Computer implemented system and method for authenticating a sender of electronic data to a recipient

• US 9,160,725 B2
• Filed: 09/21/2012
• Issued: 10/13/2015
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: RPost Communications Limited (RPost International Limited)
• Original Assignee: RPost Communications Limited (RPost International Limited)
• Inventors: Tomkow, Terrance A.
• Primary Examiner(s): Gelagay, Shewaye
• Assistant Examiner(s): LE, KHOI V
• Application Number:
  US13/624,769
• Publication Number:
  US 20130086654A1
• Time in Patent Office: 1,117 Days
• Field of Search: 709/206
• US Class Current: 1/1
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A sever receives data from a sender to be dispatched to a recipient. Before dispatching the data to the recipient the server sends a message to the sender'"'"'s email address requesting a response which will confirm the sender'"'"'s authorship of the data. Upon receiving the confirmation about sender'"'"'s authorship of the data, the server transmits the data together with an identification of the sender to the recipient.

Claims

1. A computer implemented method for authenticating a sender of electronic data to a recipient, said method comprising the following computer implemented steps:

receiving from the sender, at a server remote from the sender, electronic data including at least an email address of the sender;

transmitting a message from the server to the sender'"'"'s email address, the message requesting proof of the sender'"'"'s identity and ownership of the transmitted electronic data, the message

prompting the sender to visit a website associated with the server to provide indications of identity and confirmation of authorship of the transmitted electronic data, and

prompting the sender to draw a signature in a web-interface of the website as the indication of the sender'"'"'s identity and ownership of the transmitted electronic data;

receiving at the server a copy of the signature as a proof of the sender'"'"'s identity and ownership of the transmitted electronic data, the proof being sent in response to the message sent from the server to the sender'"'"'s email address;

recording the copy of the signature at the server as a confirmation of the sender'"'"'s identity and ownership of the transmitted data;

embedding the proof of the sender'"'"'s identity and ownership of the transmitted electronic data, into the electronic data; and

transmitting a copy of the electronic data generated by the sender with the proof of the sender'"'"'s identity and ownership embedded, from the server to a recipient.

2. The computer implemented method as claimed in claim 1, wherein the method further includes the step of transmitting the electronic data from the sender to the server, in the form of an email message.

3. The computer implemented method as claimed in claim 1, wherein the method further includes the step of transmitting the electronic data received from the sender to an internet web server for the purpose of delivery to the recipient.

4. The computer implemented method as claimed in claim 1, wherein the step of receiving electronic data including at least email address of the sender, further includes the step of recording at the server, a code uniquely identifying the transmitted electronic data.

5. The computer implemented method as claimed in claim 1, wherein the step of transmitting a message from said server to the sender'"'"'s email address further includes the step of embedding in said message, a link to a website associated with the server.

6. The computer implemented method as claimed in claim 5, wherein said method further includes the step of embedding a code uniquely identifying the transmitted electronic data, into said link.

7. The computer implemented method as claimed in claim 1, wherein said computer implemented method further includes the step of adding the indications of identity and confirmation of ownership of the sender, to the electronic data transmitted from said server to the recipient.

8. The computer implemented method as claimed in claim 1, wherein the method further includes the step of transmitting the electronic data from said server to the recipient in the form of an electronic message.

9. The computer implemented method as claimed in claim 1, wherein the step of transmitting from said server to a recipient a copy of the electronic data further includes the step of digitally signing the copy of the electronic data.

10. The computer implemented method as claimed in claim 1, wherein the method further includes the step of operating said server by a service for authentication of authorship of data.

11. The computer implemented method as claimed in claim 1, wherein the method further includes the step of embedding a timestamp associated with the transmission of electronic data into confirmation of the ownership of the electronic data transmitted from the server.

12. The computer implemented method as claimed in claim 11, wherein the method further includes the step of confirming the authorship of the electronic data transmitted from the server to the recipient, through a timestamp associated with the creation of said electronic data by the sender.

13. A system for authenticating a sender of electronic data to a recipient, comprising:

a server computer having a processor programmed by software commands to

receive electronic information from a sender,

transmit a message to the sender asking the sender for proof of identity and ownership of the received electronic information, the message requesting proof of the sender'"'"'s identity and ownership of the transmitted electronic data, the message

prompt the sender to visit a website associated with the server to provide indications of identity and confirmation of authorship of the transmitted electronic data, and

prompt the sender to draw a signature in a web-interface of the website as the indication of the sender'"'"'s identity and ownership of the transmitted electronic data,

receive a copy of the signatures as a proof of the sender'"'"'s identity and ownership of the received electronic information from the sender authenticating the sender to the email,

record the copy of the signature as a combination of the sender'"'"'s identity and ownership of the transmitted data;

embed the proof of the sender'"'"'s identity and ownership of the transmitted electronic information, into the electronic information; and

transmit the electronic information with the proof of sender'"'"'s identity and ownership embedded to a recipient.

14. The system of claim 13, wherein the processor is further programmed to assign a code to the transmitted electronic information uniquely identifying the transmitted electronic information.

15. The system of claim 14, wherein the code is embedded into the transmitted electronic information.

16. The system of claim 13, wherein the processor is programmed to embed a link to a website into the electronic information and transmit the electronic information, the confirmation and the link to the recipient.