Systems and methods for automatically updating electronic mail access lists

• US 7,562,119 B2
• Filed: 07/15/2003
• Issued: 07/14/2009
• Est. Priority Date: 07/15/2003
• Status: Expired due to Fees

• Current Assignee: Mindshare Design, Inc.
• Original Assignee: Mindshare Design, Inc.
• Inventors: Bunshaft, Maxwell H., Smith, Steven J., Schmidt, Kenneth A.
• Primary Examiner(s): JEAN GILLES, JUDE
• Application Number:
  US10/619,726
• Publication Number:
  US 20050015448A1
• Time in Patent Office: 2,191 Days
• Field of Search: 709200-203, 709/206, 709/207, 709/227, 709/228, 709/225, 709/246, 709/230, 709/238, 709/245, 380/30, 380/282, 380/286
• US Class Current: 709/206
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A system and method for accepting a recipient identifier, wherein the recipient identifier can be used to identify an electronic mail (email) recipient; generating a petition based on the recipient identifier and at least one petition rule, wherein the at least one petition rule includes at least one of: 1) a sender identification method; and 2) a recipient; and wherein the petition can be used by a email provider to allow a recipient to receive email from a sender.

Claims

1. A computer implemented method for modifying a list of permitted senders used by electronic mail (email) access control devices, said method comprising:

under control of a recipient;

initiating a subscription event by transmitting a recipient identifier to the sender;

under control of the sender;

receiving the recipient identifier as part of the subscription event;

transmitting sender information along with a petition provider identifier to the recipient;

under control of the recipient;

transmitting the sender information to a petition provider identified by the petition provider identifier, wherein the petition provider creates a petition on behalf of the sender as a result of having obtained the sender information from the recipient, the petition comprising a request to modify the email access list of the recipient;

receiving, by way of a web browser on the recipient, the petition from the petition provider, said petition being stored in a computer readable storage medium, wherein the petition is transmitted via hypertext transfer protocol (HTTP) as part of an interaction with a web page;

determining whether the petition received from the petition provider is acceptable based on at least one of;

     1) a sender identity verification method;

     2) user input; and

     3) third party information; and

modifying said access list of permitted senders of the recipient such that the sender is added to the list of permitted senders if the petition is determined to be acceptable, wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient.

2. The method of claim 1 wherein:

the sender information includes at least one of;

     1) a sender identification method; and

     2) the recipient identifier.

3. The method of claim 1, further comprising:

providing confirmation of the determination to the sender.

4. The method of claim 1 wherein:

the step of accepting the recipient identifier is a result of a Web-based interaction between the recipient and the sender.

5. The method of claim 1 wherein:

the recipient identifier is an email address.

6. The method of claim 1 wherein:

the identity verification method is one of;

     1) an email header “

From”

address;

     2) a password;

     3) an Internet Protocol (IP) address; and

     4) a digital signature.

7. The method of claim 1 wherein:

the step of determining whether a petition is acceptable utilizes at least one rule, wherein the at least one rule is evaluated against the petition.

8. The method of claim 1, further comprising:

prompting a user for a decision regarding whether or not to accept the petition.

9. The method of claim 1 wherein:

the sender information is provided to the petition provider via a Hypertext Transfer Protocol (HTTP) redirect sent to the Web browser.

10. The method of claim 1 wherein:

the petition is provided to a petition processor via a Hypertext Transfer Protocol (HTTP) redirect message sent to the Web browser; and

wherein the petition processor makes said determination.

11. The method of claim 1 wherein:

the Web browser identifies the petition based on a Multipurpose Internet Mail Extension (MIME) type.

12. The method of claim 1 wherein:

the petition provider identifier and the sender information are combined to form a Uniform Resource Locator (URL) that the Web browser uses to access the petition provider.

13. The method of claim 1, further comprising:

providing the petition to a petition processor.

14. The method of claim 13 wherein:

the petition processor requires authorization credentials.

15. The method of claim 1 wherein:

the sender identity verification method is used by an email provider to verify that an email message is from the sender.

16. The method of claim 1 wherein:

the petition provider generates the petition based on one or more rules.

17. The method of claim 16 wherein:

a rule determines at least one of;

     1) whether to generate the petition;

     2) a format of the petition;

     3) an identity of a petition processor; and

     4) a recipient email address.

18. The method of claim 16 wherein:

a rule is triggered based on the recipient identifier.

54. The method of claim 1 wherein modifying the access list adds the sender to at least one of:

a white list of senders permitted to send email to the recipient and a black list of senders prohibited from sending email to the recipient.

55. The method of claim 1, further comprising:

communicating, from the recipient to the sender, a confirmation of the outcome of the petition that specifies whether the sender was added to the access list of the recipient.

59. The method of claim 1, wherein said method is initiated by providing the recipient identifier to the sender as a part of a web browser-based interaction between the recipient and the sender.

60. The method of claim 1, wherein the recipient includes a petition processor integrated into said web browser, the petition processor determining whether the petition received from the petition provider is acceptable.

19. A computer implemented method for modifying a list of permitted senders used by electronic mail (email) access control devices, said method comprising:

under control of a sender;

accepting a recipient identifier from a recipient;

creating a petition as a result of having received the recipient identifier from the recipient, the petition comprising a request for updating the recipient'"'"'s email access control list, wherein the petition is created by evaluating at least one rule that determines the format of the petition based on the recipient identifier, said petition being stored in a computer readable medium;

providing the petition to a recipient, the recipient having an access list of permitted senders associated therewith;

under control of the recipient;

accepting the petition by way of a web browser on the recipient, wherein the petition is transmitted as part of an interaction with a web page and prior to transmission of email messages between the sender and the recipient;

determining whether the petition is acceptable based on at least one of;

     1) a sender identity verification method;

     2) user input; and

     3) third party information; and

modifying said access list of permitted senders of the recipient such that the sender is added to said list of permitted senders if the petition is determined to be acceptable, wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient.

20. The method of claim 19, further comprising:

providing the recipient identifier to a petition provider; and

accepting a petition from the petition provider.

21. The method of claim 19 wherein:

the sender information includes at least one of;

     1) a sender identification method; and

     2) the recipient identifier.

22. The method of claim 20 wherein:

the petition provider and the sender are part of the same system.

23. The method of claim 19 wherein:

the step of accepting the recipient identifier is a result of a Web-based interaction between the recipient and the sender.

24. The method of claim 19 wherein:

the recipient identifier is an email address.

25. The method of claim 19 wherein:

the identity verification method is one of;

     1) an email header “

From”

address;

     2) a password;

     3) an Internet Protocol (IP) address; and

     4) a digital signature.

26. The method of claim 19 wherein:

the step of determining whether a petition is acceptable utilizes at least one rule, wherein the at least one rule is evaluated against the petition.

27. The method of claim 19, further comprising:

prompting a user for a decision regarding whether or not to accept the petition.

28. The method of claim 19 wherein:

the petition is provided to a petition processor via a Hypertext Transfer Protocol (HTTP) redirect sent to the Web browser; and

wherein the petition processor makes said determination.

29. The method of claim 19 wherein:

the Web browser identifies the petition based on a Multipurpose Internet Mail Extension (MIME) type.

30. The method of claim 19, further comprising:

providing the petition to a petition processor.

31. The method of claim 30 wherein:

the petition processor requires authorization credentials.

32. The method of claim 19 wherein:

the sender identity verification method is used by a petition processor to verify that an email message is from the sender.

33. The method of claim 20 wherein:

the petition provider generates the petition based on one or more rules.

34. The method of claim 33 wherein:

a rule determines at least one of;

     1) whether to generate the petition;

     2) a format of the petition;

     3) an identity of a petition processor;

     4) a recipient email address.

35. The method of claim 33 wherein:

a rule is triggered based on the recipient identifier.

36. A computer implemented method for modifying a list of permitted senders used by electronic mail (email) access control devices, said method comprising:

initiating a subscription event during which a recipient provides a recipient email address to the sender;

receiving a petition to the recipient as a result of the subscription event, the petition comprising a request from the sender to update the recipient'"'"'s email access control list, wherein the petition is transmitted as part of a web browser-based interaction with a web page, prior to transmission of emails between the sender and the recipient and wherein the petition includes a sender identity verification method;

determining, by the recipient, whether the petition is acceptable based on authorization credentials and at least one of;

     1) the sender identity verification method;

     2) user input; and

     3) third party information;

modifying an email access list of permitted senders at the recipient by adding the sender to said email access list if the petition and the authorization credentials are acceptable, wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient.

37. The method of claim 36, further comprising:

providing confirmation of the determination to the sender.

38. The method of claim 36 wherein:

the step of providing the recipient email address to the sender is a result of a Web-based interaction between the recipient and the sender.

39. The method of claim 36 wherein:

the sender identity verification method is used by the recipient to verify that an email message is from the sender.

40. The method of claim 36 wherein:

the identity verification method is one of;

     1) an email header “

From”

address;

     2) a password;

     3) an Internet Protocol (IP) address; and

     4) a digital signature.

41. The method of claim 36 wherein:

the Web browser identifies the petition based on a Multipurpose Internet Mail Extension (MIME) type.

42. The method of claim 36 wherein:

the step of determining whether a petition is acceptable utilizes at least one rule, wherein the at least one rule is evaluated against the petition.

43. The method of claim 36, further comprising:

prompting a user for a decision regarding whether or not to accept the petition.

44. A system for modifying a list of permitted senders used by electronic mail (email) access control devices, said method comprising:

a sender component that accepts a recipient identifier during a subscription event initiated by a recipient and generates sender information, wherein the sender information is used to generate a petition, the petition comprising a request from the sender to update the recipient'"'"'s email access control list;

a petition provider component that generates a petition on behalf of the sender as a result of having obtained the sender information from the recipient, wherein the petition is generated based on the sender information and at least one rule, said petition being stored in a computer readable medium; and

a recipient that receives the petition from the petition provider component by way of a web browser on the recipient, determines whether the petition is acceptable and modifies the email access list of permitted senders, wherein the petition is transmitted as part of a web browser-based interaction with a web page, prior to transmission of emails between the sender and the recipient; and

wherein the petition includes a sender identity verification method which is used to verify identity of the sender, and wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient.

45. The system of claim 44, further comprising:

a web browser operable to accept the sender information from the sender component and provide the sender information to the petition provider component.

46. The system of claim 44, further comprising:

a petition processor component operable to accept the petition and determine whether the petition is acceptable based on at least one of;

     1) the sender identity verification method;

     2) user input; and

     3) third party information; and

wherein if the petition is acceptable, the sender component is permitted to send email to a recipient associated with the recipient identifier.

47. The system of claim 46, further comprising:

a web browser operable to accept the petition from the petition provider component and to provide the petition to the petition processor.

48. The system of claim 46 wherein:

the petition processor component provides a confirmation to the sender.

49. The system of claim 46 wherein:

the browser identifies the petition based on a Multipurpose Internet Mail Extension (MIME) type.

50. The system of claim 44 wherein:

the sender identification verification method is one of;

     1) an email header “

From”

address;

     2) a password;

     3) an Internet Protocol (IP) address; and

     4) a digital signature.

51. The system of claim 46 wherein:

the petition processor determines whether or not to accept a petition and add the sender to an email access list for a recipient.

52. The method of claim 44 wherein:

the at least one rule determines at least one of;

     1) whether to generate the petition;

     2) a format of the petition; and

     3) an identity of a petition processor.

53. The method of claim 44 wherein:

the at least one rule is triggered based on the recipient identifier.

56. A computer readable storage medium having instructions stored thereon, which instructions when executed by one or more processors, cause a system to:

under control of a recipient;

initiate a subscription event by transmitting a recipient identifier to the sender;

under control of the sender;

receive the recipient identifier as part of the subscription event;

transmit sender information along with a petition provider identifier to the recipient;

under control of the recipient;

transmit the sender information to a petition provider identified by the petition provider identifier, wherein the petition provider creates a petition on behalf of the sender as a result of having obtained the sender information from the recipient, the petition comprising a request to modify the email access list of the recipient;

receive, by way of a web browser on the recipient, the petition from the petition provider, said petition being stored in a computer readable storage medium, wherein the petition is transmitted via hypertext transfer protocol (HTTP) as part of an interaction with a web page;

determine whether the petition received from the petition provider is acceptable based on at least one of;

     1) a sender identity verification method;

     2) user input; and

     3) third party information; and

modify said access list of permitted senders of the recipient such that the sender is added to the list of permitted senders if the petition is determined to be acceptable, wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient.

57. The computer readable storage medium of claim 56 wherein modifying the access list adds the sender to at least one of:

a white list of senders permitted to send email to the recipient and a black list of senders prohibited from sending email to the recipient.

58. The computer readable storage medium of claim 56, further comprising instructions that cause the system to:

communicate, from the recipient to the sender, a confirmation of the outcome of the petition that specifies whether the sender was added to the access list of the recipient.

61. A computer implemented method for modifying a list of permitted senders used by electronic mail (email) access control devices, said method comprising:

receiving a recipient identifier by a sender during a subscription event initiated by a recipient, whereby said recipient identifies itself to the sender; and

transmitting sender information and a petition provider identifier to the recipient as a result of the subscription event;

wherein the recipient provides the sender information to a petition provider identified by the petition provider identifier;

wherein the petition provider creates a petition on behalf of the sender as a result of having obtained the sender information from the recipient, the petition comprising a request to modify the email access control list of the recipient;

wherein the recipient receives the petition from the petition provider by way of a web browser interaction, evaluates the petition, and adds the sender to the list of permitted senders of the recipient if the petition is acceptable, the list of permitted senders being stored on a computer readable storage medium; and

wherein as a result of a successful petition, the sender will be allowed to bypass all email filters of the recipient; and

receiving a result of the petition from the recipient to the sender.