IP Library › Granted Patent US 8,984,286

Granted Patent B2

US 8,984,286 · App. 13/536,368 · Granted Mar 17, 2015

Message originator token verification

Inventors: Bret W. Dixon (South Perth, AU); Scot W. Dixon (South Perth, AU)

Assignee: International Business Machines Corporation

H04L63/08 G06F21/31 H04L63/0428 H04L63/1416 H04L63/123 H04L9/3244 H04L29/08099 H04L63/1408

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 8,984,286
App. No.: 13/536,368
Granted: Mar 17, 2015
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A digital signature of a message originator of a message is validated by a processor on message retrieval by a message recipient as a first-tier validation of the message. In response to a successful first-tier validation of the digital signature of the message originator, a transaction token and a message originator identifier are extracted from a message payload of the message. Communication is initiated with a verification service within a secure messaging environment of the message originator as a second-tier validation of the message using the extracted transaction token and the extracted message originator identifier to confirm whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload. Results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator are determined.

Claims (46)

1. A system, comprising:

a communication module; and

a processor programmed to:

validate, on message retrieval by a message recipient, a digital signature of a message originator of a message as a first-tier validation of the message;

extract, in response to a successful first-tier validation of the digital signature of the message originator, a transaction token and a message originator identifier from a message payload of the message;

initiate, as a second-tier validation of the message with a verification service within a secure messaging environment of the message originator, communication via the communication module with the verification service within the secure messaging environment of the message originator using the extracted transaction token and the extracted message originator identifier to confirm whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload; and

determine results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator.

2. The system of claim 1 , where the processor is further programmed to determine whether to utilize a third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message.

3. The system of claim 2 , where the processor is further programmed to, in response to determining to utilize the third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message:

determine, using a configured identity repository separate from the message, connection information of the third-party verification service usable to communicate with the third-party verification service; and

where, in being programmed to initiate, as the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, communication with the verification service within the secure messaging environment of the message originator using the extracted transaction token and the extracted message originator identifier to confirm whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload, the processor is programmed to:

establish a connection with the third-party verification service using the determined connection information of the third-party verification service; and

send a token verification request to the third-party verification service comprising the extracted transaction token and the extracted message originator identifier over the established connection, where the third-party verification service utilizes the extracted transaction token and the extracted message originator identifier to communicate with the verification service within the secure messaging environment of the message originator to determine whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload.

4. The system of claim 3 , where, in being programmed to determine the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, the processor is programmed to receive a response from the third-party verification service indicating whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload.

5. The system of claim 2 , where the processor is further programmed to, in response to determining not to utilize the third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message:

determine, using a configured identity repository separate from the message, connection information of the verification service within the secure messaging environment of the message originator usable to communicate with the verification service within the secure messaging environment of the message originator; and

establish a connection with the verification service within the secure messaging environment of the message originator using the determined connection information of the verification service within the secure messaging environment of the message originator; and

send a token verification request to the verification service within the secure messaging environment of the message originator comprising the extracted transaction token over the established connection.

6. The system of claim 5 , where, in being programmed to determine the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, the processor is programmed to receive a response from the verification service within the secure messaging environment of the message originator indicating whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload.

7. The system of claim 1 , where the processor is further programmed to, in response to determining that the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator comprise an indication that the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload, deliver the message to the message recipient.

8. The system of claim 1 , where the processor is further programmed to, in response to determining that the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator comprise an indication that the secure messaging environment of the message originator did not generate the transaction token and did not insert the transaction token into the message payload:

generate an error message; and

prevent delivery of the message to the message recipient.

9. A computer program product comprising a computer readable storage medium including computer readable program code, where the computer readable program code when executed on a computer causes the computer to:

validate, on message retrieval by a message recipient, a digital signature of a message originator of a message as a first-tier validation of the message;

initiate, as a second-tier validation of the message with a verification service within a secure messaging environment of the message originator, communication with the verification service within the secure messaging environment of the message originator using the extracted transaction token and the extracted message originator identifier to confirm whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload; and

determine results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator.

10. The computer program product of claim 9 , where the computer readable program code when executed on the computer further causes the computer to determine whether to utilize a third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message.

11. The computer program product of claim 10 , where the computer readable program code when executed on the computer further causes the computer to, in response to determining to utilize the third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message:

where, in causing the computer to initiate, as the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, communication with the verification service within the secure messaging environment of the message originator using the extracted transaction token and the extracted message originator identifier to confirm whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload, the computer readable program code when executed on the computer causes the computer to:

establish a connection with the third-party verification service using the determined connection information of the third-party verification service; and

12. The computer program product of claim 11 , where, in causing the computer to determine the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, the computer readable program code when executed on the computer causes the computer to receive a response from the third-party verification service indicating whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload.

13. The computer program product of claim 10 , where the computer readable program code when executed on the computer further causes the computer to, in response to determining not to utilize the third-party verification service to communicate with the verification service within the secure messaging environment of the message originator as part of the second-tier validation of the message:

14. The computer program product of claim 13 , where, in causing the computer to determine the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator, the computer readable program code when executed on the computer causes the computer to receive a response from the verification service within the secure messaging environment of the message originator indicating whether the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload.

15. The computer program product of claim 9 , where the computer readable program code when executed on the computer further causes the computer to, in response to determining that the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator comprise an indication that the secure messaging environment of the message originator generated the transaction token and inserted the transaction token into the message payload, deliver the message to the message recipient.

16. The computer program product of claim 9 , where the computer readable program code when executed on the computer further causes the computer to, in response to determining that the results of the second-tier validation of the message with the verification service within the secure messaging environment of the message originator comprise an indication that the secure messaging environment of the message originator did not generate the transaction token and did not insert the transaction token into the message payload:

generate an error message; and

prevent delivery of the message to the message recipient.

Assignments (1)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 28, 2012

From: DIXON, BRET W.; DIXON, SCOT W.

To: INTERNATIONAL BUSINESS MACHINES CORPORATION

Reel/Frame 028463/0050 →

Continuity (1)

Related Publication 20140006775A1 · Jan 2, 2014