Methods, apparatus and systems for authenticating and verifying an electronic communication
AssigneeBank of America Corporation
InventorsManu Kurian, Joseph Castinado
Life of this patent
Estimating the term…
Abstract
Systems, methods and apparatus for authenticating and verifying an electronic communication are provided. Systems, apparatus and methods determine which emails pose a threat and which are benign. Systems, apparatus and methods filter malicious emails from non-malicious emails. Systems, apparatus and methods prevent receipt of bulk unsolicited and/or otherwise undesirable communications. Systems, apparatus and methods authenticate an identity of a sender of an electronic communication. Systems, methods and apparatus may involve biometric authentication.
Claims24
A method for authenticating electronic communications, the method comprising:
- generating a whitelist database in association with at least one account of at least one recipient, the whitelist database including at least one identifying reference to a whitelist correspondent, the generating of the whitelist database including:
- receiving from the whitelist correspondent registration data associated with at least one of:
- a first penalty;
- and
- identifying information;
- and
- in response to the receiving the registration data, cataloging into the whitelist database, and in association with the identifying reference, identification data associated with at least one of:
- a whitelist correspondent device associated with the whitelist correspondent;
- and
- a whitelist correspondent address associated with the whitelist correspondent;
- generating a blacklist database in association with the account, the blacklist database including at least one blacklist correspondent address, the generating of the blacklist database including:
- identifying a property of the blacklist correspondent address, the property indicating that communications originating from the blacklist correspondent address are at least one of unsolicited and malicious;
- and
- in response to the identifying, cataloging identification data associated with the blacklist correspondent address into the blacklist database;
- receiving an electronic communication submitted by a sender for delivery to the recipient;
- analyzing the content of the electronic communication for presence of identification data;
- upon determination that the electronic communication includes a minimum threshold of the identification data cataloged in the whitelist database, delivering the communication to the recipient;
- upon determination that the communication includes the identification data cataloged in the blacklist database, blocking delivery of the communication;
- and
- upon determination that the communication lacks the identification data cataloged in the blacklist database, and further lacks the minimum threshold:
- prompting the sender to submit supplementary data including at least one of:
- a second penalty;
- and
- additional identifying information;
- and
- delivering the communication to the recipient only after at least one of:
- receipt of the second penalty;
- and
- determining correspondence of the additional identifying information to the identification data associated with the whitelist correspondent.
A method for authenticating electronic communications, the method comprising:
- associating a correspondent address with a first set of identity verification data;
- presenting a sender with a request for a username;
- presenting the sender with a request for a second set of identity verification data;
- upon determination of a pre-established association between the username and the second identity verification data, presenting the sender with access to an electronic communication account, the access including features for composing the communication;
- upon initiation of an attempt by the sender to transmit the communication to the recipient, presenting the sender with a request for the first set of identity verification data;
- and
- upon presentation by the sender of the first set of identity verification data, transmitting the communication to the recipient.
A system for authentication of an electronic communication transmitted to a recipient, the system comprising:
- at least one processor including a transmitter;
- and
- a medium including computer-executable instructions, wherein the instructions, when executed by the processor, cause the processor to:
- perform at least one verification of at least one identifier included in the communication;
- and
- transmit the electronic communication upon the verification of the identifier;
- and
- a receiver associated with an account of the recipient and configured for receipt of the electronic communication.
A system for verifying and authenticating an electronic communication, the system comprising:
- at least one processor;
- and
- a medium including computer-executable instructions, wherein the instructions, when executed by the processor, cause the processor to:
- receive the communication;
- analyze the communication for inclusion of at least one embedded identifier indicating an identity of a sender of the communication;
- compare the identifier to a database of registered identifiers;
- determine if the identifier is associated with an account that has been flagged as compromised;
- determine if the identifier is associated with an account that has been terminated;
- and
- upon determination that the identity is associated with a registered account that is both active and uncompromised, transmit the email to an intended recipient.
Dependencies are inferred from the claim text.