# US 8,347,095 B2 · System and method for preventing delivery of unsolicited and undesired electronic messages by key generation and comparison

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,347,095 B2
- Document ID: US8347095B2
- Status: Granted
- Kind: B2
- Application number: 12/817,860
- Filed: 2010-06-17
- Published: 2011-04-14
- Granted: 2013-01-01
- Earliest claimed: 2004-05-04
- Assignees: Message Level, LLC
- Inventors: Brian Cunningham; Leslie J. Kim
- Web page: https://patentgrep.com/patent/US8347095B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A sending device prepares a key for each electronic message sent by the device by applying an algorithm to specified data in the message and then incorporates the key in the message. A receiving device, upon receipt of an electronic message, locates the incorporated key and the data from which a sending device practicing the invention would have prepared it. The receiving device communicates a confirmation request to the purported sending device which contains the key and the data for its preparation. The sending device receives the confirmation messages and prepares a comparison key by applying the algorithm to the data in the confirmation request. The sending device replies to the confirmation request confirming that the sending device sent the message if the comparison key matches the key in the confirmation request and otherwise responds with a denial.

## Claims

### Claim 1

A method executable at least by a sending module comprising:
receiving, at the sending module, a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string purportedly generated by application of an algorithm to a portion of the second electronic message and further including the portion of the second electronic message;
generating, at the sending module, a second data string, different from the first data string, by application of an algorithm to the portion of the second electronic message included in the first electronic message;
comparing, at the sending module, the first data string to the second data string; and
upon determining that the first data string does not match the second data string, responding to the first electronic message, denying the second electronic message was sent on behalf of the originator identified in the second electronic message due to the originator using a false originating address,
wherein the algorithm applied to the portion of the second electronic message is selected from a plurality of algorithms based on one of time associated with the second electronic message or data in the portion of the second electronic message, and
wherein the algorithm applied to the portion of the second electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

### Claim 2 (depends on 1)

The method of claim 1, wherein the second electronic message includes one of an email, text message, VoIP message, or instant message.

### Claim 3 (depends on 1)

The method of claim 1, wherein the portion of the second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of the second electronic message.

### Claim 4 (depends on 1)

The method of claim 1, wherein responding to the first electronic message includes responding with a return electronic message.

### Claim 5 (depends on 4)

The method of claim 4, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

### Claim 6 (depends on 1)

The method of claim 1, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

### Claim 7 (depends on 1)

The method of claim 1, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the second electronic message.

### Claim 8 (depends on 7)

The method of claim 7, wherein the algorithm applied to the portion of the first electronic message is modified periodically.

### Claim 9

A method executable at least by a sending module comprising:
receiving, at the sending module, a first electronic message that includes a request to confirm that a second electronic message sent to an intended recipient was sent on behalf of an originator identified in the second electronic message, the first electronic message including a first data string generated by application of an algorithm to a portion of the second electronic message and further including the portion of the second electronic message;
generating a second data string, different from the first data string, by application of an algorithm to the portion of the second electronic message included in the first electronic message;
comparing the first data string to the second data string; and
upon determining that the first data string matches the second data string, responding to the first electronic message, affirming the originator did not use a false originating address,
wherein the algorithm applied to the portion of the second electronic message is selected from a plurality of algorithms based on one of time associated with the second electronic message or data in the portion of the second electronic message, and
wherein the algorithm applied to the portion of the second electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

### Claim 10 (depends on 9)

The method of claim 9, wherein the second electronic message includes one of an email, text message, VoIP message, or instant message.

### Claim 11 (depends on 9)

The method of claim 9, wherein the portion of the second electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said electronic message.

### Claim 12 (depends on 9)

The method of claim 9, wherein responding to the first electronic message includes responding with a return electronic message.

### Claim 13 (depends on 12)

The method of claim 12, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

### Claim 14 (depends on 9)

The method of claim 9, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

### Claim 15 (depends on 9)

The method of claim 9, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the second electronic message.

### Claim 16 (depends on 15)

The method of claim 15, wherein the algorithm applied to the portion of the first electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

### Claim 17

A method executable at least by a sending device, a receiving device, and a confirmation device comprising:
at the receiving device, receiving from the sending device a first electronic message authorized by an originator and directed to an intended recipient, the first electronic message containing an identifier associated with the originator and further containing a first data string generated by application of a first algorithm to a portion of the first electronic message;
sending to the confirmation device a second electronic message that includes a request to confirm that the first electronic message was authorized by the originator associated with the identifier, the second electronic message including the first data string and the portion of the first electronic message;
receiving from the confirmation device a response to the second electronic message affirming the first electronic message was authorized by the originator associated with the identifier;
allowing the first electronic message to be further processed according to rules for processing of confirmed electronic messages directed to the intended recipient;
receiving from the sending device a third electronic message authorized by the originator, the third electronic message containing the identifier and further containing a second data string generated by application of a second algorithm to a portion of the third electronic message; and
sending to the confirmation device a fourth electronic message that includes a request to confirm that the third electronic message was authorized by the originator associated with the identifier, the fourth electronic message including the second data string and the portion of the third electronic message,
wherein the first algorithm applied to the portion of the first electronic message or the second algorithm applied to the third electronic message is selected from a plurality of algorithms based on one of time associated with the first electronic message or the third electronic message or data in the portion of the first electronic message or the third electronic message, and
wherein the first algorithm applied to the portion of the first electronic message or the second algorithm applied to the third electronic message is modifiable by changing at least one of a parameter, scheme, or component associated therewith.

### Claim 18 (depends on 17)

The method of claim 17, wherein the first electronic message or of the third electronic message includes one of an email, text message, VoIP message, or instant message.

### Claim 19 (depends on 17)

The method of claim 17, wherein the portion of the first electronic message or of the third electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of said first electronic message.

### Claim 20 (depends on 17)

The method of claim 17, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the first electronic message or of the third electronic message.

### Claim 21 (depends on 20)

The method of claim 20, wherein the first algorithm applied to the portion of the first electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

### Claim 22 (depends on 21)

The method of claim 21, wherein the second algorithm applied to the portion of the third electronic message is modified at least one of periodically, via an administrator, or via a predetermined process.

### Claim 23 (depends on 20)

The method of claim 20, wherein the second algorithm applied to the portion of the third electronic message is modified periodically.

### Claim 24

A method executable at least by a sending device, a receiving device, and a confirmation device comprising:
at the receiving device, receiving from the sending device a first electronic message authorized by an originator and directed to an intended recipient, the first electronic message containing an identifier associated with the originator and further containing a first data string generated by application of a first algorithm to a portion of the first electronic message;
sending to the confirmation device a second electronic message that includes a request to confirm that the first electronic message was authorized by the originator associated with the identifier, the second electronic message including the first data string and the portion of the first electronic message;
receiving from the confirmation device a response to the second electronic message affirming the first electronic message was authorized by the originator associated with the identifier;
allowing the first electronic message to be further processed according to rules for processing of confirmed electronic messages directed to the intended recipient;
receiving from the sending device a third electronic message authorized by the originator, the third electronic message containing the identifier and further containing a second data string generated by application of a second algorithm to a portion of the third electronic message; and
sending to the confirmation device a fourth electronic message that includes a request to confirm that the third electronic message was authorized by the originator associated with the identifier, the fourth electronic message including the second data string and the portion of the third electronic message,
wherein the first algorithm applied to the portion of the first electronic message differs from the second algorithm applied to the portion of the third electronic message.

### Claim 25 (depends on 24)

The method of claim 24, wherein the first, second, third, or fourth electronic messages includes one of an email, text message, VoIP message, or instant message.

### Claim 26 (depends on 24)

The method of claim 24, wherein the portion of the first electronic message or of the third electronic message includes information contained in one or more of a message header, a message text, and a timestamp, of the second electronic message.

### Claim 27 (depends on 24)

The method of claim 24, wherein responding to the second electronic message or the fourth electronic message includes responding with a return electronic message.

### Claim 28 (depends on 27)

The method of claim 27, wherein the return electronic message is one of an email, text message, VoIP message, or instant message.

### Claim 29 (depends on 24)

The method of claim 24, wherein receiving the first electronic message is performed by a confirming device, the confirming device receiving the portion of the second electronic message only with the first electronic message.

### Claim 30 (depends on 24)

The method of claim 24, wherein receiving the third electronic message is performed by a confirming device, the confirming device receiving the portion of the fourth electronic message only with the third electronic message.

### Claim 31 (depends on 24)

The method of claim 24, wherein the parameter, scheme or component comprises seed data comprising data unrelated to a content of the first electronic message or the third electronic message.

### Claim 32 (depends on 31)

The method of claim 31, wherein the algorithm applied to the portion of the first electronic message or of the third electronic message is modified periodically.
