Methods and systems for authenticating communications

• US 20020087861A1
• Filed: 12/26/2001
• Published: 07/04/2002
• Est. Priority Date: 12/27/2000
• Status: Abandoned Application

• Current Assignee: Nettrust Israel Limited
• Original Assignee: Nettrust Israel Limited
• Inventors: Lipson, Hod, Segev, Alon
• Application Number:
  US10/025,656
• Publication Number:
  US 20020087861A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Provided are methods and systems for authenticating communications. An intermediary authenticates one or more communications by transferring communications and by storing information about the communications. The stored information at least includes times associated with the communications and at least part of the contents of the communications. The stored information may in some cases be later retrieved in order to provide authentication of the communications, for example in the case of a dispute involving one or more parties to the communications.

Claims

1. A method for authenticating electro-magnetically propagated communications, comprising the steps of:

an intermediary receiving at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

said intermediary transferring said at least one communication to said at least one recipient; and

said intermediary storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

2. The method of claim 1, wherein said transcript is configured to serve as evidence in the case of a dispute involving at least one party from a group including:

said at least one sender and said at least one recipient.

3. The method of claim 1, wherein said at least part of a content includes all of a content of said at least one communication.

4. The method of claim 1, further comprising prior to the step of receiving at least one communication the steps of:

said intermediary receiving information from said at least one recipient about said at least one communication, said information identifying both said at least one sender and said at least one communication; and

said intermediary contacting said at least one sender and requesting said at least one communication.

5. The method of claim 4, wherein said information is a URL.

6. The method of claim 4, further comprising the step of:

said intermediary receiving confirmation that said at least one communication is as desired from said at least one recipient after the step of transferring and prior to the step of storing.

7. The method of claim 1, further comprising the step of:

said intermediary receiving information identifying said at least one recipient.

8. The method of claim 7, wherein said information identifying said at least one recipient is at least one from a group including:

email address, mail address, post office box, fax number, telephone number, Internet Protocol (IP), URL (uniform resource locator), Smalltalk address, Ethernet address, caller identification (ID), name, client identification, diverter identification, password, identification number, electronic signature, digital signatures, retina fingerprint handprint, biometric signature, voice signature, and other signature.

9. The method of claim 7, wherein said information identifying said at least one recipient is a protocol specific identifier.

10. The method of claim 7, wherein said information identifying said at least one recipient is embedded in said at least one communications and wherein said step of receiving information includes the step of:

recovering said information identifying said at least one recipient from said at least one communication.

11. The method of claim 1, further comprising the step of:

said intermediary establishing a connection between said at least one sender and said at least one recipient and said intermediary prior to the step of receiving.

12. The method of claim 1, wherein said transcript also includes information identifying said at least one sender.

13. The method of claim 12, wherein said information identifying said at least one sender is at least one from a group including:

email address, mail address, post office box, fax number, telephone number, Internet Protocol (IP), URL (uniform resource locator), Smalltalk address, Ethernet address, caller identification (ID), name, client identification, diverter identification, password, identification number, electronic signature, digital signatures, retina fingerprint, handprint, biometric signature, voice signature, and other signature.

14. The method of claim 12 wherein said information identifying said at least one sender is a protocol specific identifier.

15. The method of claim 1, wherein said transcript also includes information identifying said at least one recipient.

16. The method of claim 15, wherein said information identifying said at least one recipient is at least one from a group including:

email address, mail address, post office box, fax number, telephone number, Internet Protocol (IP), URL (uniform resource locator), Smalltalk address, Ethernet address, caller identification (ID), name, client identification, diverter identification, password, identification number, electronic signature, digital signatures, retina fingerprint, handprint, biometric signature, voice signature, and other signature.

17. The method of claim 15, wherein said information identifying said at least one recipient is a protocol specific identifier.

18. The method of claim 1, further comprising the steps of:

said intermediary sending a confirmation of said transferring step to at least one from a group including said at least one sender and said at least one recipient.

19. The method of claim 1, wherein said at least one communication is encrypted.

20. The method of claim 1, wherein said at least one communication includes at least one communication whose sender in at least one other communication of said at least one communication is a recipient.

21. The method of claim 20, wherein at least two of said at least one communication together establish intent which can not be deduced from examining each of said at least one communication separately.

22. The method of claim 1, wherein said at least one communication includes the same sender for all of said at least one communication.

24. The method of claim 23, wherein said at least one communication is mail.

28. The method of claim 27, wherein said step of transferring includes the step of:

transferring information related to said at least one recipient for use by said intermediary as part of said authenticating process in forwarding said at least one communication to said at least one recipient.

29. The method of claim 28, wherein said step of transferring information includes the step of:

embedding said information related to said at least one recipient in said at least one communication, said information when recovered allowing said intermediary as part of said authenticating process to forward said at least one communication to said at least one recipient.

30. The method of claim 27, further comprising the step of:

said diverter transmitting a diverter identification to said intermediary.

23. A method for authenticating communications, comprising the steps of:

an intermediary receiving at least one communication from at least one sender which is intended for at least one recipient;

said intermediary transferring said at least one communication to said at least one recipient; and

said intermediary storing a transcript including at last part of a content of said at least one communication and a time associated with said at least one communication;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

25. A method for authenticating electro-magnetically propagated communications, comprising the steps of:

a trusted intermediary receiving at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

said intermediary transferring said at least one communication to said at least one recipient; and

said intermediary storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

said transcript being configured to serve as evidence in the case of a dispute involving at least one party from a group including;

said at least one sender and said at least one recipient;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

26. A method for providing authentication of electro-magnetically propagated communications, comprising the steps of:

receiving an inquiry from an inquirer about at least one electro-magnetically propagated communication which involving a trusted intermediary;

retrieving a transcript stored by said intermediary, said transcript including at least part of a content of said at least one communication and a time associated with said at least one communication; and

transferring said script to said inquirer;

wherein said transferred transcript is used as evidence in a dispute involving at least one party from a group including;

at least one sender and at least one recipient of at least one of said at least one communication;

wherein said stored transcript was stored for a period complying with at least one from the group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said period of storing, said transcript could not be modified by any of said at least one sender nor by any of said at least one recipient.

27. A method for diverting electro-magnetically propagated communications for authentication, comprising the steps of:

a diverter receiving at least one electro-magnetically propagated communication from at least one sender which is intended for at least one recipient; and

said diverter transferring said at least one communication to an intermediary;

wherein said intermediary authenticates said at least one communication by an authenticating process including storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication for a storing period complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said storing period said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

31. An apparatus for diverting electro-magnetically propagated communications for authentication, comprising:

a replacer configured to replace locations of recipients or derivatives thereof with a location of an intermediary;

and a diverter relay configured to transfer electro-magnetically propagated communications for said recipients to said intermediary, in accordance with said replaced location;

wherein said intermediary authenticates said communications by an authenticating process including storing transcripts including at least part of contents of said communications and times associated with said communications for storing periods complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all senders and all recipients of corresponding communications, and wherein during said storing periods said transcripts can not be modified by any of said senders nor by any of said recipients.

32. The apparatus of claim 31, further comprising:

a memory configured to store said location of said intermediary;

wherein said replacer accesses said memory to retrieve said location of said intermediary.

33. The apparatus of claim 31, further comprising:

an embedder configured to embed said locations of said recipients or derivatives thereof in said communications, said locations or said derivatives when recovered allowing said intermediary as part of said authenticating process to transfer said communications to said recipients.

34. The apparatus of claim 31 wherein said diverter relay is also configured to transfer said locations of said recipients or derivatives thereof to said intermediary, there by enabling said intermediary as part of said authenticting process to transfer said communications to said recipients.

35. The apparatus of claim 31, further comprising:

a memory configured to store an identification of the apparatus, wherein said diverter relay is also configured to transfer said identification to said intermediary.

36. The apparatus of claim 31, wherein said apparatus is included in a same unit as a source/originator party.

37. The apparatus of claim 36, wherein said unit further comprises a switch configured to provide at least one mode of operation, with a first provided mode causing diversion to said intermediary, and a second provided mode allowing said communications to pass through to said recipients.

38. The apparatus of claim 36, wherein said unit further comprises an indicator configured to indicate that diversion to said intermediary is in progress.

39. The apparatus of claim 36, wherein said unit further comprises an interface port configured for reprogramming an identification for said apparatus.

40. The apparatus of claim 39, wherein said interface port is also configured for testing said apparatus.

41. The apparatus of claim 39, wherein said interface port is also configured for reprogramming said location of said intermediary.

42. The apparatus of claim 31, wherein said apparatus further comprises a switch configured to provide at least one mode of operation, with a first provided mode causing diversion to said intermediary, and a second provided mode allowing said communications to pass through to said recipients.

43. The apparatus of claim 31 wherein said apparatus further comprises an indicator configured to indicate that diversion to said intermediary is in progress.

44. The apparatus of claim 31 wherein said apparatus further comprises an interface port configured for reprogramming an identification for said apparatus.

45. The apparatus of claim 44, wherein said interface port is also configured for testing said apparatus.

46. The apparatus of claim 44, wherein said interface port is also configured for reprogramming said location of said intermediary.

47. The apparatus of claim 31, wherein said apparatus is portable.

48. The apparatus of claim 31, wherein said apparatus is included in a component of a communication network.

49. The apparatus of claim 48, wherein said component is at least one from a group including:

network card hardware, network software card drivers, routers, firewalls, and operating systems.

50. A system for authenticating electro-magnetically propagated communications, comprising:

a relay configured to transfer electro-magnetically propagated communications from sender to recipients;

a timestamp module configured to associate times with said communications; and

a storage configured to store transcripts including at least part of contents of said communications and said times associated with said communications,

wherein said storage is configured to store each said transcripts for a storing period that complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all senders and all recipients of communications corresponding to said each said transcripts; and

wherein said storage is configured to prevent said transcripts from being modified by said senders and said recipients during said storing period.

51. The system of claim 50, further comprising:

a parser configured to parse received communications in order to recover embedded information about recipients of said communications.

52. The system of claim 50, further comprising:

a request processor configured to process requests from said recipients to obtain communications from said senders.

53. The system of claim 50, wherein said storage is configured to also store as part of said transcripts information identifying at least one from a group including said sender and said recipients.

54. The system of claim 50, further comprising a biometric device for verifying biometric identification of at least one from a group including said senders and said recipients.

55. A system for authenticating communications, comprising:

a relay configured to transfer communications from senders to recipients;

a timestamp module configured to associate times with said communications; and

a storage configured to store transcripts including at least part of contents of said communications and said times associated with said communications,

wherein said storage is configured to store each said transcript for a storing period that complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all senders and all recipients of communications corresponding to said each said transcripts, and wherein said storage is configured to prevent said transcripts from being modified by said senders and said recipients during said storing period.

59. The system of claim 58, wherein said intermediary is a server, said at least one source is an HTTP server, and said at least one destination is a client browser.

60. The system of claim 58, wherein said at least one source is a fax machine, said at least one destination is a fax machine and said communications are transferred by fax

61. The system of claim 58, wherein said at least one originator party and said at least one auxiliary party are configured to connect to one another in a multi-party call including said intermediary.

62. The system of claim 58, further comprising:

at least one diverter between said at least one source/originator party and said intermediary, configured to divert said electro-magnetically propagated communications for said at least one destination/auxiliary party from said at least one source/originator party to said intermediary.

63. The system of claim 62, wherein said at least one source is a fax machine, said at least one destination is a fax machine and said communications are transferred by fax

64. The system of claim 62, wherein said at least one source is an email client, said at least one diverter shares a unit with said at least one source, and said at least one destination is an email client.

65. The system of claim 62, wherein said intermediary is a proxy server for said at least one source, said at least one source is a client browser, and said at least one diverter shares a unit with said at least one source.

66. The system of claim 62, wherein said at least one originator party is connected to an Ethernet cable in line with said at least one diverter.

67. The system of claim 62, wherein said at least one originator party and said at least one auxiliary party are configured to connect to one another in a multi-party call including said intermediary.

69. The system of claim 68, wherein said at least one diverter is a regular courier/post office or processing center, said intermediary is a secure processing center and said communications are transferred between said at least one source and said at least one destination by courier or mail.

56. A system for authenticating electro-magnetically propagated communications, comprising:

a relay configured to transfer electro-magnetically propagated communications from senders to recipients;

a timestamp module configured to associate times with said communications; and

a storage configured to store transcripts including at least part of contents of said communications and said times associated with said communications, wherein said storage is configured to store each said transcripts for a storing period that complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all senders and all recipients of communications corresponding to said each said transcripts; and

wherein said storage is configured to prevent said transcripts from being modified by said senders and said recipients during said storing period;

said each said transcripts being configured to serve as evidence in the case of a dispute involving at least one party from a group including;

said senders and said recipients of communications corresponding to said each said transcripts.

57. A system for providing authentication of electro-magnetically propagated communications, comprising:

a storage configured to store transcripts prepared by a trusted intermediary for electro-magnetically propagated communications between senders and recipients, said transcripts including at least part of contents of said communications and times associated with said communications; and

a customer service configured to receive requests from inquirers for particular communications, to retrieve corresponding transcripts from said storage and to transfer said transcripts to said inquirers, wherein said transferred transcripts are used as evidence in disputes involving at least one party from a group including;

said senders and said recipients;

wherein said storage is configured to store each said transcripts for a storing period that complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all senders and all recipients of communications corresponding to said each said transcripts and wherein said storage is configured to prevent said transcripts from being modified by said senders and said recipients during said storing period.

58. A system for authenticating electro-magnetically propagated communications, comprising:

at least one source/originator party;

at least one destination/auxiliary party; and

an intermediary;

wherein said intermediary is configured to transfer electro-magnetically propagated communications between said at least one source/originator parties and said at least one destination/auxiliary party and to store transcripts of said transferred communications including at least part of contents of said transferred communications and times associated with said communications, each said transcripts being stored for a period complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all at least one source/originator party and all at least one destination/auxiliary party of communications corresponding to said each said transcripts, and wherein said transcripts can not be modified by any of said at least one source/originator party nor by any of said at least one destination/auxiliary party while stored;

said each said transcripts being configured to serve as evidence in the case of a dispute involving at least one party from a group including;

said at least one source/originator party and said at least one destination/auxiliary party of communications corresponding to said each said transcripts.

68. A system for authenticating communications, comprising:

at least one source/originator party;

at least one destination/auxiliary party;

an intermediary; and

at least one diverter between said at least one source/originator party and said intermediary, configured to divert communications for said at least one destinations/auxiliary parties from said at least one source/originator party to said intermediary,

wherein said intermediary is configured to transfer said communications between said at least one source/originator parties and said at least one destination/auxiliary party and to store transcripts of said transferred communications including at least part of contents of said transferred communications and times associated with said communications, each said transcripts being stored for a period complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all at least one source/originator party and all at least one destination/auxiliary party of communications corresponding to said each said transcripts, and said transcripts can not be modified by any of said at least one source/originator party nor by any of said at least one destination/auxiliary party while stored;

said each said transcripts being configured to serve as evidence in the case of a dispute involving at least one party from a group including;

said at least one source/originator party and said at least one destination/auxiliary party of communications corresponding to said each said transcripts.

70. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for authenticating electro-magnetically propagated communications, comprising the steps of:

receiving at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

transferring said at least one communication to said at least one recipient; and

storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

71. A computer program product comprising a computer useable medium having computer readable program code embodied therein for authenticating electro-magnetically propagated communications, the computer program product comprising:

computer readable program code for causing the computer to receive at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

computer readable program code for causing the computer to transfer said at least one communication to said at least one recipient; and

computer readable program code for causing the computer to store a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

72. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for authenticating electro-magnetically propagated communications, comprising the steps of:

receiving at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

transferring said at least one communication to said at least one recipient; and

storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

said transcript being configured to serve as evidence in the case of a dispute involving at least one party from a group including;

said at least one sender and said at least one recipient;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

73. A computer program product comprising a computer useable medium having computer readable program code embodied therein for authenticating electro-magnetically propagated communications, the computer program product comprising:

computer readable program code for causing the computer to receive at least one electro-magnetically communication from at least one sender which is intended for at least one recipient;

computer readable program code for causing the computer to transfer said at least one communication to said at least one recipient; and

computer readable program code for causing the computer to store a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication;

said transcript being configured to serve as evidence in the case of a dispute including at least one party from a group including;

said at least one sender and said at least one recipient;

wherein a period of said storing complies with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient; and

wherein during said period of said storing, said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

74. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for providing authentication of electro-magnetically propagated communications, comprising the steps of:

receiving an inquiry from an inquirer about at least one electro-magnetically propagated communication which involved a trusted intermediary;

retrieving a transcript stored by said intermediary, said transcript including at least part of a content of said at least one communication and a time associated with said at least one communication; and

transferring said transcript to said inquirer;

wherein said transferred transcript is used as evidence in a dispute involving at least one party from a group including;

at least one sender and at least one recipient of at least one of said at least one communication;

wherein said stored transcript was stored for a period complying with at least one from the group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said period of storing, said transcript could not be modified by any of said at least one sender nor by any of said at least one recipient.

75. A computer program product comprising a computer useable medium having computer readable program code embodied therein for providing authentication of electro-magnetically propagated communications, the computer program product comprising:

computer readable program code for causing the computer to receive an inquiry from an inquirer about at least one electro-magnetically propagated communication which involving a trusted intermediary;

computer readable program code for causing the computer to retrieve a transcript stored by said intermediary, said transcript including at least part of a content of said at least one communication and a time associated with said at least one communication; and

computer readable program code for causing the computer to transfer said transcript to said inquirer;

wherein said transferred transcript is used as evidence in a dispute involving at least one party from a group including;

at least one sender and at least one recipient of at least one of said at least one communication;

wherein said stored transcript was stored for a period complying with at least one from the group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said period of storing, said transcript could not be modified by any of said at least one sender nor by any of said at least one recipient.

76. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for diverting electro-magnetically propagated communications for authentication, comprising the steps of:

receiving at least one electro-magnetically propagated communication from at least one sender which is intended for at least one recipient; and

transferring said at least one communication to an intermediary,

wherein said intermediary authenticates said at least one communication by an authenticating process including storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication for a storing period complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said storing period said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.

77. A computer program product comprising a computer useable medium having computer readable program code embodied therein for diverting electro-magnetically propagated communications for authentication, the computer program product comprising:

computer readable program code for causing the computer to receive at least one electro-magnetically propagated communication from at least one sender which is intended for at least one recipient; and

computer readable program code for causing the computer to transfer said at least one communication to an intermediary;

wherein said intermediary authenticates said at least one communication by an authenticating process including storing a transcript including at least part of a content of said at least one communication and a time associated with said at least one communication for a storing period complying with at least one from a group including;

permanent storing, storing for as long as required by law, and storing until cessation of storing as agreed upon by all said at least one sender and all said at least one recipient, and wherein during said storing period said transcript can not be modified by any of said at least one sender nor by any of said at least one recipient.