Regarding 1)
You also can simply use the tracking token standard functionality. After the case generation you can send an e-mail for confirmation which contains an automatically generated token. If the recipient answers this mail, the new message will be automatically assigned to the already existing case.
