TECHNIQUES TO VERIFY MESSAGE AUTHENTICITY

• US 20200137074A1
• Filed: 12/20/2019
• Published: 04/30/2020
• Est. Priority Date: 03/14/2016
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: ZHAO, Hang
• Granted Patent: US 10,887,321 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Techniques for verifying message authenticity is provided. In some implementations, a verification request to verify authenticity of a first message is received from a user computing device. The verification request includes a first user identifier and verification information. A delivery message record is obtained. The delivery message record includes a plurality of entries associated with one or more messages sent to one or more user computing devices. Each entry includes a user identifier and feature information of a respective message of the one or more messages. At least one entry that has a second user identifier matching the first user identifier is identified. In response to determining that the feature information of the identified at least one entry matches the verification information from the verification request, a verification message is provided to the user computing device. The verification message indicates that authenticity of the first message is verified.

Claims

1. A computer-implemented method executed by one or more computers, the method comprising:

receiving, by the one or more computers and from a user computing device, a verification request to verify authenticity of a first message received by the user computing device, the verification request including a first user identifier and verification information;

obtaining, by the one or more computers, a delivery message record that includes a plurality of entries associated with one or more messages sent to one or more user computing devices, each entry of the plurality of entries including a user identifier and feature information of a respective message of the one or more messages; and

identifying, by the one or more computers, at least one entry of the plurality of entries that has a second user identifier that matches the first user identifier, and in response;

determining, by the one or more computers, that the feature information of the identified at least one entry matches the verification information from the verification request, and

in response to determining that the feature information matches the verification information, providing a verification message to the user computing device, the verification message indicating that authenticity of the first message is verified.

2. The computer-implemented method of claim 1, further comprising:

determining an anti-forgery code of the first message based on a message identifier of the first message,

wherein determining that the feature information matches the verification information includes comparing the anti-forgery code of the first message to a respective anti-forgery of an entry of the at least one entry.

3. The computer-implemented method of claim 2, wherein determining the anti-forgery code of the first message comprises:

determining the message identifier and a time value by parsing the verification information, the time value representing a time when the first message was sent to the user computing device;

determining a hash value by applying a hash algorithm on the message identifier and the time value; and

assigning one or more digits of the hash value as the anti-forgery code of the first message.

4. The computer-implemented method of claim 1, wherein the delivery message record is obtained by accessing a delivery message record table that maps a plurality of messages to a plurality of user identifiers, a plurality of anti-forgery codes, and a plurality of feature values determined based on applying a digest algorithm on message content of the first message.

5. The computer-implemented method of claim 1, wherein the verification information includes at least one of a message content of the first message, information of a channel through which the first message was received by the user computing device, and a feature value that is determined by applying a digest algorithm on the message content.

6. The computer-implemented method of claim 1, wherein the first user identifier includes at least one of an identifier of the user computing device, an e-mail address, and a user name in an instant messaging system.

7. The computer-implemented method of claim 1, further comprising parsing the verification request based on a parsing method to extract the first user identifier and the verification information.

8. The computer-implemented method of claim 7, wherein the parsing method used for parsing the verification request depends on a channel through which the first message was transferred to the user computing device.

9. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, from a user computing device, a verification request to verify authenticity of a first message received by the user computing device, the verification request including a first user identifier and verification information;

obtaining a delivery message record that includes a plurality of entries associated with one or more messages sent to one or more user computing devices, each entry of the plurality of entries including a user identifier and feature information of a respective message of the one or more messages; and

identifying at least one entry of the plurality of entries that has a second user identifier that matches the first user identifier, and in response;

determining that the feature information of the identified at least one entry matches the verification information from the verification request, and

in response to determining that the feature information matches the verification information, providing a verification message to the user computing device, the verification message indicating that authenticity of the first message is verified.

10. The non-transitory, computer-readable medium of claim 9, further comprising:

determining an anti-forgery code of the first message based on a message identifier of the first message,

wherein determining that the feature information matches the verification information includes comparing the anti-forgery code of the first message to a respective anti-forgery of an entry of the at least one entry.

11. The non-transitory, computer-readable medium of claim 10, wherein determining the anti-forgery code of the first message comprises:

determining the message identifier and a time value by parsing the verification information, the time value representing a time when the first message was sent to the user computing device;

determining a hash value by applying a hash algorithm on the message identifier and the time value; and

assigning one or more digits of the hash value as the anti-forgery code of the first message.

12. The non-transitory, computer-readable medium of claim 9, wherein the delivery message record is obtained by accessing a delivery message record table that maps a plurality of messages to a plurality of user identifiers, a plurality of anti-forgery codes, and a plurality of feature values determined based on applying a digest algorithm on message content of the first message.

13. The non-transitory, computer-readable medium of claim 9, wherein the verification information includes at least one of a message content of the first message, information of a channel through which the first message was received by the user computing device, and a feature value that is determined by applying a digest algorithm on the message content.

14. The non-transitory, computer-readable medium of claim 9, wherein the first user identifier includes at least one of an identifier of the user computing device, an e-mail address, and a user name in an instant messaging system.

15. The non-transitory, computer-readable medium of claim 9, further comprising parsing the verification request based on a parsing method to extract the first user identifier and the verification information.

16. The non-transitory, computer-readable medium of claim 15, wherein the parsing method used for parsing the verification request depends on a channel through which the first message was transferred to the user computing device.

17. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising;

receiving, from a user computing device, a verification request to verify authenticity of a first message received by the user computing device, the verification request including a first user identifier and verification information;

obtaining a delivery message record that includes a plurality of entries associated with one or more messages sent to one or more user computing devices, each entry of the plurality of entries including a user identifier and feature information of a respective message of the one or more messages; and

identifying at least one entry of the plurality of entries that has a second user identifier that matches the first user identifier, and in response;

determining that the feature information of the identified at least one entry matches the verification information from the verification request, and

in response to determining that the feature information matches the verification information, providing a verification message to the user computing device, the verification message indicating that authenticity of the first message is verified.

18. The computer-implemented system of claim 17, further comprising:

determining an anti-forgery code of the first message based on a message identifier of the first message,

wherein determining that the feature information matches the verification information includes comparing the anti-forgery code of the first message to a respective anti-forgery of an entry of the at least one entry.

19. The computer-implemented system of claim 18, wherein determining the anti-forgery code of the first message comprises:

determining the message identifier and a time value by parsing the verification information, the time value representing a time when the first message was sent to the user computing device;

determining a hash value by applying a hash algorithm on the message identifier and the time value; and

assigning one or more digits of the hash value as the anti-forgery code of the first message.

20. The computer-implemented system of claim 17, further comprising parsing the verification request based on a parsing method to extract the first user identifier and the verification information, wherein the parsing method depends on a channel through which the first message was transferred to the user computing device.