The standard answer these days for mail processing is Mail::Audit. You can grab all the mail that comes to a certain address and feed it to Mail::Audit. There are also modules for parsing raw mail messages. Shouldn't be very hard.

As far as how to authenticate the messages, just use the same approach that people use for web session cookies, i.e. send a MAC using one of the Digest:: modules.