Validating e-mails using message posting services

Patent metadata

Field	Value
Publication number	US-2016359892-A1
Application number	US-201615194681-A
Country	US
Kind code	A1
Filing date	Jun 28, 2016
Priority date	Jun 2, 2015
Publication date	Dec 8, 2016
Grant date	—

Abstract

Validation of e-mails is provided. An e-mail is received. A sender of the e-mail is determined. A message posting service account that is associated with the sender is identified. The message posting service is queried for a first hash value that corresponds to the e-mail based, at least in part, on the account. A response is received from the message posting service. Whether the account includes the first hash value is determined based, at least in part, on the response. The e-mail is or is not validated based, at least in part, on the response from the message posting service.

First claim

What is claimed is:

1 . A method for validating e-mails, the method comprising:
receiving, by one or more computer processors, an e-mail; determining, by one or more computer processors, a sender of the e-mail; identifying, by one or more computer processors, an account of a message posting service, wherein the account is associated with the sender; querying, by one or more computer processors, the message posting service for a first hash value corresponding to the e-mail based, at least in part, on the account; receiving, by one or more computer processors, a response from the message posting service; determining, by one or more computer processors, whether the account includes the first hash value based, at least in part, on the response; and validating, by one or more computer processors, the e-mail based, at least in part, on the response from the message posting service.

2 . The method of claim 1 , wherein validating the e-mail comprises:
in response to determining that the account includes the first hash value, calculating, by one or more computer processors, a second hash value based, at least in part, on one or more predetermined portions of the e-mail; and determining, by one or more computer processors, that the first hash value is equal to the second hash value, and, in response, determining, by one or more computer processors, that the e-mail is authentic.

3 . The method of claim 1 , wherein validating the e-mail comprises:
in response to determining that the account includes the first hash value, calculating, by one or more computer processors, a second hash value based, at least in part, on one or more predetermined portions of the e-mail; and determining, by one or more computer processors, that the first hash value is not equal to the second hash value, and, in response, determining, by one or more computer processors, that the e-mail has been tampered with.

4 . The method of claim 1 , wherein the first hash value is posted to the message posting service via the account associated with the sender, and wherein the first hash value is based, at least in part, on the one or more predetermined portions of the e-mail.

5 . The method of claim 1 , wherein querying the message posting service for the first hash value is based, at least in part, on verification data contained in the e-mail.

6 . The method of claim 1 , wherein querying the message posting service for the first hash value is based, at least in part, on a time of receipt of the e-mail.

7 . The method of claim 1 , wherein validating the e-mail comprises:
determining, by one or more computer processors, that the first hash value is not posted to the account based on a response to querying the message posting service and, in response, determining, by one or more computer processors, that the e-mail is spoofed.

8 . The method of claim 1 , further comprising:
determining, by one or more computer processors, a time of receipt of the e-mail; determining, by one or more computer processors, a time of posting of the first hash value; and determining, by one or more computer processors, a duration of time between the time of receipt and the time of posting.

9 . The method of claim 8 , wherein validating the e-mail comprises:
determining, by one or more computer processors, that the first hash value is equal to the second hash value; determining, by one or more computer processors, that the duration of time between the time of receipt and the time of posting is less than a threshold duration of time; and determining, by one or more computer processors, that the e-mail is authentic.

10 . The method of claim 8 , wherein validating the e-mail comprises:
responsive to determining, by one or more computer processors, that the duration of time between the time of receipt and the time of posting is equal to or greater than the threshold duration of time, determining, by one or more computer processors, that the e-mail has been tampered with.

Assignees

• IBM

Inventors

• Sasatani Yohkichi
• Shibutani Katsuya
• Takiguchi Ichiro
• Yatsu Yoshiki

Classifications

• H04L51/04

  Real-time or near real-time messaging, e.g. instant messaging [IM] · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• G06F17/30371

  Physics · mapped topic

• H04L63/126 Primary

  the source of the received data · CPC title