Method of authorizing email senders

• US 20050044155A1
• Filed: 08/10/2004
• Published: 02/24/2005
• Est. Priority Date: 08/22/2003
• Status: Abandoned Application

• Current Assignee: Centura Software Corp.
• Original Assignee: Centura Software Corp.
• Inventors: Kaminski, David, Strange, Reggie
• Application Number:
  US10/915,313
• Publication Number:
  US 20050044155A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An anti-spamming agent filters incoming email messages to eliminate unsolicited and unwanted email messages, particularly bulk email messages commonly known as spam. The anti-spamming agent gives all incoming mail messages a score and processes the messages based on the message score. Messages receiving a qualifying score are forwarded to the user. All other messages are either discarded or quarantined while the anti-spamming agent performs further authorization procedures, such as a challenge-response procedure. When a message from an unknown sender is received, a verified mail registry may be queried to authenticate the sender, and the mail may be processed based on the response from the verified mail registry.

Claims

1. A method implemented by a mail client application of authorizing a mail server to receive electronic mail messages, comprising:

determining the destination address of an outgoing electronic mail message; and

sending an authorization message to a mail server that handles incoming mail;

said authorization message containing the destination address of the outgoing electronic mail message and an authorization code authorizing the mail server to receive electronic mail messages originating from the intended recipient of the outgoing mail message.

2. The method of claim 1 further comprising determining whether mail originating from the destination address of the outgoing message has been previously authorized, wherein said authorization message is sent by the mail client only if it is determined that the mail server has not previously been authorized to receive mail messages originating from the destination address of the outgoing message.

3. The method of claim 2 wherein determining whether mail originating from the destination address of the outgoing message has been previously authorized comprises comparing the destination address of the outgoing mail message to addresses in stored in a local database accessible to the mail client.

4. The method of claim 3 wherein determining whether mail originating from the destination address of the outgoing message has been previously authorized further comprises sending a query to the mail server to determine whether the mail originating from the destination address of the outgoing message has been previously authorized.

5. A method implemented by a mail server of handling incoming mail, comprising:

receiving an authorization message from a user, said authorization message including a mail address and an authorization code authorizing the mail server to receive electronic mail messages for the user originating from the designated mail address; and

configuring the mail server responsive to the authorization message to accept mail from the designated address to the user without challenge; and

challenging a sender of an incoming mail message for which no previous authorization exists.

6. The method of claim 5 wherein configuring the mail server to accept electronic mail messages from the designated address comprises adding the sender to a list of authorized senders.

7. The method of claim 5 wherein configuring the mail server to accept electronic mail messages from the designated address comprises assigning a qualifying score to a sender score associated with the sender, wherein the sender score is used to determine a message score for messages originating from the sender.

8. A method of registering with a mail server to send mail to a designated recipient, comprising:

determining the destination address of an outgoing electronic mail message intended for the designated recipient;

sending an authorization request to the mail server for the designated recipient, said authorization request including a source address associated with the sender and the destination address of the outgoing mail message;

receiving a challenge from the mail server responsive to the authorization request; and

sending a response to the challenge.

9. The method of claim 8 further comprising determining whether a sender of the outgoing mail message has been previously authorized, wherein said authorization request is sent only if it is determined that the sender has not previously been authorized to send mail messages to the designated recipient.

10. The method of claim 9 wherein determining whether a sender of the outgoing mail message has been previously authorized comprises comparing the destination address to a local database that stores addresses for which the sender has been previously authorized to send electronic mail messages.

11. The method of claim 10 wherein determining whether a sender of the outgoing mail message has been previously authorized further comprises sending a query to the mail server for the designated recipient.

12. The method of claim 8 further comprising sending an authorization preference to the mail server indicating the type of challenge to be sent.

13. A method of authorizing a sender to send electronic mail messages to a designated recipient, comprising:

receiving an authorization request at a mail server for the designated recipient for the sender, said authorization request including a source address associated with the sender and the destination address of the designated recipient;

sending a challenge to the sender of the authorization request;

configuring the mail server to accept mail for the designated recipient from the sender if an acceptable response to the challenge is received; and

challenging a sender of an incoming mail message for which no previous authorization exists.

14. The method of claim 13 wherein configuring the mail server to accept mail for the designated recipient comprises assigning a qualifying score to a sender score associated with the sender, wherein the sender score is used to determine a message score for messages originating from the sender.

15. An electronic mail system comprising:

a computer having a processor and a memory;

a mail client application stored in memory and executed by said processor, said mail client application including code to;

determine the destination address of an outgoing electronic mail message; and

send an authorization message to a mail server that handles incoming mail, said authorization message containing the destination address of the outgoing electronic mail message and an authorization code authorizing the mail server to receive electronic mail messages originating from the intended recipient of the outgoing mail message.

16. The electronic mail system of claim 15 wherein the mail client application further includes code to determine whether mail originating from the destination address of the outgoing message has been previously authorized, and to send the authorization message only if it is determined that the mail server has not previously been authorized to receive mail messages originating from the destination address of the outgoing message.

17. The electronic mail system of claim 16 wherein the mail client application includes code to compare the destination address of the outgoing mail message to addresses in stored in a local database to determine whether mail originating from the destination address of the outgoing mail message has been previously authorized.

18. The electronic mail system of claim 16 wherein the mail client application includes code to query the mail server to determine whether the mail originating from the destination address of the outgoing message has been previously authorized.

19. A electronic mail system implemented by a mail server of handling incoming mail, comprising:

a computer having a processor and a memory;

a mail server application stored in memory and executed by said processor, said mail server application including code to;

process authorization messages received from a user, said authorization messages including a designated mail address and an authorization code authorizing the mail server to receive electronic mail messages for the user originating from the designated mail address;

configure the mail server responsive to the authorization message to accept mail for the user from the designated address without challenge; and

send a challenge to the sender of an incoming mail message for which no previous authorization exists.

20. The electronic mail system of claim 19 wherein the code to configure the mail server to accept electronic mail messages from the designated address adds the sender to a list of authorized senders.

21. The electronic mail system of claim 19 wherein the code to configure the mail server to accept electronic mail messages from the designated address assigns a qualifying score to a sender score associated with the sender, wherein the sender score is used to determine a message score for messages originating from the sender.

22. An electronic mail system for registering with a mail server to send mail to a designated recipient, comprising:

a computer having a processor and a memory;

a mail client application stored in memory and executed by said processor, said mail client application including code to;

determine the destination address of an outgoing electronic mail message intended for the designated recipient;

send an authorization request to the mail server for the designated recipient, said authorization request including a source address associated with the sender and the destination address of the outgoing mail message;

receive a challenge from the mail server responsive to the authorization request; and

send a response to the challenge.

23. The electronic mail system of claim 22 wherein the mail client application further includes code to determine whether a sender of the outgoing mail message has been previously authorized, wherein said authorization request is sent only if it is determined that the sender has not previously been authorized to send mail messages to the designated recipient.

24. The electronic mail system of claim 23 wherein the code to determine whether a sender of the outgoing mail message has been previously authorized compares the destination address to a local database that stores addresses for which the sender has been previously authorized to send electronic mail messages.

25. The electronic mail system of claim 23 wherein the code to determine whether a sender of the outgoing mail message has been previously authorized sends a query to the mail server for the designated recipient.

26. The method of claim 22 wherein the mail client application further comprises code to send an authorization preference to the mail server indicating the type of challenge to be sent.

27. A electronic mail system for authorizing a sender to send electronic mail messages to a designated recipient, comprising:

a computer having a processor and a memory;

a mail server application stored in memory and executed by said processor, said mail server application including code to;

process a received authorization request, said authorization request including a source address associated with the sender and the destination address of the designated recipient;

send a challenge to the sender of the authorization request;

configure the mail server to accept mail from the sender for the designated recipient if an acceptable response to the challenge is received; and

send a challenge to the sender of an incoming mail message for which no previous authorization exists.

28. The electronic mail system of claim 27 wherein the code to configure the mail server to accept mail for the designated recipient assigns a qualifying score to a sender score that is used to determine a message score for messages originating from the sender.

29. The mail client application stored in a computer readable medium comprising code to:

determine the destination address of an outgoing electronic mail message; and

send an authorization message to a mail server that handles incoming mail, said authorization message containing the destination address of the outgoing electronic mail message and an authorization code authorizing the mail server to receive electronic mail messages originating from the intended recipient of the outgoing mail message.

30. The mail client application of claim 29 further comprising code to:

determine whether mail originating from the destination address of the outgoing message has been previously authorized; and

send the authorization message only if it is determined that the mail server has not previously been authorized to receive mail messages originating from the destination address of the outgoing message.

31. The mail client application of claim 30 further comprising code to compare the destination address of the outgoing mail message to addresses in stored in a local database to determine whether mail originating from the destination address of the outgoing mail message has been previously authorized.

32. The mail client application of claim 30 further comprising code to query the mail server to determine whether the mail originating from the destination address of the outgoing message has been previously authorized.

33. A mail server application stored in a computer readable medium comprising code to:

process authorization messages received from a user, said authorization messages including a designated mail address and an authorization code authorizing the mail server to receive electronic mail messages for the user originating from the designated mail address;

configure the mail server responsive to the authorization message to accept mail for the user from the designated address without challenge; and

send a challenge to the sender of an incoming mail message for which no previous authorization exists.

34. The mail server application of claim 33 wherein the code to configure the mail server to accept electronic mail messages from the designated address adds the sender to a list of authorized senders.

35. The mail server application of claim 34 wherein the code to configure the mail server to accept electronic mail messages from the designated address assigns a qualifying score to a sender score associated with the sender, wherein the sender score is used to determine a message score for messages originating from the sender.

36. A mail client application stored in a computer readable medium comprising code to:

determine the destination address of an outgoing electronic mail message intended for the designated recipient;

send an authorization request to the mail server for the designated recipient, said authorization request including a source address associated with the sender and the destination address of the outgoing mail message;

receive a challenge from the mail server responsive to the authorization request; and

send a response to the challenge.

37. The mail client application of claim 36 further comprising code to determine whether a sender of the outgoing mail message has been previously authorized, wherein said authorization request is sent only if it is determined that the sender has not previously been authorized to send mail messages to the designated recipient.

38. A mail server application stored in a computer readable medium comprising code to:

process a received authorization request, said authorization request including a source address associated with the sender and the destination address of the designated recipient;

send a challenge to the sender of the authorization request;

configure the mail server to accept mail from the sender for the designated recipient if an acceptable response to the challenge is received; and

send a challenge to the sender of an incoming mail message for which no previous authorization exists.