System and method for preventing delivery of unsolicited and undesired electronic messages by key generation and comparison

• US 7,747,860 B2
• Filed: 12/13/2004
• Issued: 06/29/2010
• Est. Priority Date: 05/04/2004
• Status: Active Grant

• Current Assignee: Email Patents LLC
• Original Assignee: Message Level LLC
• Inventors: Cunningham, Brian, Kim, Leslie J.
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US11/010,600
• Publication Number:
  US 20050251861A1
• Time in Patent Office: 2,024 Days
• Field of Search: 713/170, 709/206, 709/207
• US Class Current: 713/170
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A sending device prepares a key for each electronic message sent by the device by applying an algorithm to specified data in the message and then incorporates the key in the message. A receiving device, upon receipt of an electronic message, locates the incorporated key and the data from which a sending device practicing the invention would have prepared it. The receiving device communicates a confirmation request to the purported sending device which contains the key and the data for its preparation. The sending device receives the confirmation messages and prepares a comparison key by applying the algorithm to the data in the confirmation request. The sending device replies to the confirmation request confirming that the sending device sent the message if the comparison key matches the key in the confirmation request and otherwise responds with a denial.

Claims

1. A method comprising:

sending to an intended recipient a first electronic message containing information identifying a purported originator of the first electronic message, and further containing a first data string generated by application of an algorithm to a portion of said first electronic message;

receiving a second electronic message that includes a request to confirm that said first electronic message was authorized by the purported originator identified in the first electronic message, said second electronic message including said first data string and said portion of said first electronic message;

generating a second data string, different from said first data string, by application of an algorithm to said portion of said first electronic message;

comparing said first data string to said second data string; and

upon determining that said first data string matches said data string, responding to said second electronic message, affirming said purported originator of said first electronic message did not use a false originating address;

wherein the algorithm applied to the portion of the first electronic message is selected from a plurality of algorithms based on a time associated with the first electronic message.

2. The method of claim 1, wherein said electronic message includes one of an email, text message, VoIP message, or instant message.

3. The method of claim 1, wherein said portion of said electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said electronic message.

4. The method of claim 1, wherein said first data string is included in a message header of said electronic message.

5. The method of claim 1, wherein said identification data is included in a message text of said electronic message.

6. The method of claim 1, wherein said identification data is included as an attachment to said electronic message.

7. The method of claim 1, wherein said receiving a confirmation request includes receiving said confirmation request via port-to-port communication.

8. The method of claim 1, wherein said electronic message is a first electronic message and said confirmation request is a second electronic message, said second electronic message including said portion of said first electronic message.

9. The method of claim 8, wherein said second electronic message includes one of an email, text message, VoIP message, or instant message.

10. The method of claim 1, wherein said responding to said confirmation request includes responding via port-to-port communication.

11. The method of claim 1, wherein said responding to said confirmation request includes responding with a return electronic message.

12. The method of claim 11, wherein said return electronic message is one of an email, text message, VoIP message, or instant message.

13. The method of claim 1, wherein said comparing is performed at a device different from a device at which said sending is performed.

14. The method of claim 1, wherein said first data string is an alphanumeric string.

15. The method of claim 1, further comprising:

prior to said sending to an intended recipient, generating said first data string by application of an algorithm to said portion of said electronic message, and

wherein said sending to an intended recipient is performed at the same location as said generating.

16. The method of claim 1, wherein said sending to an intended recipient excludes sending said first electronic message to any entity other than an intended recipient.

17. The method of claim 1, wherein said first data string is generated by application of an algorithm only to said portion of said electronic message.

18. A method comprising:

receiving a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string purportedly generated by application of an algorithm to a portion of said second electronic message and further including said portion of said second electronic message;

generating a second data string, different from said first data string, by application of an algorithm to said portion of said second electronic message included in said first electronic message;

comparing said first data string to said second data string; and

upon determining that said first data string does not match said second data string, responding to said first electronic message, denying said second electronic message was sent on behalf of the originator identified in the second electronic message due to the originator using a false originating address;

wherein the algorithm applied to the portion of the first electronic message is selected from a plurality of algorithms based on a time associated with the first electronic message.

19. The method of claim 18 wherein said second electronic message includes one of an email, text message, VoIP message, or instant message.

20. The method of claim 18 wherein said portion of said second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said electronic message.

21. The method of claim 18 wherein said first data string is included in a message header of said second electronic message.

22. The method of claim 18 wherein said first data string is included in a message text of said second electronic message.

23. The method of claim 18 wherein said first data string includes a checksum for a message text of said second electronic message.

24. The method of claim 18 wherein said receiving a first electronic message includes receiving said first electronic message via port-to-port communication.

25. The method of claim 18 wherein said responding to said first electronic message includes responding via port-to-port communication.

26. The method of claim 18 wherein said responding to said first electronic message includes responding with a return electronic message.

27. The method of claim 26, wherein said return electronic message is one of an email, text message, VoIP message, or instant message.

28. The method of claim 18, wherein said receiving a first electronic message is performed by a confirming device, said confirming device receiving said portion of said second electronic message only with said first electronic message.

29. A method comprising:

receiving a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string generated by application of an algorithm to a portion of said second electronic message and further including said portion of said second electronic message;

generating a second data string, different from said first data string, by application of an algorithm to said portion of said second electronic message included in said first electronic message;

comparing said first data string to said second data string; and

upon determining that said first data string matches said data string, responding to said first electronic message, affirming said originator identified in the second electronic message did not send said second electronic message from a false originating address;

wherein the algorithm applied to the portion of the first electronic message is selected from a plurality of algorithms based on a time associated with the first electronic message.

30. The method of claim 29 wherein said second electronic message includes one of an email, text message, VoIP message, or instant message.

31. The method of claim 29 wherein said portion of said second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said electronic message.

32. The method of claim 29 wherein said first data string is included in a message header of said second electronic message.

33. The method of claim 29 wherein said first data string is included in a message text of said second electronic message.

34. The method of claim 29 wherein said first data string includes a checksum for a message text of said second electronic message.

35. The method of claim 29 wherein said receiving a first electronic message includes receiving said first electronic message via port-to-port communication.

36. The method of claim 29 wherein said responding to said first electronic message includes responding via port-to-port communication.

37. The method of claim 29 wherein said responding to said first electronic message includes responding with a return electronic message.

38. The method of claim 37, wherein said return electronic message is one of an email, text message, VoIP message, or instant message.

39. The method of claim 29, wherein said receiving a first electronic message is performed by a confirming device, said confirming device receiving said portion of said second electronic message only with said first electronic message.

40. A method comprising

receiving from a sending device a first electronic message authorized by an originator and directed to an intended recipient, said electronic message containing an identifier associated with the originator and further containing a first data string generated by application of an algorithm to a portion of said first electronic message;

sending to a confirmation device a second electronic message that includes a request to confirm that said first electronic message was authorized by the originator associated with the identifier, said second electronic message including said first data string and said portion of said electronic message;

receiving from the confirmation device a response to said second electronic message affirming said originator of said first electronic message did not use a false originating address;

allowing said first electronic message to be further processed according to rules for processing of confirmed electronic messages directed to the intended recipient;

receiving from the sending device a third electronic message authorized by the originator, said third electronic message containing the identifier and further containing a second data string generated by application of an algorithm to a portion of said third electronic message; and

sending to the confirmation device a fourth electronic message that includes a request to confirm that said originator of said third electronic message did not use a false originating address, said fourth electronic message including said second data string and said portion of said third electronic message;

wherein the algorithm applied to the portion of the first electronic message is a first algorithm; and

the algorithm applied to the portion of the third electronic message is a second algorithm different from the first algorithm.

41. The method of claim 40 wherein said first electronic message includes one of an email, text message, VoIP message, or instant message.

42. The method of claim 40 wherein said portion of said first electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said first electronic message.

43. The method of claim 40 wherein said first data string is included in a message header of said first electronic message.

44. The method of claim 40 wherein said first data string is included in a message text of said first electronic message.

45. The method of claim 40 wherein said first data string includes a checksum for a message text of said first electronic message.

46. The method of claim 40 wherein said sending a second electronic message includes sending said second electronic message via port-to-port communication.

47. The method of claim 40 wherein said receiving a response to said second electronic message includes receiving said response via port-to-port communication.

48. The method of claim 40 wherein said receiving a response to said second electronic message includes receiving a return electronic message.

49. The method of claim 48, wherein said return electronic message is one of an email, text message, VoIP message, or instant message.