WO2006130772A2 - E-mail stamping with from-header validation - Google Patents
E-mail stamping with from-header validation Download PDFInfo
- Publication number
- WO2006130772A2 WO2006130772A2 PCT/US2006/021292 US2006021292W WO2006130772A2 WO 2006130772 A2 WO2006130772 A2 WO 2006130772A2 US 2006021292 W US2006021292 W US 2006021292W WO 2006130772 A2 WO2006130772 A2 WO 2006130772A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- sender
- header
- stamp
- message
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/10—Office automation; Time management
- G06Q10/107—Computer-aided management of electronic mailing [e-mailing]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/212—Monitoring or handling of messages using filtering or selective blocking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
- H04L63/126—Applying verification of the received information the source of the received data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
- H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3297—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving time stamps, e.g. generation of time stamps
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
Definitions
- the present invention relates generally to e-mail security.
- the present invention is directed toward the registration and subsequent authentication of senders of e-mail.
- some e-mail programs (such as Microsoft's Hotmail, for example) display messages in an inbox using only the "display" string of an e-mail address, which is configurable by the sender. So, for example, an e-mail from phisher@bank-of-america- online.com could be configured by the sender to have a display name of "B of A Customer Service", in order to entice the recipient to open the message and follow links contained within.
- the present invention combines the effective aspects of stamping outbound e- mail with a registration system for e-mail senders.
- a person or other entity (known henceforth as a mail sender, or simply a sender) participates by registering From: line information with a trusted third-party repository known as a stamp authority.
- a stamp authority When the sender sends an e-mail message, a hash of the From: line is compared against the From: line information for the sender stored in the repository. If the result is a match, the e -mail is allowed to be sent, subject to any other restrictions imposed by the stamping process. If there is not a match, then the e-mail is prevented from being stamped.
- FIG. 1 is a block diagram of the overall architecture of an embodiment of the present invention.
- FIG. 2 is a flowchart illustrating a method of stamping e-mail messages with From: header authentication in accordance with an embodiment of the present invention .
- stamps are a powerful, economically-driven solution to address the damage caused by spam and its negative after-effects such as false positives, spoofed messages and viruses. It shifts the burden of the high cost of fighting spam from the recipients to the senders of email. Stamping identifies and labels the "good" mail with stamps paid for by responsible high-volume senders who are subject to sender-level accreditation and made accountable for trusted email practices .
- stamping systems and methods are in conventional use, for example as described in US Patent No. 5,999,967 to Sundsted, which is incorporated by reference herein in its entirety.
- Fig. 1 is a block diagram that illustrates the interaction of various components of an e-mail stamping system.
- Fig. 1 includes a stamp authority 102 having a registration database 114 and a stamp generator 106; a mail sender 104 having an imprinter 108; and a mailbox provider 110, having a stamp checker 112 and a mailbox 116.
- Mail sender 104 sends e-mails to one or more recipients —typically to a large number of recipients, though for clarity of description we assume a single recipient in this instance without any loss of generality.
- the e-mail preferably is transmitted to imprinter 108, which creates appropriate stamp header fields as described below, calculates a hash of the message, and sends the hash to stamp generator 106 to be signed and returned as a stamp.
- imprinter 108 After receiving a stamp back from stamp generator 106, imprinter 108 then sends the e-mail to its intended recipient.
- stamp generator 106 When stamp generator 106 receives the hash to be stamped from imprinter 108, it verifies that the mail sender 104 is authorized to use a stamp —for example, it verifies that the mail sender 104 is up to date on payments, has stamps in his account, has not violated any business rules that limit his ability to stamp e-mail, etc.
- imprinter 108 connects in real time to stamp authority 102 to have stamp generator 106 perform the verification; alternatively, outgoing e-mails can be queued and the verification process can take place during a batch update when connection to stamp authority 102 is available.
- stamp generator 106 In addition to verifying that the mail sender 104 is authorized to use a stamp, stamp generator 106 also determines whether the From: header information included in the message matches the header information stored in registration database 114, as described further below.
- stamp generator 106 determines that mail sender 104 is authorized to use a stamp and that the From: header information in the messages is legitimate, it generates a stamp and provides the stamp to imprinter 108 to allow the e-mail to be sent.
- the e-mail then travels in a conventional method to a mailbox provider 110.
- stamp checker 112 examines the stamp to determine whether the stamp is valid as described further below. If the stamp is valid, then the e-mail is delivered to the mailbox 116 of the addressed recipient, subject to any additional rules imposed by the mailbox provider or the recipient herself. If the stamp is not valid, this indicates that there might have been external tampering, or a transmission or other error, and the e-mail is rejected.
- Stamp authority 102 is an agent that oversees the stamping process by issuing stamps to mail senders and enforcing business rules related to the sending of e-mail by the mail senders.
- a mail sender 104 registers complete From: line information with stamp authority 102, and the information is then maintained in a registration database 114 for subsequent verification when mail sender 104 attempts to obtain a stamp for an e-mail message.
- FIG. 2 illustrates a method of e-mail stamping with From: header validation in accordance with an embodiment of the present invention.
- Mail sender 104 initially sends 202 a message to be stamped to imprinter 108.
- a stamp is unique for each message, and is a cryptographic object contained within the header of the e-mail message.
- the stamp includes a variety of header fields, for example:
- X-StampAuthority-Sig MfowCwYJKoZIhvcNAQEBA0sAMEgCQQDNZ+V7wcxLqyAQR iHtMySKtD5UfT/rdFzaGehCmp8QECDKhPKqRC2EMbvBXZVdNIo500yrPayUKBYxfjMcxc
- one header field includes a parameter containing a base64-encoded normalized From: header value.
- the comment part must have any surrounding full quotation marks and surrounding parentheses removed. All whitespace characters must be preserved.
- the address part must not include a comma, more than one @ character, or a colon.
- the address part must have any surrounding angle braces preserved. If the address part lacks surrounding angle braces, surrounding angle braces must be added.
- the comment part precedes the address part and is separated from the address part by exactly one space character. The result is base64 encoded for transport.
- the "h” parameter contains the base64 encoded SHAl hash of data specific to the email message stamped. The inclusion of the hash in the stamp binds the stamp to the message headers, and it protects message headers during transit by allowing filters to detect if message headers have been modified.
- the "b” parameter contains the base64 encoded SHAl hash of data specific to the email message stamped. The inclusion of the hash in the stamp binds the stamp to the message body, and it protects the message body during transit by allowing filters to detect if the message has been modified.
- imprinter 108 forwards the hash to stamp generator 106, which verifies 206 that the sender is authorized to issue a stamp.
- a mail sender 104 may be ineligible to issue a stamp if, for example, the sender has used up all of the stamps purchased from stamp authority 102.
- Stamp generator 106 also verifies From: header information against the From: header registered in registration database 114. Preferably, if 208 there is not a match between what is registered and what is in the e-mail header, stamp generator 106 will reject 210 the message. If there is a match and the mail sender 104 is otherwise allowed to send a stamped message, stamp generator 106 adds 212 its signature to the header and returns the message to imprinter 108, which then sends 214 the message to the message's specified recipient.
- stamp generator 106 has a private/public key pair generated in a conventional manner. Stamp generator 106 uses the parameters such as those listed below and its private key to create a transit signature using a cryptographic algorithm, for example RSASSA-PKCS1-V1_5.
- the parameters used by the stamp generator 106 to create the stamp in one embodiment are: a version number of the stamping protocol; a unique ID for that stamp; an indication of a stamp type (adult, commercial, etc.); a hash of the message created from the message and the stamp fields (obtained from imprinter 108 as described above); Sender: and From: information (obtained from the message envelope by imprinter 108); and RCPT TO: information (obtained from the message envelope by imprinter 108).
- Other parameters could also be used as deemed appropriate by an implementer of such a system..
- the creation of the transit signature in a preferred embodiment first involves the creation of a hash of all of the fields being signed (which includes all stamp fields and the message hash), and then the signing algorithm is implied. Thus, there are essentially two hash operations being performed; the first operation is of the entire message and the stamp fields, which yields a value that is then inserted as one of the fields in the stamp. This field, along with all other stamp authority 102 fields, is then hashed in a second hash operation, the value of which is then signed using cryptography. In this way, these stamp authority 102 fields can be validated without the entire message being present.
- the above parameters including the transit signature, combined with the certificate create a fully-formed stamp.
- stamp checker 112 checks 216 the signature on the stamped e-mail to determine whether it is valid.
- the certificate is verified by stamp checker 112 as follows. Stamp checker 112 uses the stamp authority's public key previously obtained. Next, stamp checker 112 determines a hash of the fields in the certificate. Stamp checker 112 then takes the hash, the stamp authority public key, and the certificate signature and performs a signature verification operation to check whether the signature of the certificate (and hence the certificate) is valid.
- stamp checker 112 rejects 220 the message. If the message is rejected, additional steps can be taken, for example the sender of the message could be notified that a message was received claiming to be from the sender 104 but was not successfully validated. Preferably, a report is also made 222 to the stamp authority 102. [0030] If 218 the certificate is valid, then the e-mail is delivered 224 by mailbox provider 110 to the mailbox 116 of the specified recipient, subject to any other delivery rules that the mailbox provider or owner may have set up for mail handling. Preferably, a report is then made 222 to the stamp authority 102, so that the stamp can be cancelled and not reused.
- mail sender 104 registers its From: address with stamp authority 102. Regardless of whether mail sender 104 indicates to mailbox provider 110 that it should query the stamp authority's registration database 114 of registered mail senders, mailbox provider 110 makes such a query, and determines whether the From: header in the received message matches a From: header registered with stamp authority 102 as being associated with that mail sender 104. If so, the message is delivered to the address's mailbox 116. If not, the message is rejected.
- stamp generator 106 may be provided in many or one module.
- Some portions of the above description present the feature of the present invention in terms of algorithms and symbolic representations of operations on information. These algorithmic descriptions and representations are the means used by those skilled in the art of e-mail security to most effectively convey the substance of their work to others skilled in the art. These operations, while described functionally or logically, are understood to be implemented by computer programs. Furthermore, it has also proven convenient at times, to refer to these arrangements of operations as modules or code devices, without loss of generality.
- Certain aspects of the present invention include process steps and instructions described herein in the form of an algorithm. It should be noted that the process steps and instructions of the present invention could be embodied in software, firmware or hardware, and when embodied in software, could be downloaded to reside on and be op erated from different platforms used by real time network operating systems.
- the present invention also relates to an apparatus for performing the operations herein.
- This apparatus may be specially constructed for the required purposes, or it may comprise a general-purpose computer selectively activated or reconfigured by a computer program stored in the computer.
- a computer program may be stored in a computer readable storage medium, such as, but is not limited to, any type of disk including floppy disks, optical disks, CD-ROMs, magnetic-optical disks, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, application specific integrated circuits (ASICs), or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
- the computers referred to in the specification may include a single processor or may be architectures employing multiple processor designs for increased computing capability.
- the algorithms and displays presented herein are not inherently related to any particular computer or other apparatus.
- Various general -purpose systems may also be used with programs in accordance with the teachings herein, or it may prove convenient to construct more specialized apparatus to perform the required method steps. The required structure for a variety of these systems will appear from the description above.
- the present invention is not described with reference to any particular programm ing language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any references to specific languages are provided for disclosure of enablement and best mode o f the present invention.
Abstract
Effective aspects of stamping outbound e-mail are combined with a registration system for e-mail senders. A mail sender participates by registering From: line information with a trusted third -party repository known as a stamp authority. When the sender sends an e-mail message, a hash of the From: line is compared against the From: line information for the sender stored in the repository. If the result is a match, the e -mail is allowed to be sent, subject to any other restrictions imposed by the stamping process. If there is not a match, then the e-mail is prevented from being stamped.
Description
E-MAIL STAMPING WITH FROM-HEADER VALIDATION
Inventor: Daniel Dreymann
CROSS-REFERENCE TO RELATED APPLICATIONS
[0001] This application claims the benefit of United States Provisional Application No. 60/686,686, filed on June 1, 2005, and incorporated by reference herein in its entirety.
BACKGROUND OF THE INVENTION Field of the Invention
[0002] The present invention relates generally to e-mail security. In particular, the present invention is directed toward the registration and subsequent authentication of senders of e-mail. Description of Background Art
[0003] The wide availability of domain name addresses for purchase has led to the nefarious practice of "phishing", in which a bad actor sends e-mails that appear to be from a reputable source and typically encourage the recipient to click on a link within the e-mail message and provide personal information to the sender. For example, the domain names "bank-of-america-online.com", "chasebank.cc", "my-citibank.us" are a sample of legitimate- sounding names that are currently available to the public for purchase. [0004] Because the DNS records of a domain are under the control of the domain owner, messages sent from the domain will be marked as legitimate by conventional domain authentication schemes such as the Sender Policy Framework (SPF), the Sender ID Framework, DomainKeys, and Identified Internet Mail. That is, if a sender purchases the "bank-of-america-online.com" domain and sends an e-mail with a From header of "customerservice@bank-of-america-online.com", the message will be authenticated because it is indeed from who it claims to be from— the owner/operator of the bank-of-america- online.com domain.
[0005] Additionally, some e-mail programs (such as Microsoft's Hotmail, for example) display messages in an inbox using only the "display" string of an e-mail address, which is configurable by the sender. So, for example, an e-mail from phisher@bank-of-america- online.com could be configured by the sender to have a display name of "B of A Customer
Service", in order to entice the recipient to open the message and follow links contained within.
[0006] It would be of great assistance to e-mail recipients if a system and method existed for reliably accrediting senders of electronic mail messages.
SUMMARY OF THE INVENTION
[0007] The present invention combines the effective aspects of stamping outbound e- mail with a registration system for e-mail senders. A person or other entity (known henceforth as a mail sender, or simply a sender) participates by registering From: line information with a trusted third-party repository known as a stamp authority. When the sender sends an e-mail message, a hash of the From: line is compared against the From: line information for the sender stored in the repository. If the result is a match, the e -mail is allowed to be sent, subject to any other restrictions imposed by the stamping process. If there is not a match, then the e-mail is prevented from being stamped.
BRIEF DESCRIPTION OF THE DRAWINGS
[0008] Fig. 1 is a block diagram of the overall architecture of an embodiment of the present invention.
[0009] Fig. 2 is a flowchart illustrating a method of stamping e-mail messages with From: header authentication in accordance with an embodiment of the present invention .
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0010] The use of stamps is a powerful, economically-driven solution to address the damage caused by spam and its negative after-effects such as false positives, spoofed messages and viruses. It shifts the burden of the high cost of fighting spam from the recipients to the senders of email. Stamping identifies and labels the "good" mail with stamps paid for by responsible high-volume senders who are subject to sender-level accreditation and made accountable for trusted email practices . Various stamping systems and methods are in conventional use, for example as described in US Patent No. 5,999,967 to Sundsted, which is incorporated by reference herein in its entirety. [0011] The present invention makes use of stamping technology by making the availability of a stamp dependent on a match between the From: header in an outbound e- mail and a From: header previously registered with a stamp authority.
[0012] Fig. 1 is a block diagram that illustrates the interaction of various components of an e-mail stamping system. Fig. 1 includes a stamp authority 102 having a registration database 114 and a stamp generator 106; a mail sender 104 having an imprinter 108; and a mailbox provider 110, having a stamp checker 112 and a mailbox 116. [0013] Mail sender 104 sends e-mails to one or more recipients —typically to a large number of recipients, though for clarity of description we assume a single recipient in this instance without any loss of generality. When mail sender 104 sends an e-mail that he wishes to have stamped, the e-mail preferably is transmitted to imprinter 108, which creates appropriate stamp header fields as described below, calculates a hash of the message, and sends the hash to stamp generator 106 to be signed and returned as a stamp. After receiving a stamp back from stamp generator 106, imprinter 108 then sends the e-mail to its intended recipient.
[0014] When stamp generator 106 receives the hash to be stamped from imprinter 108, it verifies that the mail sender 104 is authorized to use a stamp —for example, it verifies that the mail sender 104 is up to date on payments, has stamps in his account, has not violated any business rules that limit his ability to stamp e-mail, etc. Preferably imprinter 108 connects in real time to stamp authority 102 to have stamp generator 106 perform the verification; alternatively, outgoing e-mails can be queued and the verification process can take place during a batch update when connection to stamp authority 102 is available. [0015] In addition to verifying that the mail sender 104 is authorized to use a stamp, stamp generator 106 also determines whether the From: header information included in the message matches the header information stored in registration database 114, as described further below.
[0016] Once stamp generator 106 determines that mail sender 104 is authorized to use a stamp and that the From: header information in the messages is legitimate, it generates a stamp and provides the stamp to imprinter 108 to allow the e-mail to be sent. [0017] The e-mail then travels in a conventional method to a mailbox provider 110. Upon arrival, stamp checker 112 examines the stamp to determine whether the stamp is valid as described further below. If the stamp is valid, then the e-mail is delivered to the mailbox 116 of the addressed recipient, subject to any additional rules imposed by the mailbox provider or the recipient herself. If the stamp is not valid, this indicates that there
might have been external tampering, or a transmission or other error, and the e-mail is rejected.
[0018] Stamp authority 102 is an agent that oversees the stamping process by issuing stamps to mail senders and enforcing business rules related to the sending of e-mail by the mail senders. In addition, a mail sender 104 registers complete From: line information with stamp authority 102, and the information is then maintained in a registration database 114 for subsequent verification when mail sender 104 attempts to obtain a stamp for an e-mail message.
[0019] Fig. 2 illustrates a method of e-mail stamping with From: header validation in accordance with an embodiment of the present invention.
[0020] Mail sender 104 initially sends 202 a message to be stamped to imprinter 108. In a preferred embodiment, a stamp is unique for each message, and is a cryptographic object contained within the header of the e-mail message. The stamp includes a variety of header fields, for example:
X-StampAuthority-Rcpto: joe@example.com
X-StampAuthority-Reply-To: mary@example.com
X-Stamp Authority-Sender: amy@example.com
X-StampAuthority: 1; i="12345"; s="0000001C0000001C0001000141D32376000000010000001300000002"; e="20040612T123256"; d="20040608T082310"; o="342AC5"; t="2"; h="4Io7sVcs55HmRWhSE3QucCKHclU="; f="QmlnIFRydWNrcyBvZmZlcnNAYmlndHJlY2tzlmNvbQ="; b="6MdkylkSixEEfv7oh38fO6O2uic=";
X-StampAuthority-Sig: MfowCwYJKoZIhvcNAQEBA0sAMEgCQQDNZ+V7wcxLqyAQR iHtMySKtD5UfT/rdFzaGehCmp8QECDKhPKqRC2EMbvBXZVdNIo500yrPayUKBYxfjMcxc
5AgMBAAE=
The particular header fields chosen to implement the present invention may be determined according to the needs of the implementer. In a preferred embodiment, one header field includes a parameter containing a base64-encoded normalized From: header value.
[0021] To normalize, in one embodiment the following rules are observed: the comment part must have any surrounding full quotation marks and surrounding parentheses
removed. All whitespace characters must be preserved. The address part must not include a comma, more than one @ character, or a colon. The address part must have any surrounding angle braces preserved. If the address part lacks surrounding angle braces, surrounding angle braces must be added. In the "f " parameter, the comment part precedes the address part and is separated from the address part by exactly one space character. The result is base64 encoded for transport.
[0022] Imprinter 108 also adds a header transit hash to the message, represented by the "h=" string in the example shown above, and a body transit hash, represented by the "b=" string in the example shown above. In a preferred embodiment, the "h" parameter contains the base64 encoded SHAl hash of data specific to the email message stamped. The inclusion of the hash in the stamp binds the stamp to the message headers, and it protects message headers during transit by allowing filters to detect if message headers have been modified. The "b" parameter contains the base64 encoded SHAl hash of data specific to the email message stamped. The inclusion of the hash in the stamp binds the stamp to the message body, and it protects the message body during transit by allowing filters to detect if the message has been modified.
[0023] Once the stamp fields and hash are created 204, imprinter 108 forwards the hash to stamp generator 106, which verifies 206 that the sender is authorized to issue a stamp. A mail sender 104 may be ineligible to issue a stamp if, for example, the sender has used up all of the stamps purchased from stamp authority 102.
[0024] Stamp generator 106 also verifies From: header information against the From: header registered in registration database 114. Preferably, if 208 there is not a match between what is registered and what is in the e-mail header, stamp generator 106 will reject 210 the message. If there is a match and the mail sender 104 is otherwise allowed to send a stamped message, stamp generator 106 adds 212 its signature to the header and returns the message to imprinter 108, which then sends 214 the message to the message's specified recipient.
[0025] In one embodiment, stamp generator 106 has a private/public key pair generated in a conventional manner. Stamp generator 106 uses the parameters such as those listed below and its private key to create a transit signature using a cryptographic algorithm, for example RSASSA-PKCS1-V1_5. The parameters used by the stamp generator 106 to create
the stamp in one embodiment are: a version number of the stamping protocol; a unique ID for that stamp; an indication of a stamp type (adult, commercial, etc.); a hash of the message created from the message and the stamp fields (obtained from imprinter 108 as described above); Sender: and From: information (obtained from the message envelope by imprinter 108); and RCPT TO: information (obtained from the message envelope by imprinter 108). Other parameters could also be used as deemed appropriate by an implementer of such a system..
[0026] The creation of the transit signature in a preferred embodiment first involves the creation of a hash of all of the fields being signed (which includes all stamp fields and the message hash), and then the signing algorithm is implied. Thus, there are essentially two hash operations being performed; the first operation is of the entire message and the stamp fields, which yields a value that is then inserted as one of the fields in the stamp. This field, along with all other stamp authority 102 fields, is then hashed in a second hash operation, the value of which is then signed using cryptography. In this way, these stamp authority 102 fields can be validated without the entire message being present. In a preferred embodiment, the above parameters including the transit signature, combined with the certificate, create a fully-formed stamp.
[0027] When the e-mail is received by mailbox provider 110, stamp checker 112 checks 216 the signature on the stamped e-mail to determine whether it is valid. [0028] In one embodiment, the certificate is verified by stamp checker 112 as follows. Stamp checker 112 uses the stamp authority's public key previously obtained. Next, stamp checker 112 determines a hash of the fields in the certificate. Stamp checker 112 then takes the hash, the stamp authority public key, and the certificate signature and performs a signature verification operation to check whether the signature of the certificate (and hence the certificate) is valid.
[0029] If 218 the certificate is not valid, stamp checker 112 rejects 220 the message. If the message is rejected, additional steps can be taken, for example the sender of the message could be notified that a message was received claiming to be from the sender 104 but was not successfully validated. Preferably, a report is also made 222 to the stamp authority 102.
[0030] If 218 the certificate is valid, then the e-mail is delivered 224 by mailbox provider 110 to the mailbox 116 of the specified recipient, subject to any other delivery rules that the mailbox provider or owner may have set up for mail handling. Preferably, a report is then made 222 to the stamp authority 102, so that the stamp can be cancelled and not reused. [0031] In an alternative embodiment of the invention, rather than using a hash of the From: line as described above, a mail sender 104 instead obtains from stamp authority 102 a signed certificate, issued by the stamp authority 102, certifying that the sender 104 is accredited, i.e. that the sender is legitimate. The mail sender 104 then attaches the certificate to an e-mail message, for example using Domain Keys Identified Mail (DKIM); by embedding the certificate; or using other methods of domain authentication known in the art. When mailbox provider 110 receives the e-mail message, it compares the embedded certificate against the From: header in the message. If there is a match, then the message is delivered to the mailbox 116 of the addressee. If not, the message is rejected. [0032] In another alternative embodiment, mail sender 104 registers its From: address with stamp authority 102. Regardless of whether mail sender 104 indicates to mailbox provider 110 that it should query the stamp authority's registration database 114 of registered mail senders, mailbox provider 110 makes such a query, and determines whether the From: header in the received message matches a From: header registered with stamp authority 102 as being associated with that mail sender 104. If so, the message is delivered to the address's mailbox 116. If not, the message is rejected.
[0033] The present invention has been described in particular detail with respect to a limited number of embodiments. Those of skill in the art will appreciate that the invention may additionally be practiced in other embodiments. First, the particular naming of the components, capitalization of terms, the attributes, data structures, or any other programming or structural aspect is not mandatory or significant, and the mechanisms that implement the invention or its features may have different names, formats, or protocols. Further, the system may be implemented via a combination of hardware and software, as described, or entirely in hardware elements. Also, the particular division of functionality between the various system components described herein is merely exemplary, and not mandatory; functions performed by a single system component may instead be performed by multiple components, and functions performed by multiple components may instead
performed by a single component. For example, the particular functions of the stamp generator 106 and so forth may be provided in many or one module. [0034] Some portions of the above description present the feature of the present invention in terms of algorithms and symbolic representations of operations on information. These algorithmic descriptions and representations are the means used by those skilled in the art of e-mail security to most effectively convey the substance of their work to others skilled in the art. These operations, while described functionally or logically, are understood to be implemented by computer programs. Furthermore, it has also proven convenient at times, to refer to these arrangements of operations as modules or code devices, without loss of generality.
[0035] It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the present discussion, it is appreciated that throughout the description, discussions utilizing terms such as "processing" or "computing" or "calculating" or "determining" or "displaying" or the like, refer to the action and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system memories or registers or other such information storage, transmission or display devices.
[0036] Certain aspects of the present invention include process steps and instructions described herein in the form of an algorithm. It should be noted that the process steps and instructions of the present invention could be embodied in software, firmware or hardware, and when embodied in software, could be downloaded to reside on and be op erated from different platforms used by real time network operating systems.
[0037] The present invention also relates to an apparatus for performing the operations herein. This apparatus may be specially constructed for the required purposes, or it may comprise a general-purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a computer program may be stored in a computer readable storage medium, such as, but is not limited to, any type of disk including floppy disks, optical disks, CD-ROMs, magnetic-optical disks, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards,
application specific integrated circuits (ASICs), or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus. Furthermore, the computers referred to in the specification may include a single processor or may be architectures employing multiple processor designs for increased computing capability. [0038] The algorithms and displays presented herein are not inherently related to any particular computer or other apparatus. Various general -purpose systems may also be used with programs in accordance with the teachings herein, or it may prove convenient to construct more specialized apparatus to perform the required method steps. The required structure for a variety of these systems will appear from the description above. In addition, the present invention is not described with reference to any particular programm ing language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any references to specific languages are provided for disclosure of enablement and best mode o f the present invention.
[0039] Finally, it should be noted that the language used in the specification has been principally selected for readability and instructional purposes, and may not have been selected to delineate or circumscribe the inventive subject matter. Accordingly, the disclosure of the present invention is intended to be illustrative, but not limiting, of the scope of the invention. [0040] I claim:
Claims
1. A method for validating a sender of an e-mail message, the method comprising: receiving an e-mail from the sender, the e-mail including a header, the header having a first field, the contents of the first field indicating the sender's identity; determining that the sender is authorized to use the identity indicated by the contents first field; and inserting a second field in the header, the contents of the second field indicating that the sender is authorized to use the identity indicated by the contents of the first field.
2. The method of claim 1, further comprising: returning the e-mail to the sender.
3. The method of claim 1, further comprising: sending the e-mail to a recipient indicated in the header.
4. The method of claim 1 wherein the contents of the second field are cryptographically encoded.
5. A computer-implemented method for validating a sender of an e-mail message, the method comprising: registering identification information about an e-mail sender with an authority; sending a header associated with an e-mail message from the e-mail sender to the authority, the header including origination information, the origination information indicating that the associated the e-mail message is from the e-mail sender; receiving from the authority a modified header, the modified header associated with the e-mail message and additionally including a token indicating that the origination information is accurate; and sending the e-mail message and the associated modified header to a recipient.
6. A computer program product for validating a sender of an e-mail message, the computer program product stored on a computer-readable medium and including instructions configured to cause a processor to carry out the steps of: registering identification information about an e-mail sender with an authority; sending a header associated with an e-mail message from the e-mail sender to the authority, the header including origination information, the origination information indicating that the associated the e-mail message is from the e-mail sender; receiving from the authority a modified header, the modified header associated with the e-mail message and additionally including a token indicating that the origination information is accurate; and sending the e-mail message and the associated modified header to a recipient.
7. A system for validating a sender of an e-mail message, comprising: a stamp authority, further comprising: a registration database for storing identification information about an e- mail sender; a stamp generator for receiving from the e-mail sender a header associated with an e-mail message, the header including origination information, the origination information indicating that the associated the e-mail message is from the e-mail sender; and wherein the stamp generator is further adapted to determine that the identification information about the e-mail sender stored in the registration database matches the origination information in the header, and to create a modified header, the modified header associated with the e-mail message and additionally including a token indicating that the origination information is accurate.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2008514857A JP2008546317A (en) | 2005-06-01 | 2006-06-01 | Email stamping with from-header verification |
EP06760625A EP1905187A4 (en) | 2005-06-01 | 2006-06-01 | E-mail stamping with from-header validation |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US68668605P | 2005-06-01 | 2005-06-01 | |
US60/686,686 | 2005-06-01 |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2006130772A2 true WO2006130772A2 (en) | 2006-12-07 |
WO2006130772A3 WO2006130772A3 (en) | 2009-04-23 |
Family
ID=37482321
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2006/021292 WO2006130772A2 (en) | 2005-06-01 | 2006-06-01 | E-mail stamping with from-header validation |
Country Status (4)
Country | Link |
---|---|
US (1) | US7917756B2 (en) |
EP (1) | EP1905187A4 (en) |
JP (1) | JP2008546317A (en) |
WO (1) | WO2006130772A2 (en) |
Families Citing this family (24)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7457955B2 (en) * | 2004-01-14 | 2008-11-25 | Brandmail Solutions, Inc. | Method and apparatus for trusted branded email |
US20070162394A1 (en) | 2004-02-12 | 2007-07-12 | Iconix, Inc. | Rapid identification of message authentication |
US7953814B1 (en) | 2005-02-28 | 2011-05-31 | Mcafee, Inc. | Stopping and remediating outbound messaging abuse |
US8484295B2 (en) | 2004-12-21 | 2013-07-09 | Mcafee, Inc. | Subscriber reputation filtering method for analyzing subscriber activity and detecting account misuse |
US8738708B2 (en) * | 2004-12-21 | 2014-05-27 | Mcafee, Inc. | Bounce management in a trusted communication network |
US9015472B1 (en) | 2005-03-10 | 2015-04-21 | Mcafee, Inc. | Marking electronic messages to indicate human origination |
US9160755B2 (en) * | 2004-12-21 | 2015-10-13 | Mcafee, Inc. | Trusted communication network |
US7877789B2 (en) | 2005-06-01 | 2011-01-25 | Goodmail Systems, Inc. | E-mail stamping with from-header validation |
US7917943B1 (en) * | 2006-12-01 | 2011-03-29 | Goodmail Systems, Inc. | E-mail Stamping with accredited entity name |
WO2006130772A2 (en) * | 2005-06-01 | 2006-12-07 | Goodmail Systems, Inc. | E-mail stamping with from-header validation |
US10110530B2 (en) | 2007-02-02 | 2018-10-23 | Iconix, Inc. | Authenticating and confidence marking e-mail messages |
US20080307226A1 (en) * | 2007-06-07 | 2008-12-11 | Alcatel Lucent | Verifying authenticity of e-mail messages |
JP4444998B2 (en) * | 2007-10-12 | 2010-03-31 | 富士通株式会社 | E-mail information management program, e-mail information management apparatus, and e-mail information management method |
CA2700569A1 (en) * | 2007-10-18 | 2009-04-23 | Goodmail Systems, Inc. | Certification of e-mails with embedded code |
US20130246535A1 (en) * | 2007-11-13 | 2013-09-19 | Amit Kumar Yadava | System, method, and computer program product for conditionally restricting an aspect of an electronic message based on the existence of a predetermined data structure |
FR2930858B1 (en) * | 2008-05-05 | 2013-07-05 | Mailinblack | METHODS AND COMPLEMENTARY SYSTEMS BETWEEN ANTISPAM SERVICE IN HOSPITAL MODE (ASP OR SAAS) AND AN AUXILIARY CHECKING SERVICE, IN ORDER TO OPTIMIZE BLOCKING OF SPAMS |
US7801961B2 (en) * | 2008-05-09 | 2010-09-21 | Iconix, Inc. | E-mail message authentication and marking extending standards complaint techniques |
US8806590B2 (en) * | 2008-06-22 | 2014-08-12 | Microsoft Corporation | Signed ephemeral email addresses |
US10354229B2 (en) * | 2008-08-04 | 2019-07-16 | Mcafee, Llc | Method and system for centralized contact management |
US8285798B2 (en) * | 2009-04-15 | 2012-10-09 | Ecert, Inc. | System and method for the management of message policy |
US8443193B1 (en) | 2009-08-19 | 2013-05-14 | Barracuda Networks, Inc. | State-maintained multi-party signatures |
US8707420B2 (en) * | 2010-05-21 | 2014-04-22 | Microsoft Corporation | Trusted e-mail communication in a multi-tenant environment |
US9015184B2 (en) * | 2012-06-19 | 2015-04-21 | Hewlett-Packard Development Company, L.P. | Protocol compliant archiving |
CN105474585A (en) * | 2013-08-20 | 2016-04-06 | 隆沙有限公司 | Private tokens in electronic messages |
Family Cites Families (33)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5771289A (en) * | 1995-06-06 | 1998-06-23 | Intel Corporation | Method and apparatus for transmitting electronic data using attached electronic credits to pay for the transmission |
US5999967A (en) * | 1997-08-17 | 1999-12-07 | Sundsted; Todd | Electronic mail filtering by electronic stamp |
US6640301B1 (en) * | 1999-07-08 | 2003-10-28 | David Way Ng | Third-party e-mail authentication service provider using checksum and unknown pad characters with removal of quotation indents |
WO2001089174A2 (en) * | 2000-05-16 | 2001-11-22 | America Online, Inc. | E-mail sender identification |
US6976082B1 (en) * | 2000-11-03 | 2005-12-13 | At&T Corp. | System and method for receiving multi-media messages |
JP2002217980A (en) * | 2001-01-17 | 2002-08-02 | Mitsubishi Electric Corp | Devices and methods, for relaying data, sending data, and approving sending |
US7107618B1 (en) * | 2001-09-25 | 2006-09-12 | Mcafee, Inc. | System and method for certifying that data received over a computer network has been checked for viruses |
US20030200210A1 (en) * | 2002-04-23 | 2003-10-23 | Lin Chung Yu | Method of searching an email address by means of a numerical code including a combination of specific phone numbers |
US7421474B2 (en) * | 2002-05-13 | 2008-09-02 | Ricoh Co. Ltd. | Verification scheme for email message containing information about remotely monitored devices |
US20040003255A1 (en) * | 2002-06-28 | 2004-01-01 | Storage Technology Corporation | Secure email time stamping |
JP2004064215A (en) * | 2002-07-25 | 2004-02-26 | Casio Comput Co Ltd | Electronic mail system, method for preventing transmission of impersonated electronic mail, and method for preventing reception of impersonated mail |
US20040024823A1 (en) * | 2002-08-01 | 2004-02-05 | Del Monte Michael George | Email authentication system |
US7149801B2 (en) * | 2002-11-08 | 2006-12-12 | Microsoft Corporation | Memory bound functions for spam deterrence and the like |
US7360096B2 (en) * | 2002-11-20 | 2008-04-15 | Microsoft Corporation | Securely processing client credentials used for Web-based access to resources |
US7269731B2 (en) * | 2003-01-29 | 2007-09-11 | Hewlett-Packard Development Company, L.P. | Message authorization system and method |
US20040230652A1 (en) * | 2003-02-14 | 2004-11-18 | Julio Estrada | System and method for message sequencing in a collaborative work environment |
US7676546B2 (en) * | 2003-03-25 | 2010-03-09 | Verisign, Inc. | Control and management of electronic messaging |
JP4324428B2 (en) * | 2003-07-28 | 2009-09-02 | 富士通株式会社 | Mail sending method, mail sending program and mail sending server |
US7774411B2 (en) * | 2003-12-12 | 2010-08-10 | Wisys Technology Foundation, Inc. | Secure electronic message transport protocol |
US7653816B2 (en) * | 2003-12-30 | 2010-01-26 | First Information Systems, Llc | E-mail certification service |
US20050198173A1 (en) * | 2004-01-02 | 2005-09-08 | Evans Alexander W. | System and method for controlling receipt of electronic messages |
US8073910B2 (en) * | 2005-03-03 | 2011-12-06 | Iconix, Inc. | User interface for email inbox to call attention differently to different classes of email |
US9626655B2 (en) * | 2004-02-19 | 2017-04-18 | Intellectual Ventures I Llc | Method, apparatus and system for regulating electronic mail |
US8769671B2 (en) * | 2004-05-02 | 2014-07-01 | Markmonitor Inc. | Online fraud solution |
US7487213B2 (en) * | 2004-09-07 | 2009-02-03 | Iconix, Inc. | Techniques for authenticating email |
GB0424243D0 (en) * | 2004-11-02 | 2004-12-01 | Rand Ricky C | A method and system for regulating electronic mail |
US20060101121A1 (en) * | 2004-11-10 | 2006-05-11 | Annette Senechalle | Stamped email system deploying digital postage |
US7577708B2 (en) * | 2004-12-10 | 2009-08-18 | Doron Levy | Method for discouraging unsolicited bulk email |
US20070005702A1 (en) * | 2005-03-03 | 2007-01-04 | Tokuda Lance A | User interface for email inbox to call attention differently to different classes of email |
WO2006130772A2 (en) * | 2005-06-01 | 2006-12-07 | Goodmail Systems, Inc. | E-mail stamping with from-header validation |
US7739338B2 (en) * | 2005-06-21 | 2010-06-15 | Data Laboratory, L.L.C. | System and method for encoding and verifying the identity of a sender of electronic mail and preventing unsolicited bulk email |
US20080059586A1 (en) * | 2006-08-18 | 2008-03-06 | Susann Marie Keohane | Method and apparatus for eliminating unwanted e-mail |
GB2456107A (en) * | 2006-11-06 | 2009-07-08 | Dell Marketing Usa L P | A system and method for managing data across multiple environments |
-
2006
- 2006-06-01 WO PCT/US2006/021292 patent/WO2006130772A2/en active Application Filing
- 2006-06-01 JP JP2008514857A patent/JP2008546317A/en active Pending
- 2006-06-01 EP EP06760625A patent/EP1905187A4/en not_active Withdrawn
- 2006-06-01 US US11/421,748 patent/US7917756B2/en active Active
Non-Patent Citations (1)
Title |
---|
See references of EP1905187A4 * |
Also Published As
Publication number | Publication date |
---|---|
JP2008546317A (en) | 2008-12-18 |
EP1905187A2 (en) | 2008-04-02 |
EP1905187A4 (en) | 2011-08-17 |
WO2006130772A3 (en) | 2009-04-23 |
US20060277597A1 (en) | 2006-12-07 |
US7917756B2 (en) | 2011-03-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7917756B2 (en) | E-mail stamping with from-header validation | |
US7877789B2 (en) | E-mail stamping with from-header validation | |
US11070564B2 (en) | Electronic interaction authentication and verification, and related systems, devices, and methods | |
US7917943B1 (en) | E-mail Stamping with accredited entity name | |
US7650383B2 (en) | Electronic message system with federation of trusted senders | |
US9626655B2 (en) | Method, apparatus and system for regulating electronic mail | |
US8132011B2 (en) | System and method for authenticating at least a portion of an e-mail message | |
US20060123476A1 (en) | System and method for warranting electronic mail using a hybrid public key encryption scheme | |
US11843590B2 (en) | Methods and systems for secure digital credentials | |
US20060015726A1 (en) | Apparatus for partial authentication of messages | |
US20050125667A1 (en) | Systems and methods for authorizing delivery of incoming messages | |
US20090106840A1 (en) | Certification Of E-Mails With Embedded Code | |
US8103875B1 (en) | Detecting email fraud through fingerprinting | |
US8443193B1 (en) | State-maintained multi-party signatures | |
US20090222887A1 (en) | System and method for enabling digital signatures in e-mail communications using shared digital certificates | |
US20070192420A1 (en) | Method, apparatus and system for a keyed email framework | |
US20090077372A1 (en) | Process for transmitting an electronic message in a transport network | |
US20100215176A1 (en) | Means and method for controlling the distribution of unsolicited electronic communications | |
Park et al. | Anti-spam approaches: analyses and comparisons | |
Honan | M801 Research Project and Dissertation | |
Protocol | Network Working Group J. Klensin Internet-Draft March 5, 2007 Obsoletes: 2821 (if approved) Intended status: Standards Track Expires: September 6, 2007 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
ENP | Entry into the national phase |
Ref document number: 2008514857 Country of ref document: JP Kind code of ref document: A |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006760625 Country of ref document: EP |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 06760625 Country of ref document: EP Kind code of ref document: A2 |