Encrypted Email Link Verification on Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods cannot effectively verify hypertext links within encrypted e-mails on mobile devices, as they require the e-mail to be unencrypted, which is not possible with common encryption techniques used in mobile or wireless environments, making it difficult to identify and quarantine malicious links.
Innovation Solution
A method and device that decrypts the encrypted e-mail message on the mobile device, extracts the hypertext links, determines their status, and performs actions based on that status to prevent access to malicious links, using a server to verify the links without requiring the private key to be sent to the server or using symmetric encryption for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If e-mail encryption is used to protect mobile devices, then security is improved, but the ability to verify hypertext links is lost
Solution Approach 1:
The system separates the e-mail decryption process from the link verification process. The e-mail client decrypts the message using the user's private key, extracts hypertext links, and sends only the link data to a remote server for verification. This segmentation allows encrypted e-mails to maintain security while enabling link verification through a dedicated verification component.
Solution Approach 2:
A remote server acts as an intermediary between the mobile device and the hypertext links. The server receives link data from the decrypted e-mail, performs verification checks against malicious content databases, and returns verification results to the e-mail client. This intermediary enables link verification without compromising e-mail encryption or requiring the private key to leave the device.
2Reliability
If asymmetric encryption is used for e-mail, then confidentiality is improved, but link extraction becomes impossible while encrypted
Solution Approach 1:
The e-mail client performs decryption and link extraction as preliminary actions before the user views the e-mail content. The system decrypts the message, identifies and extracts hypertext links, and prepares verification data in advance. This preliminary processing enables subsequent link verification without requiring the user to manually extract links or understand encryption processes.
3Reliability
If spam filters are used to identify malicious content, then security is improved, but they are ineffective against encrypted e-mails
Solution Approach 1:
The remote verification server functions as an enhanced intermediary that performs spam filtering and link verification specifically for encrypted e-mails. It receives link data from multiple sources including decrypted encrypted messages, analyzes the links against malicious content databases, and provides verification results. This dedicated verification service extends spam filter capabilities to previously unprotected encrypted communications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method, device and computer readable memory are provided for verifying hypertext links in an encrypted e-mail message to be sent to a mobile device to remove links that may contain malicious programs, link to a phishing website, or potentially comprise security of the mobile device or expose the user to unsafe sites or content. The hypertext links are extracted by decrypting the encrypted e-mail message. The hypertext links from the decrypted e-mail message are extracted and for each link the status is determined to verify the link. Actions can then be performed based upon the determined status of respective extracted hypertext links.