IP Library Granted Patent US 12,438,863
Granted Patent B2
US 12,438,863 · App. 18/756,066 · Granted Oct 7, 2025

Email verification using injected tokens for message authentication

Inventors: George Albero (Charlotte, NC); Maharaj Mukherjee (Poughkeepsie, NY); Benjamin D. Moores (Ventura, CA)
Assignee: Bank of America Corporation
H04L63/08G06F40/40H04L51/224H04L63/126
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,438,863
App. No.
18/756,066
Filed
Jun 27, 2024
Granted
Oct 7, 2025
Kind
B2
Art Unit
2493
USPC
726/9
Abstract

Aspects of the disclosure relate to message validation. A computing platform may receive a message, sent by a first device and directed to a second device, from an electronic messaging server. The computing platform may verify, based on message sender details, an identity of a sender of the message. The computing platform may generate, after verifying the identity of the sender of the message, an authentication token for the message, and may inject the authentication token into the message. The computing platform may route, to the electronic messaging server and after injecting the authentication token into the message, the message. The computing platform may receive a request to validate the message, which may include the authentication token and details of the message. The computing platform may identify, using the authentication token and the details of the message, that the message is authenticated.

Claims (77)

1. A computing platform comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

generate a message encryption score for a message directed by a first device to a second device, wherein generating the message encryption score for the message comprises applying the following model:

the message encryption score (d)=a+b+c; and

if d is greater than or equal to 0.6, generate authentication token, wherein:

if number of matching keywords exceeds 3, a=0.3; if the number of matching keywords exceeds 1 but not 3, a=0.15, otherwise a=0,

if message recipient matches, b=1, otherwise b=0, and

if message context matches, b=0.5;

based on identifying that the message encryption score exceeds a message encryption threshold, identify that an authentication token should be injected into the message;

verify, based on message sender details, an identity of a sender of the message;

generate, after verifying the identity of the sender of the message, the authentication token for the message;

inject the authentication token into the message;

route, to an electronic messaging server and after injecting the authentication token into the message, the message;

receive, from the second device, a request to validate the message, wherein the request includes the authentication token and details of the message;

identify, using the authentication token and the details of the message, that the message is authenticated; and

send, to the second device, a message authentication notification and one or more commands directing the second device to display the message authentication notification along with the message, wherein sending the one or more commands directing the second device to display the message authentication notification along with the message causes the second device to display the message authentication notification along with the message.

2. The computing platform of claim 1 , wherein identifying that the authentication token should be injected further comprises identifying that the authentication token should be injected into all outgoing messages.

3. The computing platform of claim 1 , wherein identifying that the authentication token should be injected further comprises identifying that the authentication token should be injected based on analysis of sender information.

4. The computing platform of claim 3 , wherein the sender information includes one or more of: a name of the sender, an email address of the sender, a job title of the sender, or a message encryption history of the sender.

5. The computing platform of claim 4 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

identify, using one or more machine learning algorithms, the message encryption history of the sender, wherein the message encryption history of the sender indicates one or more of keywords, recipients, or message context associated with previously sent messages from the sender that included an authentication token.

6. The computing platform of claim 5 , wherein the message context is identified using natural language understanding (NLU) algorithms.

7. The computing platform of claim 5 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

generate a message encryption score for the message;

compare the message encryption score to a message encryption threshold; and

based on identifying that the message encryption score exceeds the message encryption threshold, identify that the authentication token should be injected.

8. The computing platform of claim 1 , wherein receiving the request to validate the message comprises receiving a request from an automated electronic messaging plug-in that identified the authentication token in the message.

9. The computing platform of claim 1 , wherein the details of the message include one or more of: a presence of an attachment, a presence of a hyperlink, or text of the message.

10. The computing platform of claim 1 , wherein:

the message is displayed at the second device prior to identification that the message is authenticated,

the message includes one or more quarantined components,

the one or more quarantined components comprise one of more of: a hyperlink or an attachment, and

sending the message authentication notification and the one or more commands directing the second device to display the message authentication notification along with the message causes a quarantine to be removed from the one or more quarantined components.

11. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive the message from the electronic messaging server.

12. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

compare the message encryption score to the message encryption threshold.

13. The computing platform of claim 1 , wherein identifying that the authentication token should be injected into the message comprises identifying that a number of hops involved in a transmission path of the message exceeds a predetermined number of hops.

14. A method comprising

at a computing platform comprising at least one processor, a communication interface, and memory:

generating a message encryption score for a message directed by a first device to a second device, wherein generating the message encryption score for the message comprises applying the following model:

the message encryption score (d)=a+b+c; and

d is greater than or equal to 0.6, generate authentication token, wherein:

number of matching keywords exceeds 3, a=0.3; the number of matching keywords exceeds 1 but not 3, a=0.15, otherwise a=0,

message recipient matches, b=1, otherwise b=0, and

message context matches, b=0.5;

based on identifying that the message encryption score exceeds a message encryption threshold, identifying that an authentication token should be injected into the message;

verifying, based on message sender details, an identity of a sender of the message;

generating, after verifying the identity of the sender of the message, the authentication token for the message;

injecting the authentication token into the message;

routing, to an electronic messaging server and after injecting the authentication token into the message, the message;

receiving, from the second device, a request to validate the message, wherein the request includes the authentication token and details of the message;

identifying, using the authentication token and the details of the message, that the message is authenticated; and

sending, to the second device, a message authentication notification and one or more commands directing the second device to display the message authentication notification along with the message, wherein sending the one or more commands directing the second device to display the message authentication notification along with the message causes the second device to display the message authentication notification along with the message.

15. The method of claim 14 , wherein identifying that the authentication token should be injected further comprises identifying that the authentication token should be injected into all outgoing messages.

16. The method of claim 14 , wherein identifying that the authentication token should be injected further comprises identifying that the authentication token should be injected based on analysis of sender information.

17. The method of claim 16 , wherein the sender information includes one or more of: a name of the sender, an email address of the sender, a job title of the sender, or a message encryption history of the sender.

18. The method of claim 14 , further comprising:

identifying, using one or more machine learning algorithms, the message encryption history of the sender, wherein the message encryption history of the sender indicates one or more of keywords, recipients, or message context associated with previously sent messages from the sender that included an authentication token.

19. The method of claim 18 , wherein the message context is identified using natural language understanding (NLU) algorithms.

20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

generate a message encryption score for a message directed by a first device to a second device, wherein generating the message encryption score for the message comprises applying the following model:

the message encryption score (d)=a+b+c; and

if d is greater than or equal to 0.6, generate authentication token, wherein:

if number of matching keywords exceeds 3, a=0.3; if the number of matching keywords exceeds 1 but not 3, a=0.15, otherwise a=0,

if message recipient matches, b=1, otherwise b=0, and

if message context matches, b=0.5;

based on identifying that the message encryption score exceeds a message encryption threshold, identify that an authentication token should be injected into the message;

verify, based on message sender details, an identity of a sender of the message;

generate, after verifying the identity of the sender of the message, the authentication token for the message;

inject the authentication token into the message;

route, to an electronic messaging server and after injecting the authentication token into the message, the message;

receive, from the second device, a request to validate the message, wherein the request includes the authentication token and details of the message;

identify, using the authentication token and the details of the message, that the message is authenticated; and

send, to the second device, a message authentication notification and one or more commands directing the second device to display the message authentication notification along with the message, wherein sending the one or more commands directing the second device to display the message authentication notification along with the message causes the second device to display the message authentication notification along with the message.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 27, 2024
From: ALBERO, GEORGE; MUKHERJEE, MAHARAJ; MOORES, BENJAMIN D.
To: BANK OF AMERICA CORPORATION
Reel/Frame 067861/0848 →
Continuity (2)
Continuation 17481674 · Sep 22, 2021
Related Publication 20240348593A1 · Oct 17, 2024
References Cited (38)
US 7290035B2 · Mattathil · 2007 [cited by applicant]
US 7437558B2 · Fenton et al. · 2008 [cited by applicant]
US 7442115B1 · Brenny et al. · 2008 [cited by applicant]
US 8171085B1 · Tevanian, Jr. · 2012 [cited by applicant]
US 9628412B2 · St. Clair et al. · 2017 [cited by applicant]
US 9781149B1 · Himler et al. · 2017 [cited by applicant]
US 9912687B1 · Wescoe et al. · 2018 [cited by applicant]
US 10110530B2 · Sachtjen · 2018 [cited by applicant]
US 10699234B1 · Richards et al. · 2020 [cited by applicant]
US 10715327B1 · Ramanujan et al. · 2020 [cited by applicant]
US 10805270B2 · Jakobsson et al. · 2020 [cited by applicant]
US 10805314B2 · Jakobsson et al. · 2020 [cited by applicant]
US 10834127B1 · Yeh et al. · 2020 [cited by applicant]
US 10880322B1 · Jakobsson et al. · 2020 [cited by applicant]
US 10992645B2 · Jakobsson et al. · 2021 [cited by applicant]
US 11010818B2 · Custer · 2021 [cited by applicant]
US 11019076B1 · Jakobsson et al. · 2021 [cited by applicant]
US 11044267B2 · Jakobsson et al. · 2021 [cited by applicant]
US 11593773B1 · Yip et al. · 2023 [cited by applicant]
US 11631021B1 · Benjamin · 2023 [cited by examiner]
US 20150332365A1 · Kassemi et al. · 2015 [cited by applicant]
US 20160321652A1 · Dimmick et al. · 2016 [cited by applicant]
US 20170178124A1 · Havilio · 2017 [cited by examiner]
US 20180102947A1 · Bhaya et al. · 2018 [cited by applicant]
US 20180191499A1 · Sachtjen et al. · 2018 [cited by applicant]
US 20180337896A1 · Frankel et al. · 2018 [cited by applicant]
US 20190020478A1 · Girish et al. · 2019 [cited by applicant]
US 20190122220A1 · Phillips et al. · 2019 [cited by applicant]
US 20200034813A1 · Calinog et al. · 2020 [cited by applicant]
US 20200067976A1 · Jakobsson · 2020 [cited by applicant]
US 20200137081A1 · Goldstein · 2020 [cited by applicant]
US 20200287885A1 · Rodniansky · 2020 [cited by applicant]
US 20210182859A1 · Srinivasa Rao · 2021 [cited by examiner]
US 20220084036A1 · He · 2022 [cited by examiner]
US 20220182242A1 · Jaquette et al. · 2022 [cited by applicant]
TW 201737658A · 2017 [cited by applicant]
Dec. 19, 2023—(US) Office Action—U.S. Appl. No. 17/481,674. [cited by applicant]
May 21, 2024—(US) Notice of Allowance—U.S. Appl. No. 17/481,674. [cited by applicant]