Encrypted Email Link Verification on Mobile Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods cannot effectively verify hypertext links within encrypted e-mails on mobile devices, as they require the e-mail to be unencrypted, which is not possible with common encryption techniques used in mobile or wireless environments, making it difficult to identify and quarantine malicious links.

Innovation Solution

A method and device that decrypts the encrypted e-mail message on the mobile device, extracts the hypertext links, determines their status, and performs actions based on that status to prevent access to malicious links, using a server to verify the links without requiring the private key to be sent to the server or using symmetric encryption for verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If e-mail encryption is used to protect mobile devices, then security is improved, but the ability to verify hypertext links is lost

Engineering Contradiction:
ImprovesecurityVSAvoidlink verification capability
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system separates the e-mail decryption process from the link verification process. The e-mail client decrypts the message using the user's private key, extracts hypertext links, and sends only the link data to a remote server for verification. This segmentation allows encrypted e-mails to maintain security while enabling link verification through a dedicated verification component.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A remote server acts as an intermediary between the mobile device and the hypertext links. The server receives link data from the decrypted e-mail, performs verification checks against malicious content databases, and returns verification results to the e-mail client. This intermediary enables link verification without compromising e-mail encryption or requiring the private key to leave the device.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If asymmetric encryption is used for e-mail, then confidentiality is improved, but link extraction becomes impossible while encrypted

Engineering Contradiction:
ImproveconfidentialityVSAvoidlink extraction
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The e-mail client performs decryption and link extraction as preliminary actions before the user views the e-mail content. The system decrypts the message, identifies and extracts hypertext links, and prepares verification data in advance. This preliminary processing enables subsequent link verification without requiring the user to manually extract links or understand encryption processes.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If spam filters are used to identify malicious content, then security is improved, but they are ineffective against encrypted e-mails

Engineering Contradiction:
ImprovesecurityVSAvoidapplicability to encrypted e-mails
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The remote verification server functions as an enhanced intermediary that performs spam filtering and link verification specifically for encrypted e-mails. It receives link data from multiple sources including decrypted encrypted messages, analyzes the links against malicious content databases, and provides verification results. This dedicated verification service extends spam filter capabilities to previously unprotected encrypted communications.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2587743B1Hypertext link verification in encrypted e-mail for mobile devices
Publication Date: 2014.07.30 BLACKBERRY LTD
  • EP2587743B1 patent drawingFigure 1
  • EP2587743B1 patent drawingFigure 2
  • EP2587743B1 patent drawingFigure 3

AI summary

A method, device and computer readable memory are provided for verifying hypertext links in an encrypted e-mail message to be sent to a mobile device to remove links that may contain malicious programs, link to a phishing website, or potentially comprise security of the mobile device or expose the user to unsafe sites or content. The hypertext links are extracted by decrypting the encrypted e-mail message. The hypertext links from the decrypted e-mail message are extracted and for each link the status is determined to verify the link. Actions can then be performed based upon the determined status of respective extracted hypertext links.