System and method for verifying delivery and integrity of electronic messages

• US 7,240,199 B2
• Filed: 02/22/2002
• Issued: 07/03/2007
• Est. Priority Date: 12/06/2000
• Status: Expired due to Fees

• Current Assignee: RPost Communications Limited (RPost International Limited)
• Original Assignee: RPost International Limited
• Inventors: Tomkow, Terrence A.
• Primary Examiner(s): Revak; Christopher
• Assistant Examiner(s): Chai; Longbit
• Application Number:
  US09/991,201
• Publication Number:
  US 20020144154A1
• Time in Patent Office: 1,957 Days
• Field of Search: 713/168, 713/652, 709203-207, 707200-204, 726 3- 6, 726 21- 30, 380/285
• US Class Current: 713/168
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 51/234 for tracking messages
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A server receives a message from a sender and transmits the message to a recipient. The server normally transmits the message in a first path to the recipient. When the sender indicates at a particular position in the message that the message is registered, the server transmits the message in a second path to the recipient. The sender can also provide additional indications in the message to have the server handle the message in other special ways not normally provided by the server. After learning from the recipient or the recipient'"'"'s agent that the message was successfully received, the server creates, and forwards to the sender, an electronic receipt. The receipt includes at least one, and preferably all, of the message and any attachments, a delivery success/failure table listing the receipts, and the receipt times, of the message by the recipient'"'"'s specific agents, and the failure of other agents of the recipient to receive the message and a an encrypted hash of the message and attachments subsequently. By verifying that the digital signature on the sender'"'"'s receipt matches the digital receipt at the server, the server can verify, without retaining the message, that the receipt is genuine and that the message is accurate.

Claims

1. A method of transmitting a message from a sender to a recipient through a server displaced from the recipient, including the steps of:

receiving the message at the server from the sender and receiving an indication at the server from the sender that the sender wishes to have the server send the message to the recipient in a manner special and individual to the recipient and intended for the recipient and not normally provided by the server,

transmitting, from the server to the recipient the message in the manner special and individual to the recipient and not normally followed by the server in accordance with the indication from the sender to the server, an identification and address of the server and an identity of the sender,

receiving at the server from the recipient first information including the identity of the recipient and an indication of the receipt of the message by the recipient and the identification and address of the server and the identity of the sender and

sending to the sender from the server, before any authentication of the message, a copy of the message and the first information received by the server from the recipient,

thereafter sending the information including the message, and a message authentication code from the sender to the server, before any authentication of the message by the server, when the server requests to have the message authenticated and

processing at the server the information transmitted from the sender to the server, without any assistance from the recipient, to authenticate the message.

2. A method as set forth in claim 1 wherein

the transmission from the server to the recipient is in a manner normally followed by the server when the sender does not provide an indication to the server that the sender requests the server to transmit the message in the special and individual manner to the recipient.

3. A method as set forth in claim 1 wherein

the indication received by the server from the recipient includes an identification under the control of the server, of the recipient and any transferring agents through whom the message has passed between the server and the recipient.

4. A method as set forth in claim 3 wherein

the transmission from the server to the recipient is in a normal manner different from the manner special and individual to the recipient and in a manner normally followed by the server when the sender does not provide an indication to the server that the sender requests the server to transmit the message in the special and individual manner to the recipient and different from the manner normally followed by the server and wherein

an encrypted hash of the message is provided by the server to the sender as a plurality of digits in a unique sequence and is sent by the server to the sender with the message after the indication is received by the server from the recipient.

5. A method as set forth in claim 4 wherein

an additional indication is provided to the server in the manner special and individual the recipient and not normally followed by the recipient, with the message from the sender that a high priority should be provided by the server to the sending of the message, in the manner special and individual to the recipient and not normally followed by the server, and wherein

the server provides the high priority to the recipient in sending the message, in the manner special and unique to the recipient, in accordance with the additional indication.

6. A method as set forth in claim 4 wherein

an additional indication is provided to the server with the message from the sender that the sending of the message by the server to the recipient in the manner special and unique to the recipient should be recorded by the server and wherein

the server records the sending of the message, in the manner special and unique to the recipient, to the recipient in accordance with the additional indication.

7. A method as set forth in claim 3, wherein

an encrypted hash of the message is also provided by the server to the sender as a plurality of digits in a unique sequence and is sent by the server to the sender with the message after the indication is received by the server from the recipient but before the message is authenticated by the server.

8. A method as set forth in claim 1 wherein

an additional indication is provided to the server with the message from the sender, in the special and individual manner the recipient, that a high priority should be provided by the server to the sending of the message by the server to the recipient and wherein

the server provides the high priority in sending the message, in the manner special and individual to the recipient and not normally followed by the recipient, in accordance with the additional indication.

9. A method as set forth in claim 1 wherein

an additional indication is provided to the server with the message from the sender that the sending of the message by the server to the recipient, in the manner special and unique to the recipient, should be recorded by the server and wherein

the server records the sending of the message to the recipient, in the manner special and unique to the recipient, in accordance with the additional indication.

10. A method of transmitting a message from a sender to a recipient through a server displaced from the recipient, including the steps at the server of:

receiving the message at the server from the sender,

receiving at the server, with the message from the sender, an indication that the message is to be transmitted by the server in a manner special and individual to the recipient and different from manner normally provided by the server in transmitting messages,

transmitting from the server to the recipient, in the manner special and individual to the recipient and indicated by the sender to the server and different from the manner normally provided by the server in sending messages, the message and an identification and address of the server and an indication representing the identity of the sender,

receiving at the server from the recipient a handshaking and delivery history of the transmission of the message from the server to the recipient,

transmitting from the server to the sender, before any authentication of the message, information including the message and an encrypted hash of the message and the handshaking and delivery history of the message received by the server from the recipient, and

transmitting from the sender to the server the information previously received by the sender from the server when the servers requests to have the message authenticated; and

processing at the server the information transmitted from the sender to the server, without any assistance from the recipient, to authenticate the message.

11. A method as set forth in claim 10, including the steps of:

the indication from the sender to the server being a first indication,

receiving at the server from the sender, with the message from the sender, an indication, in addition to the first indication from the sender of an additional function to be performed in the transmission of the message from the server to the recipient, and

providing the additional function in the transmission of the message from the server to the recipient in accordance with the additional indication provided by the sender to the server.

12. A method as set forth in claim 11 wherein

the message and an encrypted hash of the message are sent by the server to the sender after the server receives from the recipient the handshaking and the delivery history of the transmission of the message from the server to the recipient but before the authentication of the message and wherein

the server does not retain the message and the encrypted hash after it sends the message and the encrypted hash to the sender and before the authentication of the message and wherein

the sender sends the message and the encrypted hash to the server for authentication of the message by the server after the server does not retain the message and the encrypted hash of the message.

13. A method as set forth in claim 10 wherein

the server destroys the message and the encrypted hash of the message after it receives the message from the recipient and after it transmits the message and the encrypted hash of the message to the sender but before the server authenticates the message and wherein

when the sender requests to authenticate the message the message has been sent by the server to the recipient, the sender sends to the server the message and the encrypted hash of the message and wherein

the server operates upon the message and the encrypted hash of the message from the sender to authenticate the message.

14. A method as set forth in claim 10 wherein

the server requests a delivery status notification from the recipient relating to the message when it transmits the message to the recipient and wherein

the server receives the delivery status notification from recipient when it requests the delivery status notification.

15. A method as set forth in claim 11 wherein

the additional indication from the sender to the server provides for a recording of the transmission of the message and wherein

the transmission of the message is recorded in accordance with the additional indication from the sender to the server.

16. A method as set forth in claim 11 wherein

the additional indication from the sender to the server provides for an archiving of the message and

wherein the message is archived in accordance with the additional indication from the sender to the server.

17. A method as set forth in claim 11 wherein

the additional indication from the sender to the server provides for the message to be sent by the server to the recipient by a special route and wherein

the message is sent by the special route from the server to the recipient in accordance with the additional indication from the sender to the server.

18. A method as set forth in claim 11 wherein

the additional indication from the sender to the server provides for the message to be specially handled by the server in the transmission of the message from the server to the recipient and wherein

the message is specially handled by the server in the transmission of the message from the server to the recipient in accordance with the additional indication from the sender to the server.

19. A method as set forth in claim 11 wherein

the additional indication from the sender to the server provides for a transmission of the message with a high priority from the server to the recipient and wherein

the message is transmitted from the server to the recipient with the high priority in accordance with the additional indication from the sender to the server.

20. A method as set forth in claim 11 wherein

the server destroys the message and the encrypted hash of the message after the server transmits to the sender the message, the encrypted hash of the message and the handshaking and delivery history of the message but before it authenticates the message,

the handshaking and delivery history of the message having been provided by the recipient to the server before the server authenticates the message.

21. In a method of transmitting a message electronically to a recipient through a server displaced from the recipient, the steps at the server of:

receiving the message at the server from the sender,

receiving from the sender at the server the message and an encrypted hash of the message and an indication with the message from the sender that the message is to be handled by the server in a manner special and individual to the recipient and different from a normal handling of the message by the server for the recipient, and

handling the message at the server, in the manner special and individual to the recipient in accordance with the indication from the sender to the server,

generating a hash constituting a synopsis of the message in coded form,

encrypting the hash with a particular encryption code to generate an encrypted hash of the message,

transmitting from the server to the sender, before any authentication of the message, information including the message and the encrypted hash of the message received by the server from the recipient,

thereafter transmitting to the server from the sender information including the information previously transmitted from the server to the sender, when the sender requests to have the message authenticated, the transmission occurring before any authentication of the message, and

thereafter processing the information transmitted to the server from the sender to authenticate the message.

22. In a method as set forth in claim 21, the step of:

transmitting at the server the encrypted hash of the message to the sender at the same time, and in the same manner, that the message is transmitted at the server to the sender.

23. In a message as set forth in claim 22 wherein

the message is transmitted by the server in a first path to the recipient, before the authentication of the message, when the indication of the manner special and individual to the recipient is not provided by the sender to the server with the message and wherein

the message is transmitted by the server to the sender in a second path different from the first path when the indication of the manner special and individual to the recipient is provided by the sender to the server before the authentication of the message, and wherein

the message, the encrypted hash of the message, the name of the sender, the identity and address of the server and the identity and address of the recipient are stored at the server after the passage of the message to the recipient, and wherein

the message, the encrypted hash of the message, the name of the sender, the identity and address of the server and the identity and address of the recipient are thereafter transmitted by the server to the sender for storage by the sender before any authentication of the message and wherein

the message and the encrypted hash of the message are thereafter discarded at the server before the authentication of the message and wherein

the message and the encrypted hash of the message are thereafter transmitted from the sender to the server when the sender requests to authenticate the message.

24. A method as set forth in claim 23 wherein

the message and the encrypted hash of the message are destroyed by the server after the message and the encrypted hash of the message are transmitted by the server to the sender before the message is authenticated by the server.

25. A method as set forth in claim 24 wherein

the sender transmits the message and the encrypted hash of the message to the server, before the authentication of the message, when the sender requests to have the message authenticated and wherein

the server processes the message and the encrypted hash of the message to authenticate the message.

26. A method as set forth in claim 25 wherein

the processing of the message and the encrypted hash of the message includes the steps of creating a first hash of the message and decrypting the encrypted hash to create a second hash and comparing the hashes to determine if they are identical.

27. In a method as set forth in claim 22 wherein

the message is handled by the server in a normal manner, different from the manner special and individual the recipient, when the indication is not provided by the sender to the server with the message and wherein

the message is handled by the server in the manner special and individual to the recipient when the indication is provided by the sender to the server with the message.

28. In a method forth in claim 27 wherein

the message is processed by the server in a first path when the indication of the manner special and individual to the recipient and different from a normal handing of the message by the server is not provided by the sender to the server with the message and wherein

the message is processed by the server in a second path different from the first path when the indication of the manner special and individual to the recipient and different from the normal handling of the message by the server is provided by the sender to the server with the message.

29. In a method as set forth in claim 21, the steps of:

providing at the server, after passage of the message to the recipient but before the authentication of the message, the message, the encrypted hash of the message, the name of the sender, the identity and address of the server and the identity and address of the recipient, and

transmitting from the server to the sender for storage by the sender, before the authentication of the message, the message, the encrypted hash of the message, the name of the sender, the identity and address of the server and the identity and address of the recipient, and

thereafter discarding the message and the encrypted hash of the message at the server before the authentication of the message by the server.

30. A method of transmitting a message from a sender to a recipient through a server displaced from the recipient, including the steps of:

providing the message from the sender at the server,

providing at the server a message authentication code and the identity of the sender and the identity and address of the server,

normally transmitting from the server to the recipient in a first route the message and an identity of the sender and an identity and address of the server,

providing an indication at the server from the sender that the message from the sender should be transmitted by the server to the recipient in a second route different from the first route,

transmitting the message from the server to the recipient through the second route in accordance with the indication provided to the server from the sender,

providing at the recipient an indication of the status of the reception at the recipient of the transmittal from the server to the recipient of the message and the identity of the sender and the identity and the address of the server, and

transmitting to the server from the recipient, in the individual one of the first and second routes indicated by the server to the recipient, the message and the identity and address of the recipient and the status of the reception of the message at the recipient and the identity of the sender and the identity and address of the server before any authentication of the message,

sending to the sender from the server, before any authentication of the message, the message, and the message authentication code and the information received by the server from the recipient and

thereafter sending the information including the message, and the message authentication code from the sender to the server before any authentication of the message by the server when the sender requests to have the message authenticated..

31. A method as set forth in claim 30 wherein

the message authentication code constitutes an encrypted hash of the message and the encrypted hash of the message includes a hash of the message and an encryption of the hash and wherein

the message and the encrypted hash of the message and the identity of the sender and the identity and address of the server and the identity and the address of the recipient and the status at the recipient of the reception of the message are transmitted by the server to the sender before any authentication of the message.

32. A method set forth in claim 31 wherein

the sender provides at the server for an additional indication of an additional function to be performed at the server and wherein

the additional function represented by the additional indication provides for the message to be specially handled in the transmission of the message from the server through a second route to the recipient and wherein

the message is specially handled in the transmission of the message from the server through the second route to the recipient in accordance with the additional indication.

33. A method as set forth in claim 30 wherein

the sender provides at the server an additional indication of an additional function to be performed at the server and wherein

the server performs the additional function in accordance with the additional indication from the sender.

34. A method as set forth in claim 33 wherein

the additional indication at the server provides for the message to be specially handled in the transmission of the message from the server to the recipient and wherein

the message is specially handled in the transmission of the message from the server to the recipient in accordance with the additional indication at the server.

37. A method set forth in claim 33 wherein

the server receives additional information from the sender relating to additional functions to be performed by the server on the message in the transmission of the message from the server to the recipient and wherein

the server performs the additional functions on the message, in accordance with the additional information received by the server from the sender, in the transmission of the message from the server to the recipient and wherein

the indication received by the server from the sender constitutes a first coding of the message from the sender and wherein

the additional information received by the server from the sender of the additional function to be performed by the server constitutes a second coding, added to the first coding, of the message from the sender.

38. A method as set forth in claim 37 wherein

the sender transmits the message and the encrypted hash of the message to the server when the sender wishes to have the message authenticated and wherein

the server operates upon the message, and the encrypted hash of the message, transmitted from the sender, to have the message authenticated.

39. A method as set forth in claim 38 wherein

the server provides a first hash of the message and decrypts the encrypted hash to provide a second hash of the message and compares the first and second hashes to authenticate the message.

35. A method of transmitting a message from a sender to a recipient through a server displaced from the recipient, including the steps at the server of:

normally transmitting, to the recipient, through a first path from the server, the message and an identity of the sender and an identity and address of the server,

receiving at the server from the sender an indication that the message should be sent by the server to the recipient through a second path different from the first path,

transmitting at the server to the recipient information including the message and the identity of the sender and the identity and address of the server through the second path different from the first path in accordance with the indication from the sender to the server,

receiving at the server from the recipient an indication of the identity of the sender and the identity and address of the server and the identity and address of the recipient and an indication of the status of the reception of the message at the recipient,

providing at the server the message authentication code and the identity of the sender and the identity and the address of the server, and

transmitting to the sender from the server information including the message and the message authentication code and the information received by the server from the recipient relating to the message before any authentication of the message at the server, and

transmitting to the server from the sender the information including the message and the message authentication code and the information received by the server from the recipient relating to the message when the sender requests the message to be authenticated.

36. A method as set forth in claim 35 wherein

the message authentication is an encrypted hash and wherein

the server destroys the message and the encrypted hash of the message after the server transmits the message and the encrypted hash of the message to the sender but before the server authenticates the message and wherein

the sender thereafter sends the message and the encrypted hash to the server when the sender desires to have the message authenticated after the server has destroyed the message and the encrypted hash and wherein

the server produces hashes from the message and the encrypted hash and wherein

the server authenticates the message by comparing the hashes to determine if they are identical.

40. A method as set forth in claim 35 wherein

the server receives additional information from the sender relating to additional functions to be performed by the server on the message in the transmission of the message from the server to the recipient before the authentication of the message and wherein

the server performs the additional functions on the message, in accordance with the additional information received by the server from the sender, in the transmission of the message from the server to the recipient.

41. A method as set forth in claim 40 wherein

the indication received by the server from the sender constitutes a first coding of the message from the sender and wherein

the additional information received by the server from the sender of the additional functions to be performed by the server constitutes a second coding, added to the first coding, of the message from the sender.