System and method for validating e-mail messages
View Patent ↗A system and method authenticates an e-mail message containing a code that may be sent as part of an advertising campaign. The code is a hashed hash result of a combination of the e-mail address to which the message was sent and a pass phrase for the campaign, along with an identifier of the campaign. To authenticate the message, the user supplies the user's e-mail address and the code and the system and method parses the code to identify the campaign identifier and hashed hash result, looks up the pass phrase using the campaign identifier, hashes the campaign identifier and e-mail address and hashes that hash result. If the hashed hash results match, the system and method indicates the message is authentic and otherwise, indicates the message is not authentic.
1. A method of authenticating an e-mail message, comprising the steps of:
receiving from a user an e-mail address and a code, the code having been received by the user with an e-mail message sent to the e-mail address;
hashing, at least one time, a set of data comprising a string corresponding to at least a portion of the e-mail address, and an identifier not received by the user, to produce a hash result;
comparing the hash result with the code;
responsive to the code corresponding to the hash result, indicating the e-mail message is authentic; and
responsive to the code not corresponding to the hash result, indicating the e-mail message is not authentic;
wherein the identifier comprises a pass phrase;
wherein the e-mail message is one of a given set of e-mail messages sent to respective ones of a plurality of e-mail addresses, and the identifier corresponds to the given set of e-mail messages such that each e-mail message within the given set of e-mail messages is associated with that identifier; and
wherein the steps are performed by at least one processor operatively coupled to at least one storage.
2. The method of claim 1 wherein the set of data is hashed at least two times.
3. The method of claim 1 wherein the string corresponding to the e-mail address comprises the e-mail address.
4. The method of claim 1 wherein the code corresponds to the hash result if the code is identical to the hash result.
5. The method of claim 1 wherein the code received by the user is generated using the identifier.
6. The method of claim 1 wherein the given set of e-mail messages is one of a plurality of sets of e-mail messages sent by a particular sender, and the identifier is one of a plurality of identifiers corresponding to respective ones of the plurality of sets of e-mail messages.
7. The method of claim 6 wherein the hashing step further comprises hashing, at least one time, the set of data comprising a string corresponding to at least a portion of the e-mail address, and at least another one of the plurality of identifiers, to produce at least another one of a plurality of hash results; and wherein the comparing step comprises comparing each of at least a portion of the plurality of hash results with the code.
8. The method of claim 1 wherein, prior to the hashing step, the identifier is determined at least in part by parsing the code received from the user.
9. A method of providing an authentication code for an e-mail message, comprising:
for each of a given set of e-mail messages to be sent to respective ones of a plurality of e-mail addresses, hashing, at least one time, a set of data comprising at least a portion of a string corresponding to the e-mail address to which that e-mail message will be sent and an identifier corresponding to the given set of e-mail messages such that e-mail message within the given set of e-mail messages is associated with that identifier, to produce a hash result; and
providing the code based at least in part on the hash result within the e-mail message;
wherein the identifier comprises a pass phrase and is not received with the e-mail message; and
wherein the steps are performed by at least one processor operatively coupled to at least one storage.
10. The method of claim 9 wherein the hashing is performed at least two times.
11. The method of claim 9 wherein the given set of e-mail messages is one of a plurality of sets of e-mail messages sent by a particular sender, and the identifier is one of a plurality of identifiers corresponding to respective ones of the plurality of sets of e-mail messages.
12. The method of claim 9 wherein the code is generated by:
segregating the hash result into a plurality of parts; and
transforming each of at least a portion of the plurality of parts into a corresponding group of one or more characters.
13. The method of claim 12 wherein the corresponding group of one or more characters comprises a word.
14. A system for authenticating an e-mail message, comprising:
at least one storage; and
a processor operatively coupled to the at least one storage, the processor being operative to perform the steps of:
receiving from a user an e-mail address and a code, the code having been received by the user with an e-mail message sent to the e-mail address;
hashing, at least one time, a set of data comprising a string corresponding to at least a portion of the e-mail address, and an identifier not received with the e-mail message, to produce a hash result;
comparing the hash result with the code;
responsive to the code corresponding to the hash result, indicating the e-mail message is authentic; and
responsive to the code not corresponding to the hash result, indicating the e-mail message is not authentic;
wherein the identifier comprises a pass phrase; and
wherein the e-mail message is one of a given set of e-mail messages sent to respective ones of a plurality of e-mail addresses, and the identifier corresponds to the given set of e-mail messages.
15. The system of claim 14 wherein the code received by the user is generated using the identifier.
16. The system of claim 14 wherein the given set of e-mail messages is one of a plurality of sets of e-mail messages sent by a particular sender, and the identifier is one of a plurality of identifiers corresponding to respective ones of the plurality of sets of e-mail messages.
17. The system of claim 16 wherein the hashing step further comprises hashing, at least one time, the set of data comprising a string corresponding to at least a portion of the e-mail address, and at least another one of the plurality of identifiers, to produce at least another one of a plurality of hash results, and the comparing step comprises comparing each of at least a portion of the plurality of hash results with the code.
18. The system of claim 14 wherein, prior to the hashing step, the identifier is determined at least in part by parsing the code received from the user.