Methods and apparatus for controlling the transmission and receipt of email messages

• US 7,380,126 B2
• Filed: 05/31/2002
• Issued: 05/27/2008
• Est. Priority Date: 06/01/2001
• Status: Active Grant

• Current Assignee: Truemail Technologies, LLC
• Original Assignee: Charles Call, James D. Logan
• Inventors: Call, Charles G., Logan, James D.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US10/160,708
• Publication Number:
  US 20020181703A1
• Time in Patent Office: 2,188 Days
• Field of Search: 713/176, 713161-612
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Methods and apparatus for identifying unwanted email messages by transmitting metadata with an outbound email message that indicates the total number of email messages sent by that sender in a predetermined time period, or alternatively indicates the total number of email messages which are equivalent to the outgoing message that have been sent. In addition the metadata may include an identification of the sender and a “pledge” made byte sender. A pledge may take the form of a binding commitment from the sender that the information contained in the metadata is accurate, and/or that the sender promises to abide by predetermined good conduct rules designed to limit unwanted email. The outgoing message may be further signed by the sender with a digital signature that provides means for verifying the content of the message and the pledge as well as the identity of the sender.

Claims

1. The method for identifying unwanted email messages comprising, in combination, the steps of:

at an email transmitting location,

forming metadata containing a unique identification of the sender of a given email message and an indication of the number of different recipients to whom an equivalent of said given email message is addressed, said metadata further manifesting a legally binding promise by said sender that the transmission of said given email message conforms to one or more rules of good conduct which prohibit the transmission of unwanted and unsolicited email, and

encrypting said given email message and said metadata using a private key value known only to the sender to form a digital signature that is transmitted alone with said given message to said receiving location, and

at a receiving location,

decrypting said digital signature to validate said message and metadata using a public key value provided by said sender, and

presenting said given email message to its intended recipient in a manner that distinguishes said given email from other email messages based on said metadata.

2. The method for identifying unwanted email as set forth in claim 1 wherein said indication of the number of different recipients is formed by comparing said given email messages with a plurality of messages previously transmitted by said sender to identify other email messages that are substantially equivalent to said given email message and forming a combined count of the recipients of said given message and the recipients of each of said messages that are substantially equivalent to said given email message.

3. The method for identifying unwanted email as set forth in claim 2 wherein said indication specifies whether or not said combined count is less than a predetermined threshold count.

4. The method for distinguishing a given email message from unwanted and unsolicited email messages comprising, in combination, the steps performed by or on behalf of the sender of said given mail message comprising:

processing the content of said given email message to form an encrypted digital signature which authenticates the content of said given email message and the identity of the sender of said email message and further manifests a legally binding promise by said sender that said given email message email conforms to one or more rules of good conduct which prohibit the transmission of said unwanted and unsolicited email messages, said step of processing the content of said given message to form an encrypted digital signature comprising, in combination, the substeps of;

obtaining a digital certificate from a certification authority to obtain a private key and a public key, said certification authority publishing said digital certificate which may thereafter be accessed by a recipient to obtain said public key,

processing said content of said given email message employing a hash function to form condensed digest of said content; and

encrypting said digest using said private key to form said digital signature whereby said recipient may decrypt said digital signature using said public key as verified by said digital certificate to authenticate said message, to confirm the identity of said sender and to verify the existence of said legally binding promise, and

transmitting said email message and said digital signature to said recipient.

5. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein said digital signature manifests a promise by said sender that said given email message or an equivalent thereof have been transmitted to no more than a predetermined number of other recipients.

6. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 5 further comprising the step of comparing said email message with other messages previously transmitted by or on behalf of said sender to automatically prevent the transmission of said email message or the equivalent thereof to more than said predetermined number of other recipients.

7. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein said digital signature manifests a promise by said sender that said given email message does not solicit business or contain advertising.

8. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein said digital signature manifests a promise by said sender that said sender has sent email messages to no more than a stated number of recipients during a specified period of time.

9. The method for distinguishing a given email, message from unwanted and unsolicited email messages as set forth in claim 4 wherein said digital signature manifests a promise by said sender that said given email message is being sent to said recipient in response to a prior request received from said recipient or a permission granted by said recipient.

10. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein said digital signature manifests a promise by said sender not to transmit unsolicited email to one or more specified email addresses supplied by a requestor that does not want to receive unsolicited email from said sender directed to said one or more specified email addresses.

11. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein, as a precondition for obtaining said digital certificate from said certification authority, said sender agrees to obey said one or more rules of good conduct.

12. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 11 wherein said digital certificate as published in said repository identifies or describes said legally binding promise by said sender.

13. The method for distinguishing a given email message from unwanted and unsolicited email messages as set forth in claim 4 wherein said content of said message includes data which identifies or describes said legally binding promise.