Electrical computers and digital processing systems: multicomput – Computer conferencing – Demand based messaging
Reexamination Certificate
2000-07-27
2004-08-03
Alam, Hosain (Department: 2155)
Electrical computers and digital processing systems: multicomput
Computer conferencing
Demand based messaging
C709S207000, C707S793000
Reexamination Certificate
active
06772196
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention is generally related to automated systems for blocking receipt of undesired electronic mail and, in particular, to a system and methods for reliably detecting and filtering out undesired and unsolicited electronic mail stealthily prepared specifically to avoid detection by conventional filtering systems.
2. Description of the Related Art
The use of electronic mail (email) is widely accepted to the extent that email is often considered an essential tool in conducting business and communicating between individuals. Key aspects of the adoption of email for such use include the immediacy of the communication, the ability to specifically identify and define recipients by email addresses, that email addresses are often publically available by choice and by standard operation of conventional Internet tools, and the normally user-to-user personal nature of email messages.
A number of different uses of email have evolved beyond the most basic person-to-person communications. One of the earliest developments was the use of list-servers (Listserv) to broadcast email messages sent to the Listserv to a well-defined and selective list of Listserv subscribers. Another development was the direct use of email lists to send announcements and other notices to subscriber lists. Similarly, electronic periodicals and information clipping services often use email lists to distribute content or content summaries to subscribing users.
A generally undesired use of email, hereinafter referred to as the delivery of undesired email (UEM) and loosely referred to as “spam” email or “spamming,” is the typically unsolicited mass emailings to open or unsubscribed email addresses. Other names, such as Unsolicited Bulk Email (UBE) are also used to describe the same problematic email. Information describing the problems and attempts to deal with UEM is available from the Internet Mail Consortium (IMC; www.imc.org). The impact of UEM is generally assessed in a survey,
ISPs and Spam: The Impact of Spam on Customer Retention and Acquisition
, Engagement #1802565, by the GartnerGroup, San Jose, Calif. In summary, UEM is received by some 90% of email users with publically accessible email addresses. Estimates vary greatly on the financial impact of UEM on the businesses and services, both large and small, that receive or unintentionally forward UEM to users. Although the individual costs of email message delivery are quite small, the size of mass-emailings creates real costs in terms of connectivity, temporary storage, and auditing. Even the cost to individual users may be significant, since many pay directly for connectivity time.
The email addresses used by UEM vendors are typically harvested from the Internet through scans of the information available on the Web, Usenet postings, and the various user directories and lists accessible through the Internet. For example, corporate Web pages may include an email address list of the different employees of the company. Postings to the public Usenet forums and hosted chat-rooms provided by different services often include the email address of each user who posts a message. User addresses may also be directly, though typically indirectly obtained from the different Listservs and subscriber list services that operate over the Internet.
Various email address harvesting tools, ranging from the simple to quite complex and tailorable to scan the Internet using many different scanning techniques, are conventionally available from a variety of sources. Therefore, virtually any user can set up as a mass-emailing vendor of UEM messages. Such UEM vendors typically hide the address and other source identifiers of their mass-mailings, relay their mass-emailings through third-party email forwarding gateways, further change their internet service providers (ISPs) to obscure their identity. Consequently, there is no effective mechanism currently available that will permit or enable users to avoid having their email addresses harvested. There is also no simple way users can pre-identify and refuse email messages from UEM vendors.
A number of products and services exist that attempt to identify and filter UEM messages from the ordinary email received by their users. The general operating principles of these systems are documented in
Unsolicited Bulk Email: Mechanisms for Control
, Internet Mail Consortium Report: UBE-SOL, IMCR-008, revised May 4, 1998. In general, conventional products and services rely on specific identification of known UEM vendors by source address, the specific content of manually identified UEM content, or heuristic-based identification of UEM messages.
Conventional heuristic-based systems, which are generally more effective that specific identification systems, are executed by a host computer system to review and filter already received email messages into ordinary and UEM categories prior to actual delivery to the email addressees. These systems may utilize a variety of different analyses of email message content to discern UEM, including key-word and key-phrase detection, which are predefined or learned over time and improper and missing email header fields. The predefined keys are static and typically include occurrences of “$$$” and variations of “make money fast.” Learning of other key-words and phrases conventionally requires manual intervention. UEM vendors, however, are known to be highly creative and have generally demonstrated that these heuristics can be defeated by selective crafting of the content of the UEM message through the use of automated technical mechanisms.
A known problem with heuristic systems is that the heuristics, operative at a level sufficient to identify a bulk of UEM received by a user, also create a substantial likelihood that non-UEM messages will be improperly identified and filtered. Any loss of non-UEM messages, however, is generally considered completely unacceptable by users. As a result, there does not appear to be any reliable and practically acceptable way to prevent the harvesting of email addresses, and thereby controlling the ability of UEM vendors from originating their mass-mailings, or to reliably identify UEM messages once received.
Consequently, there is a clear need for some reliable and effective manner of detecting and filtering out UEM messages from the stream of email messages received by email users.
SUMMARY OF THE INVENTION
Thus, a general purpose of the present invention is to provide an efficient method and system for qualifying and thereby providing a basis for protecting users against receipt of UEM messages.
This is achieved in the present invention by providing a method and system that actively qualifies undesirable email messages sent to the email address of a user-recipient. The content of a received email message is processed to produce multiple signatures representing aspects of the contents of the received email message. These signatures are compared against a database of signatures produced from a plurality of presumed undesirable email messages. A relative-identity of the signatures is scored to provide a basis for distinguishing the received email message from the presumed undesirable email messages.
The multiple signatures generated to represent the received email are produced as digest of algorithmically selected portions of the received email with the signatures defined by like algorithms being comparable. The rate of comparison matches between the multiplicity of suspect email message signatures and the signatures stored by the database serves as the basis for distringuishing the received email message from the presumed undesirable email messages.
The system includes a data store providing for updateable storage of signature records that correspond to undesirable email messages potentially sent to the user-recipient email address. An email filter processor is coupled to the store of signature records and operates against the email messages received to discern and qualify email messages determined by the system to
Kiraly Kenneth P.
Kirsch Steven T.
Alam Hosain
Lazaro David
NewTechLaw
Propel Software Corp.
Rosenberg, Esq. Gerald B.
LandOfFree
Electronic mail filtering system and methods does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Electronic mail filtering system and methods, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Electronic mail filtering system and methods will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3358961