US 2008/0313704 A1Published application

Electronic Message Authentication

AssigneeBoxSentry Pte Ltd.

InventorsArapaut V. Sivaprasad, Manish K. Goel, Adesh K. Goel

Life of this patent

Estimating the term…

Loading patent…

Abstract

This invention concerns electronic message authentication, such as email messages, to ensure valuable messages are reliably delivered to the recipient, while reducing the delivery of unwanted messages. The invention involves: Receiving an electronic message addressed to a recipient. Rejecting messages sent to unknown recipients, from compromised machines or otherwise found invalid. Testing the messages to valid recipients to determine whether the status of the sender of the message can be categorised as trusted or not-trusted. If the status of the sender cannot be categorised either way, then automatically sending a challenge message, and holding the received message pending receipt of a reply. If an acceptable reply is received, categorising the sender as trusted. And, if the sender is categorised as trusted, delivering the message to the recipient.

Claims37

Dependent claims

A computer method for authenticating electronic messages received from a public communications network, comprising the steps of:

rejecting electronic messages which are sent to unknown recipients;
rejecting electronic messages which have originated from compromised machines;
rejecting electronic messages otherwise readily distinguishable as being invalid;
testing electronic messages addressed to valid recipients to determine whether the status of the sender of the message can be categorised as trusted or not-trusted;
if the sender can be categorised as trusted, testing the sender's originating source to ensure it is a valid source, and if so categorising the sender as authenticated;
if the status of the sender cannot be categorised either way, then applying tests to determine whether or not the electronic message is invalid or spam, and if so rejecting the message;
otherwise automatically sending a request for authentication, and holding the received message in quarantine pending receipt of a reply;
if an acceptable reply is received, categorising the sender as trusted and authenticated;
and,
if the sender is categorised as trusted and authenticated, delivering the message to the recipient.

7 more elements

A computer message authentication appliance, comprising:

a communications port to receive an electronic message addressed to a recipient, and a processor operable to:
reject electronic messages which are sent to unknown recipients;
reject electronic messages which have originated from compromised machines;
reject electronic messages otherwise readily distinguishable as being invalid;
test electronic messages addressed to valid recipients to determine whether the status of the sender of the message can be categorised as trusted or not-trusted, and if the sender can be categorised as trusted, testing the sender's originating source to ensure it is a valid source, and if so categorising the sender as authenticated;
if the status of the sender cannot be categorised either way, then applying tests to determine whether or not the electronic message is invalid or spam, and if so rejecting the message;
otherwise automatically sending a request for authentication, and holding the received message in quarantine pending receipt of a reply;
if an acceptable reply is received, categorising the sender as trusted and authenticated;
and,
if the sender is categorised as trusted and authenticated, delivering the message to the recipient.

7 more elements

Dependencies are inferred from the claim text.