Disposable email addresses (Apple) - Patent Application - PRIOR ART REQUEST

Question

A handful of Apple engineers have applied for a software patent application (US20140047043) on the idea of adding a proprietary protocol to request new disposable email addresses automatically from an email client.

Publication Number: US20140047043

Title: Disposable Email Address Generation and Mapping to a Regular Email Account

Assignee: Apple, Inc.

The application can be seen here.

Here is the text of one of the independent claims followed by one of its dependent claims:

Claim 11. A non-transitory program storage device, readable by one or more programmable control devices, comprising instructions stored thereon for causing one or more of the programmable control devices to:

• Allocate a disposable email address, the disposable email address independent of a non-disposable email address;
• Associate the disposable email address with the non-disposable email address;

• Associate a context information with the disposable email address, external to the disposable email address;

• Associate an expiration information with the disposable email address, external to the disposable email address;

• Receive an email message addressed to the disposable email address;

• Rewrite the email message, replacing the disposable email address with the non-disposable email address;

• Provide the email message to an email client;

• Provide the context information to the email client;

• Receive a reply to the email message; and

• Rewrite the reply, replacing the non-disposable email address with the disposable email address.

Claim 13. The program storage device of claim 11, wherein the instructions stored thereon further comprise instructions for causing one or more of the programmable control devices to:

• Provide the context information with the email message to the email client.

Here's the abstract for what it's worth:

An integrated system allows easily creating and using disposable email addresses. The disposable email address is created by an email server, which manages correspondence using the disposable email address to avoid exposing the associated non-disposable email address. Context information may be associated with a disposable email address, where the context information is not visible in email sent using the disposable email address. Expiration information may also be associated with the disposable email address, where the expiration information defines conditions that cause the disposable email address to expire. Should the disposable address be misused, the associated context may allow a user to recognize what correspondent exposed the disposable address to misuse.

It seems to me that adding a 'request creation of new e-mail address'-protocol to the known concept of disposable e-mail addresses is not particularly novel, looking for specific references.

Can anyone help find Prior Art (prior to 8/13/12) on this patent application US20140047043 to provide to the US Patent Office.

Answer 1

Guerillamail has an API for creating a new email address.

For example:

http://api.guerrillamail.com/ajax.php?f=get_email_address&ip=127.0.0.1&agent=Mozilla_foo_bar

https://www.guerrillamail.com/GuerrillaMailAPI.html

When this was reviewed by a journalist, the most obvious use was indeed what Apple is trying to patent:

http://blog.programmableweb.com/2011/05/10/guerilla-mail-an-api-that-helps-stop-spam/

It allows the same functionality as the website, and some additional tricks such as setting the e-mail address to one of the user’s choice. This API might allow, as an example, a developer to make a truly paranoid web browser, integrating Guerilla Mail into it for website registering purposes.

Mailinator has the same type of API. This API used in a testing framework:

https://github.com/technicalpickles/mailinator-spec

Claim 11. A non-transitory program storage device, readable by one or more programmable control devices, comprising instructions stored thereon for causing one or more of the programmable control devices to:

Allocate a disposable email address, the disposable email address independent of a non-disposable email address;

This is available in the APIs above.

Associate the disposable email address with the non-disposable email address;

The two above is done for example in HushMail where nyms can be requested using an UI.

Associate a context information with the disposable email address, external to the disposable email address;

All systems do this, otherwise they cannot possibly function correcctly. APIs have cookies, account info etc.

Associate an expiration information with the disposable email address, external to the disposable email address;

The guerillamail API supports this. I haven't checked the others.

Receive an email message addressed to the disposable email address;

Obviously done.

Rewrite the email message, replacing the disposable email address with the non-disposable email address;

This might not be done by the existing solutions, but if this is a requirement, it seems trivial to get around. Why was this put into the claims? Was it because prior art on everything else exists and this should be a patent without any protection ability?

Provide the email message to an email client;

Everything that reads an email is an email client, so..

Provide the context information to the email client;

The context information can be anything, so just the info that you are logged into your email client (your name in the upper right corner) is context information attached to the email address.

Receive a reply to the email message; and

Rewrite the reply, replacing the non-disposable email address with the disposable email address.

Here again, there is this strange requirement that the "real" email address must be used. By just informing the user of the disposable email address, then the real email address can also be shown, since this isn't a rewrite of the "email-address", it is just showing context information (the real email address).

Claim 13. The program storage device of claim 11, wherein the instructions stored thereon further comprise instructions for causing one or more of the programmable control devices to:

Provide the context information with the email message to the email client.

Update: I found some additional art. I have not checked whether this is prior art or not.

Auto alias pairs

How would auto alias pairs work? Imagine users Alice and Bob. Alice wants to correspond with Bob but doesn’t want either her service provider or Bob’s service provider to be able to record the association. She also doesn’t want a network observer to be able to map the association.

When Alice first sends a message to Bob, Alice’s client will initiate the following chain of events on her behalf, automatically and behind the scenes.

Alice’s client requests a new alias from her service provider. If her normal address is alice@domain.org, she receives an alias hjj3fpwv84fn@domain.org that will forward messages to her account. Alice’s client uses automatic key discovery and validation to find Bob’s public key and discover if Bob’s service provider supports map resistant routing. If Bob does support it, Alice’s client will then send a special message, encrypted to Bob’s key, that contains Alice’s public address and her private alias. When Bob’s client encounters this special message, it records a mapping between Alice’s public address (alice@domain.org) and the private alias she has created for Bob’s use (hjj3fpwv84fn@domain.org). Bob’s client then creates an alias for Bob and sends it to Alice. Alice’s client receives this alias, and records the mapping between Bob’s public address and his private alias. Alice’s client then relays the original message to Bob’s alias.

Subsequently, whenever Alice or Bob want to communicate, they use the normal public addresses for one another, but behind the scenes their clients will rewrite the source and recipient of the messages to use the private aliases.

This scheme is backwards compatible with existing messaging protocols, such as SMTP and XMPP.

https://leap.se/en/docs/tech/routing

Answer 2

It sounds amazingly similar to what we have been doing at Spamex (http://www.spamex.com) since 2000. Spamex has a browser plugin to create Disposable Email Addresses, Spamex is Bi-Directional (replies are routed through Spamex and ths re-anonymized), Spamex routes mail sent to Disposable Email Addresses to any of the Real Email Addresses registered with the service so you do not have to check additional accounts, Spamex even allows the addition of your own Domain Names to the service so that you do not have to use those provided by Spamex. I'll have to reread and rearead the patent to see where the novelty here is.

Justin Greene CEO / The Spamex Disposable Email Address Service

Answer 3

A direct answer to the question as originally posted: The best way to keep the application from eventually turning into an issued patent would be to search for (and solicit others to search for) documents that qualify technically to be used as prior art against the application in question and either individually, or taken together show that the most substantive things claimable under the disclosure are not new or are obvious. A patent examiner rejects on lack of novelty by finding a single embodiment in a single document from the past where the single embodiment teaches all elements of a proposed claim. They reject as obvious by finding one or more documents that, together, contain all of the elements of a claim. Then they need to explain why someone would and could put those elements together to reach the claimed invention as a whole.

Answer 4

I'm sure that the ideas present in this patent application are either already invented, too obvious or too simple. Disposable email, as an anti-spam solution, has been around for over a decade now, and many variations have been built over the years. Here are some things in this patent that I see as already indented:

Analyze web page and identify email address entry field

Modern browsers such as chrome & Firefox already scan forms for email address entry fields and offer to use the previous email address used.

Offer to use disposable address

Disposable email addresses look no different to normal email addresses. If a disposable email was previously used, then modern browsers such as Chrome or Firefox will offer that as a choice when an email entry field is detected. In that case, the user can choose whenever to use a disposable email address or not.

Obtain context and expiration for disposable address

There's a "TarshMail.net for Google Chrome" extension which allows automatic fill in of email fields with a disposable address where the user makes a choice by simply clicking a pop-up menu. It allows the user to set expiry and other parameters.

You can enter context by choosing the address part of the address, eg. set it to login.somespammydomain.com@disposablemail.com - next time spam arrives to this address, you know that it was leaked from somespammydomain.com

(A variation of this practice is possible many others, including Google's Gmail, where disposable addresses can be created by post-fixing them with with a + character and a label, eg. username+somespammydomain.com@gmail.com )

Description and screenshots of Trash Mail extension are here https://chrome.google.com/webstore/detail/trashmailnet-for-google-c/lpkbealomjndjpckajbnpakcoeelbpcf There's no date when it was first published, but first review shows "Nov 28, 2010"

Note, the idea of using a unique email address for registration to determine if a service will be a source of spam is nothing new.

Rewrite the reply, replacing the non-disposable email address with the disposable email address.

This is nothing more than a proxy. For example, Craigslist provides disposable email addresses for their ads. When someone replies to an ad, craigslist will forward the email to the real email address. When the user replies back, the email will be forwarded through craigslist where the reply-to addresses will be changed.

See http://www.craigslist.org/about/help/email-relay

Other similar mechanisms are those offered by "Anonymous Remailer" type services. Description of these can be found here http://en.wikipedia.org/wiki/Anonymous_remailer

Edit: Here is a description of another similar service http://blog.aclarke.eu/introducing-33mailcom-unlimited-disposable-email-addresses/

Answer 5

Adding another answer to avoid clogging my already verbose answer.

I think I have found almost exactly this functionality at vfemail.net

This is prior art in rewriting of the email From address, and completely hiding it from the email UI/client.

http://www.vfemail.net/faq.php#twentyone

What is the Metadata Mitigator™?

In short, it prevents the NSA (or any other eavesdropper) from tracking your communications back to you, or profiling your communications, based on email 'envelope' information.

The long version with all the details: Email is in plain text by default. It is also structured much like regular postal mail. The email you compose is essentially 'stuffed' into an envelope. On that envelope is written the sender and the recipient. During delivery, servers then add the 'postmark' (timestamp and sending IP), just like the post office does. That information is called 'metadata'. It can be read almost as easily as you can read the outside of a sealed envelope. Except with email, that data can be stored in logs for any amount of time, and any government agency can request that data and practically be assured they will receive it. The United States National Security Agency in 2013 has been exposed as collecting and using that data to catalog email traffic and create associations based on who is communicating with whom. VFEmail's Metadata Mitigator™ automatically rewrites the 'From' address on the envelope to a unique address for each email sent - creating virtual forwarding PO Boxes - which renders the gathering and cataloging useless as your real email address is never shown. Your recipients will still see the email is from you (they have 'opened' the envelope), and they can reply to your regular address without any addiitonal steps. No changes need to be made to your email client to enable this feature either. In addition, any bounced or rejected email will still be returned to you. This feature is availabe, and automatically enabled, for all Gold and Platinum users.

Answer 6

https://en.wikipedia.org/wiki/Spamgourmet

The service is available since 2000.

From wikipedia: Available via an Artistic License, the source code of Spamgourmet is downloadable on SourceForge. While the code is available in its most current state from the SVN repository, the Spamgourmet team has not made a formal release of the code since 2007.

also:

https://en.wikipedia.org/wiki/Disposable_email_address