Method of detecting, comparing, blocking, and eliminating spam emails

• US 20060095966A1
• Filed: 11/03/2004
• Published: 05/04/2006
• Est. Priority Date: 11/03/2004
• Status: Abandoned Application

• Current Assignee: Shawn Park
• Original Assignee: Shawn Park
• Inventors: Park, Shawn
• Application Number:
  US10/981,436
• Publication Number:
  US 20060095966A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A method of detecting, comparing, blocking, and eliminating spam emails sent through email servers of Internet service providers (ISPs) or to email users'"'"' email-boxes. The method includes the steps of generating a spam decipher signature for each email in an ISP'"'"'s mail server or a user'"'"'s email-box, comparing newly generated spam decipher signatures to a server or user database containing spam decipher signatures of known spam emails to detect spam emails when there is a probability match at a pre-determined high percentage, and preventing the spam emails from going through the ISP'"'"'s mail server or to the email user as non-spam emails. The method also includes the steps of updating a master spam decipher signature database by comparing spam decipher signatures in a new signature database with existing spam decipher signatures in the master database, incrementing a counter value of a matching spam decipher signature by the number of matches, and adding all new spam decipher signatures that have counter values reaching or exceeding a pre-set threshold and therefore are considered spam to the master spam decipher signature database. The method further includes the steps of initially loading the master spam decipher signature database to the ISP email server or the user'"'"'s computer to establish the server or user database, and updating the server or user database with the master spam decipher signature database.

Claims

1. A method of detecting, comparing, blocking, and eliminating spam emails sent through email servers of Internet service providers (ISPs), comprising the steps of:

a. generating a spam decipher signature for each email in an ISP'"'"'s mail server;

b. comparing newly generated spam decipher signatures to a server database containing spam decipher signatures of known spam emails to detect spam emails when there is a probability match at a pre-determined high percentage; and

c. preventing said spam emails from going through said ISP'"'"'s mail server as non-spam emails.

2. The method in accordance with claim 1, further comprising the steps of adding matching spam decipher signatures to an incremental database and adding non-matching spam decipher signatures to a new signature database.

3. The method in accordance with claim 2, further comprising the step of updating a master spam decipher signatures database with newly detected spam emails.

4. The method in accordance with claim 3, wherein said step of updating said master spam decipher signature database further comprises the steps of:

a. comparing spam decipher signatures in said new signature database with existing spam decipher signatures in said master spam decipher database;

b. incrementing a counter value of a matching spam decipher signature by the number of matches; and

c. adding all new spam decipher signatures that have counter values reaching or exceeding a pre-set threshold and therefore are considered spam to said master spam decipher signature database.

5. The method in accordance with claim 1, further comprising the step of loading said master spam decipher signature database to said ISP email server to establish said server database.

6. The method in accordance with claim 1, further comprising the step of updating said server database with said master spam decipher signature database.

10. The method in accordance with claim 1, further comprising the step of updating said server database with said master spam decipher signature database.

20. The method in accordance with claim 1, further comprising the step of updating said user database with said master spam decipher signature database.

7. A method of detecting, comparing, blocking, and eliminating spam emails sent through email servers of Internet service providers (ISPs), comprising the steps of:

a. generating a spam decipher signature for each email in an ISP'"'"'s mail server;

b. comparing newly generated spam decipher signatures to a server database containing spam decipher signatures of known spam emails to detect spam emails when there is a probability match at a pre-determined high percentage;

c. preventing said spam emails from going through said ISP'"'"'s mail server as non-spam emails;

d. adding non-matching spam decipher signatures to a new signature database;

e. comparing spam decipher signatures in said new signature database with existing spam decipher signatures in a master spam decipher signature database;

f. incrementing a counter value of a matching spam decipher signature by the number of matches; and

g. adding all new spam decipher signatures that have counter values reaching or exceeding a pre-set threshold and therefore are considered spam to said master spam decipher signature database.

8. The method in accordance with claim 7, further comprising the step of adding matching spam decipher signatures to an incremental database.

9. The method in accordance with claim 7, further comprising the step of loading said master spam decipher signature database to said ISP email server to establish said server database.

11. A method of detecting, comparing, blocking, and eliminating spam emails sent to email users'"'"' email-boxes, comprising the steps of:

a. generating a spam decipher signature for each email in an email user'"'"'s email-box;

b. comparing newly generated spam decipher signatures to a user database containing spam decipher signatures of known spam emails to detect spam emails when there is a probability match at a pre-determined high percentage; and

c. preventing said spam emails from going to said email user as non-spam emails.

12. The method in accordance with claim 11, further comprising the steps of adding matching spam decipher signatures to an incremental database and adding non-matching spam decipher signatures to a new signature database.

13. The method in accordance with claim 12, further comprising the step of updating a master spam decipher signature database with newly detected spam emails.

14. The method in accordance with claim 13, wherein said step of updating said master spam decipher signature database further comprises the steps of:

a. comparing spam decipher signatures in said new signature database with existing spam decipher signatures in said master spam decipher database;

b. incrementing a counter value of a matching spam decipher signature by the number of matches; and

c. adding all new spam decipher signatures that have counter values reaching or exceeding a pre-set threshold and therefore are considered spam to said master spam decipher signature database.

15. The method in accordance with claim 11, further comprising the step of loading said master spam decipher signature database to said email user'"'"'s computer to establish said user database.

16. The method in accordance with claim 11, further comprising the step of updating said user database with said master spam decipher signature database.

17. A method of detecting, comparing, blocking, and eliminating spam emails sent to email users'"'"' email-boxes, comprising the steps of:

a. generating a spam decipher signature for each email in an email user'"'"'s email-box;

b. comparing the newly generated spam decipher signatures to a user database containing spam decipher signatures of known spam emails to detect spam emails when there is a probability match at a pre-determined high percentage;

c. preventing said spam emails from going to said email user as non-spam emails;

d. adding non-matching spam decipher signatures to a new signature database;

e. comparing spam decipher signatures in said new signature database with existing spam decipher signatures in a master spam decipher signature database;

f. incrementing a counter value of a matching spam decipher signature by the number of matches; and

g. adding all new spam decipher signatures that have counter values reaching or exceeding a pre-set threshold and therefore are considered spam to said master spam decipher signature database.

18. The method in accordance with claim 17, further comprising the step of adding matching spam decipher signatures to an incremental database.

19. The method in accordance with claim 17, further comprising the step of loading said master spam decipher signature database to said email user'"'"'s computer to establish said user database.