System, method and program product for authenticating an e-mail and/or attachment

• US 20050015457A1
• Filed: 05/21/2004
• Published: 01/20/2005
• Est. Priority Date: 05/23/2003
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Warasawa, Fumiki
• Granted Patent: US 8,055,729 B2
• Time in Patent Office: Days
• US Class Current: 709/207
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system, method and program product for authenticating an e-mail. A user requests to register a visual signature image with a sending mail server, and in response, the sending mail server furnishes a first identifier to the user. Subsequently, the user requests the sending mail server to send an e-mail with the visual signature image and supplies the e-mail and first identifier to the sending mail server. In response, the sending mail server validates the first identifier, and sends the e-mail with a second identifier to a receiving mail server. In response, the receiving mail server validates the second identifier. The second identifier identifies an addressee of the e-mail, and the receiving mail server validates the second identifier by comparing the addressee identified by the acceptance identifier to an addressee within the e-mail. The sending mail server embeds the second identifier in the visual signature image and sends the visual signature image with the embedded second identifier to the receiving mail server. The invention also resides in the image representing an originator of an e-mail and/or an attachment to the e-mail; the image is included in the e-mail, an icon for the attachment or the attachment. The image includes an identity of an originator and an identity of a recipient intended by the originator. The e-mail with the added image is sent to the intended recipient. The image and identities of the originator and recipient authenticate the e-mail and/or the attachment

Claims

1. A method for authenticating an e-mail, said method comprising the steps of:

a user requesting to register a visual signature image with a sending mail server, and in response, the sending mail server furnishing a first identifier to said user;

subsequently, said user requesting said sending mail server to send an e-mail with said visual signature image and supplying said e-mail and first identifier to said sending mail server, and in response, said sending mail server validating said first identifier, and sending said e-mail with a second identifier to a receiving mail server, and in response, said receiving mail server validating said second identifier; and

said sending mail server embedding said second identifier in said visual signature image and sending said visual signature image with said embedded second identifier to said receiving mail server.

2. A method as set forth in claim 1 further comprising the steps of:

said sending mail server embedding a third identifier in said image in response to the step of said user requesting to register said image; and

wherein

the step of said sending mail server embedding said second identifier in said visual signature image comprises the step of said sending mail server embedding said second identifier in said image embedded with said third identifier.

3. A method as set forth in claim 1 wherein after the step of said receiving mail server validating said second identifier, and before the step of said sending mail server sending said visual signature image with said embedded second identifier to said receiving mail server;

further comprising the step of said receiving mail server requesting said sending mail server to send said visual signature embedded with said second identifier.

4. A method as set forth in claim 1 wherein after the step of said receiving mail server validating said second identifier and before the step of said sending mail server embedding said second identifier in said visual signature image, said receiving mail server sending said second identifier and an encryption key for said image embedded with said second identifier to said sending mail server.

5. A method as set forth in claim 1 wherein when said sending mail server sends said e-mail with said second identifier to said receiving mail server, said sending mail server includes an identifier of said sending mail server.

6. A method as set forth in claim 1 wherein after said receiving mail server validates said second identifier, said receiving mail server sends said second identifier and an encryption key to said sending mail server;

and when said sending mail server sends said visual signature image with said embedded second identifier to said receiving mail server, said visual signature image with said embedded second identifier is encrypted with said encryption key.

7. A method as set forth in claim 1 further comprising the steps of:

said sending mail server embedding a third identifier in said image in response to the step of said user requesting to register said image; and

wherein

after said receiving mail server validates said second identifier, said receiving mail server sends said second identifier and an encryption key to said sending mail server; and

when said sending mail server sends said visual signature image with said embedded second identifier to said receiving mail server, said visual signature image is embedded with both said second and third identifiers and is encrypted with said encryption key.

8. A method as set forth in claim 1 further comprising the steps of:

an intended recipient of said e-mail server requesting said e-mail from said receiving mail server, and in response, said receiving mail server furnishing said e-mail with said visual signature image with said second identifier embedded therein.

9. A method as set forth in claim 1 wherein said second identifier identifies an addressee of said e-mail.

10. A method as set forth in claim 1 wherein said second identifier identifies an addressee of said e-mail, and wherein the step of said receiving mail server validating said second identifier comprises the step of said receiving mail server comparing the addressee identified by said second to an addressee within said e-mail.

11. A method as set forth in claim 1 wherein the step of said sending mail server embedding said second identifier in said visual signature image comprises the step of said sending mail server incorporating said second identifier in a digital file which defines said visual signature image such that said second identifier is not displayed with said visual signature image, but is digitally readable from said digital file.

12. A method as set forth in claim 1 wherein the step of said sending mail server embedding said second identifier in said visual signature image comprises the step of said sending mail server incorporating said second identifier in a digital file which defines said visual signature image such that said second identifier is displayed with said visual signature image.

13. A computer program product for authenticating an e-mail, said computer program product comprising:

a computer readable medium;

first program instructions for execution with a sending mail server and responsive to a user request to register a visual signature image with said sending mail server, to furnish a first identifier to said user;

second program instructions for execution within said sending mailer server and responsive to a user request to send an e-mail with said visual signature image, said request including said first identifier, to validate said first identifier, and if valid, send said e-mail with a second identifier to a receiving mail server;

third program instructions for execution within said receiving mail server to validate said second identifier; and

fourth program instructions for execution within said sending mail server to embed said second identifier in said visual signature image and send said visual signature image with said embedded second identifier to said receiving mail server; and

wherein

said first, second, third and fourth program instructions are recorded on said medium.

14. A computer program product as set forth in claim 13 further comprising:

fifth program instructions for execution in said sending mail server to embed a third identifier in said image in response to said user request to register said image; and

wherein

said fourth program instructions embed said second identifier in said image embedded with said third identifier; and

wherein

said fifth program instructions are recorded on said medium.

15. A computer program product as set forth in claim 13 wherein said second program instructions validate said first identifier based on a password of said user.

16. A computer program product as set forth in claim 13 wherein said second identifier includes an identity of an intended recipient of said e-mail.

17. A computer program product as set forth in claim 13 wherein when said second program instructions send said e-mail with said second identifier to said receiving mail server, said second program instructions include an identifier of said sending mail server.

18. A computer program product as set forth in claim 13 wherein after said third program instructions validate said second identifier, said third program instructions send said second identifier and an encryption key to said sending mail server;

and when said fourth program instructions send said visual signature image with said embedded second identifier to said receiving mail server, said visual signature image with said embedded second identifier is encrypted with said encryption key.

19. A computer program product as set forth in claim 13 further comprising:

fifth program instructions for execution within said sending mail server to embed a third identifier in said image in response to the step of said user requesting to register said image; and

wherein

after said second program instructions validate said second identifier, said second program instructions send said second identifier and an encryption key to said sending mail server; and

when said fourth program instructions send said visual signature image with said embedded second identifier to said receiving mail server, said visual signature image is embedded with both said second and third identifiers and is encrypted with said encryption key; and

wherein

said fifth program instructions are recorded on said medium.

20. A computer program product as set forth in claim 13 further comprising:

fifth program instructions for execution within said receiving mail server and responsive to a request from an addressee of said e-mail to receive said e-mail, to furnish said e-mail with said visual signature image with said second identifier embedded therein; and

wherein

said fifth program instructions are recorded on said medium.

21. A computer program product as set forth in claim 13 wherein said second identifier identifies an addressee of said e-mail.

22. A computer program product as set forth in claim 13 wherein said second identifier identifies an addressee of said e-mail, and wherein said second program instructions validate said second identifier by comparing the addressee identified by said second identifier to an addressee within said e-mail.

23. A computer program product as set forth in claim 13 wherein said fourth program instructions embed said second identifier in said visual signature image by incorporating said second identifier in a digital file which defines said visual signature image such that said second identifier is not displayed with said visual signature image, but is digitally readable from said digital file.

24. A computer program product as set forth in claim 13 wherein said fourth program instructions embed said second identifier in said visual signature image by incorporating said second identifier in a digital file which defines said visual signature image such that said second identifier is displayed with said visual signature image.

25. A system for authenticating an e-mail, said system comprising:

first sending server means, responsive to a user request to register a visual signature image with a sending mail server, for furnishing a first identifier to said user;

second sending server means, responsive to a user request to send an e-mail with said visual signature image, said request including said first identifier, for validating said first identifier and sending said e-mail with a second identifier to a receiving mail server;

first receiving mail server means for validating said second identifier; and

third sending mail server means for embedding said second identifier in said visual signature image and sending said visual signature image with said embedded second identifier to said receiving mail server.

26. A system as set forth in claim 25 wherein said second identifier identifies an addressee of said e-mail, and wherein said second sending server means validates said second identifier by comparing the addressee identified by said second identifier to an addressee within said e-mail.

27. A method for authenticating an e-mail, said method comprising the steps of:

a user requesting to register a visual signature image with a sending mail server, and in response, the sending mail server embedding a first identifier in said image and furnishing a signature identifier to said user;

subsequently, said user requesting said sending mail server to send an e-mail with said visual signature image and supplying said e-mail and signature identifier to said sending mail server, and in response, said sending mail server validating said signature identifier, and sending said e-mail with an acceptance identifier and a sending mail server identifier to a receiving mail server, and in response, said receiving mail server validating said acceptance identifier and sending said acceptance identifier to said sending mail server, and in response, said sending mail server embedding said acceptance identifier in said visual signature image with said embedded first identifier and sending said visual signature image with said embedded acceptance identifier and first identifier, to said receiving mail server.

28. A method as set forth in claim 27 further comprising the steps of:

an intended recipient of said e-mail server requesting said e-mail from said receiving mail server, and in response, said receiving mail server furnishing said e-mail with said visual signature image with said acceptance identifier and first identifier embedded therein.

29. A method as set forth in claim 27 wherein said acceptance identifier identifies an addressee and a sender of said e-mail.

30. A method as set forth in claim 27 wherein said acceptance identifier identifies said intended recipient of said e-mail, and wherein the step of said receiving mail server validating said acceptance identifier comprises the step of said receiving mail server comparing the intended recipient identified by said acceptance identifier to an addressee of said e-mail.

31. A method as set forth in claim 27 further comprising the steps of:

said receiving mail server sending an encryption key to said sending mail server during the step of sending said acceptance identifier to said sending mail server; and

said sending mail server encrypting, with said encryption key, said visual signature image embedded with said visual signature image and first identifier, such that the step of said sending mail server sending said image with said embedded signature identifier and first identifier is performed by said sending mail server sending said encrypted visual signature image embedded with said visual signature image and first identifier.

32. A method as set forth in claim 27 wherein the step of said sending mail server validating said signature identifier comprises the step of checking a user password supplied by said user with said signature identifier.

33. A method as set forth in claim 27 wherein said acceptance identifier identifies an addressee of said e-mail.

34. A method for authenticating an e-mail and/or an attachment in the e-mail, said method comprising the steps of:

adding to said e-mail, an icon for said attachment or said attachment, an image representing an originator of said e-mail and/or said attachment, said image including an identity of said originator and an identity of a recipient intended by said originator; and

sending said e-mail with said added image to said intended recipient.

35. A method as set forth in claim 34 wherein said identity of said originator is an e-mail address of said originator, and said identity of said intended recipient is an e-mail address of said intended recipient.

36. A method as set forth in claim 34 further comprising the step of embedding in said image, an approximate date or time that said originator initiated sending of said e-mail and/or said attachment to said intended recipient.

37. A method as set forth in claim 34 wherein the identities of said originator and said intended recipient are embedded in said image such that said identities will be visibly displayed with said e-mail, said icon for said attachment or said attachment.

38. A method as set forth in claim 34 wherein the identities of said originator and said intended recipient are embedded in said image such that said identities will not be visibly displayed with said e-mail, said icon for said attachment or said attachment.

39. A method as set forth in claim 34 further comprising the step of embedding in said image an identifier generated by a mail server for said originator of said e-mail and/or attachment, said identifier being unique for each e-mail sent to said mail server.

40. A computer program product for authenticating an e-mail and/or an attachment in the e-mail, said computer program product comprising:

a computer readable medium;

first program instructions to add to said e-mail, an icon for said attachment or said attachment, an image representing an originator of said e-mail and/or said attachment, said image including an identity of said originator and an identity of a recipient intended by said originator; and

second program instructions to initiate sending of said embedded e-mail to said intended recipient; and

wherein

said first and second program instructions are recorded on said medium.

41. A method for authenticating an e-mail and/or an attachment in the e-mail, said method comprising the steps of:

adding to said e-mail, an icon for said attachment or said attachment, an image representing an originator of said e-mail and/or said attachment, said image including an identity of said originator and an identity of a recipient intended by said originator;

adding to said e-mail apart from said image and other sender/receiver e-mail addresses normally included in a header of said e-mail, said identity of said originator and said identity of said intended recipient; and

sending said e-mail with said added image and said added identities to said intended recipient.

42. A method as set forth in claim 41 wherein said identity of said originator is an e-mail address of said originator, and said identity of said intended recipient is an e-mail address of said intended recipient.

43. A method as set forth in claim 41 further comprising the step of embedding in said image, an approximate date or time that said originator initiated sending of said e-mail and/or said attachment to said intended recipient.

44. A method as set forth in claim 41 wherein the identities of said originator and said intended recipient are embedded in said image and in said e-mail apart from said image, such that said identities will be visibly displayed with said e-mail, said icon for said attachment or said attachment.

45. A method as set forth in claim 41 wherein the identities of said originator and said intended recipient are embedded in said image and in said e-mail apart from said image such that said identities will not be visibly displayed with said e-mail, said icon for said attachment or said attachment.

46. A method as set forth in claim 41 further comprising the step of embedding in said image an identifier generated by a mail server for said originator of said e-mail and/or attachment, said identifier being unique for each e-mail sent to said mail server.