Spam avenger

• US 20030009698A1
• Filed: 05/29/2002
• Published: 01/09/2003
• Est. Priority Date: 05/30/2001
• Status: Abandoned Application

• Current Assignee: Cascadezone Incorporated
• Original Assignee: Cascadezone Incorporated
• Inventors: Rumpelein, John, Lindeman, Terrence Edward
• Application Number:
  US10/159,962
• Publication Number:
  US 20030009698A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic

Abstract

A method and system for filtering spam is disclosed. The present invention is directed at filtering spam. Generally, whenever a message is first received from an unapproved sender, a confirmation request email is sent to the sender'"'"'s email address requesting the sender to confirm its existence and identity. Spammers typically don'"'"'t receive, and can'"'"'t handle reply emails. Therefore, until the unapproved sender replies to the confirmation request email, electronic messages received by the unapproved sender are treated as spam. An inclusion list of senders is maintained by the spam filter that includes a list of approved senders. Electronic messages from approved senders are not treated as spam, and are immediately delivered to the user. Generally, a database of valid source addresses for a user is maintained either on the user'"'"'s computing device or on a mail server, depending upon the specific application.

Claims

1. A method for filtering SPAM, comprising:

receiving a message associated with a sender;

determining when the sender is an approved sender by determining when the sender is included in an inclusion list for a user, and when, delivering the message to the user;

otherwise, handling the message.

2. The method of claim 1, wherein handling the message further comprises

sending a confirmation request message that requests a confirmation message from the sender;

determining if the confirmation message is received from the sender, and if the confirmation message is received, classifying the sender as an approved sender;

otherwise classifying the sender as an unapproved sender.

3. The method of claim 2, wherein sending the confirmation request message further comprises creating a hash value based on a recipient address and an originator address.

4. The method of claim 3, wherein creating the hash value is further based on a secret string.

5. The method of claim 2, wherein the inclusion list may be populated both manually and automatically.

6. The method of claim 2, wherein determining if the confirmation message is received from the sender further comprises authenticating the confirmation message.

7. The method of claim 6, wherein authenticating the confirmation message further comprises generating a hash value based on the confirmation message and checking the confirmation message hash value against the hash value within the confirmation message.

8. The method of claim 1, wherein determining when the sender is an approved sender further comprises determining when the sender is included a blacklist, and when determining that the sender is unapproved.

9. A computer readable medium, having computer-executable instructions for filtering spam, comprising:

receiving a message associated with a sender;

checking an inclusion list for the sender;

determining when the sender is an approved sender; and

when, delivering the message to the user;

otherwise, handling the message to determine if the message is spam.

10. The computer readable medium of claim 9, further comprising checking a blacklist for the sender, and when the sender is included in the blacklist determining that the sender is unapproved.

11. The computer readable medium of claim 10, wherein handling the message further comprises:

sending a confirmation request message to the sender;

determining if the confirmation message is received from the sender, and if the confirmation message is received;

authenticating the confirmation message;

classifying the sender as an approved sender if the confirmation message is authenticated;

otherwise classifying the sender as an unapproved sender.

12. The computer readable medium of claim 11, wherein sending the confirmation request message further comprises creating a hash value based on a recipient address and an originator address and including the hash value within the confirmation request message.

13. The computer readable medium of claim 12, wherein creating the hash value is further based on a secret string.

14. The computer readable medium of claim 11, wherein the inclusion list may be populated manually and automatically.

15. The computer readable medium of claim 15, wherein authenticating the confirmation message further comprises ensuring that the hash value in the confirmation message is authentic.

17. The system of claim 16, wherein the program further comprises checking a blacklist for the sender, and when the sender is included in the blacklist determining that the sender is unapproved.

18. The system of claim 16, wherein handling the message further comprises:

sending a confirmation request message to the sender;

determining if the confirmation message is received from the sender, and if the confirmation message is received;

authenticating the confirmation message;

classifying the sender as an approved sender if the confirmation message is authenticated;

otherwise classifying the sender as an unapproved sender.

19. The system of claim 16, wherein sending the confirmation request message further comprises creating a hash value based on a recipient address, an originator address, and a secret string, and including the hash value within the confirmation request message.

16. A system for filtering spam, comprising:

a network interface unit arranged to receive a message from a sender on a network;

a storage device for storing data;

an operating system; and

a program configured to perform the following functionality;

checking an inclusion list for the sender;

determining when the sender is an approved sender; and

when, delivering the message to the user;

otherwise, handling the message to determine if the message is spam.

20. A modulated data signal having computer instructions encoded thereon, comprising:

a means for receiving a message associated with a sender;

a means for sending a confirmation request message to an unapproved sender;

a means for determining when the sender is an approved sender; and

a means for delivering the message to a user who is an approved sender.