Translucent Authentication Card for Email Sender Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for authenticating electronic message senders are costly, require widespread adoption of new technologies, and do not effectively prevent phishing attacks, as they often rely on sender verification techniques that can be compromised or require user interaction.

Innovation Solution

A method employing a translucent identification member, such as a card or sticker, that includes sender authentication information and location coordinates, allowing recipients to verify the authenticity of messages by overlaying the member on a visual filtering pattern to reveal matching authentication information, eliminating the need for user interaction and reducing costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sender authentication is performed using existing methods (SPF, Coordinated Spam Reduction Initiative, digital signing), then message authenticity can be verified, but implementation cost and infrastructure complexity increase significantly

Engineering Contradiction:
Improvemessage authenticity verificationVSAvoidinfrastructure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent employs disposable authentication cards that are inexpensive to produce and distribute. Each card contains authentication information that can be verified without requiring complex infrastructure. The cards are designed to be used once or limited times, then discarded, eliminating the need for expensive, maintainable authentication systems while maintaining reliability

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The authentication mechanism extracts the verification process from the communication infrastructure itself and places it in the physical authentication card. Instead of requiring message transfer agents or server-side verification systems, the authentication data is embedded directly in the card, separating the authentication function from the communication infrastructure and reducing overall system complexity

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If digital signing or S/MIME protocols are implemented for sender authentication, then phishing attacks can be prevented, but widespread adoption of modified message transfer agents and email clients is required

Engineering Contradiction:
Improvephishing attack preventionVSAvoidcompatibility across email systems
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The authentication card serves multiple functions: it provides sender verification, acts as a physical possession factor, and can be integrated with various email systems without requiring modifications to message transfer agents or email clients. The card-based approach is universally compatible across different email platforms and protocols, eliminating the need for system-specific implementations

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The physical authentication card acts as an intermediary between the sender and the verification process. Instead of requiring direct integration between email systems and authentication mechanisms, the card serves as a universal mediator that can be verified by any receiving system, greatly enhancing adaptability and compatibility across different email platforms

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If secret images are used for authentication, then sender verification can be achieved, but the system requires recipient to choose and send images to sending servers and uses the same image for multiple logins

Engineering Contradiction:
Improvesender verificationVSAvoiduser interaction requirements
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication information is pre-loaded onto physical cards during card issuance. Instead of requiring users to select and upload images during each authentication event, the verification data is prepared in advance and embedded in the card. This eliminates the need for user interaction during the authentication process itself, while maintaining reliable sender verification

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Instead of having the recipient create and send authentication images to servers, the system inverts the process by providing pre-authenticated physical cards to recipients. The authentication verification happens when the recipient presents the card, not when they upload images. This reversal eliminates complex user interactions and server-side image management while maintaining verification reliability

Inventive Principle:
Principle #13The other way round (Inversion)

Data Source

PatentUS8060915B2Method and apparatus for providing electronic message authentication
Publication Date: 2011.11.15 ENTRUST CORP
  • US8060915B2 patent drawing
  • US8060915B2 patent drawing
  • US8060915B2 patent drawing

AI summary

A method for providing electronic message authentication employs an article, such as a card, sticker, or any other suitable article, that includes sender authentication information and location information such as row and column headings. In one example, each recipient of interest is issued an article that embodies unique sender authentication information that is identifiable by corresponding location information such as column and row identifiers. In both an apparatus and method, when the sender of an electronic message wants to send a message to a recipient of interest, the sender sends the electronic message and both location information and corresponding desired sender authentication information located at the coordinate identified by the location coordinate information. If the sent desired sender authentication information matches authentication information found on the article, the sender of the message is trusted.