System, method and program product for authenticating an e-mail and/or attachment

• US 8,055,729 B2
• Filed: 05/21/2004
• Issued: 11/08/2011
• Est. Priority Date: 05/23/2003
• Status: Expired due to Fees

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Warasawa, Fumiki
• Primary Examiner(s): Pwu; Jeffrey
• Assistant Examiner(s): Sciacca; Scott M
• Application Number:
  US10/851,731
• Publication Number:
  US 20050015457A1
• Time in Patent Office: 2,727 Days
• Field of Search: 709/217, 709/219, 709/225
• US Class Current: 709/219
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system, method and program product for authenticating an e-mail. A user requests to register a visual signature image with a sending mail server, and in response, the sending mail server furnishes a first identifier to the user. Subsequently, the user requests the sending mail server to send an e-mail with the visual signature image and supplies the e-mail and first identifier to the sending mail server. In response, the sending mail server validates the first identifier, and sends the e-mail with a second identifier to a receiving mail server. In response, the receiving mail server validates the second identifier. The second identifier identifies an addressee of the e-mail, and the receiving mail server validates the second identifier by comparing the addressee identified by the acceptance identifier to an addressee within the e-mail. The sending mail server embeds the second identifier in the visual signature image and sends the visual signature image with the embedded second identifier to the receiving mail server. The invention also resides in the image representing an originator of an e-mail and/or an attachment to the e-mail; the image is included in the e-mail, an icon for the attachment or the attachment. The image includes an identity of an originator and an identity of a recipient intended by the originator. The e-mail with the added image is sent to the intended recipient. The image and identities of the originator and recipient authenticate the e-mail and/or the attachment.

Claims

1. A method for authenticating an e-mail, the method comprising the steps of:

a first mail server receiving a request from a user requesting to register a visual signature image with the first mail server, and in response, the first mail server furnishing a first identifier to the user;

subsequently, the first mail server receiving (i) a request from the user requesting the first mail server to send an e-mail with the visual signature image and (ii) the e-mail and first identifier from the user, and in response, the first mail server validating the first identifier, and sending the e-mail with a second identifier to a second mail server, wherein the second identifier identifies an addressee of the e-mail;

the first mail server receiving from the second mail server a request to send the visual signature image embedded with the second identifier; and

the first mail server embedding the second identifier in the visual signature image and sending the visual signature image with the embedded second identifier to the second mail server.

2. The method of claim 1 further comprising the steps of:

the first mail server embedding a third identifier in the visual signature image in response to the step of the user requesting to register the visual signature image; and

wherein

the step of the first mail server embedding the second identifier in the visual signature image comprises the step of the first mail server embedding the second identifier in the visual signature image embedded with the third identifier.

3. The method of claim 1 further comprising the steps of:

the second mail server validating the second identifier;

wherein after the step of the second mail server validating the second identifier, and before the step of the first mail server sending the visual signature image with the embedded second identifier to the second mail server, the second mail server requesting the first mail server to send the visual signature embedded with the second identifier.

4. The method of claim 1 further comprising validating the second identifier by the second mail server;

wherein after the step of the second mail server validating the second identifier and before the step of the first mail server embedding the second identifier in the visual signature image, the second mail server sending the second identifier and an encryption key for the visual signature image embedded with the second identifier to the first mail server.

5. The method of claim 1 wherein the first mail server sends the e-mail with the second identifier to the second mail server, the first mail server includes an identifier of the first mail server.

6. The method of claim 1 further comprising validating the second identifier by the second mail server;

wherein after the second mail server validates the second identifier, the second mail server sends the second identifier and an encryption key to the first mail server; and

when the first mail server sends the visual signature image with the embedded second identifier to the second mail server, the visual signature image with the embedded second identifier is encrypted with the encryption key.

7. The method of claim 1 further comprising the steps of:

the first mail server embedding a third identifier in the visual signature image in response to the step of the user requesting to register the visual signature image;

validating the second identifier by the second mail server; and

wherein

after the second mail server validates the second identifier, the second mail server sends the second identifier and an encryption key to the first mail server; and

when the first mail server sends the visual signature image with the embedded second identifier to the second mail server, the visual signature image is embedded with both the second and third identifiers and is encrypted with the encryption key.

8. The method of claim 1 further comprising the steps of:

an intended recipient of the e-mail requesting the e-mail from the second mail server, and in response, the second mail server furnishing the e-mail with the visual signature image with the second identifier embedded therein.

9. The method of claim 1 further comprising validating the second identifier by the second mail server;

wherein the second identifier identifies an addressee of the e-mail, and wherein the step of the second mail server validating the second identifier comprises the step of the second mail server comparing the addressee identified by the second identifier to an addressee within the e-mail.

10. The method of claim 1 wherein the step of the first mail server embedding the second identifier in the visual signature image comprises the step of the first server incorporating the second identifier in a digital file which defines the visual signature image such that the second identifier is not displayed with the visual signature image, but is digitally readable from the digital file.

11. The method of claim 1 wherein the step of the first mail server embedding the second identifier in the visual signature image comprises the step of the first mail server incorporating the second identifier in a digital file which defines the visual signature image such that the second identifier is displayed with the visual signature image.

12. A computer program product for authenticating an e-mail, the computer program product comprising:

a computer-readable tangible storage device;

first program instructions for execution with a first mail server and responsive to a user request to register a visual signature image with the first mail server, to furnish a first identifier to the user;

second program instructions for execution within the first mailer server and responsive to a user request to send an e-mail with the visual signature image, the request including the first identifier, to validate the first identifier, and if valid, send the e-mail with a second identifier to a second mail server, wherein the second identifier identifies an addressee of the e-mail;

third program instructions for execution within the second mail server to validate the second identifier;

fourth program instructions for execution within the first mail server to receive from the second mail server a request to send the visual signature image embedded with the second identifier; and

fifth program instructions for execution within the first mail server to embed the second identifier in the visual signature image and send the visual signature image with the embedded second identifier to the second mail server; and

wherein

the first, second, third, fourth and fifth program instructions are recorded on the computer-readable tangible storage device.

13. The computer program product of claim 12 further comprising:

sixth program instructions for execution in the first mail server to embed a third identifier in the visual signature image in response to the user request to register the visual signature image; and

wherein

the fifth program instructions embed the second identifier in the visual signature image embedded with the third identifier; and

wherein

the sixth program instructions are recorded on the computer-readable tangible storage device.

14. The computer program product of claim 12 wherein the second program instructions validate the first identifier based on a password of the user.

15. The computer program product of claim 12 wherein the second identifier includes an identity of an intended recipient of the e-mail.

16. The computer program product of claim 12 wherein the second program instructions send the e-mail with the second identifier to the second mail server, the second program instructions include an identifier of the first mail server.

17. The computer program product of claim 12 wherein after the third program instructions validate the second identifier, the third program instructions send the second identifier and an encryption key to the first mail server;

and when the fifth program instructions send the visual signature image with the embedded second identifier to the second mail server, the visual signature image with the embedded second identifier is encrypted with the encryption key.

18. The computer program product of claim 12 further comprising:

sixth program instructions for execution within the first mail server to embed a third identifier in the visual signature image in response to the step of the user requesting to register the visual signature image; and

wherein

after the second program instructions validate the second identifier, the second program instructions send the second identifier and an encryption key to the first mail server; and

when the fifth program instructions send the visual signature image with the embedded second identifier to the second mail server, the visual signature image is embedded with both the second and third identifiers and is encrypted with the encryption key; and

wherein the sixth program instructions are recorded on the computer-readable tangible storage device.

19. The computer program product of claim 12 further comprising:

sixth program instructions for execution within the second mail server and responsive to a request from an addressee of the e-mail to receive the e-mail, to furnish the e-mail with the visual signature image with the second identifier embedded therein; and

wherein

the sixth program instructions are recorded on the computer-readable tangible storage device.

20. The computer program product of claim 12 wherein the second identifier identifies an addressee of the e-mail, and wherein the second program instructions validate the second identifier by comparing the addressee identified by the second identifier to an addressee within the e-mail.

21. The computer program product of claim 12 wherein the fifth program instructions embed the second identifier in the visual signature image by incorporating the second identifier in a digital file which defines the visual signature image such that the second identifier is not displayed with the visual signature image, but is digitally readable from the digital file.

22. The computer program product of claim 12 wherein the fifth program instructions embed the second identifier in the visual signature image by incorporating the second identifier in a digital file which defines the visual signature image such that the second identifier is displayed with the visual signature image.

23. A computer system for authenticating an e-mail, the computer system comprising:

a CPU, a computer readable memory and a computer-readable tangible storage device;

first instructions, responsive to a user request to register a visual signature image with a first mail server, to furnish a first identifier to the user;

second instructions, responsive to a user request to send an e-mail with the visual signature image, the request including the first identifier, to validate the first identifier and send the e-mail with a second identifier to a second mail server, wherein the second identifier identifies an addressee of the e-mail;

third instructions to validate the second identifier;

fourth instructions to receive from the second mail server a request to send the visual signature image embedded with the second identifier; and

fifth instructions to embed the second identifier in the visual signature image and send the visual signature image with the embedded second identifier to the second mail server; and

wherein

the first, second, third, fourth and fifth instructions are stored on the computer-readable tangible storage device for execution by the CPU via the computer readable memory.

24. The system of claim 23 wherein the second identifier identifies an addressee of the e-mail, and wherein the second instructions validates the second identifier by comparing the addressee identified by the second identifier to an addressee within the e-mail.

25. A computer system for authenticating an e-mail, the computer system comprising:

a first mail server that receives a request from a user requesting to register a visual signature image with the first mail server, and in response, the first mail server embeds a first identifier in the visual signature image and furnishes a signature identifier to the user;

the first mail server subsequently receives a send request from the user requesting the first mail server to send an e-mail with the visual signature image and receives the e-mail and signature identifier from the user, and in response, the first mail server validates the signature identifier, and sends the e-mail with an acceptance identifier and a first mail server identifier to a second mail server, and in response, the second mail server validates the acceptance identifier and sends the acceptance identifier to the first mail server, and in response, the first mail server embeds the acceptance identifier in the visual signature image with the embedded first identifier and sends the visual signature image with the embedded acceptance identifier and first identifier, to the second mail server.

26. The computer system of claim 25 further comprising:

the second mail server receives an e-mail request from an intended recipient of the e-mail, and in response, the second mail server furnishes the e-mail with the visual signature image with the acceptance identifier and first identifier embedded therein to the intended recipient.

27. The computer system of claim 25 wherein the acceptance identifier identifies an addressee and a sender of the e-mail.

28. The computer system of claim 25 wherein the acceptance identifier identifies the intended recipient of the e-mail, and wherein the second mail server validates the acceptance identifier by comparing the intended recipient identified by the acceptance identifier to an addressee of the e-mail.

29. The computer system of claim 25 wherein the second mail server sends an encryption key to the first mail server when sending the acceptance identifier to the first mail server;

and

the first mail server encrypts, with the encryption key, the visual signature image embedded with the acceptance identifier and first identifier, such that the first mail server sends the visual signature image with the embedded acceptance identifier and first identifier by sending the encrypted visual signature image embedded with the acceptance identifier and first identifier.

30. The computer system of claim 25 wherein the first mail server validates the signature identifier by checking a user password supplied by the user with the signature identifier.

31. The computer system of claim 25 wherein the acceptance identifier identifies an addressee of the e-mail.