Means and method for controlling the distribution of unsolicited electronic communications

• US 20100215176A1
• Filed: 06/09/2006
• Published: 08/26/2010
• Est. Priority Date: 06/10/2005
• Status: Abandoned Application

• Current Assignee: Lockstep Technologies Pty Ltd
• Original Assignee: Lockstep Technologies Pty Ltd
• Inventors: Wilson, Stephen
• Application Number:
  US11/921,966
• Publication Number:
  US 20100215176A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 65/1079 of unsolicited session attempts, e.g. SPIT
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

Methods, devices, and systems for controlling distribution of unsolicited electronic communications such as bulk email or internet telephony telemarketing calls. A first Public Key (56) of a trusted accrediting body (10) is stored in a storage device (50) of a receiver (1), the trusted accrediting body (10) being trusted by the receiver (1). A sender (40) is issued a second Public Key (79) which chains back to the first Public Key (56). The sender (40) sends an unsolicited communication (62, 64), accompanied by a digital signature corresponding to the second Public Key (79). The receiver (1) verifies the digital signature accompanying a received communication by referring to the first Public Key (56) via the second Public Key (79), and if the digital signature is verified, establishes that the unsolicited communication is not unwelcome.

Claims

1-87. -87. (canceled)

88. A method for controlling distribution of unsolicited electronic communications, the method comprising:

storing in a storage device of a receiver a first Public Key of a trusted accrediting body, the trusted accrediting body being trusted by the receiver;

issuing to a sender a second Public Key, the second Public Key chaining back to the first Public Key;

the sender sending an unsolicited communication having an accompanying digital signature corresponding to the second Public Key; and

upon the receiver verifying the received digital signature by reference to the first Public Key via the second Public Key, establishing that the unsolicited communication is not unwelcome.

89. The method according to claim 88 wherein the digital signature comprises a cryptographic authentication code.

90. The method according to claim 88 wherein the storage device of the receiver comprises at least one of;

a magnetic storage disk; and

, random access memory of a computing device.

91. The method of claim 90 wherein the first Public Key is stored in a Trust List on the storage device.

92. The method according to claim 88 wherein the storage device is portable.

93. The method according to claim 88, wherein the storage device of the receiver comprises a cryptographic device.

94. The method of claim 92 wherein the storage device comprises at least one of a smartcard;

a magnetic stripe card;

a USB drive;

a cryptographic USB drive;

a CD-ROM;

a personal data assistant;

a subscriber identification module (SIM);

a mobile telephone handset;

a hardware security module (HSM) and a network-enabled device.

95. The method of claim 88 wherein the storage device is provided to the receiver by or on behalf of the trusted accrediting body.

96. The method according to claim 88 wherein the electronic communications comprise at least one of email communications, instant messaging communications, short message service (SMS) communications and internet protocol (IP) telephony communications.

97. A method of accrediting a sender in order to control distribution of unsolicited electronic communications, the method comprising issuing to the sender a second Public Key, wherein a trusted accrediting body is trusted by a receiver, and wherein the second Public Key chains back to a first Public Key of the trusted accrediting body stored by a storage device of the receiver.

98. The method according to claim 97 wherein the sender accompanies the unsolicited electronic communications with a digital signature corresponding to the second Public Key, and wherein the digital signature comprises a cryptographic authentication code.

99. A method of controlling receipt of an unsolicited electronic communication by a receiver, the method comprising:

retrieving from a storage device of the receiver a first Public Key of a trusted accrediting body, the trusted accrediting body being trusted by the receiver;

verifying by reference to the first Public Key a digital signature accompanying the unsolicited electronic communication, and if verified establishing that the unsolicited electronic communication is not unwelcome.

100. The method according to claim 99 wherein the digital signature comprises a cryptographic authentication code.

101. The method according to claim 99 wherein the storage device of the receiver comprises at least one of;

a magnetic storage disk; and

, random access memory of a computing device.

102. The method of claim 101 wherein the first Public Key is stored in a Trust List on the storage device.

103. The method according to claim 99 wherein the storage device is portable.

104. The method according to claim 99 wherein the storage device of the receiver comprises a cryptographic device.

105. The method of claim 103 wherein the storage device comprises at least one of a smartcard;

a magnetic stripe card;

a USB drive;

a cryptographic USB drive;

a CD-ROM;

a personal data assistant;

a subscriber identification module (SIM);

a mobile telephone handset;

a hardware security module (HSM) and a network-enabled device.

106. The method of claim 99 wherein the storage device is provided to the receiver by or on behalf of the trusted accrediting body.

107. A computer program for controlling receipt of an unsolicited electronic communication by a receiver, the computer program comprising:

code for retrieving from a storage device of the receiver a first Public Key of a trusted accrediting body, the trusted accrediting body being trusted by the receiver;

code for verifying a digital signature accompanying the unsolicited electronic communication by reference to the first Public Key, and if verified, for establishing that the unsolicited electronic communication is not unwelcome.