E-MAIL CERTIFICATION SERVICE

• US 20100088385A1
• Filed: 12/07/2009
• Published: 04/08/2010
• Est. Priority Date: 12/30/2003
• Status: Active Grant

• Current Assignee: James R Du Molin, Suzanne S Du Molin
• Original Assignee: First Information Systems, LLC
• Inventors: CLAY, Bruce M., AVRITCH, Peter S., DU MOLIN, James R.
• Granted Patent: US 8,032,751 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A method is provided to handle an electronic mail message such that the receiver of the e-mail message can verify the integrity of the message. A request is provided from a sender'"'"'s side to a service. The request includes information regarding the e-mail message. The service processes at least a portion of the request to generate a result. For example, the service may encrypt the portion of the request, according to a public/private key encryption scheme, to generate a digital signature as the result. The service provides the result to the sender'"'"'s side. At the sender'"'"'s side, the result is incorporated into the e-mail message and the result-incorporated message is transmitted via an e-mail system. At the receiver'"'"'s side, the result-incorporated e-mail message is processed to assess the integrity of the received e-mail message.

Claims

1. A computer-implemented method of operating a service to generate a result for an electronic mail (“

e-mail”

) message, comprising;

by the service, receiving a request comprising meta-data information regarding the e-mail message,

by the service, processing at least a portion of the request to determine the result using a service private key, the service private key kept secret by the service; and

by the service, providing the result for incorporation of the result into the e-mail message prior to the e-mail message being transmitted to a recipient of the e-mail message, as a result-incorporated e-mail message, via an e-mail system.

2. The method of claim 1, wherein:

the meta-data information regarding the e-mail message includes at least an e-mail address of a sender of the e-mail message.

3. The method of claim 1, wherein:

the request further includes a digest of a body of the e-mail message.

4. The method of claim 3, wherein:

the digest of the body of the e-mail message has been generated using an SHA algorithm.

5. The method of claim 1, wherein:

the request does not include the body of the e-mail message or information from which the body of the e-mail message can be derived.

6. The method of claim 1, wherein:

the service determines the result to further include an indication of a level of certification of the e-mail message.

7. The method of claim 1, wherein:

the request further comprises sender verification information; and

the method further comprises, by the service, processing the sender verification information.

8. The method of claim 1, wherein:

a sender is associated with e-mail message; and

the method further comprises, by the service, determining how the sender may be later located.

9. The method of claim 8, wherein:

determining how the sender may be later located includes associating a degree of certainty with the determination.

10. The method of claim 9, wherein:

the result includes an indication of the degree of certainty.

11. The method of claim 10, wherein:

a sender of the e-mail message is associated with a particular e-mail address of a plurality of e-mail addresses; and

the method further comprises;

at the service, before providing the result for incorporation of the result into the e-mail message, sending an inquiry e-mail message to the particular e-mail address; and

at the service, observing behavior of the sender associated with the inquiry e-mail message.

12. The method of claim 11, wherein:

the behavior of the sender associated with the inquiry e-mail message includes the sender sending an e-mail message to the service in reply to the inquiry e-mail message.

13. The method of claim 11, wherein:

the behavior of the sender associated with the inquiry e-mail message includes following instructions set forth in the inquiry e-mail message.

14. The method of claim 13, wherein:

the instructions include instruction to link to a particular universal resource locator.

15. The method of claim 1, further comprising:

by the service, before providing the result for incorporation into the e-mail message, receiving a request for the sender to subscribe to the service;

by the service, sending an inquiry message to a sender associated with the sender'"'"'s side, by a transmission channel other than the electronic mail system; and

by the service, observing behavior associated with the inquiry message.

16. A method for a recipient of an electronic mail (“

e-mail”

) message to validate a sender of the e-mail message, comprising;

receiving the e-mail message;

processing a header field of the received e-mail message using a public key of a service to generate a first result;

processing a portion of the received e-mail message to generate a second result, the portion of the e-mail message including at least metadata information regarding the received e-mail message but not including the header field of message processed to generate the first result; and

comparing the first result to the second result to assess the integrity of the received e-mail message.

17. The method of claim 16, wherein:

the metadata information regarding the received e-mail message includes at least information in a header field of the message configured to hold an e-mail address of the sender of the received e-mail message.

18. The method of claim 16, wherein:

the portion of the e-mail message processed to generate the second result includes a body of the received e-mail message.

19. The method of claim 16, wherein:

the second result is a digest of a body of the received e-mail message.

20. The method of claim 16, wherein:

the step of processing the received result-incorporated e-mail message to assess the integrity of the e-mail message includes;

deriving the portion of the request from which the result was determined;

processing the portion of the request and the received e-mail message to assess the integrity of the e-mail message.

21. The method of claim 20, wherein:

deriving the portion of the request from which the result was determined includes processing the result using the service public key to generate a decrypted result;

processing the portion of the request and the received e-mail message to assess the integrity of the e-mail message includes

generating a digest of the message body and processing the generated digest and the decrypted result to assess the integrity of the e-mail message.

22. The method of claim 16, wherein:

the step of processing the received result-incorporated e-mail message to assess the integrity of the e-mail message includes processing the result to determine a level of certification of the e-mail message.

23. The method of claim 16, wherein:

processing the received result-incorporated e-mail message to assess the integrity of the e-mail message is without interacting with a service that created the result, prior to the result having been incorporated into the e-mail message.

24. The method of claim 16, further comprising:

sending a request to obtain contact information about the sender from a service that created the result, prior to the result having been incorporated into the e-mail message; and

receiving the requested contact information about the sender.

25. The method of claim 24, wherein:

the requested contact information about the sender is in a format appropriate to an e-mail client program used by the recipient.

26. The method of claim 24, wherein:

the requested contact information includes at least one link to sender advertising.

27. A computing system configured to be usable by a recipient of an electronic mail (“

e-mail”

) message to validate a sender of the e-mail message, the computing system configured to;

receive the e-mail message;

process a header field of the received e-mail message using a public key of a service to generate a first result;

process a portion of the received e-mail message to generate a second result, the portion of the e-mail message including at least metadata information regarding the received e-mail message but not including the header field of message processed to generate the first result; and

compare the first result to the second result to assess the integrity of the received e-mail message.