System and method for preventing delivery of unsolicited and undesired electronic messages by key generation and comparison

• US 8,347,095 B2
• Filed: 06/17/2010
• Issued: 01/01/2013
• Est. Priority Date: 05/04/2004
• Status: Active Grant

• Current Assignee: Email Patents LLC
• Original Assignee: Message Level LLC
• Inventors: Kim, Leslie J., Cunningham, Brian
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US12/817,860
• Publication Number:
  US 20110088097A1
• Time in Patent Office: 929 Days
• Field of Search: 709206-207, 713/170, 713/179, 713/181, 726/22
• US Class Current: 713/170
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A sending device prepares a key for each electronic message sent by the device by applying an algorithm to specified data in the message and then incorporates the key in the message. A receiving device, upon receipt of an electronic message, locates the incorporated key and the data from which a sending device practicing the invention would have prepared it. The receiving device communicates a confirmation request to the purported sending device which contains the key and the data for its preparation. The sending device receives the confirmation messages and prepares a comparison key by applying the algorithm to the data in the confirmation request. The sending device replies to the confirmation request confirming that the sending device sent the message if the comparison key matches the key in the confirmation request and otherwise responds with a denial.

Claims

1. A method executable at least by a sending module comprising:

receiving, at the sending module, a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string purportedly generated by application of an algorithm to a portion of the second electronic message and further including the portion of the second electronic message;

generating, at the sending module, a second data string, different from the first data string, by application of an algorithm to the portion of the second electronic message included in the first electronic message;

comparing, at the sending module, the first data string to the second data string; and

upon determining that the first data string does not match the second data string, responding to the first electronic message, denying the second electronic message was sent on behalf of the originator identified in the second electronic message due to the originator using a false originating address,

wherein the algorithm applied to the portion of the second electronic message is selected from a plurality of algorithms based on one of time associated with the second electronic message or data in the portion of the second electronic message, and

wherein the algorithm applied to the portion of the second electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

2. The method of claim 1, wherein the second electronic message includes one of an email, text message, VoIP message, or instant message.

3. The method of claim 1, wherein the portion of the second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of the second electronic message.

4. The method of claim 1, wherein responding to the first electronic message includes responding with a return electronic message.

5. The method of claim 4, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

6. The method of claim 1, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

7. The method of claim 1, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the second electronic message.

8. The method of claim 7, wherein the algorithm applied to the portion of the first electronic message is modified periodically.

9. A method executable at least by a sending module comprising:

receiving, at the sending module, a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string generated by application of an algorithm to a portion of the second electronic message and further including the portion of the second electronic message;

generating a second data string, different from the first data string, by application of an algorithm to the portion of the second electronic message included in the first electronic message;

comparing the first data string to the second data string; and

upon determining that the first data string matches the second data string, responding to the first electronic message, affirming the originator did not use a false originating address,

wherein the algorithm applied to the portion of the second electronic message is selected from a plurality of algorithms based on one of time associated with the second electronic message or data in the portion of the second electronic message, and

wherein the algorithm applied to the portion of the second electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

10. The method of claim 9, wherein the second electronic message includes one of an email, text message, VoIP message, or instant message.

11. The method of claim 9, wherein the portion of the second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said electronic message.

12. The method of claim 9, wherein responding to the first electronic message includes responding with a return electronic message.

13. The method of claim 12, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

14. The method of claim 9, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

15. The method of claim 9, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the second electronic message.

16. The method of claim 15, wherein the algorithm applied to the portion of the first electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

17. A method executable at least by a sending device, a receiving device, and a confirmation device comprising:

at the receiving device, receiving from the sending device a first electronic message authorized by an originator and directed to an intended recipient, the first electronic message containing an identifier associated with the originator and further containing a first data string generated by application of a first algorithm to a portion of the first electronic message;

sending to the confirmation device a second electronic message that includes a request to confirm that the first electronic message was authorized by the originator associated with the identifier, the second electronic message including the first data string and the portion of the first electronic message;

receiving from the confirmation device a response to the second electronic message affirming the first electronic message was authorized by the originator associated with the identifier;

allowing the first electronic message to be further processed according to rules for processing of confirmed electronic messages directed to the intended recipient;

receiving from the sending device a third electronic message authorized by the originator, the third electronic message containing the identifier and further containing a second data string generated by application of a second algorithm to a portion of the third electronic message; and

sending to the confirmation device a fourth electronic message that includes a request to confirm that the third electronic message was authorized by the originator associated with the identifier, the fourth electronic message including the second data string and the portion of the third electronic message,

wherein the first algorithm applied to the portion of the first electronic message or the second algorithm applied to the third electronic message is selected from a plurality of algorithms based on one of time associated with the first electronic message or the third electronic message or data in the portion of the first electronic message or the third electronic message, and

wherein the first algorithm applied to the portion of the first electronic message or the second algorithm applied to the third electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

18. The method of claim 17, wherein the first electronic message or of the third electronic message includes one of an email, text message, VoIP message, or instant message.

19. The method of claim 17, wherein the portion of the first electronic message or of the third electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said first electronic message.

20. The method of claim 17, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the first electronic message or of the third electronic message.

21. The method of claim 20, wherein the first algorithm applied to the portion of the first electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

22. The method of claim 21, wherein the second algorithm applied to the portion of the third electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

23. The method of claim 20, wherein the second algorithm applied to the portion of the third electronic message is modified periodically.

24. A method executable at least by a sending device, a receiving device, and a confirmation device comprising:

at the receiving device, receiving from the sending device a first electronic message authorized by an originator and directed to an intended recipient, the first electronic message containing an identifier associated with the originator and further containing a first data string generated by application of a first algorithm to a portion of the first electronic message;

sending to the confirmation device a second electronic message that includes a request to confirm that the first electronic message was authorized by the originator associated with the identifier, the second electronic message including the first data string and the portion of the first electronic message;

receiving from the confirmation device a response to the second electronic message affirming the first electronic message was authorized by the originator associated with the identifier;

allowing the first electronic message to be further processed according to rules for processing of confirmed electronic messages directed to the intended recipient;

receiving from the sending device a third electronic message authorized by the originator, the third electronic message containing the identifier and further containing a second data string generated by application of a second algorithm to a portion of the third electronic message; and

sending to the confirmation device a fourth electronic message that includes a request to confirm that the third electronic message was authorized by the originator associated with the identifier, the fourth electronic message including the second data string and the portion of the third electronic message,

wherein the first algorithm applied to the portion of the first electronic message differs from the second algorithm applied to the portion of the third electronic message.

25. The method of claim 24, wherein the first, second, third, or fourth electronic messages includes one of an email, text message, VoIP message, or instant message.

26. The method of claim 24, wherein the portion of the first electronic message or of the third electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of the second electronic message.

27. The method of claim 24, wherein responding to the second electronic message or the fourth electronic message includes responding with a return electronic message.

28. The method of claim 27, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

29. The method of claim 24, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

30. The method of claim 24, wherein receiving the third electronic message is performed by a confirming device, the confirming device receiving the portion of the fourth electronic message only with the third electronic message.

31. The method of claim 24, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the first electronic message or the third electronic message.

32. The method of claim 31, wherein the algorithm applied to the portion of the first electronic message or of the third electronic message is modified periodically.