Patent Application
20240414541
Generally, the present disclosure relates to the field of data processing. More specifically, the present disclosure relates to method in the system for facilitating secure messaging via a realtime data analysis and display the result to data user.
The field of data processing is technologically important to several industries, business organizations, and/or individuals. In particular, the use of data processing is prevalent for secure messaging activities.
Nowadays, electronic Short Message Service (SMS) messaging is one of the most popular methods of communication between people. Electronic messaging can be performed using various services and protocols over different electronic devices including, but not limited to, smartphones, computers, etc. Due to the popularity of electronic SMS messaging, various bad actors have risen to take advantage of the technology. For example, the number of spam messages people receive has increased in the last couple of years. Most spam messages can include dangerous content that may result in attacks on the person's electronic device or even identity theft. So, a growing need for sender verification has pushed companies and organizations to provide additional security services to protect message recipient (receiver and/or reader) via fighting against illegal impersonation, forgery, scam, spam, virus, warm, bullying, imitating, phishing, sabotage, espionage, whaling, vishing, solicitation, ransomware, tempering, and message manipulation. However, most services currently available fail to properly protect message recipients from most of the potentially dangerous messages without verifying nor displaying the result to the recipient. Many technologies are available that help bad actors send messages as if the messages came from legitimate sources. Unfortunately, the services currently available fail to detect those messages.
Therefore, there is an urgent need for a unique method with logical procedures in verifying the identity of the SMS message sender and in verifying the integrity of the message within the system for facilitating secure messaging that may overcome one or more of the above-mentioned problems and/or limitations.
This summary is provided to introduce a selection of concepts in a simplified form, that are further described below in the Detailed Description. This summary is not intended to identify key features or essential features of the claimed subject matter. Nor is this summary intended to be used to limit the claimed subject matter's scope.
Disclosed herein are the method and the system of securing Short Message Service (SMS) message via authentication on the sender's digital identification (aka, digital certificate, or public key certificate) and verification of the integrity of the SMS message with display the results on to readers Graphical User Interface (GUI) along with some embodiments. Accordingly, the methods may include receiving, using a communication device, an information from at least one sender device associated with a message sender. Further, the information may include a sender indication and identification associated with the message sender. Further, the information may include a message content and a first hash value associated with a message. Further, the methods may include retrieving, using a storage device, verifying information associated with the message sender based on the sender indication. Further, the methods may include analyzing, using a processing device, the information, and the verifying information. Further, the methods may include obtaining, using the processing device, a secret key associated with the message sender based on the analyzing. Further, the methods may include hashing, using the processing device, the message content using the secret key. Further, the methods may include generating, using the processing device, a second hash value based on the hashing. Further, the methods may include comparing, using the processing device, the first hash value and the second hash value. Further, the methods may include determining, using the processing device, a match between the first hash value and the second hash value based on the comparing. Further, the methods may include generating, using the processing device, a verification result associated with the message sender based on the determining of the match. Further, the verification result may include one of a successful verification result indicating a successful verification of the message sender and an unsuccessful verification result indicating an unsuccessful verification of the message sender. Further, the methods may include obtaining, using the processing device, an augmenting information based on the verification result. Further, the methods may include transmitting, using the communication device, the augmenting with forensics, and the information to at least one vendor device associated with at least one message vendor. Further, the at least one vendor device may be configured for augmenting, using a vendor processing device of the at least one vendor device, a graphic user interface based on the augmenting information. Further, the graphic user interface may include one or more modifiable sections and one or more non modifiable sections. Further, the at least one vendor device may be configured for generating, using the vendor processing device, an augmented graphic user interface based on the augmenting. Further, the augmented graphic user interface may include the one or more modifiable sections with one or more augmenting content. Further, the at least one vendor device may be configured for transmitting, using a vendor communication device of the at least one vendor device, the augmented graphic user interface to at least one receiver device associated with at least one message receiver. Further, at least one receiver device may be configured for presenting the augmented graphic user interface.
Both the foregoing summary and the following detailed description provide examples and are explanatory only. Accordingly, the foregoing summary and the following detailed description should not be considered to be restrictive. Further, features or variations may be provided in addition to those set forth herein. For example, embodiments may be directed to various feature combinations and sub-combinations described in the detailed description.
The accompanying drawings, which are incorporated in and constitute a part of this disclosure, illustrate various embodiments of the present disclosure. The drawings contain representations of various trademarks and copyrights owned by the Applicants. In addition, the drawings may contain other marks owned by third parties and are being used for illustrative purposes only. All rights to various trademarks and copyrights represented herein, except those belonging to their respective owners, are vested in and the property of the applicants. The applicants retain and reserve all rights in their trademarks and copyrights included herein, and grant permission to reproduce the material only in connection with reproduction of the granted patent and for no other purpose.
Furthermore, the drawings may contain text or captions that may explain certain embodiments of the present disclosure. This text is included for illustrative, non-limiting, explanatory purposes of certain embodiments detailed in the present disclosure.
As a preliminary matter, it will readily be understood by one having ordinary skill in the relevant art that the present disclosure has broad utility and application. As should be understood, any embodiment may incorporate only one or a plurality of the above-disclosed aspects of the disclosure and may further incorporate only one or a plurality of the above-disclosed features. Furthermore, any embodiment discussed and identified as being “preferred” is considered to be part of a best mode contemplated for carrying out the embodiments of the present disclosure. Other embodiments also may be discussed for additional illustrative purposes in providing a full and enabling disclosure. Moreover, many embodiments, such as adaptations, variations, modifications, and equivalent arrangements, will be implicitly disclosed by the embodiments described herein and fall within the scope of the present disclosure.
Accordingly, while embodiments are described herein in detail in relation to one or more embodiments, it is to be understood that this disclosure is illustrative and exemplary of the present disclosure, and are made merely for the purposes of providing a full and enabling disclosure. The detailed disclosure herein of one or more embodiments is not intended, nor is to be construed, to limit the scope of patent protection afforded in any claim of a patent issuing here from, which scope is to be defined by the claims and the equivalents thereof. It is not intended that the scope of patent protection be defined by reading into any claim limitation found herein and/or issuing here from that does not explicitly appear in the claim itself.
Thus, for example, any sequence(s) and/or temporal order of steps of various processes or methods that are described herein are illustrative and not restrictive. Accordingly, it should be understood that, although steps of various processes or methods may be shown and described as being in a sequence or temporal order, the steps of any such processes or methods are not limited to being carried out in any particular sequence or order, absent an indication and identification otherwise. Indeed, the steps in such processes or methods generally may be carried out in various different sequences and orders while still falling within the scope of the present disclosure. Accordingly, it is intended that the scope of patent protection is to be defined by the issued claim(s) rather than the description set forth herein.
Additionally, it is important to note that each term used herein refers to that which an ordinary artisan would understand such term to mean based on the contextual use of such term herein. To the extent that the meaning of a term used herein—as understood by the ordinary artisan based on the contextual use of such term—differs in any way from any particular dictionary definition of such term, it is intended that the meaning of the term as understood by the ordinary artisan should prevail.
Furthermore, it is important to note that, as used herein, “a” and “an” each generally denotes “at least one,” but does not exclude a plurality unless the contextual use dictates otherwise. When used herein to join a list of items, “or” denotes “at least one of the items,” but does not exclude a plurality of items of the list. Finally, when used herein to join a list of items, “and” denotes “all of the items of the list.”
The following detailed description refers to the accompanying drawings. Wherever possible, the same reference numbers are used in the drawings and the following description to refer to the same or similar elements. While many embodiments of the disclosure may be described, modifications, adaptations, and other implementations are possible. For example, substitutions, additions, or modifications may be made to the elements illustrated in the drawings, and the methods described herein may be modified by substituting, reordering, or adding stages to the disclosed methods. Accordingly, the following detailed description does not limit the disclosure. Instead, the proper scope of the disclosure is defined by the claims found herein and/or issuing here from. The present disclosure contains headers. It should be understood that these headers are used as references and are not to be construed as limiting upon the subjected matter disclosed under the header.
The present disclosure includes many aspects and features. Moreover, while many aspects and features relate to, and are described in the context of methods and systems of facilitating secure messaging, embodiments of the present disclosure are not limited to use only in this context.
In general, the methods disclosed herein may be performed by one or more computing devices. For example, in some embodiments, the methods may be performed by a server computer in communication with one or more client devices over a communication network such as, for example, the Internet. In some other embodiments, the methods may be performed by one or more of at least one server computer, at least one client device, at least one network device, at least one sensor and at least one actuator. Examples of the one or more client devices and/or the server computer may include, a desktop computer, a laptop computer, a tablet computer, a personal digital assistant, a portable electronic device, a wearable computer, a smart phone, an Internet of Things (IoT) device, a smart electrical appliance, a video game console, a rack server, a super-computer, a mainframe computer, mini-computer, micro-computer, a storage server, an application server (e.g. a mail server, a web server, a real-time communication server, an FTP server, a virtual server, a proxy server, a DNS server etc.), a quantum computer, and so on. Further, one or more client devices and/or the server computer may be configured for executing a software application such as, for example, but not limited to, an operating system (e.g. Windows, Mac OS, Unix, Linux, Android, etc.) in order to provide a user interface (e.g. GUI, touch-screen based interface, voice based interface, gesture based interface etc.) for use by the one or more users and/or a network interface for communicating with other devices over a communication network. Accordingly, the server computer may include a processing device configured for performing data processing tasks such as, for example, but not limited to, analyzing, identifying, determining, generating, transforming, calculating, computing, compressing, decompressing, encrypting, decrypting, scrambling, splitting, merging, interpolating, extrapolating, redacting, anonymizing, encoding and decoding. Further, the server computer may include a communication device configured for communicating with one or more external devices. The one or more external devices may include, for example, but are not limited to, a client device, a third party database, public database, a private database and so on. Further, the communication device may be configured for communicating with the one or more external devices over one or more communication channels. Further, the one or more communication channels may include a wireless communication channel and/or a wired communication channel. Accordingly, the communication device may be configured for performing one or more of transmitting and receiving of information in electronic form. Further, the server computer may include a storage device configured for performing data storage and/or data retrieval operations. In general, the storage device may be configured for providing reliable storage of digital information. Accordingly, in some embodiments, the storage device may be based on technologies such as, but not limited to, data compression, data backup, data redundancy, deduplication, error correction, data finger-printing, role based access control, and so on.
Further, one or more steps of the methods disclosed herein may be initiated, maintained, controlled and/or terminated based on a control input received from one or more devices operated by one or more users such as, for example, but not limited to, an end user, an admin, a service provider, a service consumer, an agent, a broker and a representative thereof. Further, the user as defined herein may refer to a human, an animal or an artificially intelligent being in any state of existence, unless stated otherwise, elsewhere in the present disclosure. Further, in some embodiments, the one or more users may be required to successfully perform authentication in order for the control input to be effective. In general, a user of the one or more users may perform authentication based on the possession of a secret human readable secret data (e.g. username, password, passphrase, PIN, secret question, secret answer etc.) and/or possession of a machine readable secret data (e.g. encryption key, decryption key, bar codes, etc.) and/or or possession of one or more embodied characteristics unique to the user (e.g. biometric variables such as, but not limited to, fingerprint, palm-print, voice characteristics, behavioral characteristics, facial features, iris pattern, heart rate variability, evoked potentials, brain waves, and so on) and/or possession of a unique device (e.g. a device with a unique physical and/or chemical and/or biological characteristic, a hardware device with a unique serial number, a network device with a unique IP/MAC address, a telephone with a unique phone number, a smartcard with an authentication token stored thereupon, etc.). Accordingly, the one or more steps of the methods may include communicating (e.g., transmitting and/or receiving) with one or more sensor devices and/or one or more actuators in order to perform authentication. For example, the one or more steps may include receiving, using the communication device, the secret human readable data from an input device such as, for example, a keyboard, a keypad, a touch-screen, a microphone, a camera and so on. Likewise, the one or more steps may include receiving, using the communication device, the one or more embodied characteristics from one or more biometric sensors.
Further, one or more steps of the methods may be automatically initiated, maintained and/or terminated based on one or more predefined conditions. In an instance, the one or more predefined conditions may be based on one or more contextual variables. In general, the one or more contextual variables may represent a condition relevant to the performance of the one or more steps of the methods. The one or more contextual variables may include, for example, but are not limited to, location, time, identity of a user associated with a device (e.g. the server computer, a client device etc.) corresponding to the performance of the one or more steps, physical state and/or physiological state and/or psychological state of the user, and/or semantic content of data associated with the one or more users. Accordingly, the one or more steps may include communicating with one or more sensors and/or one or more actuators associated with the one or more contextual variables. For example, the one or more sensors may include, but are not limited to, a timing device (e.g. a real-time clock), a location sensor (e.g. a GPS receiver, a GLONASS receiver, an indoor location sensor etc.), a biometric sensor (e.g. a fingerprint sensor), etc. associated with the device corresponding to performance of the or more steps).
Further, the one or more steps of the methods may be performed one or more number of times. Additionally, the one or more steps may be performed in any order other than as exemplarily disclosed herein, unless explicitly stated otherwise, elsewhere in the present disclosure. Further, two or more steps of the one or more steps may, in some embodiments, be simultaneously performed, at least in part. Further, in some embodiments, there may be one or more time gaps between performance of any two steps of the one or more steps.
Further, in some embodiments, the one or more predefined conditions may be specified by the one or more users. Accordingly, the one or more steps may include receiving, using the communication device, the one or more predefined conditions from one or more and devices operated by the one or more users. Further, the one or more predefined conditions may be stored in the storage device. Alternatively, and/or additionally, in some embodiments, the one or more predefined conditions may be automatically determined, using the processing device, based on historical data corresponding to performance of the one or more steps. For example, the historical data may be collected, using the storage device, from a plurality of instances of performance of the methods. Such historical data may include performance actions (e.g., initiating, maintaining, interrupting, terminating, etc.) of the one or more steps and/or the one or more contextual variables associated therewith. Further, machine learning may be performed on the historical data in order to determine the one or more predefined conditions. For instance, machine learning on the historical data may determine a correlation between one or more contextual variables and performance of the one or more steps of the methods. Accordingly, the one or more predefined conditions may be generated, using the processing device, based on the correlation.
Further, one or more steps of the methods may be performed at one or more spatial locations. For instance, the methods may be performed by a plurality of devices interconnected through a communication network. Accordingly, in an example, one or more steps of the method may be performed by a server computer. Similarly, one or more steps of the methods may be performed by a client computer. Likewise, one or more steps of the methods may be performed by an intermediate entity such as, for example, a proxy server. For instance, one or more steps of the methods may be performed in a distributed fashion across the plurality of devices in order to meet one or more objectives. For example, one objective may be to provide load balancing between two or more devices. Another objective may be to restrict a location of one or more of an input data, an output data and any intermediate data therebetween corresponding to one or more steps of the methods. For example, in a client-server environment, sensitive data corresponding to a user may not be allowed to be transmitted to the server computer. Accordingly, one or more steps of the methods operating on the sensitive data and/or a derivative thereof may be performed at the client device.
The present disclosure describes methods and systems of securing SMS message via authenticate the sender's identity and verify the integrity of the SMS message then display the results on to SMS message reader's GUI. Further, the disclosed system may be configured for verifying the true and real identity of an electronic SMS message sender in real time to assure the message receivers that the message was sent by a verified sender.
Further, the disclosed system may be designed to intercept the electronic SMS message and verify the validity of the sender's digital certificate (aka, the public key certificate) as part of a proof of the authenticity of the electronic SMS message's sender. Further, the disclosed system may be configured to provide means for the user to visually confirm the validity of the message's sender. The disclosed system may provide a logo of the sender and a certification logo that replace the gray avatar and the sender's code, respectively, on the screen of the receiver's electronic device (aka, GUI). Further, the disclosed system may provide means for the user to selectively reject any unverified message. The disclosed system may include a reject/drop function that enables the recipient to reject the unverified message. Further, a graphical “stop” sign may be included in the logo area to help the user identify unverified messages.
Further, the disclosed system enables users to easily identify potentially harmful electronic SMS messages by detecting unverified senders of the SMS messages. An unverified sender means that the message sender's digital certificate and/or public key certificate have not been verified or incorrectly reflects the sender's identity claimed. Further, Twocent, an exemplary embodiment of the disclosed system herein may register individual users and organizations so that incoming electronic SMS messages may be relayed to the system.
The present disclosure describes a method that includes the steps of relaying incoming at least one electronic SMS message for at least one recipient to a remote server of the present invention. Once the incoming electronic SMS message has been relayed to the remote server, the message sender's digital certificate and/or public key certificate may be verified. If the validity of the message sender's identity has been proven, the electronic SMS message is forwarded to the recipient along with the corresponding sender's logo and the sender's identity certificate. Then, the electronic SMS message is displayed with several digital security features that assure the recipient of the sender's identity verification results.
The disclosed system logically processes the verification of the identity of the SMS sender and displays the result on a GUI. The GUI shows the 3rd party verification result and the sender's official logo with 3rd part Verifier's attestation texts on the GUI.
Further, the disclosed system may protect both sender and receiver of the SMS from the attacks of forgery, scam, spam, phishing, DDOS, sabotage, espionage, whaling, vishing, impersonation, faking, virus, ransomware, solicitation, MITM (man in the middle attack), cheating, bullying, fraudulent, imitating, tempering, camouflaged malicious financial information, etc.
The disclosed system may enhance the SMS's authenticity, authority, integrity, safety, security, reliability, trustworthiness, traceability, auditability, accountability, non-reputation capability, sign capabilities (alerting, warning, reminding), and responsibility, etc.
Further, the disclosed system may verify the sender's public key certificate and the Integrity of the contents of the SMS by displaying the verification result and corresponding logo icon on the Graphical User Interface (GUI) to help SMS Receiver in security assurance or warning of risks.
Further, the disclosed system may intercept the SMS message and verify the validity of the sender's digital certificate/public key certificate as a part of proof of the authenticity of the sender of the SMS message. Further, the disclosed system may forward the Logo of the sender and Twocent* Certified Text to the receiver to replace the gray Avatar and Sender's Code respectively on the screen of the receiver. Further, the disclosed system may reject/drop the unverified sender message with a big stop sign image in the logo area. The unverified sender means that the sender's digital certificate has not been verified or incorrectly reflects the sender's identity claimed.
Further, in some embodiments, an enrolled organization or individual Initializes sending the SMS message to Twocent. Further, Twocent verifies a sender's Digital/Public Key Certificate first at API Gateway before some lambda ( ) functions on AWS Cloud Infrastructure. Further, if validity has been proved after the validation of the values as proofs of the authenticity of the sender and integrity of the SMS message, Twocent forwards the message with the corresponding organizations or individual's logo and the Integrity certified SMS message to a destination of the message.
Further, the disclosed system may protest senders and receivers from attackers such as forgery, spam, scam, and impersonation. Further, the disclosed system may verify in real time the validity sender's digital certificate and display the sender's logo and verifier's attestation. Further, the disclosed system may provide proof of uniqueness, individuality, and distinctiveness. Further, the disclosed system may assure the message's authenticity and integrity for both the sender and the receiver which increases the trust in the message. Further, the disclosed system may maximumly minimize the attack surfaces on impersonation, phishing, and scamming attacks. Further, the disclosed system may enhance organizational reputation with creativity, practicality, novelty, applicability, and inventive solution via a powerful cloud. Further, the disclosed system may improve user experience and boost business.
A user 112, such as the one or more relevant parties, may access online platform 100 through a web based software application or browser. The web based software application may be embodied as, for example, but not be limited to, a website, a web application, a desktop application, and a mobile application compatible with a computing device 2400.
Further, in some embodiments, the augmenting information may include a receiver information associated with the at least one receiver. Further, the receiver information may include a receiver name, a contact number, an email address, etc.
Further, in some embodiments, the graphic user interface may include one or more modifiable sections and one or more non modifiable sections. Further, the augmenting the graphic user interface may include augmenting the one or more modifiable sections with one or more augmenting content comprised in the augmenting information. Further, the augmenting of the graphic user interface (GUI) comprising the one or more modifiable sections may include modifying or updating the one or more modifiable portions with the one or more augmenting content. Further, in an instance, the one or more augmenting content may include a logo, a certification badge, a tick symbol, attestation texts, etc. Further, in another instance, the one or more augmenting content may include a warning, an unverified badge, a cross symbol, attestation texts, etc. Further, the augmented GUI may include the graphic user interface with the one or more modifiable portions modified or augmented by superimposing the one or more augmenting content on the GUI.
Further, in some embodiments, the verification result may include a successful verification result indicating a successful verification of the message sender. Further, the one or more augmenting content associated with the successful verification result may include at least one of a verification badge and a logo associated with the message sender. Further, the augmenting of the graphic user interface may be based on at least one of the verification badges and the logo as the indicators of the procedures of a positive verification result.
Further, in some embodiments, the verification result may include an unsuccessful verification result indicating an unsuccessful verification of the message sender. Further, the one or more augmenting content associated with the unsuccessful verification result may include at least one of an unverified badge as a warning symbol with verification result warning statement by the verifier's platform. Further, the augmenting of the graphic user interface may be based on the unverified badge and the warning symbol as the indicators of the procedures of a negative verification result.
Further, in some embodiments, the verification result may include a successful verification result indicating a successful verification of the message sender. Further, the one or more augmenting content associated with the successful verification result may include at least one of a verification badge and a logo associated with the message sender. Further, the augmenting of the graphic user interface may be based on at least one of the verification badge and the logo.
Further, in some embodiments, the verification result may include an unsuccessful verification result indicating an unsuccessful verification of the message sender. Further, the one or more augmenting content associated with the unsuccessful verification result may include at least one of an unverified badge and a warning symbol. Further, the augmenting of the graphic user interface may be based on the unverified badge and the warning symbol.
Further, the system 900 may include a processing device 904 communicatively coupled with the communication device 902. Further, the processing device 904 may be configured for analyzing the information and a verifying information. Further, the processing device 904 may be configured for generating a verification result associated with the message sender based on the analyzing. Further, the processing device 904 may be configured for obtaining the augmenting information based on the verification result.
Further, the system 900 may include a storage device 906 communicatively coupled with the processing device 904. Further, the storage device 906 may be configured for retrieving the verifying information associated with the message sender based on the sender's indication and identification.
Further, in some embodiments, the graphic user interface may include one or more modifiable sections and one or more non modifiable sections. Further, the augmenting the graphic user interface may include augmenting the one or more modifiable sections with one or more augmenting content comprised in the augmenting information.
Further, in some embodiments, the verification result may include a successful verification result indicating a successful verification of the message sender. Further, the one or more augmenting content associated with the successful verification result may include at least one of a verification badge and a logo associated with the message sender. Further, the augmenting of the graphic user interface may be based on at least one of the verification badge and the logo.
Further, in some embodiments, the verification result may include an unsuccessful verification result indicating an unsuccessful verification of the message sender. Further, the one or more augmenting content associated with the unsuccessful verification result may include at least one of an unverified badge and a warning symbol. Further, the augmenting of the graphic user interface may be based on the unverified badge and the warning symbol.
Further, in some embodiments, the information may include a message content and a first hash value associated with a message. Further, the processing device 904 may be configured for obtaining a secret key associated with the message sender based on the analyzing. Further, the processing device 904 may be configured for hashing the message content using the secret key. Further, the processing device 904 may be configured for generating a second hash value based on the hashing. Further, the processing device 904 may be configured for comparing the first hash value and the second hash value. Further, the processing device 904 may be configured for determining a match between the first hash value and the second hash value based on the comparing. Further, the generating of the verification result may be based on the determining of the match.
Further, in some embodiments, the communication device 902 may be configured for receiving a sender public key certificate from the sender device, at least one, 1002. Further, the communication device 902 may be configured for transmitting a verifier public key certificate to the sender device, at least one, 1002. Further, the communication device 902 may be configured for transmitting a contract to the at least one sender device 1002. Further, the communication device 902 may be configured for receiving a signed contract corresponding to the contract from the at least one sender device 1002. Further, the communication device 902 may be configured for transmitting the secret key to the at least one sender device 1002. Further, the processing device 904 may be configured for generating the contract between the message sender and the at least one verifier based on the verifier public key certificate and the sender public key certificate. Further, the processing device 904 may be configured for generating the secret key associated with the message sender based on the signed contract. Further, the storage device 906 may be configured for retrieving the verifier public key certificate associated with the at least one verifier.
Further, in some embodiments, the information may include a message content and a third hash value associated with a message. Further, the processing device 904 may be configured for obtaining a second secret key associated with the at least one vendor based on the analyzing. Further, the processing device 904 may be configured for hashing the message content using the second secret key. Further, the processing device 904 may be configured for generating a fourth hash value based on the hashing. Further, the processing device 904 may be configured for comparing the third hash value and the fourth hash value. Further, the processing device 904 may be configured for determining a match between the third hash value and the fourth hash value based on the comparing. Further, the generating of the verification result may be based on the determining of the match.
Further, in some embodiments, the storage device 906 may be configured for retrieving a verifier public key certificate associated with the at least one verifier. Further, the communication device 902 may be configured for transmitting the verifier public key certificate to the at least one vendor device 1004. Further, the communication device 902 may be configured for receiving a vendor public key certificate from the at least one vendor device 1004. Further, the communication device 902 may be configured for transmitting a second contract to the at least one vendor device 1004. Further, the communication device 902 may be configured for receiving a signed second contract corresponding to the second contract from the at least one vendor device 1004. Further, the communication device 902 may be configured for transmitting the second secret key to the at least one vendor device 1004. Further, the processing device 904 may be configured for generating the second contract between the at least one vendor and the at least one verifier based on the vendor public key certificate and the verifier public key certificate. Further, the processing device 904 may be configured for generating the second secret key associated with the at least one vendor based on the signed second contract.
Further, if the certificate is verified at 1406, the method 1400, at 1408, may include relaying the message, the certificate, and a sender logo. Further, at 1410, the method 1400 may include outputting the message, the certification, and the sender logo.
As can be seen in
In the preferred embodiment, the disclosed system enables the verification of the sender's identity. As can be seen in
Both the sender account and the recipient account are also associated with a corresponding sender Personal Computing (PC) device and a corresponding recipient PC device, respectively. Both the sender PC device and the recipient PC device can be any computing device with communication capabilities including, but not limited to, smartphones. In addition, the sender account includes a digital certificate and/or a public key certificate that can be used to verify the identity of the sender. Further, electronic SMS messages can include different types of electronic SMS messages sent over different communication protocols including, but not limited to, text messages, direct messages, voice messages, etc. Furthermore, the electronic SMS message can be several electronic SMS messages sent by one or more sender accounts. Likewise, the electronic SMS message can be sent to several recipient accounts and could be sent through different communication services.
As can be seen in
As can be seen in
Furthermore, to enable the secure transmission of the electronic SMS message and the corresponding sender's digital certificate, the present invention can utilize an Application Programming Interface (API) lambda authorizer that enables the use of custom authorization schemes. The lambda authorizer controls the access to the API gateway from which various lambda functions can be performed. The lambda functions can interact with various database services including, but not limited to, NoSQL database services such as AWS DynamoDB, visual workflow services such as AWS Step Functions, distributed search analytics engines such as Elasticsearch, and object storage services such as AWS S3 Bucket. In order to verify the sender's identity using the sender's digital certificate, several values of the digital certificate can be evaluated. The values evaluated can include but are not limited to, the subject alternative name, enhanced key usage, subject key identifier, certificate policies, authority information access, authority key identifier, CRL distribution points SCT list, etc. Further, various details can be verified including, but not limited to, certificate issuance information such as the organization issued to and/or the organization issuing the certificate, the validity period, digital fingerprints, etc.
As can be seen in
As previously discussed, once the verification process is performed, the verification certificate is generated and relayed along with the electronic SMS message to the corresponding recipient's PC device. As can be seen in
Further, when the manual registration of the sender has been completed, the verifier may issue a copy of the secret key and send the secret key to the sender for future usage dynamically.
With reference to
Computing device 2400 may have additional features or functionality. For example, computing device 2400 may also include additional data storage devices (removable and/or non-removable) such as, for example, magnetic disks, optical disks, or tape. Such additional storage is illustrated in
Computing device 2400 may also contain a communication connection 2416 that may allow device 2400 to communicate with other computing devices 2418, such as over a network in a distributed computing environment, for example, an intranet or the Internet. Communication connection 2416 is one example of communication media. Communication media may typically be embodied by computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and includes any information delivery media. The term “modulated data signal” may describe a signal that has one or more characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media may include wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, radio frequency (RF), infrared, and other wireless media. The term computer readable media as used herein may include both storage media and communication media.
As stated above, a number of program modules and data files may be stored in system memory 2404, including operating system 2405. While executing on processing unit 2402, programming modules 2406 (e.g., application 2420) may perform processes including, for example, one or more stages of methods, algorithms, systems, applications, servers, databases as described above. The aforementioned process is an example, and processing unit 2402 may perform other processes. Other programming modules that may be used in accordance with embodiments of the present disclosure may include machine learning applications.
Generally, consistent with embodiments of the disclosure, program modules may include routines, programs, components, data structures, and other types of structures that may perform particular tasks or that may implement particular abstract data types. Moreover, embodiments of the disclosure may be practiced with other computer system configurations, including hand-held devices, general purpose graphics processor-based systems, multiprocessor systems, microprocessor-based or programmable consumer electronics, application specific integrated circuit-based electronics, minicomputers, mainframe computers, and the like. Embodiments of the disclosure may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote memory storage devices.
Furthermore, embodiments of the disclosure may be practiced in an electrical circuit comprising discrete electronic elements, packaged or integrated electronic chips containing logic gates, a circuit utilizing a microprocessor, or on a single chip containing electronic elements or microprocessors. Embodiments of the disclosure may also be practiced using other technologies capable of performing logical operations such as, for example, AND, OR, and NOT, including but not limited to mechanical, optical, fluidic, and quantum technologies. In addition, embodiments of the disclosure may be practiced within a general-purpose computer or in any other circuits or systems.
Embodiments of the disclosure, for example, may be implemented as a computer process (method), a computing system, or as an article of manufacture, such as a computer program product or computer readable media. The computer program product may be a computer storage media readable by a computer system and encoding a computer program of instructions for executing a computer process. The computer program product may also be a propagated signal on a carrier readable by a computing system and encoding a computer program of instructions for executing a computer process. Accordingly, the present disclosure may be embodied in hardware and/or in software (including firmware, resident software, micro-code, etc.). In other words, embodiments of the present disclosure may take the form of a computer program product on a computer-usable or computer-readable storage medium having computer-usable or computer-readable program code embodied in the medium for use by or in connection with an instruction execution system. A computer-usable or computer-readable medium may be any medium that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device.
The computer-usable or computer-readable medium may be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation medium. More specific computer-readable medium examples (a non-exhaustive list), the computer-readable medium may include the following: an electrical connection having one or more wires, a portable computer diskette, a random-access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, and a portable compact disc read-only memory (CD-ROM). Note that the computer-usable or computer-readable medium could even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via, for instance, optical scanning of the paper or other medium, then compiled, interpreted, or otherwise processed in a suitable manner, if necessary, and then stored in a computer memory.
Embodiments of the present disclosure, for example, are described above with reference to block diagrams and/or operational illustrations of methods, systems, and computer program products according to embodiments of the disclosure. The functions/acts noted in the blocks may occur out of the order as shown in any flowchart. For example, two blocks shown in succession may in fact be executed substantially concurrently or the blocks may sometimes be executed in the reverse order, depending upon the functionality/acts involved.
While certain embodiments of the disclosure have been described, other embodiments may exist. Furthermore, although embodiments of the present disclosure have been described as being associated with data stored in memory and other storage mediums, data can also be stored on or read from other types of computer-readable media, such as secondary storage devices, like hard disks, solid state storage (e.g., USB drive), or a CD-ROM, a carrier wave from the Internet, or other forms of RAM or ROM. Further, the disclosed methods' stages may be modified in any manner, including by reordering stages and/or inserting or deleting stages, without departing from the disclosure.
Further, in some embodiments, the analyzing the information and the verifying information comprises analyzing the information and the verifying information using at least one machine learning model. Further, the at least one machine learning model may be configured for extracting at least one verification feature from the verifying information. Further, the at least one machine learning model may be configured for determining a presence of the at least one verification feature in the information. Further, generating of a verification result may be based on the determining of the presence of the at least one verification feature in the information. Further, the at least one verification feature may include at least one of a sender name, a company or department associated with the sender, a serial number or IP address associated with the at least one sender device, a validity duration, a domain certificate, etc.
Further, in some embodiments, the at least one machine learning model may include a support vector machine (SVM) learning model. Further, the SVM learning model may be trained using a training dataset comprising an information and a classification of at least one verification feature associated with the information. Further, at 2508, the method 2500 may include obtaining, using the processing device, a secret key associated with the message sender based on the analyzing. Further, at 2510, the method 2500 may include hashing, using the processing device, the message content using the secret key. Further, at 2512, the method 2500 may include generating, using the processing device, a second hash value based on the hashing. Further, at 2514, the method 2500 may include comparing, using the processing device, the first hash value and the second hash value. Further, at 2516, the method 2500 may include determining, using the processing device, a match between the first hash value and the second hash value based on the comparing. Further, at 2518, the method 2500 may include generating, using the processing device, a verification result associated with the message sender based on the determining of the match. Further, the verification result may include one of a successful verification result indicating a successful verification of the message sender and an unsuccessful verification result indicating an unsuccessful verification of the message sender. Further, at 2520, the method 2500 may include obtaining, using the processing device, an augmenting information based on the verification result. Further, at 2522, the method 2500 may include transmitting, using the communication device, the augmenting information and the information to at least one vendor device associated with at least one message vendor. Further, the at least one vendor device may be configured for augmenting, using a vendor processing device of the at least one vendor device, a graphic user interface based on the augmenting information. Further, in some embodiments, the augmenting of the graphic user interface may include augmenting the graphic user interface using at least one first machine learning model. Further, the augmenting of the graphic user interface using the at least one first machine learning model may include analyzing at least one display information associated with the at least one vendor device and the augmenting information using the at least one first machine learning model. Further, the augmenting of the graphic user interface using the at least one first machine learning model may include determining at least one value of at least one display parameter (resolution, display area, display screen size, pixel density, refresh rate, etc.) of the at least one vendor device and at least one information parameter (image size, image dimension, matrix, pixels, voxels, and bit depth) of the augmenting information using the at least one first machine learning model based on the analyzing of the at least one display information and the augmenting information. Further, the augmenting of the graphic user interface using the at least one first machine learning model may include modifying a current value for the at least one information parameter to a modified value of the at least one information parameter the at least one value of the at least one display parameter using the at least one first machine learning model based on the determining of the at least one value of the at least one display parameter. Further, the augmenting of the graphic user interface using the at least one first machine learning model may include incorporating the augmenting information with the current value for the at least one information parameter in the graphic user interface using the at least one first machine learning model. Further, the generating of an augmented graphic user interface may be based on the incorporating. Further, the graphic user interface may include one or more modifiable sections and one or more non modifiable sections. Further, the at least one vendor device may be configured for generating, using the vendor processing device, the augmented graphic user interface based on the augmenting. Further, the augmented graphic user interface may include the one or more modifiable sections with one or more augmenting content. Further, the at least one vendor device may be configured for transmitting, using a vendor communication device of the at least one vendor device, the augmented graphic user interface to at least one receiver device associated with at least one message receiver. Further, the at least one receiver device may be configured for presenting the augmented graphic user interface.
Although the present disclosure has been explained in relation to its preferred embodiment, it is to be understood that many other possible modifications and variations can be made without departing from the spirit and scope of the disclosure.
| Number | Date | Country | |
|---|---|---|---|
| 63507189 | Jun 2023 | US |
