: text/plain  DQG LQ +70/ IRUPDW Content-Type: text/  7KH SODLQ WH[W SDUW SURYLGHV EDFNZDUGV FRPSDWLELOLW\ ZKLOH WKH KWPO SDUW DOORZV XVH RI IRUPDWWLQJ DQGK\ SHUOLQNV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

7KHUHIRUH WKH WZR SDUWV GR QRW FRQWDLQ H[DFWO\ WKH VDPH LQIRUPDWLRQ WKH KWPO SDUWEHLQJVRPHZKDWULFKHU$VDPSOHPHVVDJHRIWKLVNLQGLVVKRZQLQ)LJXUH

x Multipart/digest 7KLVVXEW\SHLVV\QWDFWLFDOO\LGHQWLFDOWRmultipart/mixedEXWWKHVHPDQWLFV DUHGLIIHUHQW0RUHVSHFLILFDOO\LQDGLJHVWWKHGHIDXOWContent-TypeYDOXHIRUD ERG\SDUWLVFKDQJHGIURPtext/plainWR message/rfc8227KLVPHGLDW\SH LQGLFDWHVWKDWWKHERG\FRQWDLQVDQHQFDSVXODWHGPHVVDJHZLWKWKHV\QWD[RIDQ 5)&PHVVDJH 7KH Multipart/digest LV XVHG WR VHQG FROOHFWLRQV RI PHVVDJHV LQ DVL QJOH PHVVDJHDQGYHU\RIWHQIRUHPDLOIRUZDUGLQJ

x Multipart/related 7KLV VXEW\SH SURYLGHV D PHFKDQLVP IRU UHSUHVHQWLQJ FRPSRXQG REMHFWV FRQVLVWLQJRIVHYHUDOLQWHUUHODWHGSDUWV(DFKSDUWRIWKHREMHFWLVVHQWDVDSDUWRI WKH PXOWLSDUW PHVVDJH $ FRPPRQ LQVWDQFH RI WKLV VXEW\SH LV UHSUHVHQWHG E\ PHVVDJHVVHQGLQJDZHESDJHFRPSOHWHZLWKLPDJHV7KHURRWSDUWFRQWDLQVWKH +70/GRFXPHQWDQGXVHVLPDJHWDJVWRUHIHUHQFHLPDJHVVWRUHGLQWKHODWWHU SDUWV

MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=“---separator---"

This is a multi-part message in MIME format.

---separator--- Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Message from the University of Rome

---separator--- Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

message text in html !

---separator---

Figure 5. 0XOWLSDUWPHVVDJHLQWH[WDQGKWPO

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x Multipart/report 7KLV VXEW\SH LV PHDQW IRU HPDLO UHSRUWV RI DQ\ NLQG ,W LV JHQHUDOO\ XVHG IRU PHVVDJH GHOLYHU\ UHSRUWV ,W KDV WZR UHTXLUHG SDUWV SOXV DQ RSWLRQDO RQH 7KH ILUVWSDUWFRQWDLQVDKXPDQUHDGDEOHPHVVDJHZLWKDGHVFULSWLRQRIWKHFRQGLWLRQ WKDWFDXVHGWKHUHSRUWWREHJHQHUDWHG7KHVHFRQGSDUWLVPDFKLQHSDUVDEOHDQG FRQWDLQVDQDFFRXQWRIWKHUHSRUWHGPHVVDJHKDQGOLQJHYHQW7KHRSWLRQDOWKLUG SDUW FRQWDLQV WKH PHVVDJH WR ZKLFK WKH UHSRUW UHODWHV RU SDUW RI LW ZLWK WKH SXUSRVHRIKHOSLQJLQGLDJQRVLQJSUREOHPV

x Multipart/signed 7KLV W\SH LV XVHG WRVHQG PHVVDJHV ZLWK GLJLWDO VLJQDWXUHV,W KDVWZR SDUWV D ERG\ SDUW WKH PHVVDJH  DQG D VLJQDWXUH SDUW 7KH GLJLWDO VLJQDWXUHLVXVHGWR DXWKHQWLFDWH WKH ZKROH FRQWHQW RI WKH ILUVW SDUW 0DQ\ VLJQDWXUH W\SHV DUH SRVVLEOH DQG WKHUH LV VWLOO VRPH ODFN RI VWDQGDUGL]DWLRQ 0RUHRYHU VLJQHG PHVVDJHVPD\DOVREHVHQWXVLQJWKHPL[HGPXOWLSDUWVFKHPD

x Multipart/encrypted 7KLV W\SH LV XVHG WR VHQG HQFU\SWHG PHVVDJHV ,W KDV WZR SDUWV 7KH ILUVW SDUW FRQWDLQV WKH LQIRUPDWLRQ QHHGHG WR GHFU\SW WKH VHFRQG SDUW 6LPLODU WR VLJQHG PHVVDJHV WKHUH DUH GLIIHUHQW LPSOHPHQWDWLRQV ZKLFK DUH VSHFLILHG LQ WKH Content-TypeRIWKHILUVWSDUWDQGWKHUHLVVWLOODODFNRIVWDQGDUGL]DWLRQ

3.5 MIME media types $0,0(PHGLDW\SHLVDQLGHQWLILHUXVHGLQDFRQWHQWW\SHKHDGHUWRVSHFLI\WKHQDWXUH RIWKHGDWDLQWKHERG\RID0,0(HQWLW\²LHLQWKHERG\RIDVLQJOHSDUWPHVVDJHRULQ DSDUWRIDPXOWLSDUWPHVVDJH0,0(PHGLDW\SHVDUHRIWHQUHIHUUHGWRDV Internet media types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top-level type DQG D subtype ZLWK RSWLRQDODGGLWLRQDOSDUDPHWHUV5)&GHILQHVVHYHQWRSOHYHOPHGLDW\SHV)LYHRI WKHPDUHdiscreet data types LHVSHFLI\WKHIRUPDWRIDVLQJOHILOH DQGWKHUHPDLQLQJ WZRDUH composite data types LHVSHFLI\WKHVWUXFWXUHRID0,0(ERG\FRPSRVHGRI PXOWLSOHSDUWV  7KHILYHWRSOHYHOGLVFUHHWPHGLDW\SHVDUH

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x text 7H[WXDO LQIRUPDWLRQ 7KH VXEW\SH text/plain LQGLFDWHV SODLQ WH[W ZLWK QR IRUPDWWLQJDQGLVLQWHQGHGWREHGLVSOD\HGGLUHFWO\ZLWKRXWWKHLQWHUPHGLDWLRQRI DQ\VSHFLDOVRIWZDUHDVLGHIURPVXSSRUWLQJWKHFKDUDFWHUVHWZKLFKLVVSHFLILHG E\DcharsetSDUDPHWHU)RULQVWDQFH Content-type: text/plain; charset=iso-8859-1 LQGLFDWHV D WH[W HQFRGHG LQ WKH H[WHQGHG ,62,(& FKDUDFWHU VHW FRPPRQO\UHIHUUHGDVLatin 1, Western European2WKHUVXEW\SHVDUHXVHGIRU HQULFKHG WH[W DV text/html IRU +70/ ILOHV text/xml IRU ;0/ ILOHV DQG text/IRU&66 &DVFDGLQJ6W\OH6KHHW ILOHV

x image ,PDJHGDWD²LHDQ\LQIRUPDWLRQWKDWUHTXLUHVDJUDSKLFDOGLVSOD\GHYLFHWREH UHQGHUHG5HJLVWHUHGVXEW\SHVLQFOXGHDOOZLGHO\XVHGLPDJHW\SHVVXFKDVgif tiffjpegpng

x audio $XGLRGDWD²LHDQ\LQIRUPDWLRQWKDWUHTXLUHVDXGLRGHYLFHLQIRUPDWLRQVXFKDV D VSHDNHU WR EHU HQGHUHG 7KH PRUH JHQHUDO VXEW\SH LV audio/mpeg,ZKLFK UHIHUVWR03RULQJHQHUDOWR03(*DXGLR2WKHUDXGLRGDWDVXEW\SHVUHIHUWR SURSULHWDU\ IRUPDWV VXFK DV audio/x-ms-wma IRU :LQGRZV 0HGLD $XGLR RU audio/x-wavIRU:$: :DYHIRUPDXGLRIRUPDW 

x video ,QGLFDWHV D WLPHYDU\LQJ SLFWXUH LPDJH SRVVLEO\ ZLWK FRORXU DQG FRRUGLQDWHG VRXQG6WDQGDUG ,$1$UHJLVWHUHG VXEW\SHVDUHvideo/mpegIRU03(*YLGHR ZLWKPXOWLSOH[HGDXGLRvideo/mp4IRU03YLGHRDQGvideo/quicktimeIRU 4XLFNWLPHYLGHR2WKHUVXEW\SHVUHIHUWRSURSULHWDU\IRUPDWVVXFKDVvideo/x- ms-wmv IRU:LQGRZV0HGLD9LGHR

x application 7KH DSSOLFDWLRQ W\SH LV XVHG IRU GDWD WKDW GRQRW  ILW LQ DQ\ RI WKH RWKHU PHGLD W\SHV 7KHVH GDWD QHHG WR EHSU RFHVVHG E\ VRPH DSSOLFDWLRQ SURJUDP WR EH UHQGHUHG7KHUHLVDYHU\ODUJHYDULHW\RIDSSOLFDWLRQVXEW\SHVXSWRQRZ,$1$ KDVUHJLVWHUHGDERXWVHYHQKXQGUHGVXEW\SHVPRVWRIZKLFKDUHYHQGRUVSHFLILF DQGWKHLULGHQWLILHUVEHJLQZLWKµvnd.¶)RULQVWDQFHWKHapplication/vnd.ms- excelVXEW\SHLVXVHGIRU0LFURVRIW([FHOILOHV 'XHWRWKHHQRUPRXVYDULHW\LWLVLPSRVVLEOHWRHQXPHUDWHHYHQDVPDOOVHWRI UHOHYDQWDSSOLFDWLRQVXEW\SHV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

3.6 Media types and dynamic contents $FWXDOO\ WKH VLWXDWLRQ ZLWK PHGLD W\SHV LV PRUH FRPSOH[ VLQFH EHVLGHV WKH ,$1$ UHJLVWHUHGPHGLDW\SHVWKHUHDUHPDQ\VXEW\SHVWKDWDUHZLGHO\XVHGDQGKDQGOHGE\ PRVWHPDLOFOLHQWVEXWQRW \HW UHJLVWHUHGZLWK,$1$ )RULQVWDQFH Content-Type: application/msword; name="sample.doc" Content-Description: sample.doc Content-Disposition: attachment; filename="sample.doc"; size=99328; creation-date="Tue, 05 Aug 2008 10:08:40 GMT"; modification-date="Tue, 05 Aug 2008 10:08:40 GMT" Content-Transfer-Encoding: base64 LQGLFDWHVD0LFURVRIW:RUGDWWDFKPHQWDYHU\IUHTXHQWFDVH0RUHRYHUWKHContent- Type GHILQLWLRQ LV FRPSOHWHG E\ VHYHUDO SDUDPHWHUV ZKLFK VSHFLI\ VRPH REMHFW PHWDGDWD DQG WKH HQFRGLQJ DQG LW LV QRW DOZD\V HYLGHQW ZKHUH WR ILQG WKH UHODWHG GRFXPHQWDWLRQ 'HDOLQJ ZLWK PHGLD W\SHV SRVHV VHYHUDO SUREOHPV ZKHQ PDQDJLQJ DQG SUHVHUYLQJ H PDLODVZHVKDOOGLVFXVVLQPRUHGHWDLOLQVHFWLRQ,QGHHGWKHPHGLDW\SHSDUDGLJP KDVEHHQFRQFHLYHGWRJLYHHPDLOXVHUVIOH[LELOLW\LQDWWDFKLQJILOHVWRHPDLOPHVVDJHV DQGLQGHILQLQJQHZW\SHVDFFRUGLQJWRWKHLUQHHGV(PDLOFOLHQWVDUHQRWH[SHFWHGWR GHDOZLWKDOOPHGLDW\SHVLIWKH\FDQQRWKDQGOHDVSHFLILFGDWDW\SHWKH\MXVWFODVVLI\LW DVµXQNQRZQDSSOLFDWLRQ¶ +RZHYHU LQ WKH ORQJWHUP UHFRUGV PDLQWHQDQFH DQG DUFKLYDO SHUPDQHQW SUHVHUYDWLRQ SURFHVVHV VHHVHFWLRQ RQHPXVWJXDUDQWHHWKHDELOLW\WRUHQGHUDQ\SDUWRIDNHSW RUSUHVHUYHGPHVVDJHDWDQ\WLPHLQWKHIXWXUH2QHVKRXOGWKHUHIRUHPDNHVXUHWKDW x DOOPHGLDW\SHVWKDWDSSHDULQNHSWRUSUHVHUYHGPHVVDJHVDUHUHJLVWHUHGLQWKH UHFRUGNHHSLQJ DQG SHUPDQHQW SUHVHUYDWLRQ V\VWHPV WRJHWKHU ZLWK WKH LQIRUPDWLRQQHFHVVDU\WRKDQGOHWKHPHYHQLIWKH\DUHQRWUHJLVWHUHGZLWK,$1$ x DQ DSSOLFDWLRQ LV DYDLODEOH IRU HDFK PHGLD W\SH UHJLVWHUHG LQ WKH UHFRUGNHHSLQJ DQGRUSHUPDQHQWSUHVHUYDWLRQV\VWHPVRU x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µIUHH]H¶DOOG\QDPLFUHIHUHQFHVDWFDSWXUHWLPH RUDWWKHWLPHRI UHJLVWUDWLRQLQWKHUHFRUGNHHSLQJV\VWHP 

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

4 Security and privacy issues 6HFXULW\GHQRWHVWKHDELOLW\WRPDQDJHXQZDQWHGHYHQWVE\SUHYHQWLQJWKHPRUVHWWLQJ XSPHDVXUHVIRUPLWLJDWLQJFRQVHTXHQWGDPDJHDQGORVV+HQFHHPDLOVHFXULW\VKRXOG DGGUHVVWKHZKROHSURFHVVLQZKLFKHPDLORFFXUVWDNLQJLQWRDFFRXQWWKHHQYLURQPHQW DQGWKHULVNFRQGLWLRQV ,QWKLVVHFWLRQZHZLOORXWOLQHWKHJHQHUDOHPDLOVHFXULW\DVSHFWVLGHQWLI\LQJWKHPDLQ YXOQHUDELOLWLHVDQGWKHW\SLFDOULVNVFHQDULR

4.1 Vulnerabilities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

4.2 Risk scenario 'HVSLWHLWVKLJKGHJUHHRIYXOQHUDELOLW\WKHXVHRIHPDLOLVZLGHVSUHDGDQGPRVWXVHUV DUH QRW FRQFHUQHG DERXW WKH UHODWHG VHFXULW\ SUREOHPV 7KH SHUFHLYHG ULVN RI FRQWHQW GLVFORVXUH RU UHFHLYLQJ IRUJHG PHVVDJHV LV DFWXDOO\ YHU\ ORZ :H SRLQW RXW KRZHYHU WKDWDORZSHUFHSWLRQRIWKHULVNGRHVQRWLPSO\WKDWWKHOHYHORIULVNLVDFWXDOO\ORZ)RU LQVWDQFH ZH PD\ SUHVXPH WKDW LQ PDQ\ HQYLURQPHQWV HPDLO PD\ EH URXWLQHO\

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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²LH WKH SURFHVV RI DFTXLULQJ FRQILGHQWLDO LQIRUPDWLRQ VXFK DV XVHUQDPHV SDVVZRUGVDQGFUHGLWFDUGGDWD²LVDQHZDQGYHU\SRSXODUIRUPRIIUDXGWKDWXVHVH PDLODVDYHKLFOH:HVKDOOQRWGLVFXVVLWVLQFHLWLVQRWUHOHYDQWIRUWKHSXUSRVHRIRXU VWXG\ ,QVWHDGVSDP²LHWKHKXJHXQVROLFLWHGVWUHDPRIHPDLOWKDWIORRGVRXUPDLOER[HV² QHHGV WR EH FDUHIXOO\ DQDO\]HG DV DQ LVVXH LQ HPDLO DUFKLYLQJ VLQFH LW DIIHFWV WKH VHOHFWLRQRIWKHPHVVDJHVWREHDUFKLYHG

4.3 E-mail spam 8QVROLFLWHGPHVVDJHV PRVWO\DGYHUWLVHPHQWV DUHIUHTXHQWLQDOOFRPPXQLFDWLRQPHGLD ,WLVDVRUWRIµQRLVH¶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x SUHVXPHGVSDPPHVVDJHVDUHVLPSO\PDUNHGDVVSDPDQGJURXSHGLQVSHFLDO IROGHUVDQG x SUHVXPHGVSDPPHVVDJHVDUHGLVFDUGHGE\WKHILOWHU 7KH FKRLFH EHWZHHQ WKHVH SROLFHV LV DIIHFWHG E\ WKH UHOHYDQFH RI VRFDOOHG µIDOVH SRVLWLYHV¶²LH PHVVDJHV WKDW DUH WDJJHG E\ WKH ILOWHU DV VSDP EXW DUH QRW²DQG WKH FRQVHTXHQWSRWHQWLDOORVVRIOHJLWLPDWHPHVVDJHV $QWLVSDPILOWHUVGUDVWLFDOO\UHGXFHWKHQXPEHURIPHVVDJHVFRPLQJIURPNQRZQVSDP VRXUFHVRUKDYLQJW\SLFDOVSDPFKDUDFWHULVWLFVKRZHYHUWKHUHDUHRWKHUPHVVDJHVWKDW PD\ EH PHDQLQJOHVV IRU WKH UHFLSLHQW DQG WKH RUJDQL]DWLRQ HJ MRNHV XQVROLFLWHG QHZVVHUYLFHPHVVDJHVHUURUPHVVDJHVHWF WKDWVWLOOJHWWRWKHPDLOER[

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

+HQFH HYHQ ZLWK DQWLVSDP ILOWHULQJ WKHUH DUH DW OHDVW WKUHH FDWHJRULHV RI VXFK HSKHPHUDOPHVVDJHVWKDWWKHUHFRUGVPDQDJHPHQWSROLF\VKRXOGFRQVLGHUGHOHWLQJ x XQUHFRJQL]HGVSDPPHVVDJHVWKDWZHUHQRWEORFNHGE\WKHDQWLVSDPILOWHU x PHVVDJHVPDUNHGDVVSDPE\WKHDQWLVSDPILOWHUDQG x PHVVDJHVWKDWGRQRWKDYHVSDPFKDUDFWHULVWLFVEXWDUHXQVROLFLWHGDQGDUHQRW XVHIXOIRUWKHXVHUDQGRUWKHRUJDQL]DWLRQ )LOWHULQJ RXW DOVR WKHVH PHVVDJHV LV SDUWLFXODUO\ LPSRUWDQW LI WKH HPDLO UHFRUGV PDQDJHPHQWSROLF\FDOOVIRUWKHFDSWXUHRIPRVW DOO PHVVDJHVXVLQJDXWRPDWLFFDSWXUH VFKHPHV 7KLV LV VWLOO WKH PRVW SRSXODU RSWLRQ LQ PRVW FRPPHUFLDO HPDLO ³DUFKLYLQJ´ SURGXFWVDQGWKHSROLF\DGRSWHGE\PDQ\ODUJHRUJDQL]DWLRQV

4.4 Message authenticity $FFRUGLQJWRWKH,QWHU3$5(6*ORVVDU\DXWKHQWLFLW\LV³WKHTXDOLW\RIEHLQJDXWKHQWLFRU HQWLWOHG WR DFFHSWDQFH $V EHLQJ DXWKRULWDWLYH RU GXO\ DXWKRUL]HG DV EHLQJ ZKDW LW SURIHVVHV LQ RULJLQ RU DXWKRUVKLS DV EHLQJ JHQXLQH´ )RU HPDLO PHVVDJHV WKHVH FKDUDFWHULVWLFVVKRXOGUHIHUWRWKHRULJLQDOPHVVDJH²LHWKHRQHVHQWE\WKHVHQGHU¶V VHUYHU²DQGHQFRPSDVVERWKWKHPHVVDJHDQGLWVPHWDGDWD IRULQVWDQFHWKHVXEMHFW WKHVHQGHUWKHGDWHHWF 7RPDNHWKHSRLQWOHWXVORRNDWVRPHGHILQLWLRQVLQWKH5)& HPDLOVWDQGDUG 7KH Date KHDGHU ³VSHFLILHV WKH GDWH DQG WLPH DW ZKLFK WKH FUHDWRU RI WKH PHVVDJH LQGLFDWHG WKDW WKH PHVVDJH ZDV FRPSOHWH DQGU HDG\ WR HQWHU WKH PDLO GHOLYHU\´ 1DPHO\ LW LV LQIRUPDWLRQ WKDW WKH VHQGHU PD\ VHW XS DXWRQRPRXVO\ XVXDOO\ WKH PDLO FOLHQWVHWVXSWKHDateILHOGWRWKHFXUUHQWFOLHQWV\VWHPWLPH  7KHFromKHDGHUVSHFLILHV³WKHPDLOER[ HV RIWKHSHUVRQ V RUV\VWHP V UHVSRQVLEOH IRU WKH ZULWLQJ RI WKH PHVVDJH´ 7KH VWDQGDUG SURYLGHV DOVR IRU WKH FDVH ZKHUH WKH PDLOER[ RI WKH DXWKRU LV GLIIHUHQW IURP WKH RQHRI  WKH SHUVRQ ZKR DFWXDOO\ VHQGV WKH PHVVDJH ³LIDVHFUHWDU\ZHUHWRVHQGDPHVVDJHIRUDQRWKHUSHUVRQ´ LQWKLVFDVH WKH ODWWHU PDLOER[ VKRXOG EH VSHFLILHG LQ WKH Sender KHDGHU 7KHUHIRUH DFFRUGLQJ WR WKHVWDQGDUGWKHFOLHQWVKRXOGVHWXSWKHSenderKHDGHUZKLOHWKHXVHUVKRXOGVHWXS WKHFromKHDGHU &RPPHUFLDOSURGXFWVLPSOHPHQWPDLOVWDQGDUGVZLWKVOLJKWGLIIHUHQFHVZLWKWKHDLPRI VLPSOLI\LQJWKHXVHULQWHUIDFH$W\SLFDODSSURDFKLVWKHIROORZLQJ x HYHU\KHDGHUILHOGWKDWFDQEHVHWXSDXWRPDWLFDOO\ DataFromReply-to«  LVXVXDOO\VHWXSE\WKHFOLHQWDQG x XVHU RSWLRQV DUH SURYLGHG IRU PRGLI\LQJ GHIDXOW YDOXHV DQGS RVVLEO\ WR VHW XS VRPHKHDGHUYDOXHV

,QWHU3$5(67HUPLQRORJ\'DWDEDVHKWWSZZZLQWHUSDUHVRUJLSLSBWHUPLQRORJ\BGEFIP 35HVQLFN HG ,QWHUQHW0HVVDJH)RUPDW5)&$SULOS$YDLODEOHDWKWWSWRROVLHWIRUJKWPOUIF ,ELGHPS ,ELGHP

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$VDFRQVHTXHQFHZHWHQGWRFRQVLGHULQIRUPDWLRQLQPDLOKHDGHUOLQHVDVV\VWHPGDWD DQGWKHUHIRUHDXWKHQWLFLQVRIDUDVWKHPDLOV\VWHPLVUHOLDEOH,QVWHDGWKHKHDGHUGDWD VKRXOG EH FRQVLGHUHG XVHU GDWD OLNH WKH PHVVDJH WH[W DQGW KHUHIRUH FRQVLGHUHG DXWKHQWLF RQO\ WR WKH H[WHQW WKDW ZH FDQ UHO\ RQ WKH VHQGHU DQGRU RQ WKH FRQWUROV H[HUFLVHGRQWKHSURFHVVRIUHFRUGVFUHDWLRQE\WKHFUHDWRU )RULQVWDQFHLWLVHDV\WRIRUJHDPHVVDJHDQGPDNHLWORRNDVLILWZHUHFRPLQJIURP DQRWKHU SHUVRQ VLPSO\ E\ VHWWLQJ XSD QRWKHU PDLOER[ QDPH WKURXJK WKH FOLHQW FRQILJXUDWLRQRSWLRQV0RUHRYHULQWKHFDVHRIIRUZDUGHGHPDLOWKHWH[WRIWKHRULJLQDO PDLOPD\EHHDVLO\PRGLILHGE\WKHQHZVHQGHUFRPSURPLVLQJWKHIRUZDUGHGPHVVDJH¶V DXWKHQWLFLW\ 7KXVDQHPDLOPHVVDJHFDQEHFRQVLGHUHGDXWKHQWLFLIZHFDQDVVXPHWKDWWKHVHQGHU VKRZQLQWKHPHVVDJHWH[WDQGDVVRFLDWHGWRWKHPDLOER[LQGLFDWHGLQWKH FromKHDGHU FRUUHVSRQGVWRWKHDFWXDOVHQGHU,QWKHFDVHRIDIRUZDUGHGPHVVDJHZHFDQFRQVLGHU WKHRULJLQDOPHVVDJHDXWKHQWLFLIWKLVFRQGLWLRQLVVDWLVILHGIRUDOOPHVVDJHV RULJLQDODQG IRUZDUGHG  DQG ZH WUXVW WKH IRUZDUGHU V  2I FRXUVH WKHVH DUH QHFHVVDU\ EXW QRW VXIILFLHQWFRQGLWLRQV 5HJDUGOHVV WKHVH FRQGLWLRQV FDQQRW EH HDVLO\ DVVHVVHG $ PLVOHDGLQJ VHWXS RI WKH FromKHDGHUDQGData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

4.5 Certified e-mail &HUWLILHG HPDLO 6HUYLFH PEC, Posta Elettronica certificata  LV DQ HPDLO VHUYLFH FRPSO\LQJZLWKVWULFWUHJXODWLRQVLVVXHGE\WKH,WDOLDQJRYHUQPHQWZKLFKHQDEOHVHPDLO FRPPXQLFDWLRQWKDWLVJUDQWHGE\ODZWKHVDPHYDOXHRIUHJLVWHUHGPDLO7KHVHUYLFHLV VXSSOLHGE\SURYLGHUVKDYLQJSURYHGWHFKQLFDODQGOLDELOLW\FKDUDFWHULVWLFVDFFUHGLWHGE\ DQDWLRQDOERG\

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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µILQJHUSULQW¶²LHDGLJHVWRIWKHFRQWHQWRIWKHPHVVDJHVLJQHG E\WKHFHUWLILHGSURYLGHU²WKDWFDQEHXVHGWRDYRLGUHSXGLDWLRQRIWKHPHVVDJHFRQWHQW E\WKHUHFLSLHQW 7KHUHIRUHFHUWLILHGHPDLOWKDQNVWRWKHSUHVHQFHRIDWUXVWHGWKLUGSDUW\FHUWLILHVWKH DXWKHQWLFLW\ DQGW KH LQWHJULW\ RI WKH PHVVDJH DQGSU RYLGHV IRUPDO HYLGHQFH WKDW WKH PHVVDJHKDVEHHQGHOLYHUHG

4.6 Privacy issues $V VDLG EHIRUH SHUVRQDO GDWD LQFOXGHG LQ DQ ,QWHUQHW HPDLO PHVVDJH PD\ EH HDVLO\ GLVFORVHGWKHUHE\H[SRVLQJXVHUVWRSRWHQWLDOSUREOHPV HJLGHQWLW\WKHIW 7KLVLVVXH LVRXWRIWKHVFRSHRIRXUVWXG\EXWZHZRXOGOLNHDQ\ZD\WRSRLQWRXWWKDWLWLVDJRRG SROLF\ HLWKHU WR DYRLG WKH H[FKDQJH RI SHUVRQDO DQGRU VHQVLWLYH GDWD WKURXJK WKH ,QWHUQHWRUWRSURWHFWVXFKGDWDE\PHDQVRIHQFU\SWLRQ ,Q VSLWH RI WKH DFWXDO QDWXUH RI WKH WKUHDWV SULYDF\ ZRUULHV FRQFHQWUDWH PRUH RQ WKH RIILFHHQYLURQPHQWWKDQRQWKH,QWHUQHW7KHPDLQFRQFHUQLVLQGHHGDERXWXQDXWKRUL]HG PDLOER[ DFFHVV UDWKHU WKDQ DERXW GLVFORVXUH RI PHVVDJH FRQWHQW GXULQJ LWV WUDQVPLVVLRQ7KLVFRQFHUQGHULYHVIURPPDNLQJDQLQDSSURSULDWHSDUDOOHOZLWKWUDGLWLRQDO PDLOZKLFKLVSURWHFWHGGXULQJWKHGHOLYHU\EXWPD\EHYLRODWHGDWLWVGHVWLQDWLRQZKHQ KDQGOHGE\WKHZURQJSHUVRQ ,QIDFWLQFRXQWULHVZLWKFRQVWLWXWLRQDOJXDUDQWHHRIWKHVHFUHF\RIFRUUHVSRQGHQFHH PDLO LV HTXDWHG WR WUDGLWLRQDO PDLO DQG RQO\ WKH RZQHU RI WKH PDLOER[ LV DOORZHG WR DFFHVVLWHYHQLQDQRIILFHHQYLURQPHQW,QWKHVHFRXQWULHVSULYDF\DXWKRULWLHVSURWHFW HPDLO FRQILGHQWLDOLW\ DQG JUDQW WKH DGPLQLVWUDWRUV WKH ULJKW WR DFFHVV XVHUV HPDLO PHVVDJHRQO\LQSDUWLFXODUVLWXDWLRQVDQGZLWKGXHFDUH 7KHVHUXOHVZKLFKYDU\IURPFRXQWU\WRFRXQWU\PD\KDYHDVWURQJLPSDFWRQWKHH PDLO UHFRUGNHHSLQJ SROLF\ )RU LQVWDQFH LQ ,WDO\ FRPSO\LQJ ZLWK SULYDF\ UHJXODWLRQV SUHYDLOVRQWKHQHHGWRPDLQWDLQLQIRUPDWLRQWKDWKDVDSRWHQWLDOOHJDOUHOHYDQFHRQWKH FRQWUDU\LQWKH8QLWHG6WDWHVVWULFWUHJXODWLRQVFDOOIRUPDLQWDLQLQJDOOOHJDOO\UHOHYDQW LQIRUPDWLRQUHJDUGOHVVRISULYDF\LVVXHV ,QSULQFLSOHHPSOR\HHVVKRXOGXVHFRPSDQ\PDLOER[HVRQO\IRUEXVLQHVVSXUSRVHVDQG XVHDSHUVRQDOPDLOER[IRUWKHLUSULYDWHPHVVDJHV,QSUDFWLFHKRZHYHULWVRPHWLPHV FDQ EH YHU\ GLIILFXOW WR GLVWLQJXLVK EHWZHHQ SHUVRQDO DQG EXVLQHVV FRPPXQLFDWLRQ WKHUHIRUHWKHXVHRILQVWLWXWLRQDOPDLOER[HVLVRIWHQFDUHOHVV,QDQ\FDVHWKHUHPD\EH EXVLQHVV PHVVDJHV WKDW VLQFH WKH\ DUH PHDQW WR EH UHDG E\ D VSHFLILF SHUVRQ PD\ DOVRFRQWDLQSHUVRQDOLQIRUPDWLRQWKDWVKRXOGQRWEHGLVFORVHG 6RPH RUJDQL]DWLRQV XVH D SUDFWLFDO DSSURDFK WR FRSH ZLWK SULYDF\ UHTXLUHPHQWV DQG VROYH WKH SUREOHP E\ DVNLQJ WKH XVHUV WR H[SOLFLWO\ JUDQW WKH RUJDQL]DWLRQ WKH ULJKW WR

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

DFFHVVWKHLUFRPSDQ\PDLOER[HVRUE\SURYLGLQJXVHUVZLWKDZD\WRWDJWKHLUPHVVDJHV DV SXEOLF RU SULYDWH WKHUHE\ DOORZLQJ IRU D VHOHFWLYH UHFRUGNHHSLQJ SROLF\ +RZHYHU LQ VRPHFRXQWULHVWKHVHSURFHGXUHVPD\QRWEHDFFHSWHGE\SULYDF\DXWKRULWLHV

5 Managing and preserving e-mail ,QWKLVVHFWLRQZHZLOOGLVFXVVWKHNH\FRPSRQHQWVRIWKHHPDLOUHFRUGVPDQDJHPHQW DQGSHUPDQHQWSUHVHUYDWLRQSURFHVVHV,QGRLQJVRZHZLOOUHIHUWRUDWKHUFRPSOHWHDQG HODERUDWHVFKHPHVWKDWDUHGHYLVHGDQGDUHUHDOLVWLFDOO\VXLWDEOHPDLQO\IRUPHGLXPRU ODUJH RUJDQL]DWLRQV 2I FRXUVH HPDLO PDLQWHQDQFH LV DQ LPSRUWDQW LVVXH DOVR LQ WKH VPDOORIILFHDQGKRPHHQYLURQPHQWKRZHYHUZHVKDOOQRWGLVFXVVKHUHWKLVFDVHVLQFH WKHUHTXLUHPHQWVDUHGLIIHUHQWDQGFRQVLGHUDEO\OHVVFRPSOH[DQGOHVVGHPDQGLQJDQG VLPSOHUVROXWLRQVVKRXOGEHHQYLVDJHG

5.1 Capturing e-mails &DSWXULQJ HPDLOV LV WKH ILUVW DQG SHUKDSV WKH PRVW GHOLFDWH SKDVH LQ WKH HPDLO PDLQWHQDQFHSURFHVV,WFDQEDVLFDOO\EHSHUIRUPHGLQWZRZD\V x server-based capture LQFRPLQJ DQGRXW JRLQJ PHVVDJHV DUH V\VWHPDWLFDOO\ FDSWXUHG ZKHQ WKH\ JHW WR WKH HPDLO VHUYHU SRWHQWLDOO\ DIWHU EHLQJ ILOWHUHG DFFRUGLQJWRSUHGHILQHGUXOHVDQG x client-based capture LQFRPLQJ DQG RXWJRLQJ PHVVDJHV DUH FDSWXUHG ZLWK WKH FRRSHUDWLRQDQGFRQVHQVXVRIWKHXVHUZKRLQWHUDFWVWKURXJKWKHHPDLOFOLHQW 6HUYHUEDVHG FDSWXUH LV LQ SULQFLSOH WKH PRVW VLPSOH DQG GHVLUDEOH RSWLRQ VLQFH LW DOORZVWKHVFUHHQLQJRIDOOLQERXQGDQGRXWERXQGWUDIILFDQGFDQDXWRPDWLFDOO\SHUIRUP WKH ILOWHULQJ RI WKH PHVVDJHV WR EHFD SWXUHG DFFRUGLQJ WR XQLIRUP UXOHV VSHFLILFDOO\ GHYLVHG WR FRPSO\ ZLWK D FUHDWRU¶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¶VSULYDF\ $VLPSOHVROXWLRQWRWKLVSUREOHPDGRSWHGE\PDQ\RUJDQL]DWLRQVLVWRLQIRUPXVHUVWKDW DOOPHVVDJHVJRLQJWKURXJKWKHLUPDLOER[HVWKDWFRPSO\ZLWKFHUWDLQILOWHULQJUXOHVDUH JRLQJ WR EH FDSWXUHG DQGW R DVN WKHP WR XVH µSHUVRQDO¶ PDLOER[HV RXWVLGH RI WKH FDSWXUHPHFKDQLVPIRUWKHLUSULYDWHHPDLOV ,QRWKHUFDVHVDVNLQJWKHXVHU¶VFRQVHQVXVIRUHYHU\VSHFLILFPHVVDJHFDSWXUHPD\EH QHFHVVDU\DQGDFOLHQWEDVHGPHVVDJHFDSWXUHVFKHPHZLOOKDYHWREHLPSOHPHQWHG

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

+RZHYHU SXUH FOLHQWEDVHG FDSWXUH KDV VHYHUDO GUDZEDFNV VLQFH PHVVDJH ILOWHULQJ UHOLHVRQWKHGHFLVLRQRILQGLYLGXDOXVHUVZKRPD\IDLOWRDSSO\FRUUHFWO\DQGXQLIRUPO\ WKHRUJDQL]DWLRQ¶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µPL[HGDSSURDFK¶WKDWFDSLWDOL]HVRQWKHXQLTXHDGYDQWDJHVRIERWKVHUYHUEDVHGDQG FOLHQWEDVHGFDSWXUHVFKHPHVLVWKHIROORZLQJ x DILUVWOHYHOPHVVDJHILOWHULQJLVSHUIRUPHGDWWKHVHUYHUOHYHOZHHGLQJRXWFHUWDLQ HSKHPHUDODQGQRQUHOHYDQWPHVVDJHV x FDQGLGDWH PHVVDJHV DUH ³SURSRVHG´ WR WKH XVHU XVLQJ DXWRPDWHG ILOWHULQJ DQG UHFRUGVFODVVLILFDWLRQURXWLQHVEXLOWLQWRWKHV\VWHPDQGWKHXVHULVSURPSWHGE\ WKHV\VWHPIRUFRQVHQVXVRQWKHFODVVLILFDWLRQVDSSOLHGE\WKHV\VWHPDQGRURQ ZKHWKHU WKH PHVVDJHV VKRXOG EHGHFODU HG DV UHFRUGV DQG EH ILOHG WR WKH UHFRUGNHHSLQJV\VWHPDQG x LQGLYLGXDOXVHUVUHWDLQWKHFDSDELOLW\RILQGHSHQGHQWO\FDSWXULQJDQGRUGHFODULQJ DVDWUDQVLWRU\RUFRUSRUDWHUHFRUGDQ\PHVVDJHWKDWWKH\VHQGRUUHFHLYH 5HJDUGOHVV RI WKH ILOWHULQJ VFKHPH DGRSWHG WR GHFLGH LI DP HVVDJH LV JRLQJ WR EH FDSWXUHGDQGGHFODUHGDU HFRUGWKHXVHUPD\DQGVKDOOSUREDEO\EHLQYROYHGLQWKH FODVVLILFDWLRQRIWKHUHFRUGVDQGLQPDQXDOO\HQWHULQJDGGLWLRQDOPHWDGDWD

5.2 Recordkeeping and preservation formats $V IRU DQ\ GLJLWDO UHFRUG WKH RQJRLQJ PDLQWHQDQFH DQG SUHVHUYDWLRQ RI DQH PDLO PHVVDJHPXVWHQVXUHWZRFRQGLWLRQV x WKHRULJLQDOVWUXFWXUHDQGDOOWKHLQIRUPDWLRQFRQWDLQHGLQWKHPHVVDJHPXVWEH UHWDLQHGDQG x IXWXUHXVHUVPXVWEHDEOHWRDFFHVVWKHLQIRUPDWLRQLQWKHPHVVDJHLQLWVRULJLQDO GRFXPHQWDU\IRUP²LHPDQLIHVWHGWRIXWXUHXVHUVLQWKHVDPHZD\WKDWLWZDV PDQLIHVWHGWRWKHRULJLQDOXVHUV VHQGHUDQGUHFLSLHQWV  7KLVPHDQVWKDWQRWRQO\WKHFRQWHQWEXWDOVRWKHVWUXFWXUHDQGWKHDSSHDUDQFHRIWKH PHVVDJHPXVWEHSUHVHUYHG

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$VZHKDYHGLVFXVVHGLQVHFWLRQWKHVWDQGDUGHPDLOIRUPDWLVWKHRQHGHILQHGE\ 5)&  ZKLFK LV OLPLWHG WR PHVVDJHV LQ SODLQ $6&,,, ZLWK WKH VXEVHTXHQW 0,0( H[WHQVLRQ 5)&5)&5)&5)&5)& WRVXSSRUWWH[WDQG KHDGHUVLQFKDUDFWHUVHWVRWKHUWKDQSODLQ$6&,,PHVVDJHVVWUXFWXUHGLQPXOWLSOHSDUWV DQGQRQWH[WDWWDFKPHQWV $VZHDOUHDG\SRLQWHGRXWDOWKRXJKQRW\HWRIILFLDO,QWHUQHWVWDQGDUGV5)&DQG 0,0(ZKLFKDUHFXUUHQWO\draft standards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x short-term maintenanceZKHQPHVVDJHVPXVWEHPDLQWDLQHGDQGDFFHVVHGIRU DVKRUWSHULRGRIWLPHW\SLFDOO\XSWRWHQ\HDUVDQG x long-term maintenanceZKHQPHVVDJHVPXVWEHPDLQWDLQHGDQGDFFHVVHGIRUD ORQJSHULRGRIWLPHW\SLFDOO\PRUHWKDWWHQ\HDUV $W WKH PRPHQW WKH ODUJH PDMRULW\ RI RUJDQL]DWLRQV DUH PRVWO\ LQWHUHVWHG LQ WKH ILUVW VFHQDULR SULPDULO\ EHFDXVH RI WKH QHHG WR PHHW UHJXODWRU\ FRPSOLDQFH UHTXLUHPHQWV EXWDOVREHFDXVHPRVWFRPPHUFLDO³HPDLODUFKLYLQJ´SURGXFWVZKLFKZHVKDOOGLVFXVV LQPRUHGHWDLOLQVHFWLRQDUHGHVLJQHGWRPHHWWKHVHVKRUWWHUPPDLQWHQDQFHQHHGV :HVKDOOWKHUHIRUHGLVFXVVLQWKLVVHFWLRQRQO\WKHVKRUWWHUPVFHQDULR7KHORQJWHUP PDLQWHQDQFHVFHQDULRZKLFKGHVHUYHVDGLIIHUHQWDQGPRUHFRPSOH[DSSURDFKZLOOEH GLVFXVVHGLQVHFWLRQ

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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µUHFHQWO\¶UHJLVWHUHGPHVVDJHVGLUHFWO\WKURXJKWKH HPDLOFOLHQWLQWHUIDFH :KDWPXVWEHGRQHWRHQVXUHWKLVLVVLPSO\WRPDNHVXUHWKDWWKHVRIWZDUHDSSOLFDWLRQV IRU 0,0( PHGLD W\SHV LQ DOO FXUUHQWO\ NHSW PHVVDJHV DUH PDLQWDLQHG DV ZHOO DV WKH KDUGZDUHVRIWZDUHSODWIRUPQHHGHGWRUXQWKHP 0RUHRYHUWRFRQYHQLHQWO\VXSSRUWSUHVHQWDWLRQDQGVHDUFKDQGGLVFRYHU\DFWLRQV VHH VHFW ZKLFKPD\LQFOXGHVHDUFKLQJE\FRQWHQWLWFDQDOVREHXVHIXOWRVWRUHFRSLHV RI µSULQWDEOH¶ DWWDFKPHQWV FRQYHUWHG LQ VWDQGDUG VHDUFKDEOH SULQWLPDJH IRUPDW HJ 3') DVVHSDUDWHUHFRUGVOLQNHGWRWKHPHVVDJH 6XPPDUL]LQJLQWKHVKRUWWHUPPDLQWHQDQFHVFHQDULR x PHVVDJHV DUH PDLQWDLQHG LQ 5)& 0,0( IRUPDW WR KHOS HQVXUHWKHLU FRQWLQXHGDXWKHQWLFLW\ x DWWDFKPHQWV DUH H[WUDFWHG DV ELQDU\ ILOHV DQGVW RUHG LQ WKH UHFRUGNHHSLQJ V\VWHPDVVHSDUDWHUHFRUGVOLQNHGWRWKHPDLQUHFRUG x µSULQWDEOH¶DWWDFKPHQWVDUHDOVRRSWLRQDOO\FRQYHUWHGWRDSULQWLPDJHIRUPDWDQG NHSW DV VHSDUDWH UHFRUGV OLQNHG WR WKH PDLQ UHFRUG WR VXSSRUW VHDUFK DQG GLVFRYHU\DFWLRQV x DGDWDEDVHRI0,0(PHGLDW\SHVLQDOOFXUUHQWO\PDLQWDLQHGPHVVDJHVDQGWKH LQGLFDWLRQRIDOOFRUUHVSRQGLQJVRIWZDUHDSSOLFDWLRQVDUHPDLQWDLQHGDQG x DFWLRQV DUH WDNHQ WR JXDUDQWHH WKH DYDLODELOLW\ ZLWKLQ WKH RUJDQL]DWLRQ RI DOO WKH VRIWZDUH DSSOLFDWLRQV OLVWHG LQ WKH GDWDEDVH DQG RI WKH KDUGZDUHVRIWZDUH SODWIRUPVQHHGHGWRUXQWKHP

5.3 Message classification and metadata extraction 7KHUHDUHEDVLFDOO\WZRRSWLRQVLQLPSOHPHQWLQJPHVVDJHFODVVLILFDWLRQZKLFKPD\EH FRQVLGHUHGLQGHSHQGHQWO\RULQFRPELQDWLRQ x PHVVDJHVDUHFODVVLILHGE\PHDQVRIDXWRPDWLFFODVVLILFDWLRQWRROVDQGRU x XVHUV LH VHQGHUV RU UHFLSLHQWV RI PHVVDJHV  DUH UHTXHVWHG WR SURYLGH D FODVVLILFDWLRQ FRGH EDVHG RQDQ  HVWDEOLVKHG FODVVLILFDWLRQ VFKHPH RU QDPLQJ FRQYHQWLRQ

$VLVVXJJHVWHGLQVHFWLRQIRUORQJWHUPPDLQWHQDQFHDQGRUSUHVHUYDWLRQVFHQDULRVDWWDFKPHQWVWKDWDUHQRWµSULQWDEOH¶ HJ DXGLRYLGHRHWF VKRXOGEHFRQYHUWHGWRWKHPRVWVXLWDEOHVXSSRUWHGVWDQGDUGL]HGILOHIRUPDWPDLQWDLQHGDVVHSDUDWHUHFRUGVDQG OLQNHGWRWKHPDLQUHFRUG:KHWKHUWKLVVDPHDSSURDFKLVQHFHVVDU\RUDSSURSULDWHIRUWKHVHW\SHVRIDWWDFKPHQWVXQGHUWKHVKRUW WHUPUHFRUGNHHSLQJVFHQDULRZLOOYDU\GHSHQGLQJRQWKHUHTXLUHPHQWVRIWKHXVHUVDQGUHVRXUFHVRIWKHRUJDQL]DWLRQ

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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message metadata DQG ZH VKDOO UHIHU LQ GRLQJWKDWWRWKHVKRUWWHUPPDLQWHQDQFHVFHQDULRGLVFXVVHGLQVHFW $VZHKDYHVHHQLQVHFWLRQYDOXDEOHLQIRUPDWLRQDERXWPHVVDJHRULJLQGHVWLQDWLRQ DQG GHOLYHU\ LV FRQWDLQHG LQ WKH PHVVDJH KHDGHU +HQFH FHUWDLQ PHWDGDWD FDQ EH GLUHFWO\ H[WUDFWHG IURP WKH KHDGHU OLQHV 0RUH SUHFLVHO\ DOO WKH LWHPV LQ 7DEOH  LQ VHFWLRQ  WKDW DUH PDUNHG ZLWK $ IRU always  DUH DOZD\V SUHVHQW LQ WKH KHDGHU KHQFHWKHVHFDQEHWDNHQDVmandatory metadata7KHUHPDLQLQJLWHPVPDUNHGZLWK) IRUfrequent RUZLWK2 IRUoptional FDQEHWDNHQDVoptional metadata ,QDGGLWLRQWRWKHVHIXUWKHUPHWDGDWDDUHRIWHQDGGHGWRNHHSWUDFNRIWKHGHOLYHU\RI RXWJRLQJ PHVVDJHV 7KHVH FDQ EH DXWRPDWLFDOO\ H[WUDFWHG IURP GHOLYHU\ UHSRUWV WKDW FDQEHOLQNHGWRWKHVHPHVVDJHVE\PHDQVRIWKHLUPHVVDJHLGHQWLILHUV 0HWDGDWD VKRXOG EH SURYLGHG DOVR IRU HDFK RI WKH PHVVDJH DWWDFKPHQWV LI DQ\ DQG VKRXOGVSHFLI\ x WKH0,0(PHGLDW\SH x WKHFRPSXWHUILOHQDPH x WKHDSSOLFDWLRQWKDWVKRXOGEHXVHGWRRSHQWKHFRPSXWHUILOHDQG x WKH OLQN WR WKH DWWDFKPHQW LI LW LV VWRUHG LQ WKH UHFRUGNHHSLQJ V\VWHP DV D VHSDUDWHUHFRUG

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

)XUWKHU PDQGDWRU\ PHWDGDWD DUH XVHG WR LPSURYH WKH VSHFLILFDWLRQ RI WKH PHVVDJH VHQGHUDQGUHFLSLHQW V E\UHFRUGLQJWKHLUµLQWHOOLJHQWQDPHV¶ LHWKHµUHDOOLIH¶QDPHV DVVRFLDWHGZLWKWKHLUHPDLODGGUHVVHV ,QWHOOLJHQWQDPHVGRQRWQHFHVVDULO\H[LVWDQG DUH QRW QHFHVVDULO\ LQ WKH PHVVDJH KHDGHU (YHQWXDOO\ WKLV LQIRUPDWLRQ PD\ EH H[WUDFWHGGXULQJWKHPHVVDJHFDSWXUHIURPWKHDGGUHVVERRNRIWKHXVHUZKRLVWKH VHQGHURUWKHUHFLSLHQWRIWKHPHVVDJH $QRWKHULPSRUWDQWLVVXHLVWKHXVHRIPDLOLQJOLVWVLQWKHUHFLSLHQWILHOGV,QWKHFDVHRID VHUYHUPDQDJHGOLVWWKHDGGUHVVILHOGLQWKHKHDGHURQO\FRQWDLQVWKHQDPHRIWKHOLVW DQG WKLV LV RIWHQ GRQH RQSXU SRVH VR WKDW HDFK UHFLSLHQW LV QRW DEOH WR VHH LQ KLVKHU FRS\RIWKHPHVVDJHWKHDGGUHVVHVDQGWKHQDPHVRIWKHRWKHUUHFLSLHQWV 2QWKHVHQGHUVLGHWKLVSUREOHPFDQEHKDQGOHGDWFDSWXUHWLPHHLWKHUE\DFFHVVLQJ WKHOLVWRQWKHVHUYHUDQGJHQHUDWLQJDVHSDUDWHPHVVDJHKHDGHUIRUHYHU\UHFLSLHQWLQ WKH OLVW RU E\ PDLQWDLQLQJ WKH OLVWV DV VHSDUDWH UHFRUGV DQG UHIHUULQJ WR WKHP LQ WKH PHVVDJHKHDGHU,QWKHODWWHUFDVHDVWKHFRQWHQWRIPDLOLQJOLVWVHYROYHVDFRPSOHWH VHWRIHDFKOLVWYHUVLRQVKRXOGEHPDLQWDLQHG 0DQGDWRU\DQGRSWLRQDOmessageKHDGHUVDUHVKRZQLQ7DEOH7KHVHDVZHDOUHDG\ SRLQWHGRXWDUHRQO\KHDGHUVIHHGLQJPHWDGDWDVSHFLILFWRWKHSHFXOLDUQDWXUHRIHPDLO PHVVDJHVIRURWKHUPHWDGDWDRQHVKRXOGUHIHUWRWKHJHQHUDOOLWHUDWXUH VHHDSSHQGL[ $  $ UDWKHU ODUJH VHW LV SUHVHQWHG LQ WKH WDEOH DQG DQ DVWHULVN LQ WKH ILUVW FROXPQ LV XVHGWRVSHFLI\ZKDWVKRXOGEHFRQVLGHUHGDVDFRPSOHWHPLQLPDOVHW

5.4 Checking and maintaining authenticity $VZHKDYHVHHQLQVHFWLRQDVVHVVLQJWKHDXWKHQWLFLW\RIDQHPDLOPHVVDJHLVD QRQWULYLDOWDVN%HFDXVHWKHHPDLOLQIUDVWUXFWXUHDQGFKLHIO\WKH,QWHUQHWWKURXJKZKLFK PHVVDJHV DUH WUDQVPLWWHG DUH ODUJHO\ XQSURWHFWHG HPDLO UHFRUGV DUH SRWHQWLDOO\ H[SRVHGWRXQDXWKRUL]HGPDQLSXODWLRQ 7KHSRWHQWLDOIRUXQDXWKRUL]HGPDQLSXODWLRQLVRIFRXUVHDOVRDFRQFHUQIRUWUDGLWLRQDO SDSHUUHFRUGV,QJHQHUDOKRZHYHUPRYLQJIURPWKHWUDGLWLRQDOSDSHU HQYLURQPHQWWR WKH GLJLWDO HQYLURQPHQW GRHV QRW LPSURYH WKH VLWXDWLRQ—DQG LQ IDFW H[DFHUEDWHV WKH VLWXDWLRQ LQ PRVW FDVHV—DQG GRHV QRW WKHUHIRUH GHFUHDVH WKH QHHG WR FDUH DERXW UHFRUGDXWKHQWLFLW\ ,QFRQWH[WVFKDUDFWHUL]HGE\KLJKULVNRIIRUJHU\ZKHQFODVVLI\LQJDQGUHJLVWHULQJDQH PDLOPHVVDJHLQWKHUHFRUGNHHSLQJV\VWHPZHFDQFROOHFWDQGDWWDFKDVPHWDGDWDWR WKH UHFRUG DOO WKH LQIRUPDWLRQ WKDW KDV EHHQ XVHG WR FKHFN LWV LGHQWLW\ DQG LWV LQWHJULW\

,GHQWLW\LVGHILQHGE\,QWHU3$5(6DV³7KHZKROHRIWKHFKDUDFWHULVWLFVRIDGRFXPHQWRUDUHFRUGWKDWXQLTXHO\LGHQWLI\LWDQG GLVWLQJXLVKLWIURPDQ\RWKHUGRFXPHQWRUUHFRUG:LWKLQWHJULW\DFRPSRQHQWRIDXWKHQWLFLW\´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effective LHFDSDEOHRIUHDFKLQJWKHFRQVHTXHQFHVRUSURGXFLQJWKHHIIHFWVIRU ZKLFKLWLVLQWHQGHG 

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Table 2.0HVVDJHPHWDGDWD

NAME DESCRIPTION SOURCE OBLIGATION OCCURS

 0HVVDJH,' Unique message identifier Message-IDKHDGHU RSWLRQDO RQFH * 0HVVDJHW\SH Outbound or inbound message 6073VHUYHU PDQGDWRU\ RQFH

 0HVVDJHUHIHUHQFH ID of message referenced ReferencesKHDGHU RSWLRQDO RQFH  5HSO\WR ID of the replied message  In-Reply-ToKHDGHU RSWLRQDO RQFH  'DWHVHQW Date and time the message was sent DateKHDGHU PDQGDWRU\ RQFH 'DWHDQGWLPHLQODVW PDQGDWRU\ Date and time the message was  'DWHUHFHLYHG ReceivedKHDGHUOLQHLQ IRULQERXQG RQFH received (for inbound messages) PHVVDJHKHDGHU PHVVDJHV Date and time the message was  'DWHFDSWXUHG (PDLODUFKLYLQJV\VWHP PDQGDWRU\ RQFH captured  6XEMHFW Subject of the message SubjectKHDGHUXVHU RSWLRQDO RQFH  'HVFULSWLRQ Description of the content  CommentKHDGHUXVHU RSWLRQDO RQFH .H\ZRUG Keywords KeywordKHDGHUXVHU RSWLRQDO PDQ\  $XWKRU Message author FromKHDGHU PDQGDWRU\ RQFH  6HQGHU Message sender (on behalf of author) SenderKHDGHU RSWLRQDO RQFH  $XWKRUQDPH Intelligent name of author  FromKHDGHU RSWLRQDO PDQ\  6HQGHUQDPH Intelligent name of sender SenderKHDGHU RSWLRQDO PDQ\ OrganizationKHDGHU  2UJDQL]DWLRQ Organization of the author/sender  RSWLRQDO RQFH XVHU  5HVHQGHU Sender forwarding the message Resent-FromKHDGHU RSWLRQDO RQFH  5HFLSLHQWDGGUHVV E-mail address of recipients  ToKHDGHU PDQGDWRU\ PDQ\  FF5HFLSLHQWDGGUHVV E-mail address of cc recipients  ccKHDGHU RSWLRQDO PDQ\ EFF5HFLSLHQW  E-mail address of bcc recipients KHDGHU RSWLRQDO PDQ\ DGGUHVV bcc  5HFLSLHQWQDPH Intelligent names of recipients  ToKHDGHU RSWLRQDO PDQ\  FF5HFLSLHQWQDPH Intelligent names of cc recipients ccKHDGHU RSWLRQDO PDQ\  EFF5HFLSLHQWQDPH Intelligent names of bcc recipients bccKHDGHU RSWLRQDO PDQ\ Address of recipient of the resent  5HVHQWUHFLSLHQW Resent-toKHDGHU RSWLRQDO PDQ\ message Content-typeKHDGHU  6WUXFWXUH Upper level MIME content-type PDQGDWRU\ RQFH LQPHVVDJHKHDGHU  $WWDFKPHQWV Number of attachments 0HVVDJHVWUXFWXUH PDQGDWRU\ RQFH  $WWDFKPHQW,' Internal attachment ID number (506 RSWLRQDO PDQ\ Content type KHDGHU  $WWDFKPHQWW\SH Media type of the attachment RSWLRQDO PDQ\ LQPHVVDJHSDUWV Filename KHDGHULQ  $WWDFKPHQWQDPH Filename of the attachment RSWLRQDO PDQ\ PHVVDJHSDUW  $WWDFKPHQWOLQN Link to attachment record (506 RSWLRQDO PDQ\ The message requests disposition Disposition-  1RWLILFDWLRQ RSWLRQDO RQFH notification  notification KHDGHU  1RWLILFDWLRQVHQW Whether notification was sent 6073VHUYHUORJ RSWLRQDO RQFH  1RWLILFDWLRQUHFHLYHG Link to notification message 6073VHUYHUORJ RSWLRQDO RQFH

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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x WKHPHVVDJHLVHOHFWURQLFDOO\VLJQHGE\WKHVHQGHUHLWKHUXVLQJ60,0(IRUPDW RU E\ DSSO\LQJ DQRWKHU VWDQGDUG VLJQDWXUH HJ ;0/ VLJQDWXUH  WR WKH DWWDFKPHQWVRU x WKHRULJLQDOPHVVDJHLVQRWHOHFWURQLFDOO\VLJQHGE\LWVVHQGHU ,Q WKH IRUPHU FDVH VRPH RUJDQL]DWLRQV UHTXLUH WKDW WKH PHVVDJH EHU HWDLQHG DQG PDLQWDLQHGLQWKHRULJLQDOVLJQHGIRUPDWWRJHWKHUZLWKLQIRUPDWLRQQHHGHG VXFKDVWKH ;HOHFWURQLFFHUWLILFDWH WRYHULI\WKHVLJQDWXUH$FFRUGLQJWR0R5HTDQ(506 SODWIRUP VKRXOG HQFRPSDVV WKH IROORZLQJ IHDWXUHV IRU FDSWXULQJ DQGP DLQWDLQLQJ PHVVDJHVEHDULQJDQHOHFWURQLFVLJQDWXUH x HOHFWURQLF VLJQDWXUHV DVVRFLDWHG HOHFWURQLF FHUWLILFDWHV DQG GHWDLOV RI UHODWHG FHUWLILFDWLRQVHUYLFHSURYLGHUVVKRXOGEHDUFKLYHGDVVHSDUDWHUHFRUGVDQGOLQNHG WRWKHUHFRUGWRZKLFKWKH\SHUWDLQ x FHUWLILFDWHVVKRXOGEHFKHFNHGDJDLQVWWKHUHYRFDWLRQOLVWVWRDVVHVVWKHLUYDOLGLW\ DWWKHWLPHWKHPHVVDJHZDVFDSWXUHGDQG x VLJQHG ILOHV VKRXOG EH YHULILHG DQGW KH GHWDLOV DQG RXWFRPH RI WKH YHULILFDWLRQ SURFHVVVKRXOGEHVWRUHGDVPHVVDJHPHWDGDWD ,IWKHRULJLQDOPHVVDJHZDVQRWHOHFWURQLFDOO\VLJQHGE\WKHVHQGHUVRPHRUJDQL]DWLRQV UHTXLUHWKDWLWEHHOHFWURQLFDOO\VLJQHGDWWKHWLPHRIFDSWXUHDQGRUUHJLVWUDWLRQLQWKH UHFRUGNHHSLQJ V\VWHP WR HQVXUH WKDW DW OHDVW VRPH DVSHFWV RI WKH LGHQWLW\ DQG WKH LQWHJULW\RIWKHPHVVDJHDUHPDLQWDLQHGGXULQJWKHWUDQVLHQWVWRUDJHDQGRUVXEVHTXHQW UHFRUGNHHSLQJSKDVHV

6HHKWWSZZZLWXLQWUHF75(&;HQ 6HUFR&RQVXOWLQJModel Requirements for the Management of Electronic Records: Update and Extension, 2008. MoReq2 Specification, v1.04 %UX[HOOHV/X[HPERXUJ(XURSHDQ&RPPLVVLRQ2IILFHIRU2IILFLDO3XEOLFDWLRQVRIWKH(XURSHDQ&RPPXQLWLHV  SS$YDLODEOHDWKWWSZZZFRUQZHOOFRXNPRUHT0R5HTBERG\BYBSGI

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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x WKHPHVVDJHDQGRULWVDWWDFKPHQWVDUHUHJLVWHUHGDVVHSDUDWHUHFRUGVERWKLQ HQFU\SWHGDQGGHFU\SWHGIRUP x PHWDGDWD DUH DGGHG WR HDFK UHFRUG ZLWK DOO HQFU\SWLRQ GHWDLOV VXFK DV WKH HQFU\SWLRQ DOJRULWKP WKH GHFU\SWLRQ NH\ RU WKH HOHFWURQLF FHUWLILFDWH ZKHQ DSSOLFDEOH DQGWKHOHYHORIHQFU\SWLRQXVHGDQG x PHWDGDWDDUHDGGHGWRHDFKUHFRUGZLWKGHFU\SWLRQSURFHVVGHWDLOVVXFKDVGDWH DQGWLPHGHFU\SWLRQVRIWZDUHXVHGDQGWKHQDPHRIWKHSHUVRQUHVSRQVLEOHIRU WKHGHFU\SWLRQSURFHVV

0DLQWDLQLQJWKHUHFRUGVLQWKHGHFU\SWHGIRUPLVHVSHFLDOO\LPSRUWDQWIRUWKHORQJWHUP PDLQWHQDQFHVFHQDULR VHHVHFWLRQ VLQFHHQFU\SWLRQLVOLNHO\WRUHGXFHWKHDELOLW\WR DFFHVV WKH UHFRUGV LQ WKH ORQJ WHUP GXH WR WKH SRWHQWLDO XQDYDLODELOLW\ RI WKH UHTXLUHG GHFU\SWLRQVRIWZDUHDQGRUWRWKHORVVRIWKHGHFU\SWLRQNH\

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$QRWKHU SUDFWLFH XVHG WR SURWHFW WKH LQWHJULW\ RI DQ HPDLO UHFRUG—ERWK WKH ZKROH PHVVDJHDQGLWVDWWDFKPHQWVLIVWRUHGVHSDUDWHO\—LVWRJHQHUDWHdigests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

5.5 Long-term maintenance $VZHSRLQWHGRXWLQVHFWLRQPRVWRUJDQL]DWLRQVDUHRQO\LQWHUHVWHGLQVKRUWWHUP PDLQWHQDQFHRIHPDLOPHVVDJHV LHZLWKDWLPHKRUL]RQXSWRWHQ\HDUV /RQJWHUP PDLQWHQDQFHDWOHDVWDVIDUDVHPDLOLVFRQFHUQHGLVDSUREOHPWKDWFRQFHUQVRQO\D OLPLWHGQXPEHURIODUJHRUJDQL]DWLRQV,QWKHVHFDVHVHPDLOPHVVDJHVDUHPDQDJHG WRJHWKHUZLWKPDQ\RWKHUW\SHVRIGLJLWDOUHFRUGVDQGWKHLUORQJWHUPPDLQWHQDQFHPD\ EHQHILW IURP ODUJH VFDOH IDFWRUV DQG WKH VXSSRUW RI DQ HIILFLHQW DQGFR PSOHWH WUXVWHG UHFRUGNHHSLQJRUWUXVWHGUHFRUGVSUHVHUYDWLRQLQIUDVWUXFWXUH /RQJWHUPPDLQWHQDQFHSRVHVWZRNLQGVRISUREOHPV x HQVXULQJWKHDXWKHQWLFLW\RIPHVVDJHVRYHUWKHORQJWHUPDQG x HQVXULQJWKHDELOLW\WRSURYLGHFRQWLQXHGDFFHVVWRDOOWKHLQIRUPDWLRQFRQWDLQHGLQ WKHPHVVDJHVDQGLQWKHLUDWWDFKPHQWV 7KH ILUVW SUREOHP LV D JHQHUDO RQH LQ ORQJWHUP GLJLWDO LQIRUPDWLRQ PDLQWHQDQFH DQG SUHVHUYDWLRQDQGUHDOO\WKHUHLVQRWKLQJVSHFLILFWRWKHHPDLOFDVH$V ZLWKDOOGLJLWDO REMHFWVLQJHQHUDOLWLVDPDWWHURIVDYLQJWKHGLJLWDOFRPSRQHQWVRIWKHUHFRUGVLQQRQ YRODWLOHVWRUDJHRQUHOLDEOHGLJLWDOPHGLDFRQWUROOLQJWKHWHFKQLFDOREVROHVFHQFHRIERWK WKH KDUGZDUH DQGW KH VRIWZDUH UHTXLUHG WR UHFRQVWLWXWH WKH GLJLWDO FRPSRQHQWV DQG PDQLIHVW WKHP WR XVHUV DV UHFRUGV LQ WKH SURSHU GRFXPHQWDU\ IRUP FRQWUROOLQJ WKH WHFKQLFDO REVROHVFHQFH RI WKH UHFRUGV WKHPVHOYHV DV WKH KDUGZDUHVRIWZDUH HQYLURQPHQWV LQ ZKLFK WKH GDWD RU ILOH IRUPDWV RI WKH UHFRUGV RSHUDWH HYROYHV HJ WKURXJK WUDQVIRUPDWLYH PLJUDWLRQ RI WKH UHFRUGV WR PDLQWDLQ WKHLU DFFHVVLELOLW\ LQ XSGDWHG WHFKQRORJLFDO UHJLPHV  DQG PRQLWRULQJ WKH LQWHJULW\ RI ERWK WKH VWRUHG GLJLWDO FRPSRQHQWVDQGWKHPHGLDRQZKLFKWKH\DUHVWRUHGWRGHFLGHZKHQQHZFRSLHVRIWKH UHFRUGV VKRXOG EH SURGXFHG LH UHIUHVKLQJ RI UHFRUGV  HYHQWXDOO\ ZLWK QHZ WHFKQRORJLHV 7KHUHIRUH ZH ZLOO QRW GLVFXVV WKLV PDWWHU KHUH DQGRQHVK RXOG LQVWHDG UHIHU WR WKH JHQHUDO ORQJWHUP UHFRUGV PDLQWHQDQFH DQG SHUPDQHQW SUHVHUYDWLRQ OLWHUDWXUH 7KHVHFRQGSUREOHPDVZHKDYHVHHQGHDOVZLWK0,0(PHGLDW\SHVDQGWKHORQJWHUP PDLQWHQDQFH RI KDUGZDUHVRIWZDUH HQYLURQPHQWV QHFHVVDU\ WR KDQGOH WKHP DQGK DV VRPHVSHFLILFDVSHFWVLQWKHHPDLOFDVH

'HILQHGE\,QWHU3$5(6DV³7KHSURFHVVRIFRQYHUWLQJRUXSJUDGLQJGLJLWDOREMHFWVRUV\VWHPVWRDQHZHUJHQHUDWLRQRIKDUGZDUH DQGRUVRIWZDUHFRPSXWHUWHFKQRORJ\´

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x WKHYDULHW\RI0,0(PHGLDW\SHVDQGVXEW\SHVXVHGLQWKHFUHDWLRQRIGLJLWDO GRFXPHQWVLQJHQHUDO LVH[WUHPHO\ODUJHDQG x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preferably as soon as they enter the recordkeeping systemLQWR VWDQGDUGL]HGGDWDRUILOHIRUPDWVWKDWDUHUHDOLVWLFDOO\SRVVLEOHWRVXSSRUWRYHUWKHORQJ WHUP 0RUHSUHFLVHO\ x PHVVDJHVVKRXOGEHPDLQWDLQHGLQ5)&0,0(IRUPDWWRKHOSSUHVHUYHWKHLU DXWKHQWLFLW\ LQ DI XWXUH WLPH LI DSSOLFDWLRQV DUH VWLOO DYDLODEOH WKH DWWDFKPHQWV FRXOGVWLOOEHDFFHVVHGLQWKHLURULJLQDOIRUPDW x DWWDFKPHQWVWKDWDUHµSULQWDEOH¶VKRXOGEHFRQYHUWHGWRDVXSSRUWHGVWDQGDUGL]HG SULQWLPDJH IRUPDW PDLQWDLQHG DV VHSDUDWH UHFRUGV DQG OLQNHG WR WKH PDLQ UHFRUG x DWWDFKPHQWVWKDWDUHµQRWSULQWDEOH¶ HJDXGLRYLGHRHWF VKRXOGEHFRQYHUWHG WR WKH PRVW VXLWDEOH VXSSRUWHG VWDQGDUGL]HG IRUPDW PDLQWDLQHG DV VHSDUDWH UHFRUGVDQGOLQNHGWRWKHPDLQUHFRUG x D GDWDEDVH RI DOO FRQYHUWHG UHFRUGV DQG WKHLU GDWD RU ILOH IRUPDWV VKRXOG EH PDLQWDLQHG x ZKHQ DVX SSRUWHG GDWD RU ILOH IRUPDW DSSURDFKHV REVROHVFHQFH DOO UHFRUGV LQ WKDWIRUPDWVKRXOGEHFRQYHUWHGWRDQHZµHTXLYDOHQW¶VXSSRUWHGIRUPDWDQG x LQIRUPDWLRQDERXWWKHRULJLQDOGDWDRUILOHIRUPDWDQGWKHGHWDLOVRIDOOFRQYHUVLRQ SURFHVVHV WR ZKLFK WKH UHFRUGV KDYH EHHQVX EMHFWHG VKRXOG EH UHJLVWHUHG DV PHVVDJH PHWDGDWD IRU DOO FRQYHUWHG UHFRUGV RU IRU WKHLU LQGLYLGXDO GLJLWDO FRPSRQHQWV LI UHOHYDQW  WKLV SURYLGHV VRPH NLQG RI DVVHVVPHQW RI WKH FRQYHUVLRQ SURFHGXUH DQGDO ORZV IXWXUH XVHUV WR DVVHVV WR ZKDW H[WHQW WKH LQWHJULW\RIWKHUHFRUGPD\KDYHEHHQFRPSURPLVHG $VDILQDOUHPDUNZHVKDOOSRLQWRXWWKDWZKHQPHVVDJHVDUHSUHVHUYHGIRUKLVWRULFDO SXUSRVHV WKH PDLQ JRDO LV XVXDOO\ WR SUHVHUYH WKH integrity of the information in the message DW DVH PDQWLF DQG VHPLRWLF OHYHO HYHQ LI WKH integrity of the messageLV ³FRPSURPLVHG´E\DIRUPDWFRQYHUVLRQWKDWLQWURGXFHVVOLJKWFKDQJHVLQWKHUHQGHULQJRI WKHUHFRUG¶VGRFXPHQWDU\IRUP

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$IXWXUHXVHUUHDGLQJLQWKHFRQYHUWHGFRS\LQ3')$YRIDQDWWDFKPHQW RULJLQDOO\ FUHDWHG LQ 06 :RUG  GRF ILOH IRUPDW PD\ JHW DOO WKH LQIRUPDWLRQ VKH QHHGV DQG EHFR PIRUWHG DERXW WKH WUXVWZRUWKLQHVV RI WKLV LQIRUPDWLRQ E\ WKH DVVHVVPHQWRIWKHDUFKLYLVWZKRLQSHUIRUPHGWKHODVWFRQYHUVLRQ$Q\ZD\LIKH LV QRW VDWLVILHG ZLWK WKLV WKH DOWHUQDWLYH IRU KLP FRXOG MXVW EHW KH FRQWHPSODWLRQ RI D ELQDU\ILOH

6 Access to stored e-mail records )RU DQRU JDQL]DWLRQ WR JUDQW XVHUV ZLWK HIILFLHQW DFFHVV WR HPDLO UHFRUGV ZKLOH VWLOO SURWHFWLQJ WKH UHFRUGV IURP XQDXWKRUL]HG DFFHVV DQGDFF LGHQWDO RU IUDXGXOHQW PDQLSXODWLRQRUGHVWUXFWLRQLWPXVWDGGUHVVVHYHUDOLVVXHV x SURYLGHVHDUFKDQGGLVFRYHU\FDSDELOLWLHVZKLFKVKRXOGEHSRZHUIXODQGIOH[LEOH EHFDXVHRIWKHDPRXQWRIUHFRUGVDQGEHFDXVHVHDUFKFULWHULDDUHQRWNQRZQLQ DGYDQFHDQGFDQEHYHU\YDULDEOHDQGXQSUHGLFWDEOH x SURYLGH DGHTXDWH SUHVHQWDWLRQ FDSDELOLWLHV—LH WKH XVHU VKRXOG EH DEOH WR HIILFLHQWO\YLHZDQGH[DPLQHWKHFRQWHQWRIWKHPHVVDJHVUHWULHYHGE\DVHDUFK RUGLVFRYHU\DFWLRQLQFOXGLQJDOOWKHLUDWWDFKPHQWV x GHILQH DFFHVV FRQWURO SROLFLHV DQG DFFHVV SULYLOHJHV DQG UHVWULFWLRQV WR SURWHFW PHVVDJHLQWHJULW\DQGWRDYRLGXQDXWKRUL]HGDFFHVVWRSURWHFWHGLQIRUPDWLRQ x HQIRUFHDFFHVVSULYLOHJHVDQGUHVWULFWLRQVDQG x URXWLQHO\DXGLWWKHHIIHFWLYHQHVVRIDFFHVVFRQWUROSROLFLHVDQGSURFHGXUHVDQG DXWRPDWLFDOO\ JHQHUDWH DXGLW ORJV IRU DFFRXQWDELOLW\ DQG SRVVLEO\ IRU GDWD UHFRYHU\SXUSRVHV

6.1 Search and discovery $V ZH DOUHDG\ SRLQWHG RXW VHDUFK DQG GLVFRYHU\ FDSDELOLWLHV DUH DPRQJ WKH PDLQ UHDVRQVWKDWLQGXFHRUJDQL]DWLRQVWRGHSOR\HPDLOUHFRUGNHHSLQJV\VWHPV 6HDUFKLVEDVHGERWKRQPHVVDJHFRQWHQW WH[WDQGDWWDFKPHQWV DQGPHWDGDWDDQG WKH XVH RI UHODWLRQDO DQG %RROHDQ RSHUDWRUV DUH DOORZHG WR FRPELQH DQ XQOLPLWHG QXPEHURIVHDUFKWHUPV0RUHRYHUWKHV\VWHPDOORZVWKHXVHRISURSRVLWLRQDOVHDUFK ORJLF ZLWK SDUWLDO PDWFKHV DQG ZLOGFDUG FKDUDFWHUV 3UR[LPLW\ VHDUFK LV DOVR DQ LPSRUWDQWIHDWXUHWRILQGWHUPVVHSDUDWHGE\QRPRUHWKDQDVSHFLILHGQXPEHURIZRUGV 6HDUFK DQG GLVFRYHU\ FDSDELOLWLHV DUH FRQVLGHUDEO\ H[WHQGHG WKURXJK WKH XVH RI WKHVDXULDQGRQWRORJLHVWRHQDEOHWKHXVHUWRVHDUFKE\FRQFHSWLQVWHDGRIVHDUFKLQJE\ VSHFLILF OH[LFDO WHUPV 7KLV DOORZV UHWULHYDO RI UHFRUGV ZLWK DE URDGHU QDUURZHU RU UHODWHGWHUPLQWKHLUFRQWHQWRUKHDGHUV)RULQVWDQFHDVHDUFKIRU³WUDQVSRUWDWLRQ´PD\ UHWULHYH³FDU´RU³WUDLQ´ 7KH QXPEHU RI HPDLOV UHFRUGV LQ WKH V\VWHP DQGW KHUHIRUH WKH QXPEHU RI UHFRUGV UHWULHYHGE\DVHDUFKRSHUDWLRQPD\EHYHU\ODUJH,WLVWKHUHIRUHLPSRUWDQWWRDOORZWKH XVHU WR HIIHFWLYHO\ OLPLW WKH VFRSH RI WKH VHDUFK HLWKHU E\ UHVWULFWLQJ WKH VHDUFK WR D VSHFLILF SRUWLRQ RI WKH UHFRUGV RU WKURXJK DQ LQFUHPHQWDO VHDUFK²LH SHUIRUPLQJ DW HDFKVWHSDIXUWKHUVHDUFKLQWKHUHVXOWVRIWKHSUHYLRXVVWHS

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

)LQDOO\WKHVFUHHQLQJRIVHDUFKUHVXOWVLVXVXDOO\LPSURYHGE\UDQNLQJWKHPLQRUGHURI UHOHYDQFH DV LV FXUUHQWO\ GRQH E\ :HE VHDUFK HQJLQHV WKDW XVH D YDULHW\ RI VRSKLVWLFDWHG UDQNLQJ DOJRULWKPV WR DFFRPSOLVK WKLV WDVN 6XFK DOJRULWKPV FRXOG VXFFHVVIXOO\EHDGDSWHGWRWKHSHFXOLDUVWUXFWXUHRIHPDLOPHVVDJHVDQGWRWKHSDWWHUQ RIWKHLUPHWDGDWD

6.2 Presentation 7KHUHVXOWRIDVHDUFKRULQJHQHUDODQ\UHFRUGDFFHVVHGE\WKHXVHUDUHSUHVHQWHGE\ WKH V\VWHP WR EHYLH ZHG DQG DQDO\]HG LQ DOO LWV FRPSRQHQWV 7KLV VKRXOG EH GRQH ZLWKRXWWKHQHHGRIDQ\DGGLWLRQDOVRIWZDUHDSSOLFDWLRQ 7KH UHFRUGNHHSLQJ V\VWHP LV VXSSRVHG WR SURYLGH YLHZLQJ PHFKDQLVPV FDSDEOH RI GLVSOD\LQJWKHPHVVDJHVDQGWKHLUDWWDFKPHQWVDWOHDVWIRUDOOIUHTXHQWO\XVHGILOHDQG GDWDIRUPDWVHYHQWKRXJKWKHJHQHUDWLQJDSSOLFDWLRQLVQRWSUHVHQW7KLVSRVHVDVHULHV RI SUDFWLFDO SUREOHPV EHFDXVH RI WKH ZLGH YDULHW\ RI 0,0( PHGLD W\SHV DQG WKH FRQVHTXHQWEXUGHQWRLQFRUSRUDWHLQWKHV\VWHPDOOWKHFRUUHVSRQGLQJDSSOLFDWLRQVDQG WRPDLQWDLQWKHP +RZHYHUZHPXVWFDUHIXOO\GLVWLQJXLVKEHWZHHQWZRGLIIHUHQWQHHGV x DOORZLQJHDV\LQVSHFWLRQRIWKHFRQWHQWRIWKHPHVVDJHVDQGWKHLUDWWDFKPHQWV GXULQJWKHVHDUFKDQGGLVFRYHU\SURFHVVZKLFKPD\FRQVLVWRIVHYHUDOVWHSVDQG UHTXLUHWKHVFUXWLQ\RILQWHUPHGLDWHUHVXOWVDQG x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³HPDLO DUFKLYLQJ V\VWHPV´ ZKLFK LQWHJUDWHV WKH QHZ IXQFWLRQDOLWLHV LQ WKH VWDQGDUGIDPLOLDUHPDLOFOLHQWLQWHUIDFH

6.3 Access control $VLVHPSKDVL]HGLQ0R5HT³LWLVHVVHQWLDOWKDWRUJDQL]DWLRQVDUHDEOHWRFRQWUROZKR LV SHUPLWWHG WR DFFHVV UHFRUGV DQG LQ ZKDW FLUFXPVWDQFHV DV UHFRUGV PD\ FRQWDLQ SHUVRQDOFRPPHUFLDORURSHUDWLRQDOO\VHQVLWLYHGDWD´7KLVLVHVSHFLDOO\WUXHIRUHPDLO EHFDXVHRIWKHSULYDF\DQGFRQILGHQWLDOLW\LVVXHVWKDWZHDOUHDG\GLVFXVVHG

6HUFR&RQVXOWLQJRSFLWS

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

$FFHVVFRQWUROLVW\SLFDOO\DFKLHYHGE\WKHVSHFLILFDWLRQDQGLPSOHPHQWDWLRQRIVHFXULW\ SROLFLHV²LH DFFHVV SULYLOHJHV DQG UHVWULFWLRQV DUH DSSOLHG EDVHG RQ WKH UROH DQ LQGLYLGXDO SOD\V LQ WKH RUJDQL]DWLRQ 7R PDNH DFFHVV PDQDJHPHQW PRUH HIILFLHQW JURXSV DQG UROHV DUH XVXDOO\ GHILQHG VR WKDW SULYLOHJHV DQG UHVWULFWLRQV PD\ EH DOVR DSSOLHGZLWKDVLQJOHDFWLRQWRDJURXSRUDUROHDQGFRQVHTXHQWO\LQKHULWHGE\DOOWKH XVHUVEHORQJLQJWRWKDWJURXSRUSOD\LQJWKDWUROH $FFHVV ULJKWV VKRXOG EH WDNHQ LQWR DFFRXQW QRW RQO\ DV IDU DV WKH GLUHFW DQGH[S OLFLW DFFHVVRIUHFRUGVLVFRQFHUQHGEXWDOVRZKHQDQXVHUSHUIRUPVVHDUFKDQGGLVFRYHU\ DFWLRQV WR SUHYHQW LQGLUHFW DFFHVV DQG LQIHUHQFH DQGW KH FRQVHTXHQW GLVFORVXUH RI LQIRUPDWLRQ WKDW XVHU LV QRW DOORZHG WR DFFHVV &RQVHTXHQWO\ QR VHDUFK RU UHWULHYDO IXQFWLRQPXVWHYHUUHYHDOWRDXVHUDQ\LQIRUPDWLRQ PHWDGDWDRUUHFRUGFRQWHQW ZKHQ WKH XVHU¶V DVVLJQHG DFFHVV SULYLOHJHV DQGRU UHVWULFWLRQV GR QRW DXWKRUL]H WKH XVHU WR KDYHUHDGDFFHVVWRWKHUHFRUGVLQTXHVWLRQ &RQVLVWHQWO\ZKHQDXVHUSHUIRUPVDFRQWHQWRUPHWDGDWDVHDUFKWKHV\VWHPVKRXOG QRW LQFOXGH LQ WKH UHVXOW DQ\ UHFRUG IRU ZKLFK WKH XVHU GRHV QRW KDYH UHDGOHYHO DXWKRULW\7KHPHUHDFWRIUHYHDOLQJWKDWVXFKUHFRUGVH[LVWRUHYHQKRZPDQ\UHFRUGV WKDWILWLQDJLYHQFULWHULRQDUHLQWKHV\VWHPPD\UHVXOWLQWKHGLVFORVXUHRIVHQVLWLYHRU FRQILGHQWLDOLQIRUPDWLRQ

6.4 Audit log $VLVWKHFDVHZLWKDOOUHFRUGVDFFRXQWDELOLW\IRUWKHDFWLRQVDSSOLHGWRHPDLOUHFRUGVLV QHFHVVDU\WRJXDUDQWHHWKHLQWHJULW\RIWKHUHFRUGVDQGWKHFRQWLQXLW\RIWKHFKDLQRI FXVWRG\WKDWPD\EHXVHGWRSURYHLW 'HWDLOHG LQIRUPDWLRQDERXWDOO XVHUDFFHVVHVVKRXOG DXWRPDWLFDOO\EHUHFRUGHGE\WKH V\VWHPLQDQaudit logWRVKRZZKHWKHUEXVLQHVVUXOHVDUHEHLQJIROORZHGDQGWRHQVXUH WKDWXQDXWKRUL]HGDFWLYLW\FDQEHLGHQWLILHGDQGWUDFHG ,QSDUWLFXODUWKHV\VWHPVKRXOGEHFDSDEOHWRUHFRUGLQIRUPDWLRQLQWKHDXGLWORJIRUWKH IROORZLQJHYHQWV x FDSWXUHGHFODUDWLRQDQGRUUHJLVWUDWLRQRIDPHVVDJH x GHILQLWLRQRIPHVVDJHKHDGHUOLQHVRUPHWDGDWD x FKDQJHRIPHVVDJHKHDGHUOLQHVRUPHWDGDWD x DFFHVVWRDPHVVDJH x UHORFDWLRQRIDPHVVDJHZLWKLQWKHV\VWHP x H[SRUWRIDPHVVDJHWRDQRWKHUV\VWHP x GLVSRVDORIDPHVVDJH x UHJLVWUDWLRQRIDQHZXVHULQWKHV\VWHP x FKDQJHRIDFFHVVSULYLOHJHVDQGRUUHVWULFWLRQVRIDXVHUDQG

$FFHVVSULYLOHJHVDUHGHILQHGE\,QWHU3$5(6DV³7KHDXWKRULW\WRDFFHVVDV\VWHPWRFRPSLOHFODVVLI\UHJLVWHUUHWULHYH DQQRWDWHUHDGWUDQVIHURUGHVWUR\UHFRUGVJUDQWHGWRDSHUVRQSRVLWLRQRURIILFHZLWKLQDQRUJDQL]DWLRQRUDJHQF\´ $FFHVVUHVWULFWLRQVDUHGHILQHGE\,QWHU3$5(6DV³7KHDXWKRULW\WRUHDGDUHFRUGJUDQWHGWRDSHUVRQSRVLWLRQRURIILFHZLWKLQDQ RUJDQL]DWLRQRUDJHQF\´

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x FDQFHOODWLRQRIDXVHUIURPWKHV\VWHP )RUHDFKRIWKHVHHYHQWVWKHV\VWHPUHFRUGVLQWKHDXGLWORJWKHIROORZLQJLQIRUPDWLRQ x WKHW\SHRIDFWLRQFDUULHGRXW x WKHGDWHDQGWLPH x WKHXVHUVLQYROYHGLQWKHDFWLRQDQGWKHLUUROHV x WKHREMHFWLQYROYHGLQWKHDFWLRQDQG x DOORWKHULQIRUPDWLRQQHFHVVDU\WRUHFRQVWUXFWWKHVWDWHRIWKHV\VWHPEHIRUHDQG DIWHUWKHDFWLRQ 7RVHUYHLWVSXUSRVHWKHDXGLWORJKDVWREHXQDOWHUDEOH²LHLWPXVWEHLPSRVVLEOHIRU DQ\ XVHU LQFOXGLQJ DGPLQLVWUDWRUV WR FKDQJH RU GHOHWH DQ\ SDUW RI LW 7KH OHYHO RI DVVXUDQFHQHHGHGZ LOOGHSHQGR QWKHRUJDQL]DWLRQDQGRQWKHOHYHORIVHFXULW\RIWKH XQGHUO\LQJRSHUDWLQJV\VWHPDQGV\VWHPVRIWZDUH $ULFKVHWRIUHTXLUHPHQWVIRUVHDUFKDQGGLVFRYHU\DFFHVVFRQWURODQGDXGLWDUHJLYHQLQ 0R5HT LQ 'R' 67' LQ Requirements for Electronic Records Management SystemsRIWKH8.3XEOLF5HFRUG2IILFHDQGLQRWKHUVLPLODUGRFXPHQWV VHH$SSHQGL[$ 

7 Commercial products for e-mail management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soho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

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

7.1 E-mail clients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x DELOLW\RIIHWFKLQJVHOHFWLYHO\PHVVDJHVIURPWKHPDLOVHUYHUDFFRUGLQJWRXVHU GHILQHGUXOHV x SRVVLELOLW\RIODEHOOLQJPHVVDJHVWRVWDWHWKHLUUHOHYDQFHLQWUDQVLWRU\VKRUWWHUP DQGORQJWHUPPDLQWHQDQFHSURFHVVHV x SRVVLELOLW\RIDGGLQJPHWDGDWDWRPHVVDJHVIRUFODVVLILFDWLRQSXUSRVH x FDSDELOLW\RIJURXSLQJPHVVDJHVLQYLUWXDOIROGHUVGHILQHGE\WKHXVHU x DYDLODELOLW\RIILOWHUVIRUVSDPPHVVDJHVRURWKHUHSKHPHUDOPHVVDJHV x DYDLODELOLW\RIEDFNXSIXQFWLRQV x DYDLODELOLW\RI³ZL]DUGV´IRUDVVLVWLQJWKHXVHULQPDLQWHQDQFHDFWLYLWLHVDQG x VXSSRUWRIVWDQGDUGIRUPDWVIRUUHFRUGHGPHVVDJHV

$OOFOLHQWVVXSSRUWWKH323SURWRFROIRUIHWFKLQJPHVVDJHVIURPWKH6073VHUYHUDQG PDQ\VXSSRUWWKH,03$3SURWRFRODVZHOO VHHVHFWLRQ EXWRQO\DIHZRIWKHPDOORZ XVHUV WR VHOHFW PHVVDJHV RI LQWHUHVW E\ PDUNLQJ WKHP RU GHILQLQJ VXLWDEOH UXOHV HJ $OSLQH2SHUDPDLO3HJDVXV  $OO SURGXFWV DOORZ LQ GLIIHUHQW ZD\V XVHUV WR PDUN PHVVDJHV WR EHNH SW E\ WDJJLQJ WKHP ZLWK FRORUV RU IODJV 6RPH SURGXFWV DOORZ PDUNLQJ PHVVDJHV DV ³QRW WR EH GHOHWHG´ WR SURWHFW WKHP DJDLQVW DFFLGHQWDO UHPRYDO HJ *QXV 3HJDVXV =LPEUD  8QIRUWXQDWHO\ QR SURGXFW SURYLGHV IRU DXWRPDWHG UHWHQWLRQ IXQFWLRQV EDVHG RQ SUHGHILQHGPDUNV7KHVHOHFWLRQRIUHFRUGVWRNHHSRQWKHEDVLVRIIODJFRORUKDVWREH SHUIRUPHGPDQXDOO\RUE\PHDQVRIXVHUGHILQHGILOWHUV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

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µZL]DUGV¶  WR KHOS WKH XVHU LQ V\VWHPDWLFDOO\ VHWWLQJ XSDQGF DUU\LQJ RQ PHVVDJH PDLQWHQDQFH 7KHUHIRUH XVHUV LQWHUHVWHG LQ PDLQWDLQLQJ PHVVDJHV ZKHWKHU LQ VKRUWWHUP RU ORQJ WHUP PDLQWHQDQFH SKDVHVKDYHWRVHWXSWKHLURZQSURFHGXUHVZKLFKPD\EHEDVHGRQWZRDOWHUQDWLYHV x FRQYHUWLQJLQGLYLGXDOPHVVDJHVLQWRWH[WILOHVDQGPDLQWDLQLQJWKHVHILOHVDQG x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box DQG  ,Q Mbox DOO PHVVDJHV DUH FRQFDWHQDWHG DQG VWRUHG DV SODLQ WH[W LQ DVLQ JOH ILOH ZKLOH Maildir XVHVDVHSDUDWHILOHIRUHDFKPHVVDJH$VLJQLILFDQWDGYDQWDJHRIWKHVHIRUPDWVLVWKDW VLQFH WKH\ UHO\ RQ VWDQGDUG ILOHV WKH VWRUHG LQIRUPDWLRQ PD\ DOVR EH DFFHVVHG XVLQJ VWDQGDUGFRQWHQWPDQDJHPHQWWRROV $VPRVWRIWKHHPDLOUHFRUGVPDQDJHPHQWDFWLRQVKDYHWREHSHUIRUPHGPDQXDOO\E\ WKH XVHUV VRPH HPDLO SURGXFWV RIIHU WKH SRVVLELOLW\ RI DXWRPDWLQJ DVH TXHQFH RI

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

DFWLRQVE\VXSSRUWLQJVFULSWV HJ/RWXVQRWHV0R]LOOD7KXQGHUELUG2XWORRNH[SUHVV  RUMDYDODQJXDJH HJ/RWXVQRWHV 

7.2 Integrated systems $VZHKDYHVHHQLQVHFWLRQHPDLOFOLHQWVPXVWFRQQHFWWRDQHPDLOVHUYHUWRVHQG DQGUHFHLYHPHVVDJHV7RGRVRLQGLYLGXDOVDQGVPDOORUJDQL]DWLRQVXVXDOO\UHO\RQD VHUYLFHVXSSOLHGE\WKH,QWHUQHWSURYLGHUZKLFKDFWXDOO\PDQDJHVWKHHPDLOVHUYHUDQG PD\DOVRRIIHUVRPHEDVLFHPDLOUHFRUGVPDQDJHPHQWVHUYLFHVEXWLQJHQHUDOQRWD YHU\FRPSOHWHVHWRIVHUYLFHV 0HGLXPDQGODUJHRUJDQL]DWLRQVPD\LQVWHDGILQGLWPRUHFRQYHQLHQWWRPDQDJHGLUHFWO\ WKURXJKWKHLU,&7GHSDUWPHQWDQHPDLOVHUYHUFRQQHFWHGWRWKHRUJDQL]DWLRQ¶VLQWUDQHW ,Q WKLV FDVH HYHQ LI LQ SULQFLSOH WKH HPDLO VHUYHU DQG WKH FOLHQWV FRXOG EH FKRVHQ UHJDUGOHVVRIWKHRUJDQL]DWLRQ¶V,7FRQWH[WDYHU\SRSXODUDSSURDFKLVWRPDQDJHWKHH PDLOWKURXJKLQWHJUDWHGV\VWHPVDFFRUGLQJWRWKHVFKHPDGLVFXVVHGLQVHFWLRQDQG GHSLFWHG LQ )LJXUH  $V DOUHDG\ QRWHG WKLV PDUNHW LV FXUUHQWO\ GRPLQDWHG E\ WZR SURGXFWV0LFURVRIW([FKDQJH6HUYHUDQG,%0/RWXV'RPLQR ([FKDQJH6HUYHU FXUUHQWO\WKHYHUVLRQ LV0LFURVRIW¶VVROXWLRQIRUFRPPXQLFDWLRQ DQG FROODERUDWLRQ ZLWKLQ HQWHUSULVHV 7KLV SURGXFW LV IXOO\ LQWHJUDWHG ZLWK DOO 0LFURVRIW SURGXFWV IRU HQWHUSULVH DXWRPDWLRQ WKH 6HUYHU I DPLO\  DQGZ LWK 0LFURVRIW HPDLO FOLHQWV QRWDEO\ 0LFURVRIW 2XWORRN ,Q WKLV SURSULHWDU\ HQYLURQPHQW WKH FOLHQWVHUYHU FRPPXQLFDWLRQLQVWHDGRIXVLQJWKHVWDQGDUGRSHQSURWRFROVGLVFXVVHGLQVHFWLRQ LV EDVHG RQ D 0LFURVRIW SURSULHWDU\ SURWRFRO FDOOHG 0$3, Messaging Application Programming Interface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²LHWKHPHVVDJHLQWKHQDWLYH5)&IRUPDW ZKLFKLVVDYHGLQDQstmILOH²DQGWKHVRFDOOHG0$3,LQIRUPDWLRQLHPHVVDJHKHDGHU SOXV SURSULHWDU\ LQIRUPDWLRQ ZKLFK LV VWRUHG LQ D GDWDEDVH LQ WKH edb SURSULHWDU\ GDWDEDVHIRUPDW7KH0$3,GDWDEDVHDOORZVIRURSWLPL]HGPHVVDJHUHWULHYDOEXWPD\ EHDFFHVVHGRQO\E\FOLHQWVVXSSRUWLQJWKLVSURSULHWDU\IRUPDW HJ2IILFH2XWORRN  ([FKDQJH 6HUYHU  DOORZV IRU WKH GHILQLWLRQ DQG LPSOHPHQWDWLRQ RI EDVLF HPDLO UHFRUGV PDQDJHPHQW SROLFLHV WKURXJK WKH Exchange Management Console DQG WKH Exchange Management Shell7KLVDOORZV x FRQWUROOLQJFRQWHQWUHWHQWLRQDQGUHPRYLQJFRQWHQWWKDWLVQRORQJHUQHHGHGDQG x MRXUQDOLQJ FRS\LQJ LPSRUWDQWFRQWHQWWRDVHSDUDWHVWRUDJHORFDWLRQRXWVLGHWKH PDLOER[ 7KH ODWWHU IHDWXUH PD\ DOVR LQFOXGH PHVVDJH FODVVLILFDWLRQ ZKLFK LV SHUIRUPHG E\ DWWDFKLQJWRWKHLWHPDXVHUVHOHFWHGFODVVLILFDWLRQODEHO+RZWKHFODVVLILFDWLRQLVFDUULHG

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

RXWGHSHQGVRQWKHFOLHQW)RULQVWDQFHLI2XWORRNLVXVHGWKHDGPLQLVWUDWRUPD\ GHILQHDPHVVDJHFODVVLILFDWLRQVFKHPHDQGWKHFOLHQWZRXOGSURPSWWKHXVHUWRFKRRVH DPRQJWKHDYDLODEOHFODVVLILFDWLRQRSWLRQV ([FKDQJH LV DOVR WLJKWO\ LQWHJUDWHG ZLWK SharePoint WKH 0LFURVRIW GRFXPHQW PDQDJHPHQW DQGFR QWHQW PDQDJHPHQW SODWIRUP ,Q SDUWLFXODU Office SharePoint Server 2007DQGMicrosoft Exchange Server 2007DOORZWKHLPSOHPHQWDWLRQ RI DQ LQWHJUDWHG V\VWHP WKDW VXSSRUWV GRFXPHQW OLIHF\FOH PDQDJHPHQW IURP FUHDWLRQ WKURXJKGLVSRVLWLRQDFFRUGLQJWRVSHFLILFUHFRUGVPDQDJHPHQWSROLFLHV Lotus Domino LV WKH ,%0 SURGXFW IRU HQWHUSULVH HPDLO PDQDJHPHQW DQGL V WKH RWKHU PDMRUSOD\HULQWKLVPDUNHW,QGHHG/RWXV'RPLQRLVDSODWIRUPWKDWSURYLGHVDOVRPDQ\ RWKHU VHUYLFHV OLNH &ROODERUDWLRQ VHUYHU $SSOLFDWLRQ VHUYHU :HE VHUYHU 'DWD EDVH VHUYHU'LUHFWRU\VHUYHUDQGPRUH /RWXV 'RPLQR PDLO VHUYHU VXSSRUWV DQ\ 323 RU ,0$3 FOLHQW LQFOXGLQJ 0LFURVRIW 2XWORRNEXWLWQDWXUDOO\LQWHJUDWHVZLWKIBM Lotus Notes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¶V3& 7R LPSOHPHQW D PRUH VRSKLVWLFDWHG FDSWXUHGHOHWLRQ SROLF\ LW LV QHFHVVDU\ WR DFTXLUH IBM CommonStoreDVHSDUDWHSURGXFWWLJKWO\LQWHJUDWHGZLWK/RWXV'RPLQRDQG/RWXV 1RWHV &RPPRQ6WRUH LV DFWXDOO\ DQ ³HPDLO DUFKLYLQJ´ SURGXFW DQG ZLOO WKHUHIRUH EH GLVFXVVHGLQWKHQH[WVHFWLRQ /RWXVSURGXFWVDUHDOVRWLJKWO\LQWHJUDWHGZLWKFileNetWKH,%0GRFXPHQWDQGFRQWHQW PDQDJHPHQW SURGXFW 0RUH SUHFLVHO\ )LOH1HW KDV D FRPSRQHQW QDPHG ManagerZKLFKFDQ x PDQDJHDXWRPDWHGHPDLOFDSWXUH x PRQLWRUHPDLOFRPSOLDQFHZLWKFRUSRUDWHSROLFLHVDQGJRYHUQPHQWUHJXODWLRQV x ODXQFKDXWRPDWLFDOO\EXVLQHVVSURFHVVHVLQUHVSRQVHWRLQFRPLQJHPDLOV

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x PDQDJHDXWRPDWHGFODVVLILFDWLRQRIHPDLOPHVVDJHVDQG x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³HPDLO DUFKLYLQJ´ WKDW E\ GHIDXOW SURYLGH PDQ\ RI WKHVH VDPH UHFRUGVPDQDJHPHQWIXQFWLRQDOLWLHV

7.3 Commercial products for “e-mail archiving” ³(PDLO DUFKLYLQJ´ SURGXFWV ZHUH LQLWLDOO\ GHYHORSHG DV ³UHDG\ WR XVH´ VROXWLRQV IRU UHJXODWRU\FRPSOLDQFHDQGOHJDOGLVFRYHU\KHQFHWKHLUPDLQSXUSRVHZDVWRFDSWXUHDOO LQFRPLQJ DQG RXWJRLQJ FRUSRUDWH HPDLO PHVVDJHV DQG VWRUH WKHP LQDVHFXUHZD\ +RZHYHUDVWKLVPDUNHWTXLFNO\H[SDQGHGWRDOHYHOWKDWLVH[SHFWHGWRUHDFKRQHELOOLRQ GROODUV LQ  PDQ\ IXQFWLRQDOLWLHV KDYH EHHQ DGGHG WR PHHW QHZ GHPDQGV DQG FXUUHQWSURGXFWVPD\VDWLVI\DZLGHUDQJHRIUHTXLUHPHQWVVSDQQLQJIURPEXONUHWHQWLRQ WRFRPSOH[UHFRUGVPDQDJHPHQWSROLFLHV ,W LV ZRUWK UHPHPEHULQJ WKDW HPDLO SURWRFROV UHTXLUH DOO LQFRPLQJ DQG RXWJRLQJ PHVVDJHVWREHVWRUHGLQWKHHPDLOVHUYHU¶VWUDQVLHQWVWRUDJHV\VWHPZKHUHPHVVDJHV DUH NHSW XQWLO HLWKHU D XVHUDGPLQLVWUDWRU DFWLRQ RU DQ DXWRPDWHG SURFHGXUH GHOHWHV WKHP7KHUHIRUHLQSULQFLSOHLQLWLDOPHVVDJHFDSWXUHDQGVWRUDJHFRXOGEHDFKLHYHGMXVW E\ LPSOHPHQWLQJ D³ QRQ GHOHWLRQ´ SROLF\ DW WKH HPDLO VHUYHU OHYHO +RZHYHU WKLV DSSURDFK KDV VHYHUDO VHFXULW\ DQG SHUIRUPDQFH GUDZEDFNV VLQFH HPDLO VHUYHUV DUH GHVLJQHG WR PDQDJH WUDQVLHQW DQG VKRUWWHUP VWRUDJH UDWKHU WKDQ ORQJWHUP PDLQWHQDQFHRUUHFRUGNHHSLQJ ³(PDLODUFKLYLQJ´SURGXFWVKDYHEHHQGHVLJQHGWRILOOWKLVJDSWKDWLVWR x PDQDJH D KXJHQX PEHU RI VWRUHG HPDLOV ZLWKRXW DIIHFWLQJ HPDLO VHUYHU SHUIRUPDQFHV x HQVXUH UHJXODWRU\ FRPSOLDQFH E\ FDSWXULQJ PHVVDJHV EHIRUH WKH\FDQEH PRGLILHGPDOLFLRXVO\RUGHOHWHGE\WKHUHFLSLHQW

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x DOORZRUJDQL]DWLRQVWRLPSOHPHQWVWUXFWXUHGSROLFLHVIRUDFFHVVLQJVWRUHGHPDLO x LQFOXGHDXGLWLQJFDSDELOLWLHVWRWUDFNDFFHVVWRVWRUHGUHFRUGV x H[WHQG DFWLYH PDLOER[HV E\ SURYLGLQJ XVHU DFFHVV WR WKH UHSRVLWRU\ YLD D :HE FOLHQWDQGWKURXJKWKHHPDLOFOLHQW x HQIRUFH LQWHJUDWLRQ EHWZHHQ HPDLO PDQDJHPHQW V\VWHPV DQGU HFRUGV PDQDJHPHQWV\VWHPVDQG x SURYLGHDGYDQFHGVHDUFKDQGNQRZOHGJHPDQDJHPHQWFDSDELOLWLHV

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³(PDLODUFKLYLQJ´SURGXFWVDUHPDLQO\GHVLJQHGIRUODUJHRUJDQL]DWLRQVPDQDJLQJWKHLU HPDLOWKURXJKLQWHJUDWHGV\VWHPV7KHUHIRUHSUDFWLFDOO\DOOYHQGRUVVXSSRUW0LFURVRIW ([FKDQJHDQGDODUJHDQGLQFUHDVLQJQXPEHURIWKHPVXSSRUWDOVR/RWXV'RPLQR $FFRUGLQJWRDUHFHQW*DUWQHUDQDO\VLV6\PDQWHFLVWKHPDUNHWOHDGHUERWKIRUDELOLW\WR H[HFXWHDQGIRUWKHFRPSOHWHQHVVRIYLVLRQ6\PDQWHF¶VSURGXFW(QWHUSULVH9DXOWLV DQ LQWHJUDWHG FRQWHQW DUFKLYLQJ SODWIRUP VXSSRUWLQJ HPDLO LQVWDQW PHVVDJHV 6KDUH3RLQWDQGWKURXJKWKLUGSDUWLHVDGGRQPRGXOHVSRSXODUSURSULHWDU\UHSRVLWRULHV HJ%ORRPEHUJ%ODFN%HUU\  %HVLGHV6\PDQWHFSURGXFWVRIVHYHUDORWKHUYHQGRUVSURYLGHQRWRQO\IRUWKHFDSWXUHRI DOOHPDLOPHVVDJHVEXWDOVRDOORZWKHGHILQLWLRQDQGWKHLPSOHPHQWDWLRQRIDUHWHQWLRQ SROLF\DQGJLYHWKHHQGXVHUDYLHZRIVWRUHGPHVVDJHVVLPLODUWRDQH[WHQGHGPDLOER[ 7\SLFDOIXQFWLRQDOLWLHVIRXQGLQWKHVHSURGXFWVLQWHUHVWLQJIRUPDLQWHQDQFHSXUSRVHVDUH x XVHURSWLRQVIRUPHVVDJHFODVVLILFDWLRQ HJ2SHQ7H[W&RPPRQ6WRUH0HVVDJH 0DQDJHU  x DXWRPDWLFFODVVLILFDWLRQFDSDELOLWLHV HJ&RPPRQ6WRUH(PDLO;WHQGHU(QWHUSULVH 9DXOW0HVVDJH0DQDJHU  x FURVVXVHU³DUFKLYHIXOOWH[WVHDUFKHV´ HJ$XWRQRP\=DQWD]&RPPRQ6WRUH  x DVVXUDQFH RI PHVVDJH DXWKHQWLFLW\ YLD HOHFWURQLF VLJQDWXUH HJ +3 HPDLO DUFKLYLQJ0DLO0HWHU  x GLVDVWHUUHFRYHU\IHDWXUHV HJ1HDU3RLQW(QWHUSULVH9DXOW DQG x VWRUDJHRSWLPL]DWLRQ HJ(QWHUSULVH9DXOW 

&DURO\Q'L&HQ]RDQG.HQQHWK&KLQ³0DJLF4XDGUDQWIRU(0DLO$FWLYH$UFKLYLQJ´*DUWQHU5$6&RUH5HVHDUFK1RWH* 0D\ $FFHVVLEOHYLDIUHHUHJLVWUDWLRQDWKWWSZZZPLPRVDV\VWHPVFRPKWPOJDUWQHUBPTKWP

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

7.4 State of the art and trends 7KH PDUNHW GHPDQG LV VWLOO GULYHQ E\ WKH FRQFHUQV WKDW PRVW RUJDQL]DWLRQV DQG FRUSRUDWLRQV KDYH IRU UHJXODWRU\ FRPSOLDQFH DQGO HJDO GLVFRYHU\ $V WKH QXPEHU RI H[FKDQJHGPHVVDJHVVKRZVDVWHDG\DQGUREXVWJURZLQJWUHQGSURGXFWVFDODELOLW\LVD YHU\ LPSRUWDQW LVVXH DQG LV RQH RI WKH PDLQ UHDVRQV ZK\ PRVW PHGLXP DQGO DUJH RUJDQL]DWLRQVXVHDVSHFLILF³HPDLODUFKLYLQJSURGXFW´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

Acknowledgements :H IHHO LQGHEWHG WR VHYHUDO FROOHDJXHV ZKR JDYH XV SUHFLRXV DGYLFH ZKLOH ZH ZHUH SUHSDULQJDQGUHYLVLQJWKLVVWXG\SULPDULO\WKHPHPEHUVRI,QWHU3$5(67HDP,WDO\ DPRQJZKRPDVSHFLDOWKDQNVJRHVWR0DULHOOD*XHUFLRDQG0D[*UDQGLZKRFDUHIXOO\ UHYLVHG WKH SDSHU DQGJDYH  XV VHYHUDO YDOXDEOH VXJJHVWLRQV :H ZRXOG DOVR OLNH WR WKDQN 5DQG\ 3UHVWRQ IRU KLV QXPHURXV UHPDUNV DQG VXJJHVWLRQV VRPH RI ZKLFK ZH KDYHDSSUHFLDWHGDQGWDNHQLQWRDFFRXQWLQWKHODVWYHUVLRQRIWKHSDSHU

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

Appendix A - Requirements for systems to manage and preserve e-mail records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

DoD 5015-02- STD - Electronic Records Management Software Applications Design Criteria Standard (2007) 7KH'R'³Department of Defense Records Management Program´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visited 9-2008  7KHWKLUGYHUVLRQRI'R'67'FRQWDLQVVHYHUDOUHTXLUHPHQWVWKDWVSHFLILFDOO\ SHUWDLQ WR WKH PDQDJHPHQW RI HPDLO PHVVDJHV DV UHFRUGV DQGR WKHU JHQHUDO UHTXLUHPHQWV WKDW FRQFHUQ RWKHU LVVXHV ZH GLVFXVV LQ WKLV UHSRUW DV VHFXULW\ DFFHVV FRQWURODQGDXGLW

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

x Message capture and classification 6HFWLRQ&JLYHVDVHWRIPDQGDWRU\UHTXLUHPHQWVVSHFLILFWRHPDLOUHFRUGV UHODWLQJWRWKHFDSWXUHSURFHVVWKHXVHULQWHUIDFHDQGWKHPHWDGDWDH[WUDFWLRQ $FFRUGLQJ WR WKHVH UHTXLUHPHQWV WKH PHVVDJH FDQ HLWKHU ILOHG DV D ZKROH RU DWWDFKPHQWV FDQ EHV WRUHG DV VHSDUDWH UHFRUGV DQG OLQNHG WR WKH PDLQ UHFRUG 7KHVHFWLRQFRQWDLQVDOVRDWDEOH 7DEOH&77UDQVPLVVLRQDQG5HFHLSW'DWD  ZKHUH WKH GDWD WKDW PXVW EH FDSWXUHG DQGW KHLU FRUUHVSRQGLQJ PHWDGDWD DUH OLVWHG

x Search and retrieval 6HDUFK DQG UHWULHYDO UHTXLUHPHQWV DUH GLVFXVVHG LQ VHFWLRQ & ZKLFK EHVLGHV JHQHUDO UHTXLUHPHQWV RQ TXHU\ FDSDELOLWLHV VSHFLILFDOO\ FDOOV IRU WKH ³FDSDELOLW\IRUILOHGHPDLOUHFRUGVWREHUHWULHYHGEDFNLQWRDFRPSDWLEOHHPDLO DSSOLFDWLRQ IRU YLHZLQJ IRUZDUGLQJ UHSO\LQJ DQGDQ\ RWKHU DFWLRQ ZLWKLQ WKH FDSDELOLW\RIWKHHPDLODSSOLFDWLRQ´ & 

x Access control and audit 7KHVHLVVXHVDUHGLVFXVVHGLQVHFWLRQV&DQG&0RUHVSHFLILFDOO\D YHU\ GHWDLOHG DFFHVV FRQWURO VFKHPH LV JLYHQ 7DEOH &7 ± Mandatory Authorized Individual Requirements  ZKHUH DFFHVV ULJKWV DUH GHILQHG IRU WKH UROHV RI Applications administrator Records manager DQG Privileged user 7KRXJKPRVWO\QRWVSHFLILFWKHVFKHPHVKRXOGEHFRQVLGHUHGLQWKHGHVLJQDQG FRQILJXUDWLRQRI³HPDLODUFKLYLQJDSSOLFDWLRQV´

x Metadata 0HWDGDWD DUH GLVFXVVHG LQ VHFWLRQ & DQG VSHFLILFDOO\ HPDLO PHWDGDWD LQ VHFWLRQ & ZKHUH PDQGDWRU\ PHWDGDWD DUH VSHFLILHG LQ 7DEOH & ± Record Level E-mail, WRJHWKHUZLWKWKHLQGLFDWLRQRIWKHLUVRXUFH

x Additional requirements )XUWKHUUHTXLUHPHQWVUHODWHWRWKHPDQDJHPHQWRIHPDLOPHVVDJHVIURPZLGH DUHD QHWZRUNV RWKHU WKDW WKH ,QWHUQHW WKDW VKRXOG EH WUHDWHG LQ WKH VDPH ZD\ & DQGWRWKHPDQDJHPHQWRIHPDLOGLVWULEXWLRQOLVWV

MoReq2 – Model Requirements for the Management of Electronic Records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

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

GHYHORSPHQW SURFHVV ZDV RYHUVHHQ E\ WKH (XURSHDQ &RPPLVVLRQ DQG E\ WKH '/0 'RFXPHQW/LIHF\FOH0DQDJHPHQW )RUXP 7KHJRDORI0R5HTLVUDWKHUDPELWLRXVVLQFHEHVLGHVSURYLGLQJH[WHQGHGIXQFWLRQDO UHTXLUHPHQWVLWDLPVDOVRDW³HQVXULQJWKDWWKHIXQFWLRQDOUHTXLUHPHQWVDUHWHVWDEOHDQG GHYHORSLQJ WHVW PDWHULDOV WR HQDEOH SURGXFWV WR EH WHVWHG IRU FRPSOLDQFH ZLWK WKH UHTXLUHPHQWV´ 7KH3')YHUVLRQRI0R5HTLVFXUUHQWO\DYDLODEOHIURP KWWSZZZFRUQZHOOFRXNPRUHT0R5HTBERG\BYBSGI visited 9-2008 

 0R5HTFRQWDLQVERWKUHTXLUHPHQWVWKDWVSHFLILFDOO\SHUWDLQWRWKHPDQDJHPHQWRIH PDLOPHVVDJHVDVUHFRUGVDQGRWKHUJHQHUDOUHTXLUHPHQWVWKDWFRQFHUQ RWKHULVVXHV ZHGLVFXVVHGLQWKLVUHSRUWVXFKDVVHFXULW\DFFHVVFRQWURODQGDXGLW

x Message capture and classification 7KHFDSWXUHSURFHVVLVGLVFXVVHGLQJUHDWGHWDLO*HQHUDOUHTXLUHPHQWVPRVWRI ZKLFKDUHUHOHYDQWIRUWKHHPDLOFDVHDUHGLVFXVVHGLQVHFWLRQDQGVSHFLILF UHTXLUHPHQWV IRU HPDLO LQ VHFWLRQ  %RWK WKH V\VWHPEDVHG DQGW KH XVHU EDVHGVFKHPHVDUHSURSRVHGDQGVHYHUDOLPSRUWDQWLVVXHVDUHGHILQHGDVWKH KDQGOLQJ RI DWWDFKPHQWV DQG WKH SUREOHP RI OLQNLQJ PHVVDJHV RI WKH VDPH WKUHDG

x Search and retrieval 7KHVHLVVXHVDUHGLVFXVVHGLQVHFWLRQ2QO\JHQHUDOUHTXLUHPHQWVDUHJLYHQ EXWWKHGLVFXVVLRQLVUDWKHUGHWDLOHGHVSHFLDOO\RQVHDUFKFULWHULDZKHUHWKHXVH RI WKHVDXUL DQG RQWRORJLHV LV WKRURXJKO\ GLVFXVVHG 3UHVHQWDWLRQ LVVXHV DUH GLVFXVVHGLQVHFWLRQ

x Access control and audit 7KHVHLVVXHVDUHGLVFXVVHGLQVHFWLRQ$JHQHUDOGLVFXVVLRQLVSURYLGHGEXWQR LVVXHV VSHFLILF WR HPDLO PDQDJHPHQW DUH SUHVHQWHG 1HYHUWKHOHVVLWLVD YDOXDEOH UHIHUHQFH VLQFH LW WKRURXJKO\ GLVFXVVHV WKH PDWWHU LQFOXGLQJ VXFK LVVXHVDVWKHRZQHUVKLSRIUHFRUGVDQGWKHPDQDJHPHQWRIJURXSVDQGUROHV

x Metadata 0HWDGDWDDUHGLVFXVVHGLQPXFKGHWDLOLQ$SSHQGL[ZKHUHDULFKVHWRIHPDLO VSHFLILF PHWDGDWD LV GHILQHG )RU HDFK PHWDGDWD WKH VRXUFH WKH SRSXODWLRQ FULWHULDDQGWKHXVHFRQGLWLRQVDUHVSHFLILHG7KLVVHWRIPHWDGDWDKDVEHHQWDNHQ LQWRDFFRXQWLQZULWLQJVHFWLRQRIWKLVUHSRUWDQGLVDFWXDOO\DVXEVHWRIWKH PHWDGDWDLQ7DEOHRIWKLVUHSRUW

x Additional requirements )XUWKHU GLVFXVVLRQ UHIHUV WR WKH LQWHJUDWLRQ RI ID[ VHUYHUV ZLWK HPDLO VHUYHUV VHFWLRQ   WR ILOH ID[HV ZKLFK DUH VHQW DV HPDLO DWWDFKPHQWV DQG WR WKH

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI *HQHUDO6WXG\±.HHSLQJDQG3UHVHUYLQJ(PDLO Y  *3RQWHYROSHDQG66DO]D

LQWHJUDWLRQ EHWZHHQ (506 DQG HPDLO V\VWHP WR DOORZ VHQGLQJ UHFRUGV IURP ZLWKLQWKH(506 VHFWLRQ 

UK Public Record Office - Functional Requirements for Electronic Records Management Systems (2002) 7KLV VSHFLILFDWLRQ LV FRPSRVHG RI IRXU FKDSWHUV WKDW DUH SXEOLVKHG DV VHSDUDWH GRFXPHQWV$WOHDVWWZRRIWKHPDUHUHOHYDQWWRHPDLOPDQDJHPHQW

x 3DUW±Functional requirementsFXUUHQWO\DYDLODEOHIURP KWWSZZZQDWLRQDODUFKLYHVJRYXNGRFXPHQWVUHTXLUHPHQWVILQDOSGI visited 9- 2008 

x 3DUW±0HWDGDWDVWDQGDUGFXUUHQWO\DYDLODEOHIURP KWWSZZZQDWLRQDODUFKLYHVJRYXNGRFXPHQWVPHWDGDWDILQDOSGI visited 9-2008 

 0RUHVSHFLILFDOO\WKHFunctional requirementsGLVFXVVWKHFDSWXUHRIHPDLOPHVVDJHV VHFWLRQ $  LQFOXGLQJ GHFODUDWLRQ PHWDGDWD H[WUDFWLRQ H[SRUW DQG WUDQVIHU RI HPDLO UHFRUGV VHFWLRQ $  DQG RWKHU PRUH JHQHUDO LVVXHV DERXW DFFHVV FRQWURO DXGLW DQG XVDELOLW\ 7KH0 HWDGDWD VWDQGDUG SURSRVHV D JHQHUDO VHW RI PHWDGDWD DQG FDUHIXOO\ GLVFXVVHVWKHSUREOHPRIH[WUDFWLQJPHWDGDWDIRUHPDLOPHVVDJHV

DCC-Digital Curation Manual  7KH'LJLWDO&XUDWLRQ0DQXDOLVSXEOLVKHGE\WKH'&& Digital Curation Centre DSURMHFW IXQGHG E\ -,6& Joint Information Systems Committee ZKLFKVXSSRUWV8QLWHG .LQJGRPSRVWDQGKLJKHUHGXFDWLRQDQGUHVHDUFK 7KH 'LJLWDO &XUDWLRQ &HQWUH KDV WKH DLP RI VXSSRUWLQJ 8. LQVWLWXWLRQV ZKLFK VWRUH PDQDJHDQGSUHVHUYHUHFRUGVDQGWKHGRFXPHQWDU\KHULWDJHFUHDWHGLQGLJLWDOIRUPWR KHOSHQVXUHWKHLUHQKDQFHPHQWDQGWKHLUFRQWLQXLQJORQJWHUPXVH &XUUHQWO\HOHYHQFKDSWHUVRIWKH'&&'LJLWDO&XUDWLRQPDQXDODUHDYDLODEOHDQGFDQ EHGRZQORDGHGIURP KWWSZZZGFFDFXNUHVRXUFHFXUDWLRQPDQXDOFKDSWHUV visited 9-2008  7KH FKDSWHU Curating E-Mails: A life-cycle approach to the management and preservation of e-mail messages,E\0DXUHHQ3HQQRFNSXEOLVKHGLQFRQWDLQVD YHU\LQWHUHVWLQJVXUYH\RIWKHSUREOHPVFRQQHFWHGZLWKHPDLOPDQDJHPHQW 

,QWHU3$5(63URMHFW7($0,WDO\ 3DJHRI