Email Transaction Security via SPF and DKIM Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing email-based e-commerce systems face challenges in streamlining transactions, requiring segmentation of email lists between registered and non-registered users, and lack a seamless way to process payments without directing customers to web pages, which complicates vendor operations and customer experiences.
Innovation Solution
The implementation of bulk tokens authenticated through DKIM/SPF, allowing for unified transaction processing across registered and non-registered users, enabling email-based transactions without web page visits and eliminating the need for list segmentation, by using email-targeted and URL-targeted tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If email lists are segmented between registered and non-registered users, then payment processing can be differentiated, but device complexity and operational burden increase
Solution Approach 1:
The patent merges the handling of registered and non-registered users into a single unified email list. The system sends bulk tokens to all users simultaneously without segmentation, and the e-commerce system automatically processes payments for both registered and non-registered users through the same email-based mechanism, eliminating the need for separate list management
Solution Approach 2:
The bulk token system provides universal functionality that works for both registered and non-registered users. The token can be used by any user to initiate a purchase, and the system automatically determines whether the user is registered and processes accordingly, making the email payment gateway universally applicable without requiring user-specific configuration
2Productivity
If customers are directed to web pages for payment, then payment processing can be controlled, but customer experience and transaction speed are reduced
Solution Approach 1:
The patent replaces the mechanical process of customers manually navigating to web pages with an automated email-based system. When a customer receives an email with a bulk token and clicks the mailto hyperlink, the system automatically generates a pre-filled email with payment information and sends it to the e-commerce system, eliminating the need for web page visits and significantly speeding up the transaction process
3Reliability
If SPF and DKIM validation are implemented, then email security is enhanced, but processing time and system complexity increase
Solution Approach 1:
The e-commerce system performs SPF and DKIM validation checks in advance before processing the payment transaction. By verifying the authenticity of the incoming email and bulk token beforehand, the system ensures security is established prior to any payment processing, preventing fraudulent transactions while maintaining efficient processing flow
Data Source
AI summary
A system, method, and computer-readable medium for improving the security of an e-commerce system using Simple Mail Transfer Protocol (SMTP). The security of the e-commerce system is improved by receiving a transaction request via a response email that contains a token. This token is decoded to uncover the user's email address. The system then undertakes a verification using Sender Policy Framework (SPF) or DomainKeys Identified Mail (DKIM) to decide whether to accept or reject. Following this, a confirmation email, which includes a clickable link, is sent to the user's email address derived from the token. The transaction is processed once the user clicks on the link in the confirmation email, completing the security enhancement process.