System and method for handling electronic mail mismatches

• US 8,943,156 B2
• Filed: 05/30/2013
• Issued: 01/27/2015
• Est. Priority Date: 06/23/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Brown, Michael Kenneth, Brown, Michael Stephen, Segato, Timothy Lee
• Primary Examiner(s): Hussain, Tauqir
• Application Number:
  US13/905,207
• Publication Number:
  US 20130268607A1
• Time in Patent Office: 607 Days
• Field of Search: 713/156, 709/245, 709/206
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 61/4555 Directories for electronic mail or instant messaging
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A system and method for handling e-mail address mismatches between the address contained within a user'"'"'s certificate or certificate chain, and the account address actually being used is disclosed. In order to resolve address mismatches a canonical or generic domain name or user name may, for example, be used as a lifelong address of a user that is contained in the user'"'"'s certificate. Upon detection of an address mismatch, the system and method disclosed herein may automatically re-check the certificate or search for a certificate containing the canonical or generic domain name and/or user name to attempt to resolve the mismatch.

Claims

1. A method, by a wireless communication device, to resolve address mismatches when searching for a public key certificate of a user, the method comprising:

searching for the public key certificate using an email address of the user, the email address having a first username and a first domain name;

receiving a canonical or generic domain name;

substituting the canonical or generic domain name in the email address of the user to form a second email address; and

searching for the certificate using the second email address,

wherein the canonical or generic domain name is supplied to the wireless communication device according to an IT policy in place on a system for the device.

2. The method of claim 1, further comprising:

finding a certificate containing the second email address.

3. The method of claim 2, further comprising:

encrypting a message using the found certificate; and

sending the encrypted message to the user.

4. The method of claim 2, further comprising:

verifying a signature of the user using the found certificate,

wherein the signature occurs in an electronic message received from the user.

5. A wireless communication device configured to resolve address mismatches when searching for a public key certificate of a user, wherein a processor of the device is configured to:

search for the public key certificate using an email address of the user, the email address having a first username and a first domain name;

receive a canonical or generic domain name;

substitute the canonical or generic domain name in the email address of the user to form a second email address; and

search for the certificate using the second email address,

wherein the canonical or generic domain name is supplied to the wireless communication device according to an IT policy in place on a system for the device.

6. The device of claim 5, wherein the processor is further configured to:

find a certificate containing the second email address.

7. The device of claim 6, wherein the processor is further configured to:

encrypt a message using the found certificate; and

send the encrypted message to the user.

8. The device of claim 6, wherein the processor is further configured to:

verify a signature of the user using the found certificate,

wherein the signature occurs in an electronic message received from the user.

9. A non-transitory computer-readable storage medium for storing instructions for resolving address mismatches when searching for a public key certificate of a user, the instructions for execution by a processor of a wireless communication device, wherein the instructions configure the processor to:

search for the public key certificate using an email address of the user, the email address having a first username and a first domain name;

receive a canonical or generic domain name;

substitute the canonical or generic domain name in the email address of the user to form a second email address; and

search for the certificate using the second email address,

wherein the canonical or generic domain name is supplied to the wireless communication device according to an IT policy in place on a system for the device.

10. The medium of claim 9, wherein the instructions further configured the processor to:

find a certificate containing the second email address.

11. The medium of claim 10, wherein the instructions further configured the processor to:

encrypt a message using the found certificate; and

send the encrypted message to the user.

12. The medium of claim 10, wherein the instructions further configured the processor to:

verify a signature of the user using the found certificate,

wherein the signature occurs in an electronic message received from the user.