This application is the National Stage application of PCT Application No. PCT/CN2006/002745 filed Oct. 18, 2006.
This disclosure relates to internet communications and, in particular, to systems and methods concerning email communication technology over the internet.
With the proliferation of the internet, more and more people use electronic mail, which is also referred to as email or simply mail in short. Email has become an indispensable tool for business correspondence. In many cases, email is a replacement for facsimile because of faster speed, lower communication cost, and no charge for long distance calling. Because email is often free, some people collect a large number of email addresses of other people and then spam these email addresses with business advertisements, personal advertisements, or even adult information without the recipient's permission. From the standpoint of the email recipients, these emails are usually from strangers and the contents are usually useless advertisements. The email are commonly referred to as junk mails and are often deleted without reading. The number of junk mails is continually increasing and even outnumbers normal, useful emails. Some junk mails even carry computer virus that, once opened, infect the user's computer.
The main effect of junk mail is a loss in productivity. The email user has to spend a substantial amount of time to delete these junk mails. Junk email also wastes network bandwidth and server memory capacity. Furthermore, when deleting these junk emails, the user may accidentally delete important emails in haste, which severely affects the daily communication among people. Thus, prevention of junk email and reduction in the effects are urgent issues.
It is therefore an object of the invention to provide an email system and relevant method for preventing junk mails.
An exemplary system for preventing junk mails includes a sender email server (2-1), a recipient email server (2-2), a user terminal (3) for communicating email (4) through the sender email server (2-1) and the recipient email server 2-2, an internet communication network (6) for forwarding the email (4), and a digital certificate (5) for each of the sender email server (2-1) and the recipient email server (2-2) including a private key and a public key configured to encrypt and decrypt the email (4) with authentication in order to identify email (4) that is junk.
The signs in the Figures represent the same or corresponding system, device, or component part, wherein the email authentication exchange center (1) is abbreviated to exchange center (1), the email servers (2) comprise sending server (2-1) and receiving server (2-2), the digital certificates (5) comprise digital certificate (5-1) of the exchange center (1), the digital certificates (5-2) of the email servers (4) and the digital certificate (5-3) of a certain company, as well as the user terminal (3), email (4), interne (6), payment gateway (7), a bank account computer system (8), charge inquiry website (9), bank card center (88), fee-charged email server (22).
The system includes an email authentication exchange center (1). The exchange center (1) is an email server having relevant account management and authentication programs. The exchange center (1) also stores a public key for a digital certificate (5-2) of a respective email server (2) and a private key for its own digital certificate (5-1). The exchange center (1) decrypts encrypted email forwarded from the email server (2) with the public key for the digital certificate (5-2) corresponding to the email server (2) and then encrypts the email (4), which has already been successfully decrypted, with the private key for its own digital certificate (5-1). The exchange center (1) then forwards the email (4) to the recipient's email server (2).
The email server (2) includes relevant programs for processing encryption and decryption and stores the private key for its own digital certificate (5-2) and the public key for the digital certificate (5-1) of the exchange center (1). When an email (4) sent by a user is forwarded to the email server (2), the email server (2) encrypts the email (4) sent by the user with the private key for it's own digital certificate (5-2) and then forwards the email (4) to the exchange center (1). When an email is forwarded from the exchange center (1), the email server (2) decrypts the email with the public key for the digital certificate (5-1) of the exchange center (1) and then stores the email (4), which is successfully decrypted, into the recipient's email box, where the recipient may check the email (4) via the internet.
A user terminal (3) in the system may include a computer, a PDA, a cellular phone or the like that is able to access the internet and is set up with a program for receiving and sending emails. The user accesses the internet and logs onto the email server (2) using the user terminal (3). The user then checks or downloads the emails (4) in his/her own email box through the program for receiving and sending emails, and sends emails (4) through the email server (2).
The email (4) represents a correspondence that is sent and received through an electronic communication system and includes email (4) conveyed via internet (6) or email (4) conveyed via other communication electronic networks. Thus, the electronic mail (4) may be abbreviated to email (4) or mail (4) in this disclosure.
The internet (6) may be a communication network, such as a wide area internet network or local network and computer network. The internet (6) is used to forward emails (4) in this disclosure.
The digital certificates (5) include the digital certificate (5-1) of the exchange center (1) and the digital certificates (5-2) of the email servers (2), where the digital certificates (5) utilize the public key and private key in PKI technology (Public Key Infrastructure) to encrypt and decrypt emails. PKI technology is known and includes encrypting sent information with a private key of the digital certificate (5). The encrypted information cannot be decrypted without the public key of the very digital certificate (5). In this manner, the authenticity of the information and the identity of the information sender can be ensured.
The exchange center (1) authenticates that the received email is forwarded from the email server (2) with the digital certificate (5-2) of the email server (2), and the email server (2) authenticates that the received email is forwarded from the exchange center (1) with the digital certificate (5-1) of the exchange center (1).
The set-up of the system will now be described.
The exchange center (1) is arranged with a plurality of email servers (2). The email servers (2) may be created by adding relevant program processing encryption and decryption to traditional email servers. The exchange center (1) applies for a digital certificate (5-1) from a relevant digital certificate authentication center, and the respective email server (2) also applies for a digital certificate (5-2) from a relevant digital certificate authentication center. The respective email server (2) also registers and stores the public key of its own digital certificate (5-2) and information such as its network domain name in the exchange center (1). The exchange center (1) establishes a blacklist for any email servers that send junk mails, and thus the exchange center (1) does not forward emails (4) sent from any blacklisted email servers (2).
When the user sends an email (4) via the email server (2), the email server (2) encrypts the email (4) sent by the user with the private key of its own digital certificate (5-2), then forwards the encrypted email to the exchange center (1), which decrypts the encrypted email with the public key of the digital certificate (5-2) of the email server (2). The exchange center (1) determines that the email is forwarded from the email server (2) if the decryption is successful. After verifying the email server (2) is not a server listed on the blacklist for junk mail servers, the exchange center (1) encrypts the email (4) with the private key for its own digital certificate (5-1) and then forwards the encrypted email to the recipient's email server (2), which decrypts the received email with the public key for the digital certificate (5-1) of the exchange center (1). The recipient's email server (2) determines that the email is forwarded from the exchange center (1) if the decryption is successful and then stores the decrypted email (4) into the recipient's email box.
The exchange center (1) disposes of any forwarded email that is not encrypted with a digital certificate (5-2) or a forwarded email from an email server listed on the blacklist for junk mail servers. That is, the exchange center (1) only deals with the emails (4) sent from the email servers (2) which have already registered their digital certificates. In some cases, even an email server (2) that has not been blacklisted may be blacklisted if some people complain that this email server spams a large amount of junk mails (and the complaint is checked to be true). In this case, information such as the name of the email sever may be added to the blacklist. As a result, the added blacklisted email server (2) cannot forward emails (4) through the exchange center (1) any more.
When the email server (2) receives an email that is not forwarded from the exchange center (1), such as an email that is not encrypted with the digital certificate (5-1) of the exchange center (1), the email server (2) promptly stores the mail into another email box, such as a junk mail box. The user may choose to check these junk emails.
When most or all email servers (2) register at the exchange center (1) and use the digital certificates (5) to authenticate their identities, all normal emails (4) are forwarded to the recipient's email servers (2) through the exchange center (1), while the junk mails are forwarded directly to the junk mail box within the recipient's email server (2). Since the normal emails (4) are stored within the recipient's email box, it is not necessary for the recipients to spend time to check their junk mail boxes which contain a large amount of junk mails. Furthermore, the email server (2) is also able to revoke the user's junk mail box. That is, any email not forwarded through the exchange center (1) would be disposed directly, and thereby save memory capacity.
The embodiment illustrated in
A1. When a sender sends an email (4) to the recipient, the email (4) is forwarded to the sending server (2-1) via a user terminal (3);
A2. the sending server (2-1) encrypts this email (4) with the private key for its own digital certificate (5-2), then forwards the encrypted email to the exchange center (1);
A3. the exchange center (1) decrypts the received encrypted email with the public key for the digital certificate (5-2) of the sending server (2-1), determines that the email is forwarded from the sending server (2-1) if the decryption is successful, then promptly encrypts this email (4) with the private key for its own digital certificate (5-1), and then forwards the encrypted email to the receiving server (2-2);
A4. the receiving server (2-2) decrypts the received encrypted email with the public key for the digital certificate (5-1) of the exchange center (1), determines that the email is forwarded from the exchange center (1) if the decryption is successful, and then promptly stores the decrypted email (4) into the recipient's email box, where the recipient may read the email (4) via internet.
The embodiment illustrated in
B1. When a sender in company A sends an email (4) to the recipient in company B, the email (4) is forwarded to the sending server (2-1) via a user terminal (3);
B2. the sending server (2-1) encrypts the email (4) with the private key for the digital certificate of company A, then forwards the encrypted email to the exchange center (1);
B3. the exchange center (1) decrypts the received encrypted email with the public key for the digital certificate (5-3) of company A, determines that the email is sent from company A if the decryption is successful, then promptly encrypts this email (4) with the private key for the digital certificate (5-1) of its own, and then forwards the same to the receiving server (2-2);
B4. the receiving server (2-2) decrypts the received encrypted email with the public key for the digital certificate (5-1) of the exchange center (1), determines that the email is forwarded from the exchange center (1) if the decryption is successful, and then promptly stores the decrypted email (4) into the email box of the recipient in company B, where the recipient may check the email via internet.
In this embodiment, the digital certificate (5-3) of company A is applied to substitute for the digital certificate (5-2) of sending server (2-1). That is, if company A spams a large amount of junk mails, the exchange center (1) would blacklist company A. As a result, company A, if blacklisted, would not be able to send emails (4) through the exchange center (1) any more. In this manner, even if some people establish a shell company so as to apply a digital certificate (5-3) for company to send junk mails, the exchange center (1) is also able to eradicate such activities with administrative measures. For example, a service fee or deposit may be charged to for applying the digital certificate (5-3) or to register with the exchange center (1). If a company is blacklisted after spamming a large amount of junk mail, its deposit may be surrendered. In this way, the junk mails will be largely reduced since the cost for sending junk mails is increased.
The embodiment in
C1. When a sender in company A sends an email (4) to a recipient in company B, the email (4) is forwarded to the sending server (2-1) via a user terminal (3);
C2. the sending server (2-1) encrypts the email (4) with the private key for the digital certificate (5-3) of company A, then forwards the encrypted email to the receiving server (2-2);
C3. the receiving server (2-2) decrypts the received encrypted email with the public key for the digital certificate (5-3) of company A, then determines that the email is forwarded from the sending server (2-1) of company A if the decryption is successful, and then promptly stores the decrypted email (4) into the email box of the recipient in company B, where the recipient can check the email (4) via internet.
An improvement to the embodiment of
As an example, the exchange center (1) registers the bank account number of respective email server (2), which also signs a contract with the exchange center (1) at the same time agreeing that the emails (4) are charged on quantity basis. The company associated with the email server (2) has to pay a certain sum of money for each mail it sends to other email servers (2) through the exchange center (1). That is, the sender's email server (2), the sending server (2-1), pays to the recipient's email server (2), the receiving server (2-2). The fee for sending and receiving emails (4) may be settled promptly, namely, the money for the fee is transferred promptly from the bank account of the sending server (2-1) to the bank account of the receiving server (2-2) at the time the email (4) is sent. Alternatively, the fee for sending and receiving emails (4) may be settled regularly, such as daily, weekly, or monthly. The amount of money to be charged from and money to be collected by respective email servers (2) is calculated during the settlement, and then the exchange center (1) pays or deposits the money with transfers between the bank accounts of the email servers via a payment gateway (7). The exchange center (1) takes out a service charge either at certain rate or of fixed amount from the money charged for sending and receiving emails (4). Since the common personal email (4) communication and the email (4) communication in business between companies are usually mutual communications, that is to say, both the sender and recipient pay for each other, and the money paid and the money received would not be substantially different, the user would usually not pay too much money.
D1. When a sender sends email (4) to a recipient, the email (4) is forwarded to the sending server (2-1) via a user terminal (3);
D2. the sending server (2-1) encrypts this email (4) with the private key for its own digital certificate (5-2), then forwards the encrypted email to the exchange center (1), and then records this count of debt into the sender's account book;
D3. the exchange center (1) decrypts the received encrypted email with the public key for the digital certificate (5-2) of the sending server (2-1), determines that the email is sent from the sending server (2-1) if the decryption is successful, records this count of debt for sending this email into the account book of the sending server (2-1), then encrypts the decrypted email (4) with the private key for the digital certificate (5-1) of the exchange center (1) and forwards the encrypted email to the receiving server (2-2), and records the income for receiving this email into the account book of the receiving server (2-2);
D4. the receiving server (2-2) decrypts the received encrypted email with the public key for the digital certificate (5-1) of the exchange center (1), determines that the email is forwarded from the exchange center (1) if the decryption is successful, then stores the decrypted email (4) into the recipient's email box promptly for the recipient to check, and records the income for receiving this mail into the recipient's account book;
D5. during settlement, the exchange center (1), based on account book of the respective email server (2-1 or 2-2), calculates the money to be paid or the money to be received by the email servers (2-1 and 2-2) with the service charge deducted, then charges or deposits the money via transfer between the bank accounts of the email servers (2-1 and 2-2) through the payment gateway (7) and the bank account computer system (8), and the respective email servers (2), the sender email server (2-1) and the recipient email server (2-2) charge the money from or return the money to the accounts of their own users.
Local governments may also tax the email senders through the exchange center (1), which would also increase the government's revenue. Since the objects to be taxed are only the email senders, it will neither lay burden to the citizens, nor bring effects on the local economy and may be a good way to increase the government's revenue.
E1. Before sending an email (4) to the recipient, the sender logs on the email charge inquiry website (9) and inputs the recipient's email address. Then the sender views the amount of money for the self-defined donation charge set by the recipient;
E2. if the sender accepts the amount of money for the self-defined donation charge, the sender forwards the email (4) to the sending server (2-1) via a user terminal (3);
E3. the sending server (2-1) encrypts the email (4) with the private key for its own digital certificate (5-2), then forwards the encrypted email (4) to the exchange center (1) and records this count of debt into the sender's account book;
E4. the exchange center (1) decrypts the received email (4) with the public key for the digital certificates (5-2) of the sending server (2-1), determines that the email is forwarded from the sending server (2-1) if the decryption is successful, promptly records this count of debt into the account book of the sending server (2-1), then encrypts this email (4) with the private key for its own digital certificate (5-1), and then records this count of income into the account book of the receiving server (2-2);
E5. the receiving server (2-2) decrypts the received encrypted email with the public key for the digital certificate (5-1) of the exchange center (1), determines that the email is forwarded from the exchange center (1) if the decryption is successful, then promptly records this count of income into the recipient's account book, and the receiving server (2-2) verifies whether the recipient's email address is a common one or one with self-defined donation charge, and if this recipient is a common email user, the receiving server (2-2) promptly stores the decrypted email (4) into the recipient's email box, ignores steps E6-E14, and skips to step E15, while if the recipient is an email user with self-defined donation charge, then the receiving server (2-2) temporarily stores the email (4) and proceeds to step E6;
E6. the receiving server (2-2) sends to the exchange center (1) a request for paying the self-defined donation charge, where the request may include the email sender's email address, the recipient's email address, title, date and time of that email, etc.;
E7. after receiving the request for paying the self-defined donation charge, the exchange center (1) searches out the recipient's email address from the request, then promptly checks the amount of money for the donation charged for the email address on the email inquiry charge website (9);
E8. the email inquiry charge website (9) searches out information about the amount of money for the donation charged for the email address from the records it keeps, then promptly forwards to the exchange center (1) the information about the amount of money for the donation;
E9. the exchange center (1) promptly temporarily stores the information about the amount of money for the donation charge, replies to the sender with an email encrypted with the private key for its own digital certificate (5-1), where this email includes the relevant donation charge and a donation reference code and to remind the sender to pay the relevant donation charge on-line via logging on the website of the exchange center (1) within a designated time limit (such as a week), the donation reference code is a number for distinguishing different entails (4) when receiving the donation;
E10. the sender's email server (2) decrypts the reply email with the public key for the digital key (5-1) of the exchange center (1), determines that the email (4) is sent from the exchange center (1) if the decryption is successful, and this email is stored into the sender's email box;
E11. when checking the email box, the sender reads the content of the reply email, and if the sender agrees to make a donation, the sender may, within the designated time limit, log on the website of the exchange center (1), and input the sender's own email address and payment reference code, the sender finds out on the website of the exchange center (1) the recipient's email address for the email (4) sent to the sending server (2-1) described in preceding step E2 and after checking the information, the sender inputs the payment information, including information such as credit card number, valid date of the credit card or the debit card and password which is essential for on-line payment, on the payment webpage of the exchange center (1);
E12. the exchange center (1) forwards through the payment gateway (7) the payment information and the total amount of money to the bank account computer system (8) and requests for transfer of the money;
E13. the bank account computer system (8) verifies the payment information and account balance, etc., and if all information is valid, then transfers the money from the user's account provided in the payment information to the bank account of the exchange center (1), and then informs the exchange center (1) that the transfer is successful;
E14. the exchange center (1) forwards to the receiving server (2-2) the received information about successful transfer for the payment, then the receiving server (2-2) stores the decrypted email (4), which has been temporarily stored at step E5, into the recipient's email box for the recipient to check;
E15. during the settlement, the exchange center (1), based on record of receiving and sending emails at fixed charge for the respective email server (2), calculates the money to be paid or the money to be received by the email servers (2) with deduction of the service charge from the respective account, then charges or deposits the money with transfer between the bank accounts of the email servers (2) through the payment gateway (7) and the bank account computer system (8), and the respective email servers (2), the sending server (2-1) and the receiving server (2-2), charge the money from or return the money to the accounts of their own users, the exchange center (1) may donate all the money collected at step E13 with the service charged deducted to a charity organization.
In this embodiment, the exchange center (1) may donate all money collected through the donations, less the service charge deducted, to local charity organizations. The email charge inquiry website (9) may build a webpage including a rank list showing the amount of donation each email address collects, and people can, through logging on this webpage, find out the email address and person which collects the largest amount of donation. The system and method described in this embodiment is not only able to prevent junk mails, but also able to reduce the amount of emails of less importance. If a high amount for the self-defined donation charge is set, any the emails (4) received may be deemed to be of great importance. As a result, the systems and method prevents junk mails and benefits charity.
F1. Before sending an email (4) to a celebrity, the sender firstly has to open an account at the website of the fee-charged email server (22) and buy points, then the sender inputs the value of points to be bought and payment information such as the sender's credit card number, for example, 1 dollar equals to 1 point, thus the sender has to pay 1,000 for 1,000 points;
F2. the fee-charged email server (22) forwards to the bank card center (88) the sender's payment information, such as the credit card number and the amount of money to be transferred for the payment;
F3. after verifying that the payment information and the account balance are valid, the bank card center (88) transfers money from the sender's credit card account to the account of the fee-charged email server (22), then informs the fee-charged email server (22) that the transfer is successful;
F4. the fee-charged email server (22) informs the sender that application for an account is accepted, and the money for buying points has been charged from the credit card account;
F5. the sender searches the celebrity's email address from the website of the fee-charged email server (22) and checks the fee in points for obtaining an authorization code that will be needed for sending an email (4) to the celebrity, for example, the authorization code for sending an email to Bill Gates of the Microsoft may cost 500 points, and the sender may buy the authorization code with the points on the website;
F6. after verifying that the sender's point account is valid, the fee-charged email server (22) deducts the points needed for the authorization code from the sender's account, then forwards the sender a random authorization code which is unique, the sender copies this authorization code into the title of the email (4) within the designated time limit (such as a week), then sends the email (4) to the selected celebrity Bill Gates' email address at the fee-charged email server (22);
F7. within the designated time limit, the sender writes an email (4) entitled with the authorization code and sends it to the selected celebrity Bill Gates' email address at the fee-charged email server (22), and after receiving the email (4), the charged email server (22) compares the authorization code within the title of the email (4) with the authorization code issued in step F6, and if the two codes are consistent, stores the email (4) into the email box of the selected celebrity Bill Gates, and then deletes records of this authorization code, if there is no authorization code corresponding to the recipient within the title of the email received by the fee-charged email server (22), the fee-charged email server (22) disposes of this email and informs the sender by email that the sender must buy an authorization code in order to send the email (4) successfully;
F8. the celebrity Bill Gates logs on the fee-charged email server (22) to check the email (4);
F9. the fee-charged email server (22) forwards the email (4) sent from the sender to the celebrity Bill Gates to check.
Implementation of the disclosed examples would reduce the spamming of junk mails and reduce loss in productivity due to junk mails. In some examples, the email communication through all the email servers (2) and exchange centers (1) are authenticated with PKI digital certificate technology. Once the email server (2) is authorized, the emails (4) of all the users at this email server (2) would be authenticated. Thus, this approach would popularize the PKI digital certificate technology more effectively compared with the traditional approach of authenticating the user individually, since most users of the traditional approach do not understand thoroughly its installation and usage steps and even often make mistakes, thus they cannot make good use of the digital certificate. In some examples, the emails are authenticated by the email servers (2), and the users can send and receive emails (4) as usual without any setup. Thus, the PKI digital certificate technology is applied effectively and is also suitable for most users. As to any requirements for a digital signature and confidence, the sender can sign and encrypt the email (4), then send the email to the recipient through the exemplary system and method, and then the recipient decrypts this email and verifies the digital signature, which is safer and more trustworthy.
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/CN06/02745 | 10/18/2006 | WO | 00 | 5/18/2010 |