Managing unwanted/unsolicited e-mail protection using sender identity

• US 20060004896A1
• Filed: 06/16/2004
• Published: 01/05/2006
• Est. Priority Date: 06/16/2004
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Roy, Matthew N., Nelson, Mathew A.
• Application Number:
  US10/869,520
• Publication Number:
  US 20060004896A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

A multi-test management of unwanted, unsolicited e-mail for potential SPAM wherein components of an e-mail from a sender directed to a recipient comprising any one of an envelope, one or more headers or a body, the sender having a sender identity are used to verify the sender identity. When the sender identity is verified, a first SPAM management process is performed on the e-mail. When, however, the verifying step fails to verify the sender identity a second SPAM management process is performed on the e-mail.

Claims

1. A method for managing unwanted, unsolicited e-mail, the method comprising the steps of:

receiving components of an e-mail from a sender directed to a recipient, wherein the components comprise any one of a client IP address, an envelope, one or more headers or a body, the sender having a sender identity;

verifying the sender identity based on the components received;

when the sender identity is verified, performing a first SPAM management process on the e-mail; and

when the verifying step fails to verify the sender identity, performing a second SPAM management process on the e-mail.

2. The method according to claim 1 wherein the sender identity comprises any one of the envelope sender, an e-mail address within the e-mail message, the domain of the envelope sender, or the domain of an e-mail address within the e-mail message.

3. The method according to claim 1 wherein any one of the first SPAM management process or second SPAM management process comprises any one of accepting the e-mail, rejecting the e-mail, a whitelist filter, a blacklist filter, a domain reputation filter, a content filter, a content filter based on a confidence that the e-mail is SPAM or a challenge-response sender identity verification.

4. The method according to claim 1 comprises the further steps of:

associating an identity verification value with the e-mail wherein the value is an indication of the degree of confidence that the verifying step has verified the sender identity; and

filtering the e-mail using a weighted filter in any one of the first SPAM management process or the second SPAM management process wherein the weighted filter uses any one of the identity verification value of the associating step or a value derived from the identity verification value of the associating step.

7. The method according to claim 1 wherein the verification step comprises a plurality of alternate sender identity verification steps.

8. The method according to claim 7 wherein the alternate sender identity verification steps comprise any one of a challenge-response algorithm, an SPF algorithm, a Caller ID algorithm, a DomainKeys algorithm or the steps of:

retrieving DNS information using any one of a client IP address or an envelope sender address;

performing a hierarchical plurality of tests on the DNS information, the hierarchical plurality of tests comprising tests having corresponding confidence values representing the degree of confidence of the sender identity;

when one or more tests of the hierarchical sequence of tests is successful, establishing a relationship between the e-mail sender and the e-mail message, the relationship having the confidence value of the successful test having the highest confidence value.

9. The method according to claim 1 comprising the further steps of:

presenting the e-mail message to a recipient;

presenting SPAM management GUI options to the recipient wherein the SPAM management GUI options comprise any one of;

an e-mail address of the sender, a client'"'"'s IP address, a client'"'"'s hostname, an e-mail address contained in the e-mail message, one or more blacklist tags, one or more whitelist tags or one or more sender rank tags.

10. The method according to claim 9 wherein any one of the GUI options is based on an item, a portion of the item, or a pattern derived from the item, wherein the item is any one of the e-mail address of the sender, the client'"'"'s IP address, the client'"'"'s hostname or an e-mail address contained in the e-mail message.

11. A computer program product for managing unwanted, unsolicited e-mail, the computer program product comprising:

a storage medium readable by a processing circuit and storing instructions for execution by a processing circuit for performing a method comprising the steps of;

receiving components of an e-mail from a sender directed to a recipient, wherein the components comprise any one of a client IP address, an envelope, one or more headers or a body, the sender having a sender identity;

verifying the sender identity based on the components received;

when the sender identity is verified, performing a first SPAM management process on the e-mail; and

when the verifying step fails to verify the sender identity, performing a second SPAM management process on the e-mail.

12. The computer program product according to claim 11 wherein the sender identity comprises any one of the envelope sender, an e-mail address within the e-mail message, the domain of the envelope sender, or the domain of an e-mail address within the e-mail message.

13. The computer program product according to claim 11 wherein any one of the first SPAM management process or second SPAM management process comprises any one of accepting the e-mail, rejecting the e-mail, a whitelist filter, a blacklist filter, a domain reputation filter, a content filter, a content filter based on a confidence that the e-mail is SPAM or a challenge-response sender identity verification.

14. The computer program product according to claim 11 comprises the further steps of:

associating an identity verification value with the e-mail wherein the value is an indication of the degree of confidence that the verifying step has verified the sender identity; and

filtering the e-mail using a weighted filter in any one of the first SPAM management process or the second SPAM management process wherein the weighted filter uses any one of the identity verification value of the associating step or a value derived from the identity verification value of the associating step.

17. The computer program product according to claim 11 wherein the verification step comprises a plurality of alternate sender identity verification steps.

18. The computer program product according to claim 17 wherein the alternate sender identity verification steps comprise any one of a challenge-response algorithm, an SPF algorithm, a Caller ID algorithm, a DomainKeys algorithm or the steps of:

retrieving DNS information using any one of a client IP address or an envelope sender address;

performing a hierarchical plurality of tests on the DNS information, the hierarchical plurality of tests comprising tests having corresponding confidence values representing the degree of confidence of the sender identity;

when one or more tests of the hierarchical sequence of tests is successful, establishing a relationship between the e-mail sender and the e-mail message, the relationship having the confidence value of the successful test having the highest confidence value.

19. The computer program product according to claim 11 comprising the further steps of:

presenting the e-mail message to a recipient;

presenting SPAM management GUI options to the recipient wherein the SPAM management GUI options comprise any one of;

an e-mail address of the sender, a client'"'"'s IP address, a client'"'"'s hostname, an e-mail address contained in the e-mail message, one or more blacklist tags, one or more whitelist tags or one or more sender rank tags.

20. The computer program product according to claim 19 wherein any one of the GUI options is based on an item, a portion of the item, or a pattern derived from the item, wherein the item is any one of the e-mail address of the sender, the client'"'"'s IP address, the client'"'"'s hostname or an e-mail address contained in the e-mail message.

21. A system for managing unwanted, unsolicited e-mail, the system comprising:

a network;

a first computer system in communication with the network wherein the computer system includes instructions to execute a method comprising;

receiving components of an e-mail from a sender directed to a recipient, wherein the components comprise any one of a client IP address, an envelope, one or more headers or a body, the sender having a sender identity;

verifying the sender identity based on the components received;

when the sender identity is verified, performing a first SPAM management process on the e-mail; and

when the verifying step fails to verify the sender identity, performing a second SPAM management process on the e-mail.

22. The system according to claim 21 wherein the sender identity comprises any one of the envelope sender, an e-mail address within the e-mail message, the domain of the envelope sender, or the domain of an e-mail address within the e-mail message.

23. The system according to claim 21 wherein any one of the first SPAM management process or second SPAM management process comprises any one of accepting the e-mail, rejecting the e-mail, a whitelist filter, a blacklist filter, a domain reputation filter, a content filter, a content filter based on a confidence that the e-mail is SPAM or a challenge-response sender identity verification.

24. The system according to claim 21 comprises the further steps of:

associating an identity verification value with the e-mail wherein the value is an indication of the degree of confidence that the verifying step has verified the sender identity; and

filtering the e-mail using a weighted filter in any one of the first SPAM management process or the second SPAM management process wherein the weighted filter uses any one of the identity verification value of the associating step or a value derived from the identity verification value of the associating step.

27. The system according to claim 21 wherein the verification step comprises a plurality of alternate sender identity verification steps.

28. The system according to claim 27 wherein the alternate sender identity verification steps comprise any one of a challenge-response algorithm, an SPF algorithm, a Caller ID algorithm, a DomainKeys algorithm or the steps of:

retrieving DNS information using any one of a client IP address or an envelope sender address;

performing a hierarchical plurality of tests on the DNS information, the hierarchical plurality of tests comprising tests having corresponding confidence values representing the degree of confidence of the sender identity;

when one or more tests of the hierarchical sequence of tests is successful, establishing a relationship between the e-mail sender and the e-mail message, the relationship having the confidence value of the successful test having the highest confidence value.

29. The system according to claim 21 comprising the further steps of:

presenting the e-mail message to a recipient;

presenting SPAM management GUI options to the recipient wherein the SPAM management GUI options comprise any one of;

an e-mail address of the sender, a client'"'"'s IP address, a client'"'"'s hostname, an e-mail address contained in the e-mail message, one or more blacklist tags, one or more whitelist tags or one or more sender rank tags.

30. The system according to claim 29 wherein any one of the GUI options is based on an item, a portion of the item, or a pattern derived from the item, wherein the item is any one of the e-mail address of the sender, the client'"'"'s IP address, the client'"'"'s hostname or an e-mail address contained in the e-mail message.