Method for reducing the spread of computer viruses in an electronic mail network

• US 20030154255A1
• Filed: 11/05/2002
• Published: 08/14/2003
• Est. Priority Date: 05/05/2000
• Status: Abandoned Application

• Current Assignee: Thomson Licensing SA (Vantiva SA)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Fleischer, Wolfgang, Platte, Hans-Joachim
• Application Number:
  US10/275,528
• Publication Number:
  US 20030154255A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

The invention relates to a method for reducing the spread of computer viruses in an electronic mail network. In a mail server having a multiplicity of connected email subscriber computers, a method is installed which is used to test emails sent in succession to the subscribers or sent in succession by the subscribers for particular commonalities, and, depending on commonalities established, either to forward the emails automatically as intended or to retain them until another criterion arises.

Claims

1. (Amended) Method for reducing the spread of computer viruses in an electronic mail network, having a mail server and a multiplicity of email subscriber computers connected thereto, by emails sent in succession to the subscribers or sent in succession by the subscribers, [characterized in that] wherein the emails sent in succession to the subscribers or sent in succession by the subscribers are tested for particular commonalities and, depending on commonalities established, the electronic emails are either automatically forwarded as intended or are retained until another criterion arises.

2. (Amended) Method according to claim 1, [characterized in that] wherein the criterion used for the commonality established is the occurrence of the same subject line in a plurality of emails, the occurrence of the same text content, of an attachment which is the same, and/or the same or similarly timed sending or reception time.

3. (Amended) Method according to claim 1, [characterized in that] wherein, if an electronic mail is automatically retained on account of one or more of these criteria, the mail server forwards an email query to the sending email subscriber.

4. (Amended) Method according to claim 3, [characterized in that] wherein these emails provided with substantial commonalities are sent by the mail server if the sending email subscriber acknowledges the email query by the email server with an explicit acknowledgement.

5. (Amended) Method according to claim 4, [characterized in that] wherein the entry of an identifier or of a password is preferably used as an “

explicit acknowledgement”

from the sending email subscriber.

6. (Amended) Method according to claim 1, [characterized in that] wherein, as a further, different criterion, an email query is sent to the administrator of the network in question to determine whether he actually wants all emails provided with substantial commonalities to be sent, and this administrator responds to this with an explicit acknowledgement.

7. (Amended) Method according to claim 1, [characterized in that] wherein such characterized electronic mails are forwarded after a delay time has elapsed.

8. (Amended) Method according to claim 7, [characterized in that] wherein the time delay falls into a prescribed time frame, preferably into the normal working time of the administrator.