# US 2012/0084376 A1 · Method and apparatus for processing digitally signed messages to determine address mismatches > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2012/0084376 A1 - Document ID: US20120084376A1 - Status: Published application - Kind: A1 - Application number: 13/324,211 - Filed: 2011-12-13 - Published: 2012-04-05 - Earliest claimed: 2005-07-29 - Assignees: Research In Motion Limited - Inventors: Michael K. Brown; Michael G. Kirkup; Michael S. Brown - Web page: https://patentgrep.com/patent/US20120084376A1 ## CPC - H04L 51/48: Message addressing, e.g. address format or anonymous messages, aliases - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/126: {the source of the received data} - H04W 12/106: Packet or message integrity - H04L 63/168: {above the transport layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method and apparatus for processing digitally signed messages in which address mismatch errors are detected. In at least one aspect, the number of address mismatch errors reported to a user for a message may be minimized for messages that properly incorporate message portions signed by someone other than the sender of the message, as may be the case where the message contains a conversation thread for example, by performing at least one pre-determined action for digital signatures corresponding to signed data appearing after a message separator. The message separator may indicate that the message contains data from an older forwarded message or from an older message that has been replied to, for example. The at least one-predetermined action may comprise bypassing verification of address matches for those digital signatures, or verifying address matches for those digital signatures but suppressing user notification of any address mismatch errors, for example. ## Claims ### Claim 1 A device comprising a processor, wherein the processor is configured to: determine whether a first message separator appears within a portion of signed data of a signed message received at the device; if the first message separator does not appear within the portion of signed data of the signed message, perform at least one pre-determined action for each digital signature in the signed message that appears after the first message separator; and if the first message separator appears within the portion of signed data of the signed message, verify that a sender address identified in the signed message matches an address associated with a key used to generate a digital signature that appears after the first message separator and that corresponds to the portion of signed data of the signed message within which the first message separator appears, and perform at least one pre-determined action for each other digital signature in the signed message that appears after the first message separator. ### Claim 2 (depends on 1) The device of claim 1, wherein the processor is further configured to notify of an address mismatch when the sender address identified in the signed message does not match the address associated with the key used to generate the digital signature that appears after the first message separator and that corresponds to the portion of signed data of the signed message within which the first message separator appears, if the first message separator appears within the portion of signed data of the signed message. ### Claim 3 (depends on 1) The device of claim 1, wherein the at least one pre-determined action for a digital signature that appears after the first message separator comprises bypassing verification that the sender address identified in the signed message matches the address associated with a key used to generate said digital signature. ### Claim 4 (depends on 1) The device of claim 1, wherein the at least one pre-determined action for a digital signature that appears after the first message separator comprises: verifying that the sender address identified in the signed message matches the address associated with a key used to generate said digital signature; and suppressing notification of an address mismatch if the sender address identified in the signed message does not match the address associated with the key used to generate said digital signature. ### Claim 5 (depends on 1) The device of claim 1, wherein the at least one pre-determined action for a digital signature that appears after the first message separator comprises: verifying that the sender address identified in the signed message matches the address associated with a key used to generate said digital signature; and suppressing display of at least a part of the message if the sender address identified in the signed message does not match the address associated with the key used to generate said digital signature. ### Claim 6 (depends on 1) The device of claim 1, wherein the at least one pre-determined action for a digital signature that appears after the first message separator comprises: determining a portion-specific address associated with the portion of signed data of the signed message to which said digital signature corresponds; verifying that the portion-specific address matches the address associated with the key used to generate said digital signature; and notifying of an address mismatch if the portion-specific address does not match the address associated with the key used to generate said digital signature. ### Claim 7 (depends on 6) The device of claim 6, wherein the at least one pre-determined action for a digital signature that appears after the first message separator further comprises suppressing display of at least a part of the message if the portion-specific address does not match the address associated with the key used to generate said digital signature. ### Claim 8 (depends on 6) The device of claim 6, wherein the determining the portion-specific address comprises extracting an address for a previous sender from text in the message appearing between the message separator that most closely precedes the portion of signed data of the signed message to which the digital signature corresponds and said portion. ### Claim 9 (depends on 6) The device of claim 6, wherein the determining the portion-specific address comprises: extracting a name for a previous sender from text in the message appearing between the message separator that most closely precedes the portion of signed data of the signed message to which the digital signature corresponds and said portion; and retrieving, from an address book, an address for the previous sender associated with the name. ### Claim 10 (depends on 1) The device of claim 1, wherein the processor is further configured to, for each digital signature in the message that appears before the first message separator: verify that the sender address identified in the signed message matches the address associated with the key used to generate said respective digital signature; and notify of an address mismatch if the sender address identified in the signed message does not match the address associated with the key used to generate said respective digital signature. ### Claim 11 (depends on 1) The device of claim 1, wherein the processor is further configured to, for each digital signature in the message that appears before the first message separator: verify that the sender address identified in the signed message matches the address associated with the key used to generate said respective digital signature; and suppress display of at least a part of the message if the sender address identified in the signed message does not match the address associated with the key used to generate said digital signature. ### Claim 12 (depends on 1) The device of claim 1, wherein the processor is further configured to determine the address associated with a key used to generate a digital signature by retrieving key holder information associated with said key from a key store. ### Claim 13 (depends on 1) The device of claim 1, wherein the at least one message separator comprises one or more of the following message separators selected from the following group: a line separator, an original message separator, a forwarded message separator, an author wrote separator, a subsequent begin message header within the portion of signed data defined in part by a first begin message header, and a predefined separator. ### Claim 14 (depends on 1) The device of claim 1, wherein the portion of signed data of the signed message has been signed using a PGP key. ### Claim 15 (depends on 14) The device of claim 14, wherein the portion of signed data of the signed message is defined by a PGP begin message header and a corresponding PGP begin signature header in the signed message. ### Claim 16 (depends on 1) The device of claim 1, wherein the portion of signed data of the signed message has been signed using S/MIME. ### Claim 17 (depends on 1) The device of claim 1, wherein the device comprises a mobile device. ### Claim 18 (depends on 1) The device of claim 1, wherein the message comprises an e-mail message. ### Claim 19 (depends on 1) The device of claim 1, wherein the processor is further configured to receive the signed message at the device. ### Claim 20 (depends on 19) The device of claim 19, wherein the signed message is received at the device wirelessly.