System and method having increased security using simple mail transfer protocol emails verified by SPF and DKIM processes
A system and method to facilitate transactions between a customer and a vendor utilizing an advertising campaign reaching a plurality of potential customers is provided. The method includes receiving a request from the vendor for a bulk token for use in the advertising campaign, generating the bulk token, transmitting the bulk token to the vendor to embed into the advertising campaign associated with a mailto link, the bulk token being sent as part of the advertising campaign to at least one of the plurality of potential customer, receiving a reply SMTP email from a customer from the plurality of potential customers indicating a request for a transaction responsive to the advertising campaign by selecting the mailto link, decoding the bulk token to verify the transaction, performing an SPF and DKIM validation of the received SMTP email to validate the transaction, and processing the verified and validated transaction.
1. A method that utilizes Simple Mail Transfer Protocol (SMTP) to improve security of an e-commerce system, the method comprising:
receiving, by a receiver of the e-commerce system, a request from a vendor system for a bulk token for emailing to a plurality of potential customers, each potential customer being associated with a unique SMTP email address;
generating, by a processor of the e-commerce system, the bulk token, wherein the bulk token includes at least a type field and an amount field, is associated with a mailto link and does not include an email field;
transmitting, by a transmitter of the e-commerce system, the bulk token and the associated mailto link to the vendor system to embed into a first SMTP email to be sent to at least one of the unique SMTP email addresses associated with one of the plurality of potential customers, wherein activation of the associated mailto link by the potential customer generates a reply SMTP email from the unique SMTP email address associated with one of the at least one of the plurality of potential customers indicating a request for a transaction responsive to the first SMTP email and converts the bulk token to an email-targeted token;
receiving, by the receiver of the e-commerce system, the at least one reply SMTP email from the unique SMTP email address associated with the said at least one of the plurality of potential customers, wherein the reply SMTP email includes the request for a transaction responsive to the mailto link that is activated including the email-targeted token;
verifying, by the processor of the e-commerce system, the email-targeted token by performing a Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) validation of the at least one reply SMTP email that is received;
validating, by the processor of the e-commerce system, the transaction based on the unique SMTP email address associated with the said at least one of the plurality of potential customers; and
permitting, by the processor of the e-commerce system, the transaction to be processed by the e-commerce system, on a condition that the SPF and DKIM are verified and the transaction is validated.
2. The method of claim 1 , further comprising:
transmitting, by the transmitter at the e-commerce system, a web checkout email message including an URL hyperlink on a condition that the SPF and DKIM validations are rejected.
3. The method of claim 1 , further comprising:
transmitting, by the transmitter at the e-commerce system, a confirmation email message including a mailto link on a condition that the SPF and DKIM validations are classified as Confirm.
4. The method of claim 1 , wherein the step of verifying the validity of the unique SMTP email address associated with the said at least one of the plurality of potential customers further comprises determining whether the reply SMTP email is sent from a registered or non-registered customer based on said unique SMTP email address from which the reply SMTP email was sent.
5. The method of claim 4 , further comprising:
transmitting, by the transmitter at the e-commerce system, a web checkout email message including an URL hyperlink on a condition that the reply SMTP email was sent from a non-registered customer.
6. An e-commerce system that utilizes Simple Mail Transfer Protocol (SMTP) to improve security of the e-commerce system, the system comprising:
an interface that is communicatively coupled to a vendor system and a plurality of mobile units;
a processor communicatively coupled to the interface, wherein the processor:
receives, using the interface, a request from the vendor system for a bulk token for emailing to a plurality of potential customers, each potential customer being associated with a unique SMTP email address,
generates the bulk token in response to receiving the request, wherein the bulk token includes at least a type field and an amount field, is associated with a mailto link and does not include an email field, transmits, using the interface, the bulk token and the associated mailto link to the vendor system to embed into a first SMTP email to at least one of the unique SMTP email addresses associated with one of the plurality of mobile units, wherein activation of the associated mailto link by a user of one or the plurality of mobile units generates a reply SMTP email from the unique SMTP email address associated with one of the at least one of the plurality of mobile units indicating a request for a transaction responsive to the first SMTP email and converts the bulk token to an email-targeted token;
receives, using the interface, at least one reply SMTP email, from the unique SMTP email address associated with the said at least one of the plurality of potential customers, wherein the reply SMTP email includes the request for a transaction responsive to the mailto link that is activated including the email-targeted token,
verifies the email-targeted token by performing a Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) validation of the reply SMTP email that is received,
validates the transaction based on the unique SMTP email address associated with the said at least one of the plurality of potential customers; and permits the transaction to be processed by the e-commerce system, on a condition that the SPF and DKIM are verified and the transaction is validated.
7. The e-commerce system of claim 6 , wherein the processor further:
transmits, using the interface, a web checkout email message including an URL hyperlink on a condition that the SPF and DKIM validations are rejected.
8. The e-commerce system of claim 6 , wherein the processor further:
transmits, using the interface, a confirmation email message including a mailto link on a condition that the SPF and DKIM validations are classified as Confirm.
9. The e-commerce system of claim 6 , wherein the processor further:
determines whether the reply SMTP email is sent from a registered or non-registered customer based on said unique SMTP email address from which the reply SMTP email was sent.
10. The e-commerce system of claim 9 , wherein the processor further:
transmits, using the interface, a web checkout email message including an URL hyperlink on a condition that the reply SMTP email was sent from a non-registered customer.