System and method for preventing spam mails

• US 20030225841A1
• Filed: 12/04/2002
• Published: 12/04/2003
• Est. Priority Date: 05/31/2002
• Status: Abandoned Application

• Current Assignee: Cqcom Incorporated, Institute of Information Technology Assessment
• Original Assignee: Cqcom Incorporated, Institute of Information Technology Assessment
• Inventors: Baek, Ki-Young, Song, Sang-Hern, Lee, Jong-Hu, Ryou, Jae-Cheol
• Application Number:
  US10/309,355
• Publication Number:
  US 20030225841A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

A system and method for preventing spam mails. A spam mail information collection server extracts base information for spam mail determination from header information of spam mails received at false mail addresses, databases the extracted spam mail determination base information and provides the databased spam mail determination base information to at least one mail server. The mail server receives the spam mail determination base information and stores it in a database. Upon receiving a new mail, the mail server analyzes header information of the received new mail, searches the spam mail determination base information database for the analyzed header information to determine whether the new mail is a spam mail, and blocks the reception of the new mail if the mail is determined to be a spam mail.

Claims

1. A spam mail prevention system comprising:

a spam mail information collection server including a first mail receiver for receiving mails sent to at least one false mail address, an information extractor for extracting base information for spam mail determination from each of the mails sent to said false mail address, received by said first mail receiver, a first database for storing said spam mail determination base information extracted by said information extractor, and a first spam mail information transmitter for propagating said spam mail determination base information stored in said first database over a network; and

at least one mail server connected with said spam mail information collection server over the network, said mail server including an updater for periodically receiving and storing said spam mail determination base information from said first database in said spam mail information collection server, a second database for storing spam mail determination base information updated by said updater, a second mail receiver for receiving a new mail sent to an actually used mail address, a header information analyzer for analyzing header information of the new mail received by said second mail receiver and storing the analyzed result in said second database, and a spam mail filter for searching said second database for the analyzed header information of the received new mail to determine whether the new mail is a spam mail, blocking the reception of the new mail if the mail is determined to be a spam mail, searching said second database for stored header information of a previously received mail to determine whether the previously received mail is a spam mail, and deleting the previously received mail from said mail server if the mail is determined to be a spam mail.

2. The spam mail prevention system as set forth in claim 1, wherein said mail server further includes a second spam mail information transmitter for transmitting spam mail information, deleted from said mail server by said spam mail filter, to a mail recipient'"'"'s computer.

3. The spam mail prevention system as set forth in claim 2, wherein said spam mail determination base information extracted by said information extractor includes at least one of a spam mail'"'"'s title, a spam mail sender'"'"'s mail address and a spam mail sending computer'"'"'s Internet protocol (IP) address, said spam mail'"'"'s title, spam mail sender'"'"'s mail address and spam mail sending computer'"'"'s IP address being assigned higher search priorities.

4. The spam mail prevention system as set forth in claim 1, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

5. The spam mail prevention system as set forth in claim 2, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

6. The spam mail prevention system as set forth in claim 3, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

7. A spam mail prevention system comprising a mail server, said mail server including:

an updater for periodically receiving and storing spam mail determination base information from a spam mail information collection server;

a database for storing spam mail determination base information updated by said updater;

a mail receiver for receiving a new mail sent to an actually used mail address;

a header information analyzer for analyzing header information of the new mail received by said mail receiver and storing the analyzed result in said database; and

a spam mail filter for searching said database for the analyzed header information of the received new mail to determine whether the new mail is a spam mail, blocking the reception of the new mail if the mail is determined to be a spam mail, searching said database for stored header information of a previously received mail to determine whether the previously received mail is a spam mail, and deleting the previously received mail from said mail server if the mail is determined to be a spam mail.

8. The spam mail prevention system as set forth in claim 7, wherein said mail server further includes a spam mail information transmitter for transmitting spam mail information, deleted from said mail server by said spam mail filter, to a mail recipient'"'"'s computer.

9. The spam mail prevention method as set forth in claim 8, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

10. A spam mail prevention method comprising:

a spam mail information collection routine executable by a spam mail information collection server, said spam mail information collection routine including a mail reception step of receiving mails sent to at least one unused false mail address propagated on the Web, an information extraction step of extracting base information for spam mail determination from each of the mails sent to said false mail address, received at said mail reception step, and a storage step of storing the extracted spam mail determination base information in a first database; and

a spam mail processing routine executable by at least one mail server, said spam mail processing routine including an update step of receiving said spam mail determination base information from said spam mail information collection server and storing it in a second database, a header analysis step of analyzing header information of a new mail sent to an actually used mail address, and a spam mail filtering step of searching said second database for the analyzed header information of the new mail to determine whether the new mail is a spam mail, blocking the reception of the new mail if the mail is determined to be a spam mail, searching said second database for header information of a previously received mail to determine whether the previously received mail is a spam mail, and deleting the previously received mail from said mail server if the mail is determined to be a spam mail.

11. The spam mail prevention method as set forth in claim 10, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

12. The spam mail prevention method as set forth in claim 10, wherein said spam mail determination base information extracted at said information extraction step includes at least one of a spam mail'"'"'s title, a spam mail sender'"'"'s mail address and a spam mail sending computer'"'"'s IP address, said spam mail'"'"'s title, spam mail sender'"'"'s mail address and spam mail sending computer'"'"'s IP address being assigned higher search priorities.

13. The spam mail prevention method as set forth in claim 12, wherein said false mail address includes a mail ID with a combination of alphanumeric characters in the form of ASCII codes, said mail ID being created by selecting and combining alphanumeric characters in ascending order such that, in an automatic spam mail sending operation by a spam mail tool, a spam mail is sent to said false mail address earlier than normal mail addresses.

14. A spam mail prevention method comprising a spam mail processing routine, said spam mail processing routine including:

an update step of receiving spam mail determination base information from a spam mail information collection server and storing it in a database;

a header analysis step of analyzing header information of a new mail sent to an actually used mail address; and

a spam mail filtering step of searching said database for the analyzed header information of the new mail to determine whether the new mail is a spam mail, blocking the reception of the new mail if the mail is determined to be a spam mail, searching said database for header information of a previously received mail to determine whether the previously received mail is a spam mail, and deleting the previously received mail from a corresponding mail server if the mail is determined to be a spam mail.